$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2e54985a-e92a-475c-b554-3b9ed1b239dc/5fbdd11a-f602-32ae-ada7-555d0e61d29a.roa File: 5fbdd11a-f602-32ae-ada7-555d0e61d29a.roa (raw, json) Hash identifier: c6dnFpYD8W434wdv209ibBJW7BefiYg3k6rEv6zfsVM= Subject key identifier: 6E:BE:28:6D:5B:F5:30:1A:AE:41:13:E7:C5:7A:E0:C6:C6:F5:9E:A5 Certificate issuer: /CN=2e54985a-e92a-475c-b554-3b9ed1b239dc Certificate serial: 010D0C9F4328584F549DAFC0C36F70727D329780 Authority key identifier: 02:5D:79:74:8B:CB:F8:42:3B:E8:49:CE:29:C2:F1:B5:7C:7A:5F:2B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2e54985a-e92a-475c-b554-3b9ed1b239dc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2e54985a-e92a-475c-b554-3b9ed1b239dc/5fbdd11a-f602-32ae-ada7-555d0e61d29a.roa Signing time: Tue 29 Sep 2026 01:00:12 +0000 ROA not before: Tue 29 Sep 2026 01:00:12 +0000 ROA not after: Mon 28 Dec 2026 02:00:12 +0000 asID: 399870 IP address blocks: 23.128.188.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2e54985a-e92a-475c-b554-3b9ed1b239dc/2e54985a-e92a-475c-b554-3b9ed1b239dc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2e54985a-e92a-475c-b554-3b9ed1b239dc/2e54985a-e92a-475c-b554-3b9ed1b239dc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2e54985a-e92a-475c-b554-3b9ed1b239dc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 21 Oct 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:54:9d:af:c0:c3:6f:70:72:7d:32:97:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e54985a-e92a-475c-b554-3b9ed1b239dc Validity Not Before: Sep 29 01:00:12 2026 GMT Not After : Dec 28 02:00:12 2026 GMT Subject: CN=3344c021-6861-4488-93b1-a1e17c1089a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:7c:66:58:39:9f:d5:4f:33:0d:59:f3:38:3e: 95:07:d5:54:23:5f:47:fd:85:cf:60:26:d9:dc:c7: b0:e9:85:9f:64:d7:81:3c:4a:aa:84:10:43:66:2f: f0:a4:9c:9b:ee:2b:8e:e7:83:2c:ba:17:95:06:9c: 38:96:33:ff:2a:23:e2:66:5a:80:17:e9:92:6b:67: 67:a2:6e:cd:f0:60:81:62:8c:31:3b:84:90:13:6c: 38:e9:37:8c:f5:4b:63:d2:24:2b:64:9a:ed:49:41: 31:51:c1:dd:ae:ca:1a:c2:bb:29:bc:fc:48:45:b4: 95:93:37:b9:96:f8:91:55:ad:4e:d6:09:02:50:69: 6d:ad:f7:1e:db:5e:35:3e:e1:85:96:d4:02:68:a6: a5:fc:d2:5b:8f:a0:14:f0:86:28:c7:a7:ef:b4:c1: d1:d8:03:c3:33:37:07:50:8a:d1:c5:c4:35:74:ef: 86:18:1e:9e:a9:a5:4b:16:b2:6c:9f:50:40:22:c9: 2a:dc:39:2c:ee:69:21:10:89:b2:74:61:1e:fc:df: 1c:d1:93:54:d1:a1:be:f0:cf:83:e8:aa:19:9f:dd: cf:9b:e5:30:fb:0e:fd:92:22:7b:ad:e4:3b:81:92: ab:44:da:66:71:bb:47:f6:ab:a1:99:29:d7:01:e8: 14:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:BE:28:6D:5B:F5:30:1A:AE:41:13:E7:C5:7A:E0:C6:C6:F5:9E:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2e54985a-e92a-475c-b554-3b9ed1b239dc/5fbdd11a-f602-32ae-ada7-555d0e61d29a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2e54985a-e92a-475c-b554-3b9ed1b239dc/2e54985a-e92a-475c-b554-3b9ed1b239dc.crl X509v3 Authority Key Identifier: keyid:02:5D:79:74:8B:CB:F8:42:3B:E8:49:CE:29:C2:F1:B5:7C:7A:5F:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2e54985a-e92a-475c-b554-3b9ed1b239dc.cer sbgp-ipAddrBlock: critical IPv4: 23.128.188.