$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5a791677-2f6b-4828-a754-1d16b76a8a68/9e84ce3e-8c53-369f-a42e-90fce0e4a548.roa File: 9e84ce3e-8c53-369f-a42e-90fce0e4a548.roa (raw, json) Hash identifier: x00CRjTY1Xk22uobe02GNmWCl8qd6rcqtvw0vEP1vFk= Subject key identifier: 11:71:BF:FF:10:CE:60:06:35:70:63:E2:0D:71:AD:83:C3:52:95:E1 Certificate issuer: /CN=5a791677-2f6b-4828-a754-1d16b76a8a68 Certificate serial: 010D0C9F4328584F4972C1538B8DFDA9246DBB40 Authority key identifier: 02:D8:E5:C8:93:A4:F8:02:B6:34:D9:B5:1F:8F:41:55:BB:6A:99:46 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5a791677-2f6b-4828-a754-1d16b76a8a68.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5a791677-2f6b-4828-a754-1d16b76a8a68/9e84ce3e-8c53-369f-a42e-90fce0e4a548.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 399861 IP address blocks: 23.131.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5a791677-2f6b-4828-a754-1d16b76a8a68/5a791677-2f6b-4828-a754-1d16b76a8a68.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5a791677-2f6b-4828-a754-1d16b76a8a68/5a791677-2f6b-4828-a754-1d16b76a8a68.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5a791677-2f6b-4828-a754-1d16b76a8a68.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Oct 2026 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:72:c1:53:8b:8d:fd:a9:24:6d:bb:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a791677-2f6b-4828-a754-1d16b76a8a68 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=49eecec3-9165-489c-9134-08770bc3e531 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:66:76:ba:3b:32:d5:39:c6:ce:25:2b:72:d6: 45:58:a7:44:98:d6:ba:59:ea:9d:c8:8e:fa:63:84: 2d:7e:f4:25:76:95:83:05:ac:24:e6:e4:8b:87:19: 65:9a:45:ea:89:72:1d:83:96:6c:20:af:d3:dd:05: c3:c7:60:7e:62:1e:0c:a8:3b:eb:cb:5b:f1:b1:51: dc:7c:ce:a3:07:00:e5:37:94:db:f3:de:35:9c:73: 7a:7d:ec:87:5d:b4:b6:89:ec:00:a3:65:10:a9:59: e4:aa:5e:8a:07:a2:16:6b:64:78:b3:b9:10:32:f7: d7:3a:a6:2d:e2:e2:1c:96:ec:70:89:24:f7:ad:b9: 2b:10:a1:c4:38:cd:9b:0f:d6:f5:fd:0b:b8:7d:80: fa:d0:50:da:ce:b5:61:30:88:b8:ae:4d:57:3d:76: 49:54:5e:16:a0:ce:57:63:24:21:8e:62:ab:6b:15: 98:26:6d:82:4e:b6:37:a9:06:31:53:7d:b5:f5:2b: 2d:3b:ca:f9:9c:b9:e9:e6:28:67:d6:b1:ef:8c:08: cf:72:34:8d:d2:72:1c:6c:33:2c:8f:94:1a:15:08: e1:19:d7:de:ff:b8:62:2b:0c:0f:92:78:ae:fa:0d: b0:d6:47:e1:5e:cf:a8:ab:c7:92:cf:ec:17:bc:16: c0:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:71:BF:FF:10:CE:60:06:35:70:63:E2:0D:71:AD:83:C3:52:95:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5a791677-2f6b-4828-a754-1d16b76a8a68/9e84ce3e-8c53-369f-a42e-90fce0e4a548.