$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ef59e050-3e29-4293-bdf4-cfb5fe154c98/a4f9f1e8-30bc-3b04-a50f-256889a98473.roa File: a4f9f1e8-30bc-3b04-a50f-256889a98473.roa (raw, json) Hash identifier: twDdQqX29E6Ho1UeeaAGLiDKPMe39pT9udsa86hJZvA= Subject key identifier: D5:2D:25:A3:A5:A1:01:46:32:BC:18:BF:EB:9F:EE:44:1E:02:D1:59 Certificate issuer: /CN=ef59e050-3e29-4293-bdf4-cfb5fe154c98 Certificate serial: 010D0C9F4328584F3FAD3CBDC4716BD9FD9C8780 Authority key identifier: F0:C6:BE:3A:D0:B4:B4:CC:2F:FD:4F:7D:21:E3:6E:32:91:DE:AA:F3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ef59e050-3e29-4293-bdf4-cfb5fe154c98.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ef59e050-3e29-4293-bdf4-cfb5fe154c98/a4f9f1e8-30bc-3b04-a50f-256889a98473.roa Signing time: Mon 21 Sep 2026 13:00:12 +0000 ROA not before: Mon 21 Sep 2026 13:00:12 +0000 ROA not after: Sun 20 Dec 2026 14:00:12 +0000 asID: 32826 IP address blocks: 23.159.24.0/24 maxlen: 24 2602:fa53::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ef59e050-3e29-4293-bdf4-cfb5fe154c98/ef59e050-3e29-4293-bdf4-cfb5fe154c98.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ef59e050-3e29-4293-bdf4-cfb5fe154c98/ef59e050-3e29-4293-bdf4-cfb5fe154c98.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ef59e050-3e29-4293-bdf4-cfb5fe154c98.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3f:ad:3c:bd:c4:71:6b:d9:fd:9c:87:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef59e050-3e29-4293-bdf4-cfb5fe154c98 Validity Not Before: Sep 21 13:00:12 2026 GMT Not After : Dec 20 14:00:12 2026 GMT Subject: CN=6192241e-cd27-4c0d-b7a2-c71a924f550d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:ce:83:13:b7:7a:88:36:d0:f9:d1:73:d4:d2: 26:7e:8e:29:0d:b2:36:47:f9:a4:67:cb:ee:8c:e1: 26:b4:4e:80:c2:e6:5f:a5:70:b5:9c:42:1a:b8:04: e0:44:04:c3:92:9b:c5:42:41:f4:9b:ec:40:0f:a1: 72:6d:16:2d:3b:35:6b:4a:3b:04:0c:75:89:bc:94: fd:81:05:f3:57:0f:2f:17:4b:55:ca:21:d0:f1:00: a9:ff:fb:88:e8:9b:ab:8b:07:03:59:eb:76:1d:49: a0:f4:e1:3f:f4:75:c0:f6:47:4e:e0:c9:a4:ca:ed: 84:ee:b4:ec:11:8b:9b:f7:86:75:fa:59:7c:76:55: b5:0e:02:c2:61:9f:71:7c:a5:a4:b8:1f:ca:b8:0e: 2f:01:e4:a6:d0:83:99:d2:cd:ba:a3:b9:d2:d1:bf: 9d:ad:3d:d5:eb:60:bf:b9:02:66:f3:be:78:c9:23: 60:06:a5:be:d9:f7:55:d7:62:ad:52:d4:e1:38:48: 37:dc:90:53:41:d9:b2:a0:f4:41:59:da:60:45:cb: c2:0e:fa:24:16:db:be:21:42:66:c9:ba:c3:bb:44: e9:54:01:b8:bd:28:81:fd:82:10:37:03:e7:58:91: 5d:8a:0d:e6:15:37:a9:39:9c:9c:e5:4a:b2:e4:45: 9c:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:2D:25:A3:A5:A1:01:46:32:BC:18:BF:EB:9F:EE:44:1E:02:D1:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ef59e050-3e29-4293-bdf4-cfb5fe154c98/a4f9f1e8-30bc-3b04-a50f-256889a98473.