$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a9586916-68f6-41f9-8be8-415f39b3aff8/70ced955-b379-3b9b-85ce-9969295b8607.roa File: 70ced955-b379-3b9b-85ce-9969295b8607.roa (raw, json) Hash identifier: /+dUad3vWTW7CWCyzc8jh2VL1hZ1aIZFG57gkWhlQko= Subject key identifier: A8:17:3E:0F:8D:F0:06:CA:91:BF:9E:EC:A8:5C:02:FC:2C:C8:29:89 Certificate issuer: /CN=a9586916-68f6-41f9-8be8-415f39b3aff8 Certificate serial: 010D0C9F4328584F5E62E21E5A3CBCAC8CAEB080 Authority key identifier: 5B:6E:C2:B5:3E:A6:B3:1B:94:41:13:E4:FF:1C:FC:9D:4C:05:30:84 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a9586916-68f6-41f9-8be8-415f39b3aff8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a9586916-68f6-41f9-8be8-415f39b3aff8/70ced955-b379-3b9b-85ce-9969295b8607.roa Signing time: Fri 02 Oct 2026 13:00:13 +0000 ROA not before: Fri 02 Oct 2026 13:00:13 +0000 ROA not after: Thu 31 Dec 2026 14:00:13 +0000 asID: 402095 IP address blocks: 23.151.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a9586916-68f6-41f9-8be8-415f39b3aff8/a9586916-68f6-41f9-8be8-415f39b3aff8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a9586916-68f6-41f9-8be8-415f39b3aff8/a9586916-68f6-41f9-8be8-415f39b3aff8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a9586916-68f6-41f9-8be8-415f39b3aff8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5e:62:e2:1e:5a:3c:bc:ac:8c:ae:b0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a9586916-68f6-41f9-8be8-415f39b3aff8 Validity Not Before: Oct 2 13:00:13 2026 GMT Not After : Dec 31 14:00:13 2026 GMT Subject: CN=c146b040-12d1-45fe-a01c-06d1da4935d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:d7:43:af:13:02:b9:58:88:56:ca:92:c7:7b: 73:2b:26:e3:9e:a8:e4:f1:19:bb:20:02:ec:75:43: 4d:2e:f2:40:fa:c5:d1:85:aa:9f:d0:09:06:19:f0: 28:df:1e:2f:f4:f7:bc:5c:63:88:03:13:15:fe:69: e6:2a:53:45:5d:6f:1e:5a:99:f9:40:22:ac:16:21: e4:d4:02:68:7f:87:04:e0:28:6b:31:68:1e:8c:49: ca:ca:ba:c2:37:4c:66:0e:7a:8c:b9:1d:a1:cd:16: d9:fe:c1:dd:99:91:1f:c3:94:97:c4:6f:e5:df:94: d9:64:13:28:76:7d:5a:5c:58:f9:c5:ea:5c:49:59: 4f:80:ba:b5:d6:6a:79:0e:2c:6f:f9:0a:de:ca:32: a4:5f:e5:00:b3:93:86:5a:e3:d8:c9:e2:4d:29:26: cc:fb:11:93:04:3b:72:47:8d:c2:9c:9b:c6:0e:4b: 5f:be:df:0a:83:0d:b5:2a:0f:8f:30:fc:ef:a5:7f: 31:fc:22:a6:c9:94:46:1e:5a:5d:e4:de:b0:27:b0: 4e:8a:71:33:cc:64:4f:b3:2b:57:58:af:ac:48:07: ac:47:95:7d:b4:a9:06:4c:5f:5d:da:c4:81:f2:38: 9a:b6:77:33:98:0f:51:18:21:d4:a4:d8:dc:ab:65: 37:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:17:3E:0F:8D:F0:06:CA:91:BF:9E:EC:A8:5C:02:FC:2C:C8:29:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a9586916-68f6-41f9-8be8-415f39b3aff8/70ced955-b379-3b9b-85ce-9969295b8607.