$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4f9b83fa-37aa-4ca8-b07c-5d7a613af09b/e88d0bb7-c4d5-3664-b8f9-37af1a189d77.roa File: e88d0bb7-c4d5-3664-b8f9-37af1a189d77.roa (raw, json) Hash identifier: nO9HFQYcLnYaWe1+Nr3HphpLLuzfyPbNlq4oBe4tgNA= Subject key identifier: D1:F7:8D:47:68:4E:99:A0:F9:3D:87:E8:B7:D6:75:29:93:18:9A:0D Certificate issuer: /CN=4f9b83fa-37aa-4ca8-b07c-5d7a613af09b Certificate serial: 010D0C9F4328584F4986D27D730777154D6399E0 Authority key identifier: 96:E7:5C:DB:BD:E9:BE:F2:79:CF:D5:33:3D:69:87:EE:15:7B:01:FA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4f9b83fa-37aa-4ca8-b07c-5d7a613af09b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4f9b83fa-37aa-4ca8-b07c-5d7a613af09b/e88d0bb7-c4d5-3664-b8f9-37af1a189d77.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 8095 IP address blocks: 23.154.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4f9b83fa-37aa-4ca8-b07c-5d7a613af09b/4f9b83fa-37aa-4ca8-b07c-5d7a613af09b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4f9b83fa-37aa-4ca8-b07c-5d7a613af09b/4f9b83fa-37aa-4ca8-b07c-5d7a613af09b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4f9b83fa-37aa-4ca8-b07c-5d7a613af09b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:86:d2:7d:73:07:77:15:4d:63:99:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f9b83fa-37aa-4ca8-b07c-5d7a613af09b Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=7a1dcb2a-a4bc-4145-b402-8137eb70be75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:fd:16:bd:31:37:e6:03:c6:58:91:f8:8f:67: ad:82:c0:5d:c8:ea:30:f9:5d:7f:9a:94:8c:a1:ef: e0:c5:18:ea:b7:4f:e5:18:e4:28:0c:0e:b8:69:c5: f6:5c:39:30:4f:d9:12:27:bd:74:d6:37:4e:00:ab: 1a:18:fc:76:44:09:c3:25:73:5a:4f:50:06:d9:15: ba:c6:ea:99:b5:a2:5f:80:d8:0f:85:41:e8:a2:57: a6:43:30:4e:7b:7c:75:c5:ee:7c:b9:92:a8:15:bd: ff:72:50:32:e3:48:10:6f:85:46:d9:41:2e:26:15: 1f:58:2d:8b:6c:01:47:ca:08:9a:6e:ef:4d:e6:93: 48:bf:5f:32:38:cb:59:bc:b8:63:ab:12:83:99:86: 19:11:a3:b8:8b:ab:bd:51:75:29:ae:b0:73:2c:a8: 30:67:73:10:ec:e6:79:e8:f3:c8:0a:ae:bf:8e:d7: 95:27:2e:f8:fb:83:43:48:99:39:cf:18:42:17:ef: ac:5c:98:12:29:21:f2:83:4e:0d:35:9a:15:0e:58: ac:be:8a:29:3a:51:8a:bb:b3:21:07:8a:61:05:3a: 70:ce:95:2e:9d:85:6d:dd:3b:2a:8c:ad:8f:71:23: a3:10:78:54:85:4f:10:5b:3d:1a:23:6b:50:4f:6c: 03:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:F7:8D:47:68:4E:99:A0:F9:3D:87:E8:B7:D6:75:29:93:18:9A:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4f9b83fa-37aa-4ca8-b07c-5d7a613af09b/e88d0bb7-c4d5-3664-b8f9-37af1a189d77.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4f9b83fa-37aa-4ca8-b07c-5d7a613af09b/4f9b83fa-37aa-4ca8-b07c-5d7a613af09b.crl X509v3 Authority Key Identifier: keyid:96:E7:5C:DB:BD:E9:BE:F2:79:CF:D5:33:3D:69:87:EE:15:7B:01:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4f9b83fa-37aa-4ca8-b07c-5d7a613af09b.cer sbgp-ipAddrBlock: critical IPv4: 23.154.