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:e3:e7:32:18:a7:03:48:8a:f7:64:cb:9b:1b:27:a6:ee:56: 7c:8e:00:dc:cf:ac:c7:93:e5:97:47:2f:33:ae:84:c2:cc:ec: f5:d9:59:74:a7:c8:22:37:e9:21:ae:f1:6e:5d:56:19:6f:79: 54:fd:6a:7c:34:eb:a1:97:02:08:1e:73:1c:f7:93:8f:57:6b: cb:3e:bb:6a:99:f3:cf:c1:9e:bf:d0:a8:49:d2:3d:fc:7b:27: dc:70:36:52:a9:15:d6:92:b5:fe:58:47:0a:c7:51:8b:5a:f0: 58:84:14:e1:78:bb:ee:e5:1c:77:e1:da:ad:fa:38:47:22:73: b6:f9:5d:5d:fd:3e:03:81:19:d8:44:91:d5:35:29:77:ed:b7: 9c:ec:88:44:08:30:a6:0a:da:23:f8:9f:dd:11:1d:3a:27:9d: 99:2d:ca:51:c1:05:11:04:db:d0:11:cd:e3:b0:cb:61:b2:04: d7:37:97:d8:2b:4e:2b:d0:0d:cc:de:63:ea:38:45:d0:ce:ac: 6c:b3:02:10:5a:63:22:ee:27:15:4e:ff:a9:6a:c3:4a:7c:6c: 14:c7:34:0e:16:22:c1:da:4b:5c:d6:d1:c5:7f:4a:fe:f7:d5: 11:a3:6d:70:da:5d:d0:14:b2:75:53:63:cc:3b:ac:e7:34:0a: f6:18:a9:3a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Una/Aw29wcn0yl4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmU1NDk4NWEtZTkyYS00NzVjLWI1NTQtM2I5ZWQxYjIz OWRjMB4XDTI2MDkyOTAxMDAxMloXDTI2MTIyODAyMDAxMlowLzEtMCsGA1UEAxMk MzM0NGMwMjEtNjg2MS00NDg4LTkzYjEtYTFlMTdjMTA4OWE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuXxmWDmf1U8zDVnzOD6VB9VUI19H/YXPYCbZ 3Mew6YWfZNeBPEqqhBBDZi/wpJyb7iuO54MsuheVBpw4ljP/KiPiZlqAF+mSa2dn om7N8GCBYowxO4SQE2w46TeM9Utj0iQrZJrtSUExUcHdrsoawrspvPxIRbSVkze5 lviRVa1O1gkCUGltrfce2141PuGFltQCaKal/NJbj6AU8IYox6fvtMHR2APDMzcH UIrRxcQ1dO+GGB6eqaVLFrJsn1BAIskq3Dks7mkhEImydGEe/N8c0ZNU0aG+8M+D 6KoZn93Pm+Uw+w79kiJ7reQ7gZKrRNpmcbtH9quhmSnXAegU7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG6+KG1b9TAarkET58V64MbG9Z6lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8yZTU0 OTg1YS1lOTJhLTQ3NWMtYjU1NC0zYjllZDFiMjM5ZGMvNWZiZGQxMWEtZjYwMi0z MmFlLWFkYTctNTU1ZDBlNjFkMjlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMmU1NDk4NWEtZTkyYS00NzVjLWI1 NTQtM2I5ZWQxYjIzOWRjLzJlNTQ5ODVhLWU5MmEtNDc1Yy1iNTU0LTNiOWVkMWIy MzlkYy5jcmwwHwYDVR0jBBgwFoAUAl15dIvL+EI76EnOKcLxtXx6XyswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8yZTU0OTg1YS1lOTJhLTQ3NWMtYjU1NC0zYjll ZDFiMjM5ZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4C8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFbj5zIYpwNIivdky5sbJ6buVnyOANzPrMeT5ZdHLzOuhMLM7PXZWXSn yCI36SGu8W5dVhlveVT9anw066GXAggecxz3k49Xa8s+u2qZ88/Bnr/QqEnSPfx7 J9xwNlKpFdaStf5YRwrHUYta8FiEFOF4u+7lHHfh2q36OEcic7b5XV39PgOBGdhE kdU1KXftt5zsiEQIMKYK2iP4n90RHTonnZktylHBBREE29ARzeOwy2GyBNc3l9gr TivQDczeY+o4RdDOrGyzAhBaYyLuJxVO/6lqw0p8bBTHNA4WIsHaS1zW0cV/Sv73 1RGjbXDaXdAUsnVTY8w7rOc0CvYYqTo= -----END CERTIFICATE-----Generated at Tue Oct 20 02:05:33 2026 by rpki-client