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5a791677-2f6b-4828-a754-1d16b76a8a68/5a791677-2f6b-4828-a754-1d16b76a8a68.crl X509v3 Authority Key Identifier: keyid:02:D8:E5:C8:93:A4:F8:02:B6:34:D9:B5:1F:8F:41:55:BB:6A:99:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5a791677-2f6b-4828-a754-1d16b76a8a68.cer sbgp-ipAddrBlock: critical IPv4: 23.131.28.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:0a:bd:1a:23:6b:99:dd:2d:72:8f:5b:34:92:72:12:40:36: 0b:a3:c5:ea:8f:8f:23:97:cf:70:4d:6e:b1:42:10:47:f7:ee: b2:70:ce:07:68:84:6c:b7:0e:fb:d8:cc:fc:c8:2e:4d:cc:1c: 0c:bd:f0:0c:07:b0:7d:02:2e:16:44:82:d8:f0:ce:97:1a:c3: 6a:e8:d5:7d:df:f5:40:5d:4f:ae:30:39:86:37:bc:3a:16:49: f0:2a:93:57:a5:07:eb:5c:c0:c4:aa:db:52:f5:c5:6a:79:77: 26:1b:d5:ba:b2:21:f4:fa:33:f9:18:15:bd:65:b1:14:e2:14: 53:b3:13:e6:e1:9f:fd:67:47:e2:62:81:ac:de:94:f4:b4:e3: 1b:b3:c1:df:cd:38:34:0e:b9:91:22:32:a9:4a:2f:b8:a4:1a: 7d:7b:8c:75:d2:d2:2c:de:78:d7:c7:27:a1:86:e4:96:ca:d4: 6b:de:22:f9:6d:7c:b7:64:8d:b7:23:04:8e:35:ca:10:f9:d8: bf:7a:6b:8d:e5:c9:5c:2d:54:1a:5b:f7:70:8c:2d:00:84:90: d8:36:39:95:b6:11:5f:5e:9d:a9:94:4c:d8:2a:1e:fa:24:89: 59:cb:49:82:76:05:b4:16:a6:a2:47:42:17:d7:bd:9a:b2:e4: 58:45:75:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JcsFTi439qSRtu0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWE3OTE2NzctMmY2Yi00ODI4LWE3NTQtMWQxNmI3NmE4 YTY4MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NDllZWNlYzMtOTE2NS00ODljLTkxMzQtMDg3NzBiYzNlNTMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy2Z2ujsy1TnGziUrctZFWKdEmNa6WeqdyI76 Y4QtfvQldpWDBawk5uSLhxllmkXqiXIdg5ZsIK/T3QXDx2B+Yh4MqDvry1vxsVHc fM6jBwDlN5Tb8941nHN6feyHXbS2iewAo2UQqVnkql6KB6IWa2R4s7kQMvfXOqYt 4uIcluxwiST3rbkrEKHEOM2bD9b1/Qu4fYD60FDazrVhMIi4rk1XPXZJVF4WoM5X YyQhjmKraxWYJm2CTrY3qQYxU3219SstO8r5nLnp5ihn1rHvjAjPcjSN0nIcbDMs j5QaFQjhGdfe/7hiKwwPkniu+g2w1kfhXs+oq8eSz+wXvBbATwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBFxv/8QzmAGNXBj4g1xrYPDUpXhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi81YTc5 MTY3Ny0yZjZiLTQ4MjgtYTc1NC0xZDE2Yjc2YThhNjgvOWU4NGNlM2UtOGM1My0z NjlmLWE0MmUtOTBmY2UwZTRhNTQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNWE3OTE2NzctMmY2Yi00ODI4LWE3 NTQtMWQxNmI3NmE4YTY4LzVhNzkxNjc3LTJmNmItNDgyOC1hNzU0LTFkMTZiNzZh OGE2OC5jcmwwHwYDVR0jBBgwFoAUAtjlyJOk+AK2NNm1H49BVbtqmUYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi81YTc5MTY3Ny0yZjZiLTQ4MjgtYTc1NC0xZDE2 Yjc2YThhNjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4McMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABEKvRoja5ndLXKPWzSSchJANgujxeqPjyOXz3BNbrFCEEf37rJwzgdo hGy3DvvYzPzILk3MHAy98AwHsH0CLhZEgtjwzpcaw2ro1X3f9UBdT64wOYY3vDoW SfAqk1elB+tcwMSq21L1xWp5dyYb1bqyIfT6M/kYFb1lsRTiFFOzE+bhn/1nR+Ji gazelPS04xuzwd/NODQOuZEiMqlKL7ikGn17jHXS0izeeNfHJ6GG5JbK1GveIvlt fLdkjbcjBI41yhD52L96a43lyVwtVBpb93CMLQCEkNg2OZW2EV9enamUTNgqHvok iVnLSYJ2BbQWpqJHQhfXvZqy5FhFdQA= -----END CERTIFICATE-----Generated at Sun Oct 11 22:32:55 2026 by rpki-client