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:f8:ea:d0:84:ab:05:ce:fb:32:34:62:bb:d5:38:ef:55:de: c1:d4:a4:95:77:27:db:e6:6a:30:34:58:36:a6:84:ba:de:45: 6c:1d:54:19:17:f9:8f:94:76:3c:9f:0a:0e:af:13:63:9c:d4: c5:1e:cf:2e:2c:34:e3:29:80:2f:12:72:b4:3c:02:34:c8:4b: 44:37:40:4c:a6:02:7c:fb:91:f8:90:a0:9f:c4:ba:09:67:47: f3:50:37:73:e5:6d:63:2b:23:5b:41:35:f7:dc:80:7d:eb:2e: 80:71:28:bd:42:24:a2:23:97:eb:7b:82:22:7b:b7:ad:43:e9: 8f:b0:27:d8:1d:76:6e:9c:d5:bd:1e:93:1a:66:b4:9c:24:7d: 20:8c:37:dd:2f:99:5b:dd:39:39:fa:01:b2:e9:a6:35:7f:e8: dd:7a:52:d4:0a:6b:69:2f:90:05:47:2f:ed:0d:cd:23:1d:09: bf:67:ba:b9:1e:0a:c0:cc:ce:40:62:9e:dd:35:fb:84:b5:29: 2a:43:06:2c:92:ab:6b:7a:83:00:b0:7b:1d:3e:1b:fa:c0:58: 88:f4:0a:1b:d9:8b:4d:41:ba:ac:d9:4c:bb:17:65:37:8c:97: 86:6c:01:fc:e8:58:e1:bd:22:d4:00:01:64:af:38:0c:98:58: 3e:80:03:95 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JhtJ9cwd3FU1jmeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGY5YjgzZmEtMzdhYS00Y2E4LWIwN2MtNWQ3YTYxM2Fm MDliMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk N2ExZGNiMmEtYTRiYy00MTQ1LWI0MDItODEzN2ViNzBiZTc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqv0WvTE35gPGWJH4j2etgsBdyOow+V1/mpSM oe/gxRjqt0/lGOQoDA64acX2XDkwT9kSJ7101jdOAKsaGPx2RAnDJXNaT1AG2RW6 xuqZtaJfgNgPhUHoolemQzBOe3x1xe58uZKoFb3/clAy40gQb4VG2UEuJhUfWC2L bAFHygiabu9N5pNIv18yOMtZvLhjqxKDmYYZEaO4i6u9UXUprrBzLKgwZ3MQ7OZ5 6PPICq6/jteVJy74+4NDSJk5zxhCF++sXJgSKSHyg04NNZoVDlisvoopOlGKu7Mh B4phBTpwzpUunYVt3TsqjK2PcSOjEHhUhU8QWz0aI2tQT2wDfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNH3jUdoTpmg+T2H6LfWdSmTGJoNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80Zjli ODNmYS0zN2FhLTRjYTgtYjA3Yy01ZDdhNjEzYWYwOWIvZTg4ZDBiYjctYzRkNS0z NjY0LWI4ZjktMzdhZjFhMTg5ZDc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNGY5YjgzZmEtMzdhYS00Y2E4LWIw N2MtNWQ3YTYxM2FmMDliLzRmOWI4M2ZhLTM3YWEtNGNhOC1iMDdjLTVkN2E2MTNh ZjA5Yi5jcmwwHwYDVR0jBBgwFoAUludc273pvvJ5z9UzPWmH7hV7AfowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80ZjliODNmYS0zN2FhLTRjYTgtYjA3Yy01ZDdh NjEzYWYwOWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5qYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACr46tCEqwXO+zI0YrvVOO9V3sHUpJV3J9vmajA0WDamhLreRWwdVBkX +Y+UdjyfCg6vE2Oc1MUezy4sNOMpgC8ScrQ8AjTIS0Q3QEymAnz7kfiQoJ/Eugln R/NQN3PlbWMrI1tBNffcgH3rLoBxKL1CJKIjl+t7giJ7t61D6Y+wJ9gddm6c1b0e kxpmtJwkfSCMN90vmVvdOTn6AbLppjV/6N16UtQKa2kvkAVHL+0NzSMdCb9nurke CsDMzkBint01+4S1KSpDBiySq2t6gwCwex0+G/rAWIj0ChvZi01BuqzZTLsXZTeM l4ZsAfzoWOG9ItQAAWSvOAyYWD6AA5U= -----END CERTIFICATE-----Generated at Fri Sep 25 06:42:31 2026 by rpki-client