$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f1b5aa9-fc5a-4fb7-892d-0fabf9b63814/f1c40f8f-4c9c-3acb-93cd-f6c9b2e9d40c.roa File: f1c40f8f-4c9c-3acb-93cd-f6c9b2e9d40c.roa (raw, json) Hash identifier: qZOqFNKI/1EELddzPopYVnIG7RMO+15SYR22apNzmq8= Subject key identifier: D2:9E:38:52:F7:B1:7D:DC:FA:F6:2A:42:60:D4:24:14:26:86:44:7E Certificate issuer: /CN=3f1b5aa9-fc5a-4fb7-892d-0fabf9b63814 Certificate serial: 010D0C9F4328584F655D7A1FCA0446697721AE80 Authority key identifier: AE:5A:17:D4:5E:19:27:94:CE:6C:CF:74:F7:18:5D:98:55:8B:CD:9B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f1b5aa9-fc5a-4fb7-892d-0fabf9b63814.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f1b5aa9-fc5a-4fb7-892d-0fabf9b63814/f1c40f8f-4c9c-3acb-93cd-f6c9b2e9d40c.roa Signing time: Mon 05 Oct 2026 01:00:13 +0000 ROA not before: Mon 05 Oct 2026 01:00:13 +0000 ROA not after: Sun 03 Jan 2027 02:00:13 +0000 asID: 35008 IP address blocks: 23.153.56.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f1b5aa9-fc5a-4fb7-892d-0fabf9b63814/3f1b5aa9-fc5a-4fb7-892d-0fabf9b63814.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f1b5aa9-fc5a-4fb7-892d-0fabf9b63814/3f1b5aa9-fc5a-4fb7-892d-0fabf9b63814.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f1b5aa9-fc5a-4fb7-892d-0fabf9b63814.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:65:5d:7a:1f:ca:04:46:69:77:21:ae:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f1b5aa9-fc5a-4fb7-892d-0fabf9b63814 Validity Not Before: Oct 5 01:00:13 2026 GMT Not After : Jan 3 02:00:13 2027 GMT Subject: CN=e76b6b68-9eb2-4ec9-8327-7169a71ef062 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:16:7f:22:61:43:1f:a5:82:ca:94:da:f2:70: ec:ae:e6:b3:c1:3e:0e:db:f3:bc:c9:09:e4:0d:08: 36:dd:07:75:e2:7b:66:98:3f:a9:ca:eb:bd:0a:d9: 6c:2e:20:c7:c9:62:1c:27:d3:ca:24:a3:41:08:fe: 69:f8:56:29:08:ce:c7:3b:79:3b:cc:83:2d:ad:ae: c3:2d:59:e8:6d:40:f5:de:b3:f9:99:d7:1d:dd:94: 67:d8:bc:8e:c5:c6:71:8c:fb:28:f1:d1:22:d9:f7: b6:48:b5:d4:c3:45:ad:3d:28:56:f8:09:b0:7f:61: 06:01:16:c4:8f:c1:d9:5e:9c:92:8f:89:c3:ee:56: 35:58:fa:4c:9a:69:ba:44:71:7d:e3:36:ea:3f:e0: 00:e7:af:b5:e8:b5:84:0e:40:70:02:45:0a:42:61: 4a:82:17:d2:2a:61:c0:d1:3b:18:c9:b1:ab:54:03: ee:d5:da:af:85:4b:56:08:5a:25:84:ec:3f:c4:08: 38:db:b6:a8:d6:6e:d8:52:8f:1a:63:63:da:94:9a: 50:18:d8:ec:67:5c:85:06:fa:83:9a:96:01:47:ba: f5:35:8e:53:a6:22:c4:b5:95:0b:98:f3:11:95:bc: 47:45:62:27:d4:4a:67:8b:80:39:4f:de:f2:24:50: 79:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:9E:38:52:F7:B1:7D:DC:FA:F6:2A:42:60:D4:24:14:26:86:44:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f1b5aa9-fc5a-4fb7-892d-0fabf9b63814/f1c40f8f-4c9c-3acb-93cd-f6c9b2e9d40c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f1b5aa9-fc5a-4fb7-892d-0fabf9b63814/3f1b5aa9-fc5a-4fb7-892d-0fabf9b63814.crl X509v3 Authority Key Identifier: keyid:AE:5A:17:D4:5E:19:27:94:CE:6C:CF:74:F7:18:5D:98:55:8B:CD:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3f1b5aa9-fc5a-4fb7-892d-0fabf9b63814.cer sbgp-ipAddrBlock: critical IPv4: 23.153.56.