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ef59e050-3e29-4293-bdf4-cfb5fe154c98/ef59e050-3e29-4293-bdf4-cfb5fe154c98.crl X509v3 Authority Key Identifier: keyid:F0:C6:BE:3A:D0:B4:B4:CC:2F:FD:4F:7D:21:E3:6E:32:91:DE:AA:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ef59e050-3e29-4293-bdf4-cfb5fe154c98.cer sbgp-ipAddrBlock: critical IPv4: 23.159.24.0/24 IPv6: 2602:fa53::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:8d:56:5a:6a:72:09:a0:34:17:45:df:6d:f2:c8:71:41:fc: 23:62:82:67:4d:d0:6f:76:f9:2d:0e:90:b9:56:2d:ff:c8:ae: 9c:f1:3c:4c:0c:dc:29:64:a4:d7:63:17:1f:18:eb:8b:83:ce: d0:f1:7b:74:aa:3f:57:8f:57:0c:7f:5e:41:1b:c2:28:54:b9: aa:0d:17:91:03:e8:c5:0a:46:3e:3d:97:73:4e:cc:a6:c9:e1: b7:21:ac:52:b1:c9:2b:41:a1:d2:ba:1e:5a:30:ff:a9:8f:45: eb:20:46:0d:58:73:97:90:7e:e4:5a:6c:c7:79:0a:f9:4b:f9: 19:3a:2e:1c:cf:97:90:27:2b:41:ce:b3:9c:ee:81:87:df:74: cf:61:13:48:5b:f0:b8:a9:08:63:f5:8e:5c:0f:3b:7e:60:79: b4:14:34:8e:f1:38:b1:5a:f2:e1:92:3e:a6:ee:51:42:83:29: 61:71:68:dc:a9:ce:29:dd:98:0d:78:9c:28:8c:fa:18:3b:82: 77:71:0e:e4:54:d1:f2:71:91:67:c3:6e:25:da:14:bc:f9:d7: 00:ef:d5:b4:d0:d9:74:47:cd:02:71:56:b4:2e:1a:26:a9:f0: 30:2a:e4:ff:9a:3b:f1:2c:e2:f3:21:9d:e0:99:c1:15:62:13: bd:9e:f3:84 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE8/rTy9xHFr2f2ch4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWY1OWUwNTAtM2UyOS00MjkzLWJkZjQtY2ZiNWZlMTU0 Yzk4MB4XDTI2MDkyMTEzMDAxMloXDTI2MTIyMDE0MDAxMlowLzEtMCsGA1UEAxMk NjE5MjI0MWUtY2QyNy00YzBkLWI3YTItYzcxYTkyNGY1NTBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAps6DE7d6iDbQ+dFz1NImfo4pDbI2R/mkZ8vu jOEmtE6AwuZfpXC1nEIauATgRATDkpvFQkH0m+xAD6FybRYtOzVrSjsEDHWJvJT9 gQXzVw8vF0tVyiHQ8QCp//uI6JuriwcDWet2HUmg9OE/9HXA9kdO4Mmkyu2E7rTs EYub94Z1+ll8dlW1DgLCYZ9xfKWkuB/KuA4vAeSm0IOZ0s26o7nS0b+drT3V62C/ uQJm8754ySNgBqW+2fdV12KtUtThOEg33JBTQdmyoPRBWdpgRcvCDvokFtu+IUJm ybrDu0TpVAG4vSiB/YIQNwPnWJFdig3mFTepOZyc5Uqy5EWcoQIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFNUtJaOloQFGMrwYv+uf7kQeAtFZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lZjU5 ZTA1MC0zZTI5LTQyOTMtYmRmNC1jZmI1ZmUxNTRjOTgvYTRmOWYxZTgtMzBiYy0z YjA0LWE1MGYtMjU2ODg5YTk4NDczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZWY1OWUwNTAtM2UyOS00MjkzLWJk ZjQtY2ZiNWZlMTU0Yzk4L2VmNTllMDUwLTNlMjktNDI5My1iZGY0LWNmYjVmZTE1 NGM5OC5jcmwwHwYDVR0jBBgwFoAU8Ma+OtC0tMwv/U99IeNuMpHeqvMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lZjU5ZTA1MC0zZTI5LTQyOTMtYmRmNC1jZmI1 ZmUxNTRjOTguY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF58YMA4E AgACMAgDBgAmAvpTADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBIjVZaanIJoDQXRd9t8shxQfwjYoJnTdBv dvktDpC5Vi3/yK6c8TxMDNwpZKTXYxcfGOuLg87Q8Xt0qj9Xj1cMf15BG8IoVLmq DReRA+jFCkY+PZdzTsymyeG3IaxSsckrQaHSuh5aMP+pj0XrIEYNWHOXkH7kWmzH eQr5S/kZOi4cz5eQJytBzrOc7oGH33TPYRNIW/C4qQhj9Y5cDzt+YHm0FDSO8Tix WvLhkj6m7lFCgylhcWjcqc4p3ZgNeJwojPoYO4J3cQ7kVNHycZFnw24l2hS8+dcA 79W00Nl0R80CcVa0LhomqfAwKuT/mjvxLOLzIZ3gmcEVYhO9nvOE -----END CERTIFICATE-----Generated at Mon Oct 12 16:47:39 2026 by rpki-client