$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d549bcbf-712f-4ddd-b680-cd2230986019/559b8483-a864-360b-8d3a-85cc23015183.roa File: 559b8483-a864-360b-8d3a-85cc23015183.roa (raw, json) Hash identifier: PL3orvCRqoL9taF4oFoAyKCKsaH2QF6h1tRd5CuHFPo= Subject key identifier: 27:4F:6F:52:87:C9:4A:5D:7F:8F:0A:AF:AF:A7:18:DC:67:7A:E0:55 Certificate issuer: /CN=d549bcbf-712f-4ddd-b680-cd2230986019 Certificate serial: 010D0C9F4328584EFCACBA6CC1F6934F315EBA40 Authority key identifier: 92:F2:79:24:17:5C:3D:40:9D:CA:0F:7E:A7:97:AD:46:13:6E:73:4A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d549bcbf-712f-4ddd-b680-cd2230986019.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d549bcbf-712f-4ddd-b680-cd2230986019/559b8483-a864-360b-8d3a-85cc23015183.roa Signing time: Fri 28 Aug 2026 13:00:12 +0000 ROA not before: Fri 28 Aug 2026 13:00:12 +0000 ROA not after: Thu 26 Nov 2026 14:00:12 +0000 asID: 399870 IP address blocks: 23.141.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d549bcbf-712f-4ddd-b680-cd2230986019/d549bcbf-712f-4ddd-b680-cd2230986019.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d549bcbf-712f-4ddd-b680-cd2230986019/d549bcbf-712f-4ddd-b680-cd2230986019.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d549bcbf-712f-4ddd-b680-cd2230986019.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:fc:ac:ba:6c:c1:f6:93:4f:31:5e:ba:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d549bcbf-712f-4ddd-b680-cd2230986019 Validity Not Before: Aug 28 13:00:12 2026 GMT Not After : Nov 26 14:00:12 2026 GMT Subject: CN=acb689e3-77c9-47f6-9a66-9e31ca019069 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:b4:8f:d3:bd:03:95:d6:cb:0a:6c:dc:9e:35: 26:63:b2:ef:6c:58:19:7f:f1:33:9b:4e:86:b5:e5: 36:8e:1a:29:47:f9:c3:7d:b7:e9:c7:f9:4f:b1:4b: 79:17:c0:96:73:a5:a7:41:94:1e:14:1e:a8:13:ce: 53:64:81:55:21:f9:a4:fc:5d:42:ed:f4:f4:1f:c8: 30:64:3c:be:66:ea:b9:49:fe:db:95:a3:67:3a:07: fa:65:02:41:55:34:76:9a:d5:6a:ad:68:f9:2e:3e: 51:0d:7a:3f:98:14:39:27:9e:25:13:56:c6:51:b0: 12:e0:77:64:51:5b:37:24:5c:70:06:7e:fa:8d:ef: de:05:63:21:4b:56:69:74:8b:23:18:9c:76:90:aa: b5:f8:74:88:32:f3:b6:86:d2:35:1d:e7:5d:4f:c1: 21:76:85:9f:85:f4:62:bb:0e:b6:2b:52:4c:f2:bf: d3:ed:72:cc:cf:b7:f3:bd:84:64:a1:4c:cb:7e:8b: c4:b1:f0:54:69:27:38:f2:81:69:c0:34:3a:48:9a: 0f:b2:18:4c:5a:6a:52:1a:af:26:1a:f1:2a:24:06: 1b:ca:21:80:c8:85:e7:96:c2:31:67:1b:a5:04:b4: e3:20:d5:bf:1c:f0:2b:d9:fa:61:d9:82:4d:8e:4a: 2a:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:4F:6F:52:87:C9:4A:5D:7F:8F:0A:AF:AF:A7:18:DC:67:7A:E0:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d549bcbf-712f-4ddd-b680-cd2230986019/559b8483-a864-360b-8d3a-85cc23015183.