$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a24d6518-0415-4e7a-a0e9-6ed875b32fdb/2de66478-b3a7-3d96-906b-0f63430b0ee2.roa File: 2de66478-b3a7-3d96-906b-0f63430b0ee2.roa (raw, json) Hash identifier: sdtwoCou/VtmmvH0QVqeJCP1f05gVVbOOcy8VyE9rdQ= Subject key identifier: EB:7F:4F:F4:4E:75:EB:0D:97:98:B2:BC:B9:D3:FC:56:5A:E0:84:DA Certificate issuer: /CN=a24d6518-0415-4e7a-a0e9-6ed875b32fdb Certificate serial: 010D0C9F4328584F49882508CD9AB2D8B8DF2780 Authority key identifier: C9:5C:59:92:B9:97:2E:9A:8A:C3:94:FE:50:DE:A4:02:55:49:5F:FE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a24d6518-0415-4e7a-a0e9-6ed875b32fdb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a24d6518-0415-4e7a-a0e9-6ed875b32fdb/2de66478-b3a7-3d96-906b-0f63430b0ee2.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 138997 IP address blocks: 23.128.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a24d6518-0415-4e7a-a0e9-6ed875b32fdb/a24d6518-0415-4e7a-a0e9-6ed875b32fdb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a24d6518-0415-4e7a-a0e9-6ed875b32fdb/a24d6518-0415-4e7a-a0e9-6ed875b32fdb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a24d6518-0415-4e7a-a0e9-6ed875b32fdb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 28 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:88:25:08:cd:9a:b2:d8:b8:df:27:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a24d6518-0415-4e7a-a0e9-6ed875b32fdb Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=a0235abc-f514-46a5-8399-ded488301088 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:aa:43:23:dc:0a:35:bb:59:67:45:3f:7d:ec: c5:c4:dc:d5:fc:a3:35:30:63:41:cc:2e:da:e2:19: 6e:58:9b:89:6d:e3:d3:36:4d:a1:52:ae:0d:58:9c: 21:69:e7:90:40:54:05:f5:c7:52:a2:c6:cd:fb:a4: 1b:76:7b:58:b6:d8:a8:94:cf:2a:e3:69:6d:37:77: 04:bf:64:25:6c:58:94:e6:c8:a9:fa:d4:52:42:dd: 4c:84:df:c9:01:09:66:0a:f1:40:d6:e2:5b:5a:a3: 11:08:8e:38:9c:ec:c7:2f:8f:e3:fb:7f:ea:d6:28: 9e:4e:0b:96:49:85:47:93:65:aa:bf:f5:4c:dc:f2: 0b:33:60:1d:3c:35:6c:48:0b:32:53:da:de:d7:2c: 4f:52:91:99:75:0c:f3:ad:1c:dd:d3:14:f5:ca:46: e5:d1:cc:15:d8:87:b4:4e:4f:d4:35:86:85:24:7f: 16:55:6c:78:a0:1e:e5:48:15:5e:bf:64:a8:22:96: 7f:02:fc:df:a9:2e:c5:20:da:46:2d:82:30:c1:2b: f7:a4:c0:ee:3f:fc:6c:b7:bc:9f:ec:09:fe:c4:30: 17:76:28:36:5e:d2:16:cb:d8:b1:ca:3f:be:16:64: 07:bf:af:47:5e:61:03:6d:e8:0e:2f:59:98:ea:fd: 28:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:7F:4F:F4:4E:75:EB:0D:97:98:B2:BC:B9:D3:FC:56:5A:E0:84:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a24d6518-0415-4e7a-a0e9-6ed875b32fdb/2de66478-b3a7-3d96-906b-0f63430b0ee2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a24d6518-0415-4e7a-a0e9-6ed875b32fdb/a24d6518-0415-4e7a-a0e9-6ed875b32fdb.crl X509v3 Authority Key Identifier: keyid:C9:5C:59:92:B9:97:2E:9A:8A:C3:94:FE:50:DE:A4:02:55:49:5F:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a24d6518-0415-4e7a-a0e9-6ed875b32fdb.cer sbgp-ipAddrBlock: critical IPv4: 23.128.