$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de57fd18-3c65-43a3-96c1-a6fe61028c72/69d68907-27fa-324f-9d10-081d4279bbc0.roa File: 69d68907-27fa-324f-9d10-081d4279bbc0.roa (raw, json) Hash identifier: 5Mh3G9ll/avOVfKDY67WZ01tDzQVHiZdzzdek/Ik5jg= Subject key identifier: B0:60:29:15:F8:5B:C3:56:7D:46:3B:18:E6:D8:03:A0:B5:C0:CE:DE Certificate issuer: /CN=de57fd18-3c65-43a3-96c1-a6fe61028c72 Certificate serial: 010D0C9F4328584EBDDC59510FCE1CD4A531FC80 Authority key identifier: C8:BC:1B:F5:2F:52:E9:4F:95:CB:7A:FC:18:0C:02:64:40:4C:82:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de57fd18-3c65-43a3-96c1-a6fe61028c72.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de57fd18-3c65-43a3-96c1-a6fe61028c72/69d68907-27fa-324f-9d10-081d4279bbc0.roa Signing time: Thu 06 Aug 2026 01:00:12 +0000 ROA not before: Thu 06 Aug 2026 01:00:12 +0000 ROA not after: Wed 04 Nov 2026 02:00:12 +0000 asID: 400304 IP address blocks: 23.147.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de57fd18-3c65-43a3-96c1-a6fe61028c72/de57fd18-3c65-43a3-96c1-a6fe61028c72.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de57fd18-3c65-43a3-96c1-a6fe61028c72/de57fd18-3c65-43a3-96c1-a6fe61028c72.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de57fd18-3c65-43a3-96c1-a6fe61028c72.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:bd:dc:59:51:0f:ce:1c:d4:a5:31:fc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de57fd18-3c65-43a3-96c1-a6fe61028c72 Validity Not Before: Aug 6 01:00:12 2026 GMT Not After : Nov 4 02:00:12 2026 GMT Subject: CN=de02ddae-ecd8-4ab5-8a3f-23d4097953ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:10:f6:4d:0f:f5:d6:23:cf:f9:20:d0:fd:7e: 2a:87:69:0c:67:62:44:1c:d1:ac:6c:ae:41:39:ab: bd:63:e4:88:0a:c5:7d:37:94:8f:b4:bc:93:b4:e3: f8:ba:73:4d:7f:37:ec:b9:08:ad:91:f9:d1:fe:dd: 05:a7:a0:e1:81:43:85:e0:14:46:c5:ef:8b:84:bf: b5:d6:b0:3b:82:26:16:2d:eb:18:f5:b9:bd:e9:8c: 09:d8:f9:40:fa:96:0c:d2:88:e9:6e:23:5e:17:55: 16:d2:91:08:64:74:25:48:05:4c:32:25:da:67:da: c5:90:ec:41:ab:a8:63:86:20:42:a9:d3:9a:d8:65: 98:9e:4c:f0:91:e8:ca:ab:b6:0d:6f:ab:14:ea:bb: 58:dc:40:39:85:7c:57:c3:69:d6:bf:e7:65:03:25: 1d:40:c5:12:ef:3e:88:2d:96:30:6b:bc:05:93:20: ee:02:fe:8d:e7:a9:76:b1:66:34:06:87:58:3f:ea: df:98:55:57:85:81:81:a7:1f:6d:1b:9f:2b:4e:e6: 44:67:40:ba:37:be:88:9e:28:e6:9c:f1:2c:e4:31: 69:63:63:45:bb:3a:6f:11:24:11:e4:ac:26:e3:a6: 7a:c9:31:a5:ae:93:f9:5f:ed:cc:6d:8b:f0:5c:19: 3f:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:60:29:15:F8:5B:C3:56:7D:46:3B:18:E6:D8:03:A0:B5:C0:CE:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de57fd18-3c65-43a3-96c1-a6fe61028c72/69d68907-27fa-324f-9d10-081d4279bbc0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de57fd18-3c65-43a3-96c1-a6fe61028c72/de57fd18-3c65-43a3-96c1-a6fe61028c72.crl X509v3 Authority Key Identifier: keyid:C8:BC:1B:F5:2F:52:E9:4F:95:CB:7A:FC:18:0C:02:64:40:4C:82:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de57fd18-3c65-43a3-96c1-a6fe61028c72.cer sbgp-ipAddrBlock: critical IPv4: 23.147.