$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a120b5d4-da56-49b1-8ae1-7987a6afde99/c7fb0120-8473-316e-81b4-70f9121c05f9.roa File: c7fb0120-8473-316e-81b4-70f9121c05f9.roa (raw, json) Hash identifier: U+hqXS5MwGaxwXIBXiLodDGSudFSNM4MLSNOQUeSUVc= Subject key identifier: 23:4B:74:E3:C0:C9:3C:BC:C7:39:20:6C:EC:02:B6:73:3B:BD:8B:FE Certificate issuer: /CN=a120b5d4-da56-49b1-8ae1-7987a6afde99 Certificate serial: 010D0C9F4328584F119D15583CE049EB9E4C01C0 Authority key identifier: C0:D7:33:E0:5D:4C:05:6E:3A:7E:94:33:2D:C4:6B:E8:01:48:68:8A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a120b5d4-da56-49b1-8ae1-7987a6afde99.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a120b5d4-da56-49b1-8ae1-7987a6afde99/c7fb0120-8473-316e-81b4-70f9121c05f9.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 394989 IP address blocks: 23.151.192.0/24 maxlen: 24 23.151.193.0/24 maxlen: 24 2602:febb::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a120b5d4-da56-49b1-8ae1-7987a6afde99/a120b5d4-da56-49b1-8ae1-7987a6afde99.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a120b5d4-da56-49b1-8ae1-7987a6afde99/a120b5d4-da56-49b1-8ae1-7987a6afde99.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a120b5d4-da56-49b1-8ae1-7987a6afde99.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:9d:15:58:3c:e0:49:eb:9e:4c:01:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a120b5d4-da56-49b1-8ae1-7987a6afde99 Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=32246eb0-1396-41ae-a70d-a6a85eb32631 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:4f:25:e3:66:4d:2a:db:1b:fd:72:ec:c7:bd: c0:9d:3a:c7:df:c4:ce:d8:94:5e:6c:7b:a1:75:cc: 95:fc:b7:0e:f0:54:c4:d3:0b:32:e0:2a:a3:9a:10: a5:e7:2c:fa:84:cc:44:9c:8f:80:13:99:ba:5a:8a: 55:af:29:48:aa:45:2e:34:b1:71:16:11:31:45:48: 85:5d:b6:77:87:3a:da:6f:0d:fe:78:f7:66:2b:df: e3:c7:d0:ae:c9:49:20:f2:3d:45:32:39:44:88:0f: 41:a3:06:db:19:04:41:56:de:e1:33:d9:ae:cb:67: 50:ee:0c:4c:61:e5:e5:81:2c:ae:1e:48:6c:8e:17: d9:8d:b2:ad:86:2a:76:fb:7a:11:45:a1:0b:29:a0: 88:2d:f2:de:46:7f:e6:4e:fa:d5:29:6c:47:ba:f5: 2d:9b:c3:af:71:2d:81:42:cf:34:6f:5e:e9:6e:64: b3:e3:b8:b0:55:1e:14:71:aa:18:88:9a:e3:d4:c4: 86:55:5a:35:66:6f:f4:a6:30:84:22:fc:fb:f6:d2: e3:6d:5c:00:d7:cd:0e:12:0b:c3:62:90:e0:f6:e6: 61:59:90:56:f5:9c:ac:f2:20:6d:5f:44:83:21:8e: 81:97:fa:73:94:bb:ba:c4:ab:5d:95:bd:46:dc:20: 32:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:4B:74:E3:C0:C9:3C:BC:C7:39:20:6C:EC:02:B6:73:3B:BD:8B:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a120b5d4-da56-49b1-8ae1-7987a6afde99/c7fb0120-8473-316e-81b4-70f9121c05f9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a120b5d4-da56-49b1-8ae1-7987a6afde99/a120b5d4-da56-49b1-8ae1-7987a6afde99.crl X509v3 Authority Key Identifier: