$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/024b8eb3-ba43-4fd6-9120-411f53a786ed/cfe92269-9bcb-3911-814e-08db95678844.roa File: cfe92269-9bcb-3911-814e-08db95678844.roa (raw, json) Hash identifier: Z5D3HSiCEwUtj/ZbqxbWqfeQjFbAcSH48HI8UhOcL9s= Subject key identifier: 28:40:14:47:A6:78:F6:2D:14:DC:02:B6:89:FE:7A:FF:48:F9:8F:3C Certificate issuer: /CN=024b8eb3-ba43-4fd6-9120-411f53a786ed Certificate serial: 010D0C9F4328584EFB4764265E049B783AB92F00 Authority key identifier: BC:A1:D7:82:9A:28:16:11:DF:DC:F1:80:5B:D7:F9:EA:18:90:38:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/024b8eb3-ba43-4fd6-9120-411f53a786ed.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/024b8eb3-ba43-4fd6-9120-411f53a786ed/cfe92269-9bcb-3911-814e-08db95678844.roa Signing time: Fri 28 Aug 2026 01:00:12 +0000 ROA not before: Fri 28 Aug 2026 01:00:12 +0000 ROA not after: Thu 26 Nov 2026 02:00:12 +0000 asID: 402396 IP address blocks: 23.156.52.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/024b8eb3-ba43-4fd6-9120-411f53a786ed/024b8eb3-ba43-4fd6-9120-411f53a786ed.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/024b8eb3-ba43-4fd6-9120-411f53a786ed/024b8eb3-ba43-4fd6-9120-411f53a786ed.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/024b8eb3-ba43-4fd6-9120-411f53a786ed.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:fb:47:64:26:5e:04:9b:78:3a:b9:2f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=024b8eb3-ba43-4fd6-9120-411f53a786ed Validity Not Before: Aug 28 01:00:12 2026 GMT Not After : Nov 26 02:00:12 2026 GMT Subject: CN=ada95fba-4c96-4b55-8cd6-fa3ba2f4925a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:84:da:25:97:52:08:91:2c:6e:0a:f4:bf:df: 42:78:8a:d0:c6:f1:06:02:0e:c8:6f:31:38:76:5a: 31:23:0a:c7:1b:e3:40:f0:03:f9:53:3b:97:b1:0c: f8:3a:71:f4:da:77:c9:bd:a5:df:05:34:6e:65:9c: 05:bd:9b:39:4d:d6:4c:f2:56:f7:c0:99:6a:74:8b: dd:97:68:c3:27:58:4c:7e:fb:60:95:b0:f6:b0:a2: 0b:44:e1:25:0e:91:c8:27:47:d8:30:f2:ab:df:0e: 60:b9:35:2d:36:bc:2c:46:1c:e3:cb:eb:ce:a5:0b: 24:9d:c2:2f:60:2c:bc:fc:57:57:be:21:68:e4:77: 72:1c:90:e4:c4:ab:1e:c3:de:00:9d:30:fd:83:d5: a4:58:db:df:24:cd:ea:94:9d:80:ca:6e:e1:34:20: 82:5f:34:cd:8d:fc:0f:f8:fb:b5:b6:62:84:ee:a0: c1:34:f4:a4:d7:c7:76:f4:e6:62:11:71:2a:9a:98: 68:0f:93:1c:ab:5b:e2:cb:1a:5c:9a:f7:47:ac:40: 1c:aa:94:e4:ae:46:c7:14:2d:88:98:ec:cc:da:f9: bf:69:a4:55:a9:fb:5a:2c:b6:f6:84:c6:ae:f4:52: 85:b8:d7:27:f5:f3:32:ea:79:75:98:fd:1a:04:9d: 79:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:40:14:47:A6:78:F6:2D:14:DC:02:B6:89:FE:7A:FF:48:F9:8F:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/024b8eb3-ba43-4fd6-9120-411f53a786ed/cfe92269-9bcb-3911-814e-08db95678844.