$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6528c9ac-3735-430d-99f2-7ac01944d688/db729622-f239-3542-a3b9-b05be8216524.roa File: db729622-f239-3542-a3b9-b05be8216524.roa (raw, json) Hash identifier: SxQ+iBc3RVCcIC53LGKH3JtxL8y5Dc22nSAjfDjA2g8= Subject key identifier: CB:E3:12:1D:83:F5:88:30:91:26:20:4D:22:F8:0E:83:92:BE:E3:DC Certificate issuer: /CN=6528c9ac-3735-430d-99f2-7ac01944d688 Certificate serial: 010D0C9F4328584F15CCF0804E3EABD66E1D6140 Authority key identifier: 64:79:50:96:C9:A4:0D:34:86:46:BD:1D:64:20:0D:DB:7C:9D:BA:F8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6528c9ac-3735-430d-99f2-7ac01944d688.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6528c9ac-3735-430d-99f2-7ac01944d688/db729622-f239-3542-a3b9-b05be8216524.roa Signing time: Sun 06 Sep 2026 13:00:12 +0000 ROA not before: Sun 06 Sep 2026 13:00:12 +0000 ROA not after: Sat 05 Dec 2026 14:00:12 +0000 asID: 54696 IP address blocks: 23.148.153.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6528c9ac-3735-430d-99f2-7ac01944d688/6528c9ac-3735-430d-99f2-7ac01944d688.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6528c9ac-3735-430d-99f2-7ac01944d688/6528c9ac-3735-430d-99f2-7ac01944d688.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6528c9ac-3735-430d-99f2-7ac01944d688.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Oct 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:15:cc:f0:80:4e:3e:ab:d6:6e:1d:61:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6528c9ac-3735-430d-99f2-7ac01944d688 Validity Not Before: Sep 6 13:00:12 2026 GMT Not After : Dec 5 14:00:12 2026 GMT Subject: CN=17f1d942-a04b-4599-a59a-2a4718268cba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:86:29:f4:76:c7:13:69:80:85:26:0a:68:a7: 6a:17:66:98:a5:ba:bd:51:f1:c7:d6:d2:ac:1f:78: d8:6a:ab:c0:b9:34:69:48:c2:34:be:db:c4:9f:e0: 15:df:e5:ec:8c:6c:1f:7c:ed:d6:73:6d:af:cd:26: c8:cb:74:e0:9d:dd:0c:30:3b:c6:37:d2:83:39:bc: af:c9:51:12:42:14:56:e2:f3:9e:98:d6:f0:e6:89: f9:9d:fa:9d:45:24:5c:cb:51:68:43:a0:1d:c0:57: 75:5a:bd:b9:2d:78:df:ba:1f:db:25:fc:63:80:ad: 1d:bd:00:31:24:7d:89:94:32:45:13:f3:bf:4c:df: d3:d2:50:f2:b8:bc:61:48:bc:f0:1e:78:61:c1:9b: f0:4c:c8:8d:d2:0e:f8:19:37:81:dc:58:5b:7a:0f: cc:1e:25:ce:82:31:06:21:f4:45:27:8b:5b:6d:55: 4b:a1:ed:d0:8a:38:6a:e3:f7:00:76:fd:6f:c9:ce: cc:24:d8:d7:f4:b2:ce:63:90:d5:46:94:5f:4d:80: f2:fe:08:3a:8b:47:34:72:d7:eb:71:82:ef:15:f0: 3f:09:f7:36:da:b6:bc:ff:52:09:71:73:52:68:e5: 08:b9:21:0f:6b:b5:b4:4e:f2:cc:e5:43:ca:ac:d4: 07:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:E3:12:1D:83:F5:88:30:91:26:20:4D:22:F8:0E:83:92:BE:E3:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6528c9ac-3735-430d-99f2-7ac01944d688/db729622-f239-3542-a3b9-b05be8216524.