$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a07ba476-e067-424c-814a-2b920e23990d/089fd902-9225-391d-ae0e-3c7cd908bf12.roa File: 089fd902-9225-391d-ae0e-3c7cd908bf12.roa (raw, json) Hash identifier: T8lvT+Cq+EFYIWT7g0g7vMOpuMZuqsnSoDMnjipuzs8= Subject key identifier: E1:EA:93:89:5D:0E:7A:22:47:6E:35:05:DC:2A:7D:52:49:8F:3F:06 Certificate issuer: /CN=a07ba476-e067-424c-814a-2b920e23990d Certificate serial: 010D0C9F4328584F58CD5AD23B510F8E6AD1A580 Authority key identifier: 3C:59:1C:AA:2E:BC:6E:39:12:86:E6:18:66:AF:F3:9F:55:C7:82:08 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a07ba476-e067-424c-814a-2b920e23990d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a07ba476-e067-424c-814a-2b920e23990d/089fd902-9225-391d-ae0e-3c7cd908bf12.roa Signing time: Wed 30 Sep 2026 13:00:13 +0000 ROA not before: Wed 30 Sep 2026 13:00:13 +0000 ROA not after: Tue 29 Dec 2026 14:00:13 +0000 asID: 399951 IP address blocks: 23.152.120.0/24 maxlen: 24 23.152.121.0/24 maxlen: 24 23.187.176.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a07ba476-e067-424c-814a-2b920e23990d/a07ba476-e067-424c-814a-2b920e23990d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a07ba476-e067-424c-814a-2b920e23990d/a07ba476-e067-424c-814a-2b920e23990d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a07ba476-e067-424c-814a-2b920e23990d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 Oct 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:58:cd:5a:d2:3b:51:0f:8e:6a:d1:a5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a07ba476-e067-424c-814a-2b920e23990d Validity Not Before: Sep 30 13:00:13 2026 GMT Not After : Dec 29 14:00:13 2026 GMT Subject: CN=df55ec21-29b5-405f-83e7-3d34929be5cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:e9:07:17:4a:d0:a8:f2:21:10:0f:55:33:db: c1:0b:fb:c2:d8:cc:d7:4d:54:18:9a:9d:a3:67:5a: d9:6f:4b:7e:53:b9:dc:8b:92:46:47:9a:fe:cd:d8: 4b:69:c3:5b:27:63:87:85:60:96:ce:b3:01:f3:38: 49:dc:c8:07:05:f7:8b:6f:43:c5:c2:e8:aa:48:eb: 0b:64:73:f1:13:06:52:94:c4:b5:b8:1c:1f:ea:6b: 00:6d:60:09:93:ef:4b:d1:19:d7:90:82:73:89:bb: e3:51:e7:0b:1f:43:20:1d:cc:14:82:95:75:3a:69: 54:9e:0c:53:d7:1d:7a:d1:cd:9a:42:52:2e:36:72: 07:99:81:78:d7:8b:11:13:d5:e7:cb:3d:24:a9:ea: 81:df:87:38:06:36:83:dd:5a:31:42:19:bd:fd:fd: db:ab:e3:6e:78:0a:97:75:df:6f:74:2f:8e:ae:70: 77:e9:af:cf:29:80:ce:56:81:3c:b5:c0:a6:0a:5f: 30:aa:b3:2d:c3:ea:97:8c:8e:37:76:2a:a7:60:37: 72:6e:bc:c5:a8:82:af:e7:9a:bb:52:45:87:70:0e: 2e:76:d9:17:99:d4:ea:e7:f6:01:fb:95:40:17:65: 7c:7d:93:bf:a1:24:4c:3e:ca:c9:ca:91:39:be:f0: 6d:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:EA:93:89:5D:0E:7A:22:47:6E:35:05:DC:2A:7D:52:49:8F:3F:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a07ba476-e067-424c-814a-2b920e23990d/089fd902-9225-391d-ae0e-3c7cd908bf12.