$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9a52f880-7957-4bb9-b30a-78f30c289eb1/5a672737-6de0-3254-9cab-b104746b4f0b.roa File: 5a672737-6de0-3254-9cab-b104746b4f0b.roa (raw, json) Hash identifier: Pmgpf34huatbSrn1fBno317mfm/gC2cFfVs6HWcajj0= Subject key identifier: FD:7E:0C:BE:A5:34:F7:0A:51:53:D0:5F:E8:54:C7:C2:D3:2D:2B:1F Certificate issuer: /CN=9a52f880-7957-4bb9-b30a-78f30c289eb1 Certificate serial: 010D0C9F4328584F990303B03FB0E83081149E00 Authority key identifier: A4:95:8B:E6:A3:B4:17:CC:5E:91:DD:87:95:AC:2E:7F:65:97:50:AC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9a52f880-7957-4bb9-b30a-78f30c289eb1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9a52f880-7957-4bb9-b30a-78f30c289eb1/5a672737-6de0-3254-9cab-b104746b4f0b.roa Signing time: Fri 23 Oct 2026 13:00:12 +0000 ROA not before: Fri 23 Oct 2026 13:00:12 +0000 ROA not after: Thu 21 Jan 2027 14:00:12 +0000 asID: 21658 IP address blocks: 23.153.216.0/24 maxlen: 24 23.153.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9a52f880-7957-4bb9-b30a-78f30c289eb1/9a52f880-7957-4bb9-b30a-78f30c289eb1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9a52f880-7957-4bb9-b30a-78f30c289eb1/9a52f880-7957-4bb9-b30a-78f30c289eb1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9a52f880-7957-4bb9-b30a-78f30c289eb1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 01 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:99:03:03:b0:3f:b0:e8:30:81:14:9e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a52f880-7957-4bb9-b30a-78f30c289eb1 Validity Not Before: Oct 23 13:00:12 2026 GMT Not After : Jan 21 14:00:12 2027 GMT Subject: CN=f569a7d5-4a38-4a60-a917-252620ee39d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:86:22:a7:87:3d:6a:b5:c6:6b:2a:4a:84:70: 5b:59:d3:f0:62:a9:9e:6b:da:4b:43:9d:45:04:12: f0:45:6f:4f:38:cf:08:e3:be:02:73:9b:cc:c5:f7: 59:b3:83:02:fa:a0:8a:61:f2:a1:99:94:08:61:73: 1f:38:2c:b9:07:b9:b7:47:7b:98:12:59:85:28:6f: 27:73:c3:a0:e8:e9:bc:2d:92:07:4d:3c:ba:49:ff: 07:d1:05:81:17:9e:b9:1e:94:15:95:d1:5d:26:57: 4a:71:28:27:5c:64:44:2d:c2:48:8e:d3:c5:d1:8a: dc:09:ce:ae:9e:88:1b:9f:de:0d:55:f8:ff:09:2e: 23:51:e5:af:c8:0e:70:26:8b:5c:8b:a9:c4:9b:d7: ef:e4:71:21:40:ac:b9:3c:6d:68:07:f6:29:80:03: 1c:4e:d4:fd:0f:d3:66:1d:7b:b2:dc:c3:f2:e9:28: 3b:15:99:48:b8:0f:d2:88:ce:f1:7a:3c:76:3a:29: 99:4c:d3:45:da:00:cb:dd:45:c6:7a:16:3a:59:f8: ec:75:2e:cb:d7:60:e4:b0:7a:46:26:45:71:71:ea: 8e:00:ba:54:99:12:5b:2a:06:a4:60:8e:4e:59:0a: 39:20:61:05:27:31:2b:ea:88:ba:a0:2d:80:1f:ca: be:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:7E:0C:BE:A5:34:F7:0A:51:53:D0:5F:E8:54:C7:C2:D3:2D:2B:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9a52f880-7957-4bb9-b30a-78f30c289eb1/5a672737-6de0-3254-9cab-b104746b4f0b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9a52f880-7957-4bb9-b30a-78f30c289eb1/9a52f880-7957-4bb9-b30a-78f30c289eb1.crl X509v3 Authority Key Identifier: keyid:A4:95:8B:E6:A3:B4:17:CC:5E:91:DD:87:95:AC:2E:7F:65:97:50:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9a52f880-7957-4bb9-b30a-78f30c289eb1.cer sbgp-ipAddrBlock: critical IPv4: 23.153.216.