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d549bcbf-712f-4ddd-b680-cd2230986019/d549bcbf-712f-4ddd-b680-cd2230986019.crl X509v3 Authority Key Identifier: keyid:92:F2:79:24:17:5C:3D:40:9D:CA:0F:7E:A7:97:AD:46:13:6E:73:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d549bcbf-712f-4ddd-b680-cd2230986019.cer sbgp-ipAddrBlock: critical IPv4: 23.141.4.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:58:87:07:f9:3c:f4:c6:14:bf:27:8a:eb:7b:f9:54:4f:b9: 6e:be:85:d0:b1:1a:92:94:4d:5c:6c:60:5f:07:a2:6d:32:5a: a5:09:41:2c:ad:7c:02:28:6b:2b:80:fb:1e:eb:9a:48:d5:79: b3:12:b3:55:53:9a:12:38:23:78:6c:e9:21:b9:57:56:8c:a0: 32:67:92:08:6f:73:f1:3c:22:4d:60:e7:41:e7:04:61:5b:a7: 36:6e:8e:c6:6e:0d:6d:d5:8f:47:cd:8c:1e:a1:38:1c:a4:d3: 25:a9:61:96:43:2e:88:40:b7:11:d7:a3:08:9b:25:f4:61:6a: b3:59:b5:11:7e:b5:78:a1:db:85:73:da:0f:08:c4:e1:61:08: 97:6c:a0:96:27:6d:4d:82:5a:ff:a6:0a:47:53:3f:a7:18:0c: f8:79:fa:c1:ae:af:bf:f9:66:ab:fd:a1:b4:65:91:b7:51:2c: a4:15:56:d8:04:69:40:9f:3a:15:d6:58:cc:52:17:13:03:ce: 7e:a2:a5:8e:c8:fd:eb:79:02:aa:a3:ed:36:26:5d:19:41:6f: e5:f1:35:78:71:9d:9d:d9:a6:ee:cb:21:13:d9:59:b1:03:e4: 0e:71:6a:b1:ff:55:bf:b4:9f:1b:81:35:a9:fe:38:35:cb:ea: 69:7f:a0:cc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE78rLpswfaTTzFeukAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDU0OWJjYmYtNzEyZi00ZGRkLWI2ODAtY2QyMjMwOTg2 MDE5MB4XDTI2MDgyODEzMDAxMloXDTI2MTEyNjE0MDAxMlowLzEtMCsGA1UEAxMk YWNiNjg5ZTMtNzdjOS00N2Y2LTlhNjYtOWUzMWNhMDE5MDY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg7SP070DldbLCmzcnjUmY7LvbFgZf/Ezm06G teU2jhopR/nDfbfpx/lPsUt5F8CWc6WnQZQeFB6oE85TZIFVIfmk/F1C7fT0H8gw ZDy+Zuq5Sf7blaNnOgf6ZQJBVTR2mtVqrWj5Lj5RDXo/mBQ5J54lE1bGUbAS4Hdk UVs3JFxwBn76je/eBWMhS1ZpdIsjGJx2kKq1+HSIMvO2htI1HeddT8EhdoWfhfRi uw62K1JM8r/T7XLMz7fzvYRkoUzLfovEsfBUaSc48oFpwDQ6SJoPshhMWmpSGq8m GvEqJAYbyiGAyIXnlsIxZxulBLTjINW/HPAr2fph2YJNjkoqfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCdPb1KHyUpdf48Kr6+nGNxneuBVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9kNTQ5 YmNiZi03MTJmLTRkZGQtYjY4MC1jZDIyMzA5ODYwMTkvNTU5Yjg0ODMtYTg2NC0z NjBiLThkM2EtODVjYzIzMDE1MTgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZDU0OWJjYmYtNzEyZi00ZGRkLWI2 ODAtY2QyMjMwOTg2MDE5L2Q1NDliY2JmLTcxMmYtNGRkZC1iNjgwLWNkMjIzMDk4 NjAxOS5jcmwwHwYDVR0jBBgwFoAUkvJ5JBdcPUCdyg9+p5etRhNuc0owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9kNTQ5YmNiZi03MTJmLTRkZGQtYjY4MC1jZDIy MzA5ODYwMTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF40EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAChYhwf5PPTGFL8niut7+VRPuW6+hdCxGpKUTVxsYF8Hom0yWqUJQSyt fAIoayuA+x7rmkjVebMSs1VTmhI4I3hs6SG5V1aMoDJnkghvc/E8Ik1g50HnBGFb pzZujsZuDW3Vj0fNjB6hOByk0yWpYZZDLohAtxHXowibJfRharNZtRF+tXih24Vz 2g8IxOFhCJdsoJYnbU2CWv+mCkdTP6cYDPh5+sGur7/5Zqv9obRlkbdRLKQVVtgE aUCfOhXWWMxSFxMDzn6ipY7I/et5Aqqj7TYmXRlBb+XxNXhxnZ3Zpu7LIRPZWbED 5A5xarH/Vb+0nxuBNan+ODXL6ml/oMw= -----END CERTIFICATE-----Generated at Tue Sep 1 04:52:32 2026 by rpki-client