$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9faf7a12-0176-44f9-9938-7bbccac3d238/37c64a1b-1bb8-3097-ac1e-2015293a739b.roa File: 37c64a1b-1bb8-3097-ac1e-2015293a739b.roa (raw, json) Hash identifier: /pbO1/C9ylR1B0JDV5Vjh5SSdnRdeZwKVSJcO0WKJeU= Subject key identifier: 18:31:03:85:80:A3:A6:42:11:5C:E1:8A:A6:39:A8:60:87:30:28:78 Certificate issuer: /CN=9faf7a12-0176-44f9-9938-7bbccac3d238 Certificate serial: 010D0C9F4328584EF2E0B547387A97E383B12680 Authority key identifier: 27:F5:34:9F:8C:B1:FD:33:07:55:93:76:CC:BC:45:98:C1:2E:B5:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9faf7a12-0176-44f9-9938-7bbccac3d238.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9faf7a12-0176-44f9-9938-7bbccac3d238/37c64a1b-1bb8-3097-ac1e-2015293a739b.roa Signing time: Tue 25 Aug 2026 00:46:54 +0000 ROA not before: Tue 25 Aug 2026 00:46:54 +0000 ROA not after: Mon 23 Nov 2026 01:46:54 +0000 asID: 21658 IP address blocks: 23.152.40.0/24 maxlen: 24 23.152.41.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9faf7a12-0176-44f9-9938-7bbccac3d238/9faf7a12-0176-44f9-9938-7bbccac3d238.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9faf7a12-0176-44f9-9938-7bbccac3d238/9faf7a12-0176-44f9-9938-7bbccac3d238.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9faf7a12-0176-44f9-9938-7bbccac3d238.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f2:e0:b5:47:38:7a:97:e3:83:b1:26:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9faf7a12-0176-44f9-9938-7bbccac3d238 Validity Not Before: Aug 25 00:46:54 2026 GMT Not After : Nov 23 01:46:54 2026 GMT Subject: CN=c1a2f7dc-bf08-4fbb-8963-0af55c68cfcf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:1e:f7:19:7c:eb:e9:8d:40:ff:94:8d:09:8e: 55:47:25:87:78:20:49:07:3c:3e:51:e3:13:74:63: 7e:ff:fb:6f:bd:d7:42:54:2b:95:e6:de:41:84:75: 70:86:b6:c3:44:39:4e:44:e6:5a:00:86:eb:55:ca: e0:62:d9:48:8b:ae:c6:53:59:19:0b:04:4d:dd:29: 25:e6:7a:52:d9:ee:cc:2b:cc:19:e1:c2:76:51:6f: f4:d4:fe:c7:7c:04:bd:3f:6c:a3:38:d8:01:aa:3f: a0:43:6b:9d:c6:2e:ae:a8:1c:2e:59:60:46:1a:46: 43:f3:22:55:ab:93:f1:24:3d:7a:e1:65:82:85:a1: 59:b1:a8:75:5a:2f:d8:ae:ed:2b:01:70:ce:47:2b: 79:e5:30:bc:59:84:7e:4f:ef:82:55:ca:2c:96:bf: 35:c4:b9:27:20:be:51:80:b1:43:3c:b2:af:b7:bd: 78:9e:03:ee:15:8d:b6:86:6c:64:49:92:f3:df:25: 6a:86:59:c5:69:a1:33:90:6b:d8:d4:0d:e3:1d:2b: 61:4f:b4:13:7c:e7:00:ff:1c:3a:52:ba:51:40:33: 55:73:c8:98:8c:d1:af:ca:fa:f1:09:0a:fc:24:d8: f1:0b:2f:6d:e3:aa:de:8f:a3:d6:65:54:17:22:f5: 32:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:31:03:85:80:A3:A6:42:11:5C:E1:8A:A6:39:A8:60:87:30:28:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9faf7a12-0176-44f9-9938-7bbccac3d238/37c64a1b-1bb8-3097-ac1e-2015293a739b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9faf7a12-0176-44f9-9938-7bbccac3d238/9faf7a12-0176-44f9-9938-7bbccac3d238.crl X509v3 Authority Key Identifier: keyid:27:F5:34:9F:8C:B1:FD:33:07:55:93:76:CC:BC:45:98:C1:2E:B5:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9faf7a12-0176-44f9-9938-7bbccac3d238.cer sbgp-ipAddrBlock: critical IPv4: 23.152.40.