keyid:C0:D7:33:E0:5D:4C:05:6E:3A:7E:94:33:2D:C4:6B:E8:01:48:68:8A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a120b5d4-da56-49b1-8ae1-7987a6afde99.cer sbgp-ipAddrBlock: critical IPv4: 23.151.192.0/23 IPv6: 2602:febb::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:fa:f4:eb:2c:e2:8b:bc:99:b8:ba:3c:92:76:d1:8c:b6:05: ff:32:77:11:81:ac:96:8c:39:c6:34:59:d4:a7:bf:7f:f2:63: a7:72:02:11:87:19:5f:02:ae:21:a6:b8:11:21:32:cb:06:ba: 07:5d:18:3f:c6:43:8e:11:0c:c3:86:0c:00:ee:89:2a:39:34: 99:8d:c7:6b:b9:7d:7e:ed:69:b9:24:e8:1a:b0:af:75:5b:78: f1:f0:7c:ff:ec:8c:53:7e:bf:0c:ed:2d:47:84:cb:51:d3:75: 92:ef:85:a2:09:8a:3b:6a:11:58:1d:db:1b:ca:ea:72:b6:45: b0:5c:48:96:ef:ff:33:56:d2:f7:d6:52:ef:80:7b:4f:a8:fe: 4b:b0:94:82:b8:0b:d5:39:e9:52:98:5f:1b:74:a7:81:23:90: 0e:bf:d6:c8:49:66:c6:cc:22:ac:c3:b3:ec:f0:ae:de:b3:fd: ec:5d:b4:91:d6:1e:cf:be:24:e4:98:2a:fa:b1:af:40:e6:95: 38:38:dd:7a:32:fb:e6:b4:ca:43:f1:e2:a2:03:94:e3:cc:15: 3f:84:97:60:c4:50:da:c8:3b:da:cf:92:39:fa:bc:22:16:2a: 5d:af:3e:d0:68:8b:87:bc:76:26:52:1a:bb:0a:ac:aa:dc:e7: d4:a0:bc:f0 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE8RnRVYPOBJ655MAcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTEyMGI1ZDQtZGE1Ni00OWIxLThhZTEtNzk4N2E2YWZk ZTk5MB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk MzIyNDZlYjAtMTM5Ni00MWFlLWE3MGQtYTZhODVlYjMyNjMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk08l42ZNKtsb/XLsx73AnTrH38TO2JRebHuh dcyV/LcO8FTE0wsy4CqjmhCl5yz6hMxEnI+AE5m6WopVrylIqkUuNLFxFhExRUiF XbZ3hzrabw3+ePdmK9/jx9CuyUkg8j1FMjlEiA9BowbbGQRBVt7hM9muy2dQ7gxM YeXlgSyuHkhsjhfZjbKthip2+3oRRaELKaCILfLeRn/mTvrVKWxHuvUtm8OvcS2B Qs80b17pbmSz47iwVR4UcaoYiJrj1MSGVVo1Zm/0pjCEIvz79tLjbVwA180OEgvD YpDg9uZhWZBW9Zys8iBtX0SDIY6Bl/pzlLu6xKtdlb1G3CAyTwIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFCNLdOPAyTy8xzkgbOwCtnM7vYv+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9hMTIw YjVkNC1kYTU2LTQ5YjEtOGFlMS03OTg3YTZhZmRlOTkvYzdmYjAxMjAtODQ3My0z MTZlLTgxYjQtNzBmOTEyMWMwNWY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYTEyMGI1ZDQtZGE1Ni00OWIxLThh ZTEtNzk4N2E2YWZkZTk5L2ExMjBiNWQ0LWRhNTYtNDliMS04YWUxLTc5ODdhNmFm ZGU5OS5jcmwwHwYDVR0jBBgwFoAUwNcz4F1MBW46fpQzLcRr6AFIaIowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9hMTIwYjVkNC1kYTU2LTQ5YjEtOGFlMS03OTg3 YTZhZmRlOTkuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQBF5fAMA4E AgACMAgDBgQmAv67ADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBk+vTrLOKLvJm4ujySdtGMtgX/MncRgayW jDnGNFnUp79/8mOncgIRhxlfAq4hprgRITLLBroHXRg/xkOOEQzDhgwA7okqOTSZ jcdruX1+7Wm5JOgasK91W3jx8Hz/7IxTfr8M7S1HhMtR03WS74WiCYo7ahFYHdsb yupytkWwXEiW7/8zVtL31lLvgHtPqP5LsJSCuAvVOelSmF8bdKeBI5AOv9bISWbG zCKsw7Ps8K7es/3sXbSR1h7PviTkmCr6sa9A5pU4ON16MvvmtMpD8eKiA5TjzBU/ hJdgxFDayDvaz5I5+rwiFipdrz7QaIuHvHYmUhq7Cqyq3OfUoLzw -----END CERTIFICATE-----Generated at Tue Oct 13 21:01:25 2026 by rpki-client