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a07ba476-e067-424c-814a-2b920e23990d/a07ba476-e067-424c-814a-2b920e23990d.crl X509v3 Authority Key Identifier: keyid:3C:59:1C:AA:2E:BC:6E:39:12:86:E6:18:66:AF:F3:9F:55:C7:82:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a07ba476-e067-424c-814a-2b920e23990d.cer sbgp-ipAddrBlock: critical IPv4: 23.152.120.0/23 23.187.176.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:5a:b8:45:c8:2e:aa:18:b3:05:58:46:3d:ff:2a:97:17:45: 2d:64:8a:09:9c:d6:7b:0e:71:b8:1f:62:73:ed:ff:a6:69:c9: 52:a5:d6:f7:c4:c4:c2:f3:b7:aa:70:30:5f:61:ee:d0:9d:30: 33:c9:e6:a1:2f:68:ea:19:9a:ab:76:53:11:78:21:4b:c2:11: f4:3f:0a:6d:7d:78:95:4f:f8:56:41:bf:07:4a:00:b3:9e:6d: 3e:95:99:34:dd:07:d0:73:2a:3b:cf:1b:88:d2:18:ea:8e:65: c9:20:20:bb:0e:12:0f:9e:af:be:67:18:cc:05:15:50:7d:d0: fd:05:14:1f:de:13:a4:07:ee:32:06:e6:ca:25:c5:22:81:d6: 42:73:5b:f7:ca:58:f5:e9:ee:20:21:42:fd:b7:e7:55:f3:b2: 64:7d:d0:fa:3e:54:3d:f4:49:be:3d:8c:80:0f:76:7d:ac:65: e4:97:65:fa:29:60:6b:d0:a3:67:aa:19:9e:4e:33:89:f6:67: 7e:0e:ac:9f:5f:bf:a6:17:50:22:cb:93:c6:61:88:dc:0d:35: d7:8f:af:b5:a5:e5:5f:6b:0a:8e:15:ae:18:c9:b0:d5:2f:8b: 5c:db:62:a5:7c:f3:84:2c:d0:71:3b:a7:de:fe:9c:4a:9b:94: 45:1d:41:c3 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE9YzVrSO1EPjmrRpYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTA3YmE0NzYtZTA2Ny00MjRjLTgxNGEtMmI5MjBlMjM5 OTBkMB4XDTI2MDkzMDEzMDAxM1oXDTI2MTIyOTE0MDAxM1owLzEtMCsGA1UEAxMk ZGY1NWVjMjEtMjliNS00MDVmLTgzZTctM2QzNDkyOWJlNWNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvekHF0rQqPIhEA9VM9vBC/vC2MzXTVQYmp2j Z1rZb0t+U7nci5JGR5r+zdhLacNbJ2OHhWCWzrMB8zhJ3MgHBfeLb0PFwuiqSOsL ZHPxEwZSlMS1uBwf6msAbWAJk+9L0RnXkIJzibvjUecLH0MgHcwUgpV1OmlUngxT 1x160c2aQlIuNnIHmYF414sRE9Xnyz0kqeqB34c4BjaD3VoxQhm9/f3bq+NueAqX dd9vdC+OrnB36a/PKYDOVoE8tcCmCl8wqrMtw+qXjI43diqnYDdybrzFqIKv55q7 UkWHcA4udtkXmdTq5/YB+5VAF2V8fZO/oSRMPsrJypE5vvBtLQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFOHqk4ldDnoiR241BdwqfVJJjz8GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9hMDdi YTQ3Ni1lMDY3LTQyNGMtODE0YS0yYjkyMGUyMzk5MGQvMDg5ZmQ5MDItOTIyNS0z OTFkLWFlMGUtM2M3Y2Q5MDhiZjEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYTA3YmE0NzYtZTA2Ny00MjRjLTgx NGEtMmI5MjBlMjM5OTBkL2EwN2JhNDc2LWUwNjctNDI0Yy04MTRhLTJiOTIwZTIz OTkwZC5jcmwwHwYDVR0jBBgwFoAUPFkcqi68bjkShuYYZq/zn1XHgggwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9hMDdiYTQ3Ni1lMDY3LTQyNGMtODE0YS0yYjky MGUyMzk5MGQuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBF5h4AwQB F7uwMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAJFauEXILqoYswVYRj3/KpcXRS1kigmc1nsOcbgfYnPt/6Zp yVKl1vfExMLzt6pwMF9h7tCdMDPJ5qEvaOoZmqt2UxF4IUvCEfQ/Cm19eJVP+FZB vwdKALOebT6VmTTdB9BzKjvPG4jSGOqOZckgILsOEg+er75nGMwFFVB90P0FFB/e E6QH7jIG5solxSKB1kJzW/fKWPXp7iAhQv2351XzsmR90Po+VD30Sb49jIAPdn2s ZeSXZfopYGvQo2eqGZ5OM4n2Z34OrJ9fv6YXUCLLk8ZhiNwNNdePr7Wl5V9rCo4V rhjJsNUvi1zbYqV884Qs0HE7p97+nEqblEUdQcM= -----END CERTIFICATE-----Generated at Tue Oct 13 17:43:14 2026 by rpki-client