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:38:0c:e7:52:d8:c5:88:fb:3b:47:6a:b4:82:7d:ae:99:c7: 6a:b2:2b:fd:c7:7b:4b:ab:2a:13:77:28:b2:22:2a:5d:e6:1c: 67:3e:97:9e:7e:b0:0f:06:b6:13:d7:23:91:a8:a8:0c:28:d3: 5f:47:77:ae:d3:6b:b9:de:aa:0c:fa:c4:7c:ce:10:a2:69:cb: d6:56:69:cd:b9:96:93:f3:39:58:01:a5:06:7e:78:96:a9:79: 6b:07:ef:03:72:e7:06:d7:94:60:a5:6f:58:c6:d1:b1:a7:69: d7:35:34:54:5c:94:6d:b8:06:97:ba:66:58:07:81:c9:91:fe: 19:89:fb:3d:54:c1:21:ab:b6:cd:74:e4:be:6e:4d:3f:6d:f0: 0b:b4:86:8c:0c:f2:72:89:77:15:2d:f6:b5:b5:4a:69:01:4e: 89:9d:f1:8a:4e:dc:3a:78:26:a3:ac:19:81:bc:62:9c:dd:df: 0c:d4:e0:11:bb:be:ab:e7:98:40:01:b7:da:5c:27:f3:83:f9: b2:74:83:8a:b2:d3:f6:ea:f4:44:79:a4:79:40:1c:a7:9f:b4: 1e:6b:9c:67:2e:71:1b:d7:41:17:5b:eb:36:d5:82:a0:82:3f: e4:51:b6:c0:5b:ff:8a:b0:39:25:e9:97:21:41:74:69:1e:95: 3d:44:f9:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7y4LVHOHqX44OxJoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWZhZjdhMTItMDE3Ni00NGY5LTk5MzgtN2JiY2NhYzNk MjM4MB4XDTI2MDgyNTAwNDY1NFoXDTI2MTEyMzAxNDY1NFowLzEtMCsGA1UEAxMk YzFhMmY3ZGMtYmYwOC00ZmJiLTg5NjMtMGFmNTVjNjhjZmNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnx73GXzr6Y1A/5SNCY5VRyWHeCBJBzw+UeMT dGN+//tvvddCVCuV5t5BhHVwhrbDRDlOROZaAIbrVcrgYtlIi67GU1kZCwRN3Skl 5npS2e7MK8wZ4cJ2UW/01P7HfAS9P2yjONgBqj+gQ2udxi6uqBwuWWBGGkZD8yJV q5PxJD164WWChaFZsah1Wi/Yru0rAXDORyt55TC8WYR+T++CVcoslr81xLknIL5R gLFDPLKvt714ngPuFY22hmxkSZLz3yVqhlnFaaEzkGvY1A3jHSthT7QTfOcA/xw6 UrpRQDNVc8iYjNGvyvrxCQr8JNjxCy9t46rej6PWZVQXIvUyDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBgxA4WAo6ZCEVzhiqY5qGCHMCh4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85ZmFm N2ExMi0wMTc2LTQ0ZjktOTkzOC03YmJjY2FjM2QyMzgvMzdjNjRhMWItMWJiOC0z MDk3LWFjMWUtMjAxNTI5M2E3MzliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOWZhZjdhMTItMDE3Ni00NGY5LTk5 MzgtN2JiY2NhYzNkMjM4LzlmYWY3YTEyLTAxNzYtNDRmOS05OTM4LTdiYmNjYWMz ZDIzOC5jcmwwHwYDVR0jBBgwFoAUJ/U0n4yx/TMHVZN2zLxFmMEutRAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85ZmFmN2ExMi0wMTc2LTQ0ZjktOTkzOC03YmJj Y2FjM2QyMzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBF5goMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKA4DOdS2MWI+ztHarSCfa6Zx2qyK/3He0urKhN3KLIiKl3mHGc+l55+ sA8GthPXI5GoqAwo019Hd67Ta7neqgz6xHzOEKJpy9ZWac25lpPzOVgBpQZ+eJap eWsH7wNy5wbXlGClb1jG0bGnadc1NFRclG24Bpe6ZlgHgcmR/hmJ+z1UwSGrts10 5L5uTT9t8Au0howM8nKJdxUt9rW1SmkBTomd8YpO3Dp4JqOsGYG8Ypzd3wzU4BG7 vqvnmEABt9pcJ/OD+bJ0g4qy0/bq9ER5pHlAHKeftB5rnGcucRvXQRdb6zbVgqCC P+RRtsBb/4qwOSXplyFBdGkelT1E+UM= -----END CERTIFICATE-----Generated at Sun Sep 13 12:33:10 2026 by rpki-client