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a9586916-68f6-41f9-8be8-415f39b3aff8/a9586916-68f6-41f9-8be8-415f39b3aff8.crl X509v3 Authority Key Identifier: keyid:5B:6E:C2:B5:3E:A6:B3:1B:94:41:13:E4:FF:1C:FC:9D:4C:05:30:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a9586916-68f6-41f9-8be8-415f39b3aff8.cer sbgp-ipAddrBlock: critical IPv4: 23.151.236.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:4a:01:89:50:3a:f3:7f:36:01:23:e9:22:42:0b:df:75:48: 18:91:2b:23:c5:87:bf:b7:de:70:7a:f9:06:f7:ea:24:c6:05: c2:07:cc:2c:db:6a:df:8e:7c:09:29:1f:46:93:21:29:a1:48: c9:f6:2e:10:bc:7e:31:12:85:67:0c:71:da:7e:b2:7f:f5:ad: 90:2c:01:c6:de:25:14:a2:13:7c:c5:e7:01:9f:8b:6c:44:d2: 5d:10:d5:39:83:e6:17:95:3b:de:92:20:e6:fc:67:75:0a:cc: dd:45:8c:de:89:72:48:9d:7c:6b:f6:be:f1:9c:90:2f:e3:56: 2b:4e:4d:86:e3:00:d4:65:c1:73:ae:75:cf:90:a8:8c:e1:67: 62:c5:c8:99:4f:59:22:84:c1:76:3c:d5:5d:cb:a1:3a:0a:2e: da:98:c2:4d:70:fb:4a:93:f8:23:60:02:6a:2e:94:af:11:6e: ee:46:8a:ba:fd:0d:0b:c4:19:72:d0:db:13:19:37:9f:34:10: 7b:9c:8d:b6:a7:ac:35:ea:ce:0b:1a:5e:ad:a5:77:cf:c5:6b: f7:91:f0:e0:21:0b:58:a0:6b:81:a3:4c:9d:b7:ad:b7:e6:8a: 9f:0f:4a:0b:0b:45:f9:0c:d2:06:b5:0a:d3:ba:28:0f:4b:c2: 0a:82:47:1d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9eYuIeWjy8rIyusIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTk1ODY5MTYtNjhmNi00MWY5LThiZTgtNDE1ZjM5YjNh ZmY4MB4XDTI2MTAwMjEzMDAxM1oXDTI2MTIzMTE0MDAxM1owLzEtMCsGA1UEAxMk YzE0NmIwNDAtMTJkMS00NWZlLWEwMWMtMDZkMWRhNDkzNWQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsddDrxMCuViIVsqSx3tzKybjnqjk8Rm7IALs dUNNLvJA+sXRhaqf0AkGGfAo3x4v9Pe8XGOIAxMV/mnmKlNFXW8eWpn5QCKsFiHk 1AJof4cE4ChrMWgejEnKyrrCN0xmDnqMuR2hzRbZ/sHdmZEfw5SXxG/l35TZZBMo dn1aXFj5xepcSVlPgLq11mp5Dixv+QreyjKkX+UAs5OGWuPYyeJNKSbM+xGTBDty R43CnJvGDktfvt8Kgw21Kg+PMPzvpX8x/CKmyZRGHlpd5N6wJ7BOinEzzGRPsytX WK+sSAesR5V9tKkGTF9d2sSB8jiatnczmA9RGCHUpNjcq2U3SQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKgXPg+N8AbKkb+e7KhcAvwsyCmJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9hOTU4 NjkxNi02OGY2LTQxZjktOGJlOC00MTVmMzliM2FmZjgvNzBjZWQ5NTUtYjM3OS0z YjliLTg1Y2UtOTk2OTI5NWI4NjA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYTk1ODY5MTYtNjhmNi00MWY5LThi ZTgtNDE1ZjM5YjNhZmY4L2E5NTg2OTE2LTY4ZjYtNDFmOS04YmU4LTQxNWYzOWIz YWZmOC5jcmwwHwYDVR0jBBgwFoAUW27CtT6msxuUQRPk/xz8nUwFMIQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9hOTU4NjkxNi02OGY2LTQxZjktOGJlOC00MTVm MzliM2FmZjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5fsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABRKAYlQOvN/NgEj6SJCC991SBiRKyPFh7+33nB6+Qb36iTGBcIHzCzb at+OfAkpH0aTISmhSMn2LhC8fjEShWcMcdp+sn/1rZAsAcbeJRSiE3zF5wGfi2xE 0l0Q1TmD5heVO96SIOb8Z3UKzN1FjN6JckidfGv2vvGckC/jVitOTYbjANRlwXOu dc+QqIzhZ2LFyJlPWSKEwXY81V3LoToKLtqYwk1w+0qT+CNgAmoulK8Rbu5Girr9 DQvEGXLQ2xMZN580EHucjbanrDXqzgsaXq2ld8/Fa/eR8OAhC1iga4GjTJ23rbfm ip8PSgsLRfkM0ga1CtO6KA9LwgqCRx0= -----END CERTIFICATE-----Generated at Mon Oct 12 07:12:13 2026 by rpki-client