$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a9586916-68f6-41f9-8be8-415f39b3aff8/70ced955-b379-3b9b-85ce-9969295b8607.roa File: 70ced955-b379-3b9b-85ce-9969295b8607.roa (raw, json) Hash identifier: dj9NdZaDEATKgUb7ED8g0NhFzGpQH18lEvZKnAup0GE= Subject key identifier: 16:6F:A8:62:35:EF:38:13:77:F8:02:54:32:2B:D0:FA:9C:00:1B:96 Certificate issuer: /CN=a9586916-68f6-41f9-8be8-415f39b3aff8 Certificate serial: 010D0C9F4328584EBC7701E4D1952C9341B1F380 Authority key identifier: 5B:6E:C2:B5:3E:A6:B3:1B:94:41:13:E4:FF:1C:FC:9D:4C:05:30:84 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a9586916-68f6-41f9-8be8-415f39b3aff8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a9586916-68f6-41f9-8be8-415f39b3aff8/70ced955-b379-3b9b-85ce-9969295b8607.roa Signing time: Wed 05 Aug 2026 13:00:12 +0000 ROA not before: Wed 05 Aug 2026 13:00:12 +0000 ROA not after: Tue 03 Nov 2026 14:00:12 +0000 asID: 402095 IP address blocks: 23.151.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a9586916-68f6-41f9-8be8-415f39b3aff8/a9586916-68f6-41f9-8be8-415f39b3aff8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a9586916-68f6-41f9-8be8-415f39b3aff8/a9586916-68f6-41f9-8be8-415f39b3aff8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a9586916-68f6-41f9-8be8-415f39b3aff8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 29 Aug 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:bc:77:01:e4:d1:95:2c:93:41:b1:f3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a9586916-68f6-41f9-8be8-415f39b3aff8 Validity Not Before: Aug 5 13:00:12 2026 GMT Not After : Nov 3 14:00:12 2026 GMT Subject: CN=326be840-0005-4695-b505-a29f234b795f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:14:cb:b9:7f:68:9b:4b:44:ce:97:f0:99:56: 73:de:3b:c8:ae:0c:1b:db:b8:74:65:98:2b:e4:78: 3b:76:93:b1:20:9c:06:38:b9:31:fd:a5:85:58:41: 9d:43:58:9d:d5:d0:f2:28:15:93:6e:b9:37:9f:cf: 39:3a:a9:cf:72:db:d5:ab:67:44:8f:74:c2:df:6c: 05:c0:25:50:fd:05:88:d4:f4:98:a9:5c:d9:6a:f1: 03:31:af:64:b3:c1:a6:b4:70:cd:9f:0c:7e:07:26: 62:dd:57:6c:d0:cd:ac:84:51:73:a2:6a:0b:29:bd: a0:91:85:21:db:59:f4:2f:69:42:11:b1:a4:75:c3: f1:b3:59:03:11:b9:14:c2:b4:7b:bc:b7:49:55:2c: d2:97:b5:ce:ab:bf:8a:c1:38:ad:11:a7:a1:c6:e5: 39:ba:9c:02:1f:3e:4a:ce:b7:b5:ad:c2:dd:ed:ea: dd:d3:43:74:9b:a0:ba:56:d3:b5:5a:01:5d:f0:8c: f9:1e:78:8b:bf:d8:10:66:67:5b:59:38:b7:54:bd: ab:6b:48:99:90:ec:ad:56:a5:fa:b7:f3:16:12:cf: 02:16:82:f7:30:72:28:cc:5a:1a:47:1d:ed:17:3d: b1:f6:a7:f9:ff:b4:ca:f1:81:f0:39:b6:dd:1f:25: bb:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:6F:A8:62:35:EF:38:13:77:F8:02:54:32:2B:D0:FA:9C:00:1B:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a9586916-68f6-41f9-8be8-415f39b3aff8/70ced955-b379-3b9b-85ce-9969295b8607.