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:26:c7:0e:33:fc:64:59:76:8d:68:52:95:81:87:16:2e:b6: 92:3b:05:1c:53:0a:d9:8b:ed:c7:bf:54:bb:55:bf:46:1b:b8: 66:00:14:e9:98:57:55:89:fa:cd:50:68:90:85:6a:7c:7a:8b: ed:a7:ed:06:b4:1a:ab:5d:4a:35:ae:5f:ee:a1:f5:ca:62:b9: ee:44:8f:2d:94:a0:e0:a1:83:8b:8c:6c:85:cb:0a:e8:71:3b: 3b:be:67:d1:25:99:37:f6:72:e5:cd:d1:34:24:5f:b9:49:f1: b5:60:e9:eb:28:97:ad:67:9c:90:71:c4:76:d4:b6:2e:c7:e1: 49:81:c8:d3:01:b9:65:c5:c4:f9:30:37:50:79:61:03:cd:89: 5c:75:a6:88:2d:71:60:4d:36:65:2b:98:a3:e3:76:4f:37:85: ab:69:56:8a:6a:82:75:ce:3b:3f:05:4d:22:b0:1e:09:f6:b0: ca:7b:89:5c:9a:5a:30:02:55:b8:4f:97:ef:b8:9c:88:97:bc: d7:84:00:b6:b0:29:f3:da:6c:36:49:91:c4:14:45:fb:27:0f: 21:ff:c8:33:0e:b7:d5:21:07:8f:32:91:17:08:eb:30:6a:f0: 90:50:64:61:c5:b1:60:b8:1e:05:e5:a5:5d:57:67:64:11:d6: 49:ea:18:9e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9lXXofygRGaXchroAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2YxYjVhYTktZmM1YS00ZmI3LTg5MmQtMGZhYmY5YjYz ODE0MB4XDTI2MTAwNTAxMDAxM1oXDTI3MDEwMzAyMDAxM1owLzEtMCsGA1UEAxMk ZTc2YjZiNjgtOWViMi00ZWM5LTgzMjctNzE2OWE3MWVmMDYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1RZ/ImFDH6WCypTa8nDsruazwT4O2/O8yQnk DQg23Qd14ntmmD+pyuu9CtlsLiDHyWIcJ9PKJKNBCP5p+FYpCM7HO3k7zIMtra7D LVnobUD13rP5mdcd3ZRn2LyOxcZxjPso8dEi2fe2SLXUw0WtPShW+Amwf2EGARbE j8HZXpySj4nD7lY1WPpMmmm6RHF94zbqP+AA56+16LWEDkBwAkUKQmFKghfSKmHA 0TsYybGrVAPu1dqvhUtWCFolhOw/xAg427ao1m7YUo8aY2PalJpQGNjsZ1yFBvqD mpYBR7r1NY5TpiLEtZULmPMRlbxHRWIn1Epni4A5T97yJFB5iwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNKeOFL3sX3c+vYqQmDUJBQmhkR+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zZjFi NWFhOS1mYzVhLTRmYjctODkyZC0wZmFiZjliNjM4MTQvZjFjNDBmOGYtNGM5Yy0z YWNiLTkzY2QtZjZjOWIyZTlkNDBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvM2YxYjVhYTktZmM1YS00ZmI3LTg5 MmQtMGZhYmY5YjYzODE0LzNmMWI1YWE5LWZjNWEtNGZiNy04OTJkLTBmYWJmOWI2 MzgxNC5jcmwwHwYDVR0jBBgwFoAUrloX1F4ZJ5TObM909xhdmFWLzZswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zZjFiNWFhOS1mYzVhLTRmYjctODkyZC0wZmFi ZjliNjM4MTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5k4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGsmxw4z/GRZdo1oUpWBhxYutpI7BRxTCtmL7ce/VLtVv0YbuGYAFOmY V1WJ+s1QaJCFanx6i+2n7Qa0GqtdSjWuX+6h9cpiue5Ejy2UoOChg4uMbIXLCuhx Ozu+Z9ElmTf2cuXN0TQkX7lJ8bVg6esol61nnJBxxHbUti7H4UmByNMBuWXFxPkw N1B5YQPNiVx1pogtcWBNNmUrmKPjdk83hatpVopqgnXOOz8FTSKwHgn2sMp7iVya WjACVbhPl++4nIiXvNeEALawKfPabDZJkcQURfsnDyH/yDMOt9UhB48ykRcI6zBq 8JBQZGHFsWC4HgXlpV1XZ2QR1knqGJ4= -----END CERTIFICATE-----Generated at Fri Oct 9 20:57:59 2026 by rpki-client