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:58:0b:b5:22:45:9a:cf:0a:d9:7c:a0:14:e2:9f:2f:37:9b: 5b:65:4e:c7:6b:39:85:0f:ad:62:b5:14:d6:27:13:a2:10:2e: a8:23:f8:b4:f4:6b:55:99:d3:63:c9:39:a8:ca:1d:db:2d:6b: 5c:26:17:52:1e:06:de:57:2a:31:33:a6:87:9f:25:23:cd:f9: b1:80:be:6e:96:7a:13:61:ac:1b:e6:75:16:bf:0b:9d:81:40: 33:19:d3:8b:c6:3d:72:03:b2:b6:60:34:7a:bb:13:5a:40:72: c5:81:e2:9a:22:76:b4:ce:82:47:8a:0f:9a:8b:4b:d8:86:6c: c5:60:70:5b:41:5b:8c:16:13:58:ac:fa:02:9e:b3:26:d0:fb: 52:67:b6:d0:b9:da:ca:42:14:9f:3f:61:3a:d9:39:b4:71:fc: 7b:ac:3a:41:b4:86:e4:1b:96:ef:c8:d2:59:ce:18:99:4c:5e: 59:a7:0d:a6:89:74:37:63:67:49:0f:8a:bb:7d:d3:fa:0b:64: 38:48:e1:3f:6d:7b:51:d2:4c:4d:31:76:eb:20:77:95:a3:cc: ca:5c:4c:70:17:35:c3:25:25:74:ef:81:48:a0:44:2c:e3:8f: 0f:60:43:33:54:01:77:76:cf:93:6f:88:6b:b5:3f:be:17:97: 2c:d3:9e:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE693FlRD84c1KUx/IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGU1N2ZkMTgtM2M2NS00M2EzLTk2YzEtYTZmZTYxMDI4 YzcyMB4XDTI2MDgwNjAxMDAxMloXDTI2MTEwNDAyMDAxMlowLzEtMCsGA1UEAxMk ZGUwMmRkYWUtZWNkOC00YWI1LThhM2YtMjNkNDA5Nzk1M2FiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxhD2TQ/11iPP+SDQ/X4qh2kMZ2JEHNGsbK5B Oau9Y+SICsV9N5SPtLyTtOP4unNNfzfsuQitkfnR/t0Fp6DhgUOF4BRGxe+LhL+1 1rA7giYWLesY9bm96YwJ2PlA+pYM0ojpbiNeF1UW0pEIZHQlSAVMMiXaZ9rFkOxB q6hjhiBCqdOa2GWYnkzwkejKq7YNb6sU6rtY3EA5hXxXw2nWv+dlAyUdQMUS7z6I LZYwa7wFkyDuAv6N56l2sWY0BodYP+rfmFVXhYGBpx9tG58rTuZEZ0C6N76Inijm nPEs5DFpY2NFuzpvESQR5Kwm46Z6yTGlrpP5X+3MbYvwXBk/KwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLBgKRX4W8NWfUY7GObYA6C1wM7eMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9kZTU3 ZmQxOC0zYzY1LTQzYTMtOTZjMS1hNmZlNjEwMjhjNzIvNjlkNjg5MDctMjdmYS0z MjRmLTlkMTAtMDgxZDQyNzliYmMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZGU1N2ZkMTgtM2M2NS00M2EzLTk2 YzEtYTZmZTYxMDI4YzcyL2RlNTdmZDE4LTNjNjUtNDNhMy05NmMxLWE2ZmU2MTAy OGM3Mi5jcmwwHwYDVR0jBBgwFoAUyLwb9S9S6U+Vy3r8GAwCZEBMgj0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9kZTU3ZmQxOC0zYzY1LTQzYTMtOTZjMS1hNmZl NjEwMjhjNzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5OZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHNYC7UiRZrPCtl8oBTiny83m1tlTsdrOYUPrWK1FNYnE6IQLqgj+LT0 a1WZ02PJOajKHdsta1wmF1IeBt5XKjEzpoefJSPN+bGAvm6WehNhrBvmdRa/C52B QDMZ04vGPXIDsrZgNHq7E1pAcsWB4poidrTOgkeKD5qLS9iGbMVgcFtBW4wWE1is +gKesybQ+1JnttC52spCFJ8/YTrZObRx/HusOkG0huQblu/I0lnOGJlMXlmnDaaJ dDdjZ0kPirt90/oLZDhI4T9te1HSTE0xdusgd5WjzMpcTHAXNcMlJXTvgUigRCzj jw9gQzNUAXd2z5NviGu1P74XlyzTnjg= -----END CERTIFICATE-----Generated at Thu Sep 10 19:27:28 2026 by rpki-client