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a9586916-68f6-41f9-8be8-415f39b3aff8/a9586916-68f6-41f9-8be8-415f39b3aff8.crl X509v3 Authority Key Identifier: keyid:5B:6E:C2:B5:3E:A6:B3:1B:94:41:13:E4:FF:1C:FC:9D:4C:05:30:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a9586916-68f6-41f9-8be8-415f39b3aff8.cer sbgp-ipAddrBlock: critical IPv4: 23.151.236.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:b8:0b:60:57:30:d2:95:22:b0:6d:04:06:83:bb:4c:dc:aa: ea:5c:0f:cc:20:5f:b9:1a:2b:63:7b:e1:c5:c2:56:7a:40:f7: 70:23:17:bd:1e:e9:e2:08:73:54:6d:24:f2:47:0c:bb:fc:30: b2:38:cf:84:45:53:9e:48:a6:ca:60:dd:75:5f:eb:f1:c0:e8: a4:16:32:d5:1e:93:c3:e1:ce:07:77:a0:b2:7f:a5:36:bf:7b: 79:0b:af:91:c0:eb:cf:01:70:08:26:a0:c3:ec:84:07:5e:4c: e5:4a:af:00:16:58:5d:21:81:63:ca:fd:4d:bd:1a:74:8f:33: 51:a4:d0:2a:87:33:7c:a3:33:5a:f7:50:80:85:8d:bc:2f:33: 67:28:fe:8e:b6:df:36:2f:ca:8a:8e:2a:8b:00:06:52:f7:e0: 42:92:26:04:e8:d5:c3:cb:4a:2a:0c:3f:59:88:4e:d6:e6:3a: 44:66:f6:01:4d:f7:1e:82:df:6d:74:dc:bc:b3:eb:45:43:e5: 42:32:af:a1:ef:50:c5:f1:e3:f8:46:f2:a3:e6:d0:36:16:ff: f5:64:bf:f1:4c:10:23:88:bb:c7:ed:db:2e:a3:b7:81:91:bb: de:31:0d:e8:e0:c9:8e:b4:df:26:7d:93:42:e8:f9:8d:6e:b7: 70:9c:68:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE68dwHk0ZUsk0Gx84AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTk1ODY5MTYtNjhmNi00MWY5LThiZTgtNDE1ZjM5YjNh ZmY4MB4XDTI2MDgwNTEzMDAxMloXDTI2MTEwMzE0MDAxMlowLzEtMCsGA1UEAxMk MzI2YmU4NDAtMDAwNS00Njk1LWI1MDUtYTI5ZjIzNGI3OTVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApxTLuX9om0tEzpfwmVZz3jvIrgwb27h0ZZgr 5Hg7dpOxIJwGOLkx/aWFWEGdQ1id1dDyKBWTbrk3n885OqnPctvVq2dEj3TC32wF wCVQ/QWI1PSYqVzZavEDMa9ks8GmtHDNnwx+ByZi3Vds0M2shFFzomoLKb2gkYUh 21n0L2lCEbGkdcPxs1kDEbkUwrR7vLdJVSzSl7XOq7+KwTitEaehxuU5upwCHz5K zre1rcLd7erd00N0m6C6VtO1WgFd8Iz5HniLv9gQZmdbWTi3VL2ra0iZkOytVqX6 t/MWEs8CFoL3MHIozFoaRx3tFz2x9qf5/7TK8YHwObbdHyW7QQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBZvqGI17zgTd/gCVDIr0PqcABuWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9hOTU4 NjkxNi02OGY2LTQxZjktOGJlOC00MTVmMzliM2FmZjgvNzBjZWQ5NTUtYjM3OS0z YjliLTg1Y2UtOTk2OTI5NWI4NjA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYTk1ODY5MTYtNjhmNi00MWY5LThi ZTgtNDE1ZjM5YjNhZmY4L2E5NTg2OTE2LTY4ZjYtNDFmOS04YmU4LTQxNWYzOWIz YWZmOC5jcmwwHwYDVR0jBBgwFoAUW27CtT6msxuUQRPk/xz8nUwFMIQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9hOTU4NjkxNi02OGY2LTQxZjktOGJlOC00MTVm MzliM2FmZjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5fsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB+4C2BXMNKVIrBtBAaDu0zcqupcD8wgX7kaK2N74cXCVnpA93AjF70e 6eIIc1RtJPJHDLv8MLI4z4RFU55Ipspg3XVf6/HA6KQWMtUek8Phzgd3oLJ/pTa/ e3kLr5HA688BcAgmoMPshAdeTOVKrwAWWF0hgWPK/U29GnSPM1Gk0CqHM3yjM1r3 UICFjbwvM2co/o623zYvyoqOKosABlL34EKSJgTo1cPLSioMP1mITtbmOkRm9gFN 9x6C32103Lyz60VD5UIyr6HvUMXx4/hG8qPm0DYW//Vkv/FMECOIu8ft2y6jt4GR u94xDejgyY603yZ9k0Lo+Y1ut3CcaIE= -----END CERTIFICATE-----Generated at Thu Aug 27 08:53:16 2026 by rpki-client