$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9a52f880-7957-4bb9-b30a-78f30c289eb1/ba711ba1-3e0a-374c-a397-d36ec265248d.roa File: ba711ba1-3e0a-374c-a397-d36ec265248d.roa (raw, json) Hash identifier: U7z0QDx/SVVxKRYnGREmbWParrQAlr0a1YNw3fPwadU= Subject key identifier: A0:4E:00:7E:F6:30:43:B7:BE:23:8C:AE:56:97:7A:5C:1E:2C:9A:63 Certificate issuer: /CN=9a52f880-7957-4bb9-b30a-78f30c289eb1 Certificate serial: 010D0C9F4328584ED861E9075878E1E7AD243B80 Authority key identifier: A4:95:8B:E6:A3:B4:17:CC:5E:91:DD:87:95:AC:2E:7F:65:97:50:AC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9a52f880-7957-4bb9-b30a-78f30c289eb1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9a52f880-7957-4bb9-b30a-78f30c289eb1/ba711ba1-3e0a-374c-a397-d36ec265248d.roa Signing time: Sat 15 Aug 2026 13:00:11 +0000 ROA not before: Sat 15 Aug 2026 13:00:11 +0000 ROA not after: Fri 13 Nov 2026 14:00:11 +0000 asID: 32159 IP address blocks: 23.153.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9a52f880-7957-4bb9-b30a-78f30c289eb1/9a52f880-7957-4bb9-b30a-78f30c289eb1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9a52f880-7957-4bb9-b30a-78f30c289eb1/9a52f880-7957-4bb9-b30a-78f30c289eb1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9a52f880-7957-4bb9-b30a-78f30c289eb1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d8:61:e9:07:58:78:e1:e7:ad:24:3b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a52f880-7957-4bb9-b30a-78f30c289eb1 Validity Not Before: Aug 15 13:00:11 2026 GMT Not After : Nov 13 14:00:11 2026 GMT Subject: CN=fc857dc8-46fb-413b-b6d1-a2b64ffc2fda Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:66:15:82:25:45:62:e4:c2:88:f0:e0:03:a4: c0:c6:33:03:ba:2e:c7:be:d0:f2:f9:60:ed:8a:95: 23:95:f2:3e:70:59:39:f5:ad:49:ed:9e:39:e4:6f: b7:7a:73:fe:60:22:2a:4b:e9:48:52:1f:d5:8e:ac: af:7b:0a:53:b5:c1:30:f0:e1:e2:ca:4c:62:bd:5c: 30:a8:a4:ae:a9:66:1f:64:9e:41:ff:c0:14:e2:a9: d5:07:d1:9d:64:b3:90:bf:d0:1f:a9:d4:df:c2:19: 6f:fc:47:17:26:35:f7:2c:f2:b4:85:67:b5:2f:08: 7d:3a:41:78:c6:69:ab:03:b1:cd:81:e0:12:4b:da: 4a:e8:ce:71:78:ac:58:4e:09:2e:9b:da:61:c0:d7: e9:de:00:6d:49:d0:73:c1:d9:5b:bc:8d:d7:63:0a: d4:d2:89:1e:6c:30:da:4b:3e:b4:89:bb:fc:73:8e: a6:4a:b0:14:be:6f:62:b9:2b:9b:48:54:ad:03:0d: 64:fe:df:c7:f0:86:c4:bc:7f:3a:5f:bc:3d:10:e7: da:8d:e4:ac:91:6b:2a:66:6c:f3:61:c7:55:bf:34: 61:88:8e:31:ea:32:02:39:60:ad:ef:e6:27:e3:b5: 44:5c:e0:40:aa:14:de:8a:8c:a8:0f:78:b3:e0:18: 84:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:4E:00:7E:F6:30:43:B7:BE:23:8C:AE:56:97:7A:5C:1E:2C:9A:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9a52f880-7957-4bb9-b30a-78f30c289eb1/ba711ba1-3e0a-374c-a397-d36ec265248d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9a52f880-7957-4bb9-b30a-78f30c289eb1/9a52f880-7957-4bb9-b30a-78f30c289eb1.crl X509v3 Authority Key Identifier: keyid:A4:95:8B:E6:A3:B4:17:CC:5E:91:DD:87:95:AC:2E:7F:65:97:50:AC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9a52f880-7957-4bb9-b30a-78f30c289eb1.cer sbgp-ipAddrBlock: critical IPv4: 23.153.217.