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:a8:f2:5d:bb:c2:94:06:29:1b:fc:b6:4b:1d:98:92:16:21: a1:ff:23:be:a8:59:a0:eb:30:a1:e7:b4:fd:e5:48:78:3a:52: 43:3e:c2:7b:8a:23:93:49:97:40:56:3d:ad:cd:c7:38:20:80: bd:a0:9f:cb:cb:ee:1f:60:bc:d9:e9:4c:0b:2e:a2:b7:de:c2: cc:ab:a7:b9:8d:2a:ba:9d:c9:b1:71:40:4a:41:b4:17:dd:b0: 43:b4:ef:c1:61:7e:f3:43:bd:34:0e:58:41:1e:93:1d:23:61: f9:28:c0:a7:ec:12:1c:60:64:26:74:c4:c3:8a:d1:2e:14:33: c8:c3:a0:e8:ed:52:11:0b:05:60:cc:dd:80:93:7a:78:f0:c3: ee:bd:b9:89:61:2a:42:a0:a3:a7:1f:ff:fd:f9:52:92:c5:85: 8e:5b:d3:6d:c6:57:49:9d:9e:55:38:1c:53:99:d2:43:8a:15: df:5f:3d:52:7b:d0:9f:01:b9:00:d1:45:10:b1:5f:99:12:9a: 72:7b:d7:33:5f:cc:56:4b:56:3f:60:16:1a:9b:2c:8c:39:48: d0:3a:77:5f:2b:59:b0:aa:05:94:1d:87:ee:a7:d7:0a:45:61: 7f:79:cb:03:43:b2:b4:73:fd:8e:41:26:76:c0:98:5f:af:fc: 6b:15:1b:1d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+ZAwOwP7DoMIEUngAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWE1MmY4ODAtNzk1Ny00YmI5LWIzMGEtNzhmMzBjMjg5 ZWIxMB4XDTI2MTAyMzEzMDAxMloXDTI3MDEyMTE0MDAxMlowLzEtMCsGA1UEAxMk ZjU2OWE3ZDUtNGEzOC00YTYwLWE5MTctMjUyNjIwZWUzOWQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwYYip4c9arXGaypKhHBbWdPwYqmea9pLQ51F BBLwRW9POM8I474Cc5vMxfdZs4MC+qCKYfKhmZQIYXMfOCy5B7m3R3uYElmFKG8n c8Og6Om8LZIHTTy6Sf8H0QWBF565HpQVldFdJldKcSgnXGRELcJIjtPF0YrcCc6u nogbn94NVfj/CS4jUeWvyA5wJotci6nEm9fv5HEhQKy5PG1oB/YpgAMcTtT9D9Nm HXuy3MPy6Sg7FZlIuA/SiM7xejx2OimZTNNF2gDL3UXGehY6WfjsdS7L12DksHpG JkVxceqOALpUmRJbKgakYI5OWQo5IGEFJzEr6oi6oC2AH8q+awIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP1+DL6lNPcKUVPQX+hUx8LTLSsfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS85YTUy Zjg4MC03OTU3LTRiYjktYjMwYS03OGYzMGMyODllYjEvNWE2NzI3MzctNmRlMC0z MjU0LTljYWItYjEwNDc0NmI0ZjBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvOWE1MmY4ODAtNzk1Ny00YmI5LWIz MGEtNzhmMzBjMjg5ZWIxLzlhNTJmODgwLTc5NTctNGJiOS1iMzBhLTc4ZjMwYzI4 OWViMS5jcmwwHwYDVR0jBBgwFoAUpJWL5qO0F8xekd2Hlawuf2WXUKwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS85YTUyZjg4MC03OTU3LTRiYjktYjMwYS03OGYz MGMyODllYjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBF5nYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFqo8l27wpQGKRv8tksdmJIWIaH/I76oWaDrMKHntP3lSHg6UkM+wnuK I5NJl0BWPa3NxzgggL2gn8vL7h9gvNnpTAsuorfewsyrp7mNKrqdybFxQEpBtBfd sEO078FhfvNDvTQOWEEekx0jYfkowKfsEhxgZCZ0xMOK0S4UM8jDoOjtUhELBWDM 3YCTenjww+69uYlhKkKgo6cf//35UpLFhY5b023GV0mdnlU4HFOZ0kOKFd9fPVJ7 0J8BuQDRRRCxX5kSmnJ71zNfzFZLVj9gFhqbLIw5SNA6d18rWbCqBZQdh+6n1wpF YX95ywNDsrRz/Y5BJnbAmF+v/GsVGx0= -----END CERTIFICATE-----Generated at Sat Oct 31 08:51:41 2026 by rpki-client