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/024b8eb3-ba43-4fd6-9120-411f53a786ed/024b8eb3-ba43-4fd6-9120-411f53a786ed.crl X509v3 Authority Key Identifier: keyid:BC:A1:D7:82:9A:28:16:11:DF:DC:F1:80:5B:D7:F9:EA:18:90:38:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/024b8eb3-ba43-4fd6-9120-411f53a786ed.cer sbgp-ipAddrBlock: critical IPv4: 23.156.52.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:8c:b6:1b:90:15:bd:54:3c:85:55:27:8d:47:50:3f:41:5c: 51:12:9e:05:88:64:67:e2:de:3a:ab:51:ba:32:b4:88:b6:1e: 2d:ac:3e:43:5e:99:30:aa:10:89:5c:69:b5:aa:d5:5e:23:ea: 85:02:c8:07:d4:9d:e4:85:6a:6a:06:31:73:96:61:c2:bb:f5: 66:f4:fd:65:63:08:91:df:aa:ae:36:7a:0c:39:2b:30:6a:4b: b5:5a:23:a8:7a:ba:aa:c9:e7:08:99:3c:65:72:33:6f:7b:af: 09:4f:ed:86:92:91:21:5a:89:a8:5a:fd:3b:6a:8a:c3:be:4e: cc:93:6b:96:ba:2b:9e:e7:50:71:f4:22:f6:f4:e5:91:21:be: 02:38:22:2c:e3:16:84:74:69:6e:3f:90:4a:be:4f:7d:73:b2: c2:f8:4e:e1:76:d5:05:c0:fd:ff:3a:5d:3a:26:d3:40:e8:41: 49:e8:82:af:af:45:07:a2:e1:1d:57:2b:3c:cf:79:a0:a6:1e: 98:7d:05:e5:74:08:b9:49:32:c3:77:7b:30:7d:80:3b:1b:21: c0:24:04:40:77:b5:c4:3c:d8:33:b5:a4:eb:d0:c7:f9:4f:27: 5e:c7:10:d2:5e:13:3c:9a:cb:10:98:5e:b2:94:98:6d:0a:9f: e5:1e:e6:5c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE77R2QmXgSbeDq5LwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDI0YjhlYjMtYmE0My00ZmQ2LTkxMjAtNDExZjUzYTc4 NmVkMB4XDTI2MDgyODAxMDAxMloXDTI2MTEyNjAyMDAxMlowLzEtMCsGA1UEAxMk YWRhOTVmYmEtNGM5Ni00YjU1LThjZDYtZmEzYmEyZjQ5MjVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr4TaJZdSCJEsbgr0v99CeIrQxvEGAg7IbzE4 dloxIwrHG+NA8AP5UzuXsQz4OnH02nfJvaXfBTRuZZwFvZs5TdZM8lb3wJlqdIvd l2jDJ1hMfvtglbD2sKILROElDpHIJ0fYMPKr3w5guTUtNrwsRhzjy+vOpQskncIv YCy8/FdXviFo5HdyHJDkxKsew94AnTD9g9WkWNvfJM3qlJ2Aym7hNCCCXzTNjfwP +Pu1tmKE7qDBNPSk18d29OZiEXEqmphoD5Mcq1viyxpcmvdHrEAcqpTkrkbHFC2I mOzM2vm/aaRVqftaLLb2hMau9FKFuNcn9fMy6nl1mP0aBJ15VQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFChAFEemePYtFNwCton+ev9I+Y88MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS8wMjRi OGViMy1iYTQzLTRmZDYtOTEyMC00MTFmNTNhNzg2ZWQvY2ZlOTIyNjktOWJjYi0z OTExLTgxNGUtMDhkYjk1Njc4ODQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvMDI0YjhlYjMtYmE0My00ZmQ2LTkx MjAtNDExZjUzYTc4NmVkLzAyNGI4ZWIzLWJhNDMtNGZkNi05MTIwLTQxMWY1M2E3 ODZlZC5jcmwwHwYDVR0jBBgwFoAUvKHXgpooFhHf3PGAW9f56hiQOHAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS8wMjRiOGViMy1iYTQzLTRmZDYtOTEyMC00MTFm NTNhNzg2ZWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5w0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABKMthuQFb1UPIVVJ41HUD9BXFESngWIZGfi3jqrUboytIi2Hi2sPkNe mTCqEIlcabWq1V4j6oUCyAfUneSFamoGMXOWYcK79Wb0/WVjCJHfqq42egw5KzBq S7VaI6h6uqrJ5wiZPGVyM297rwlP7YaSkSFaiaha/TtqisO+TsyTa5a6K57nUHH0 Ivb05ZEhvgI4IizjFoR0aW4/kEq+T31zssL4TuF21QXA/f86XTom00DoQUnogq+v RQei4R1XKzzPeaCmHph9BeV0CLlJMsN3ezB9gDsbIcAkBEB3tcQ82DO1pOvQx/lP J17HENJeEzyayxCYXrKUmG0Kn+Ue5lw= -----END CERTIFICATE-----Generated at Mon Aug 31 10:25:51 2026 by rpki-client