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:81:c6:db:55:20:9b:c3:8e:07:5f:e0:c3:9f:70:31:3d:05: f7:a2:5b:82:8b:bf:d1:c7:fd:8c:3a:46:72:ab:f5:cb:e9:35: 2f:0b:fd:15:7d:10:94:f1:79:3f:4a:46:00:5e:ec:1a:3f:45: 16:b9:42:ce:9d:e8:d8:00:c2:f0:f7:c1:02:b4:0a:f4:07:98: 5f:aa:b5:73:11:4a:3b:f3:58:f5:ba:86:99:7c:1c:b5:dd:b1: ca:c8:99:19:dc:b1:33:43:67:cd:40:44:ed:42:ae:43:08:90: 99:69:0e:bd:d8:02:ed:08:cf:a4:8a:d5:e0:04:d2:eb:1a:77: b0:f6:7e:f3:d5:f4:f0:5b:b9:2f:81:33:e3:9d:0d:ab:c3:29: 29:1d:4b:d2:82:d6:fe:59:a0:09:68:19:32:ce:02:3b:21:3d: 3c:7a:71:ef:74:cd:3f:be:7c:49:f7:da:2f:5d:e2:4e:6b:a4: 3b:a3:2a:f5:72:23:fe:2f:39:eb:11:fa:90:c7:19:f5:9d:e4: 87:ca:05:30:3a:0f:45:f7:0f:29:bf:1f:3c:b8:69:a1:cf:68: e9:00:13:e1:ec:00:1c:5a:7d:9d:c3:c8:45:c6:f5:2c:20:9f: 06:b8:82:54:42:15:b7:75:35:54:a9:27:cf:6d:29:89:a3:fe: 92:7a:ed:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7YYekHWHjh560kO4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWE1MmY4ODAtNzk1Ny00YmI5LWIzMGEtNzhmMzBjMjg5 ZWIxMB4XDTI2MDgxNTEzMDAxMVoXDTI2MTExMzE0MDAxMVowLzEtMCsGA1UEAxMk ZmM4NTdkYzgtNDZmYi00MTNiLWI2ZDEtYTJiNjRmZmMyZmRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApmYVgiVFYuTCiPDgA6TAxjMDui7HvtDy+WDt ipUjlfI+cFk59a1J7Z455G+3enP+YCIqS+lIUh/VjqyvewpTtcEw8OHiykxivVww qKSuqWYfZJ5B/8AU4qnVB9GdZLOQv9AfqdTfwhlv/EcXJjX3LPK0hWe1Lwh9OkF4 xmmrA7HNgeASS9pK6M5xeKxYTgkum9phwNfp3gBtSdBzwdlbvI3XYwrU0okebDDa Sz60ibv8c46mSrAUvm9iuSubSFStAw1k/t/H8IbEvH86X7w9EOfajeSskWsqZmzz YcdVvzRhiI4x6jICOWCt7+Yn47VEXOBAqhTeioyoD3iz4BiEkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKBOAH72MEO3viOMrlaXelweLJpjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS85YTUy Zjg4MC03OTU3LTRiYjktYjMwYS03OGYzMGMyODllYjEvYmE3MTFiYTEtM2UwYS0z NzRjLWEzOTctZDM2ZWMyNjUyNDhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvOWE1MmY4ODAtNzk1Ny00YmI5LWIz MGEtNzhmMzBjMjg5ZWIxLzlhNTJmODgwLTc5NTctNGJiOS1iMzBhLTc4ZjMwYzI4 OWViMS5jcmwwHwYDVR0jBBgwFoAUpJWL5qO0F8xekd2Hlawuf2WXUKwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS85YTUyZjg4MC03OTU3LTRiYjktYjMwYS03OGYz MGMyODllYjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5nZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIaBxttVIJvDjgdf4MOfcDE9BfeiW4KLv9HH/Yw6RnKr9cvpNS8L/RV9 EJTxeT9KRgBe7Bo/RRa5Qs6d6NgAwvD3wQK0CvQHmF+qtXMRSjvzWPW6hpl8HLXd scrImRncsTNDZ81ARO1CrkMIkJlpDr3YAu0Iz6SK1eAE0usad7D2fvPV9PBbuS+B M+OdDavDKSkdS9KC1v5ZoAloGTLOAjshPTx6ce90zT++fEn32i9d4k5rpDujKvVy I/4vOesR+pDHGfWd5IfKBTA6D0X3Dym/Hzy4aaHPaOkAE+HsABxafZ3DyEXG9Swg nwa4glRCFbd1NVSpJ89tKYmj/pJ67Tk= -----END CERTIFICATE-----Generated at Sun Sep 13 13:29:47 2026 by rpki-client