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:24:2d:54:e0:de:3c:eb:f0:58:65:94:7c:25:0a:0d:94:bb: 88:57:7c:26:59:80:64:0b:6e:76:b0:ef:ec:23:b2:07:2f:ca: da:b7:98:c1:81:2b:68:4f:e3:b4:66:b1:48:d8:dc:c5:ae:8d: eb:9c:bb:7f:4d:c7:e2:80:c5:15:43:6f:48:1d:4b:e9:fb:02: 54:0f:a7:82:3b:ef:ed:f9:68:0a:c2:aa:50:35:b1:57:b9:f4: 27:19:9d:70:e1:59:08:52:5b:e7:90:45:b2:5b:29:90:0e:56: 30:10:cb:fd:0a:71:bd:ff:80:1a:d9:d9:3f:38:a1:e5:7d:1f: 36:6d:f3:d5:b3:72:cf:53:e4:49:2a:3c:24:7f:f5:ed:14:8b: 87:a8:9f:5c:90:c6:22:07:6a:36:a5:da:64:40:23:7e:f6:97: 7e:bf:f1:b9:0c:c8:59:85:09:1a:2c:6e:4c:d2:41:f8:93:20: 3c:81:66:b4:a1:53:ac:39:8f:38:cc:21:bf:30:9d:6e:38:1f: b1:d0:03:bd:af:76:ab:63:f5:51:55:c6:e0:dd:85:1d:ff:23: a7:8e:6a:b1:f1:3d:42:44:03:5e:76:58:65:32:67:f2:9c:2b: 73:23:33:41:ed:13:ed:6a:d0:1e:dd:0d:fa:67:e4:49:62:b2: da:ca:d7:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JiCUIzZqy2LjfJ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTI0ZDY1MTgtMDQxNS00ZTdhLWEwZTktNmVkODc1YjMy ZmRiMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YTAyMzVhYmMtZjUxNC00NmE1LTgzOTktZGVkNDg4MzAxMDg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0qpDI9wKNbtZZ0U/fezFxNzV/KM1MGNBzC7a 4hluWJuJbePTNk2hUq4NWJwhaeeQQFQF9cdSosbN+6QbdntYttiolM8q42ltN3cE v2QlbFiU5sip+tRSQt1MhN/JAQlmCvFA1uJbWqMRCI44nOzHL4/j+3/q1iieTguW SYVHk2Wqv/VM3PILM2AdPDVsSAsyU9re1yxPUpGZdQzzrRzd0xT1ykbl0cwV2Ie0 Tk/UNYaFJH8WVWx4oB7lSBVev2SoIpZ/AvzfqS7FINpGLYIwwSv3pMDuP/xst7yf 7An+xDAXdig2XtIWy9ixyj++FmQHv69HXmEDbegOL1mY6v0oewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOt/T/ROdesNl5iyvLnT/FZa4ITaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hMjRk NjUxOC0wNDE1LTRlN2EtYTBlOS02ZWQ4NzViMzJmZGIvMmRlNjY0NzgtYjNhNy0z ZDk2LTkwNmItMGY2MzQzMGIwZWUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYTI0ZDY1MTgtMDQxNS00ZTdhLWEw ZTktNmVkODc1YjMyZmRiL2EyNGQ2NTE4LTA0MTUtNGU3YS1hMGU5LTZlZDg3NWIz MmZkYi5jcmwwHwYDVR0jBBgwFoAUyVxZkrmXLpqKw5T+UN6kAlVJX/4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hMjRkNjUxOC0wNDE1LTRlN2EtYTBlOS02ZWQ4 NzViMzJmZGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4DkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIokLVTg3jzr8FhllHwlCg2Uu4hXfCZZgGQLbnaw7+wjsgcvytq3mMGB K2hP47RmsUjY3MWujeucu39Nx+KAxRVDb0gdS+n7AlQPp4I77+35aArCqlA1sVe5 9CcZnXDhWQhSW+eQRbJbKZAOVjAQy/0Kcb3/gBrZ2T84oeV9HzZt89Wzcs9T5Ekq PCR/9e0Ui4eon1yQxiIHajal2mRAI372l36/8bkMyFmFCRosbkzSQfiTIDyBZrSh U6w5jzjMIb8wnW44H7HQA72vdqtj9VFVxuDdhR3/I6eOarHxPUJEA152WGUyZ/Kc K3MjM0HtE+1q0B7dDfpn5ElistrK130= -----END CERTIFICATE-----Generated at Tue Oct 27 05:15:24 2026 by rpki-client