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6528c9ac-3735-430d-99f2-7ac01944d688/6528c9ac-3735-430d-99f2-7ac01944d688.crl X509v3 Authority Key Identifier: keyid:64:79:50:96:C9:A4:0D:34:86:46:BD:1D:64:20:0D:DB:7C:9D:BA:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6528c9ac-3735-430d-99f2-7ac01944d688.cer sbgp-ipAddrBlock: critical IPv4: 23.148.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:71:e1:53:7e:eb:6e:64:19:3f:f5:72:ef:11:1b:0d:98:a5: 60:da:de:8d:60:d1:2f:68:13:86:75:fc:a3:d8:79:aa:86:ad: d1:3f:85:cc:81:f3:d4:56:80:02:14:62:3d:52:35:fa:96:cc: 97:66:1e:c8:eb:b6:c7:a2:72:89:aa:9d:a4:8a:a2:9c:ab:07: c1:fd:09:b8:59:82:e2:03:98:77:9c:9c:f4:d7:71:c3:bf:6b: 59:33:fc:b4:d0:60:71:b3:fd:f0:a1:95:8f:fd:af:01:ed:da: 6b:5c:49:3e:0f:46:1d:3f:87:c6:fc:61:3f:a8:80:fb:57:33: fb:9a:80:d9:59:ef:4c:32:b4:de:8f:6a:7b:fe:6c:c5:53:ff: 8b:1b:b8:ca:ed:43:08:34:72:8d:5c:5f:70:81:d2:fe:7f:ca: 62:26:c7:09:05:c7:f0:66:1f:7e:17:b1:a7:ea:a9:e2:f9:50: f9:8c:bf:af:69:1a:9a:de:2a:ac:2d:f0:b4:e8:a1:4d:e7:85: 2e:0a:28:09:5d:73:ab:e6:df:3e:9d:02:8f:e3:4a:88:1f:a0: b2:2b:b0:56:f2:88:fc:8f:61:81:dc:ac:f7:78:64:b5:91:1d: da:c6:c3:ca:b7:5c:a6:13:88:96:77:a3:1d:bd:dc:4d:a8:3c: c4:02:07:75 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8VzPCATj6r1m4dYUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjUyOGM5YWMtMzczNS00MzBkLTk5ZjItN2FjMDE5NDRk Njg4MB4XDTI2MDkwNjEzMDAxMloXDTI2MTIwNTE0MDAxMlowLzEtMCsGA1UEAxMk MTdmMWQ5NDItYTA0Yi00NTk5LWE1OWEtMmE0NzE4MjY4Y2JhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAioYp9HbHE2mAhSYKaKdqF2aYpbq9UfHH1tKs H3jYaqvAuTRpSMI0vtvEn+AV3+XsjGwffO3Wc22vzSbIy3Tgnd0MMDvGN9KDObyv yVESQhRW4vOemNbw5on5nfqdRSRcy1FoQ6AdwFd1Wr25LXjfuh/bJfxjgK0dvQAx JH2JlDJFE/O/TN/T0lDyuLxhSLzwHnhhwZvwTMiN0g74GTeB3Fhbeg/MHiXOgjEG IfRFJ4tbbVVLoe3Qijhq4/cAdv1vyc7MJNjX9LLOY5DVRpRfTYDy/gg6i0c0ctfr cYLvFfA/Cfc22ra8/1IJcXNSaOUIuSEPa7W0TvLM5UPKrNQHgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMvjEh2D9YgwkSYgTSL4DoOSvuPcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82NTI4 YzlhYy0zNzM1LTQzMGQtOTlmMi03YWMwMTk0NGQ2ODgvZGI3Mjk2MjItZjIzOS0z NTQyLWEzYjktYjA1YmU4MjE2NTI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjUyOGM5YWMtMzczNS00MzBkLTk5 ZjItN2FjMDE5NDRkNjg4LzY1MjhjOWFjLTM3MzUtNDMwZC05OWYyLTdhYzAxOTQ0 ZDY4OC5jcmwwHwYDVR0jBBgwFoAUZHlQlsmkDTSGRr0dZCAN23yduvgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82NTI4YzlhYy0zNzM1LTQzMGQtOTlmMi03YWMw MTk0NGQ2ODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5SZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAARx4VN+625kGT/1cu8RGw2YpWDa3o1g0S9oE4Z1/KPYeaqGrdE/hcyB 89RWgAIUYj1SNfqWzJdmHsjrtseicomqnaSKopyrB8H9CbhZguIDmHecnPTXccO/ a1kz/LTQYHGz/fChlY/9rwHt2mtcST4PRh0/h8b8YT+ogPtXM/uagNlZ70wytN6P anv+bMVT/4sbuMrtQwg0co1cX3CB0v5/ymImxwkFx/BmH34XsafqqeL5UPmMv69p GpreKqwt8LTooU3nhS4KKAldc6vm3z6dAo/jSogfoLIrsFbyiPyPYYHcrPd4ZLWR HdrGw8q3XKYTiJZ3ox293E2oPMQCB3U= -----END CERTIFICATE-----Generated at Sat Oct 10 18:00:43 2026 by rpki-client