$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/024b8eb3-ba43-4fd6-9120-411f53a786ed/cfe92269-9bcb-3911-814e-08db95678844.roa File: cfe92269-9bcb-3911-814e-08db95678844.roa (raw, json) Hash identifier: psG8SrsQBy4kye9m6tThHB/9C551ED8j9/WBXAUUVGM= Subject key identifier: C1:6F:CF:F9:17:6D:70:9E:0B:D1:75:58:00:D9:E6:10:86:DF:95:BE Certificate issuer: /CN=024b8eb3-ba43-4fd6-9120-411f53a786ed Certificate serial: 010D0C9F4328584F9D3319C6F646521ED61E4B00 Authority key identifier: BC:A1:D7:82:9A:28:16:11:DF:DC:F1:80:5B:D7:F9:EA:18:90:38:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/024b8eb3-ba43-4fd6-9120-411f53a786ed.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/024b8eb3-ba43-4fd6-9120-411f53a786ed/cfe92269-9bcb-3911-814e-08db95678844.roa Signing time: Sun 25 Oct 2026 01:00:13 +0000 ROA not before: Sun 25 Oct 2026 01:00:13 +0000 ROA not after: Sat 23 Jan 2027 02:00:13 +0000 asID: 402396 IP address blocks: 23.156.52.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/024b8eb3-ba43-4fd6-9120-411f53a786ed/024b8eb3-ba43-4fd6-9120-411f53a786ed.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/024b8eb3-ba43-4fd6-9120-411f53a786ed/024b8eb3-ba43-4fd6-9120-411f53a786ed.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/024b8eb3-ba43-4fd6-9120-411f53a786ed.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:9d:33:19:c6:f6:46:52:1e:d6:1e:4b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=024b8eb3-ba43-4fd6-9120-411f53a786ed Validity Not Before: Oct 25 01:00:13 2026 GMT Not After : Jan 23 02:00:13 2027 GMT Subject: CN=a7f2ef37-87c5-49e9-a561-14e693a55667 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:df:5d:23:47:8b:e8:8b:a9:81:1d:40:cd:cd: 90:c4:f9:fb:a2:30:ec:75:14:13:1b:66:2f:dd:c5: 14:d6:6e:fb:02:ff:02:28:c9:84:5f:38:9b:10:48: 92:62:d2:50:ac:97:34:6b:1c:83:2c:b9:bb:55:ae: 23:3f:3e:ee:3a:c4:94:49:b3:f9:0c:21:d1:4a:0c: d0:e1:04:a0:ac:1f:8c:91:48:bf:e9:76:57:65:db: 19:e1:f7:1f:c1:e4:1f:a5:df:28:dc:90:18:d4:16: 61:4f:2f:bf:f6:77:32:99:1c:87:32:ef:8f:ce:3e: 41:87:bf:b8:d7:fc:5f:1a:5a:8e:05:30:07:9b:a3: 85:68:5c:53:09:87:3d:8b:37:42:5d:ec:21:05:84: 77:5b:8d:2b:b0:0b:f9:52:96:8e:35:2a:3a:1a:c5: 85:0b:ea:6e:c2:15:c8:13:e5:41:72:4e:1c:6d:16: bb:91:d3:42:98:a1:09:d3:9a:24:69:18:57:10:d7: 6d:82:31:d7:9f:d1:5d:33:33:dc:89:5c:0f:ca:aa: 4c:be:b6:ee:87:fb:b7:eb:cc:ae:c8:1e:87:2d:03: e7:03:f1:93:5e:0c:94:8e:47:e9:c1:81:35:97:4c: 00:4c:37:85:32:76:0a:a2:b5:ea:87:f1:01:95:5c: 4b:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:6F:CF:F9:17:6D:70:9E:0B:D1:75:58:00:D9:E6:10:86:DF:95:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/024b8eb3-ba43-4fd6-9120-411f53a786ed/cfe92269-9bcb-3911-814e-08db95678844.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/024b8eb3-ba43-4fd6-9120-411f53a786ed/024b8eb3-ba43-4fd6-9120-411f53a786ed.crl X509v3 Authority Key Identifier: keyid:BC:A1:D7:82:9A:28:16:11:DF:DC:F1:80:5B:D7:F9:EA:18:90:38:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/024b8eb3-ba43-4fd6-9120-411f53a786ed.cer sbgp-ipAddrBlock: critical IPv4: 23.156.52.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:36:d5:89:6c:a9:0b:8a:0f:cc:c7:de:c6:e2:08:d5:e8:69: f9:84:d5:80:0f:5a:9d:94:a7:33:db:b7:b6:0f:85:62:a2:b5: 10:94:7e:99:b4:f4:ed:f4:5b:59:e0:23:d8:65:28:1a:c3:a8: ad:57:77:17:48:41:a9:d0:d9:f9:5f:43:7c:56:f7:61:34:b8: 4b:dc:46:71:e3:c9:d4:b9:65:a8:f7:45:a8:67:8a:96:92:a7: 7f:24:9f:0b:b8:69:25:a0:d7:10:4e:e9:da:ee:76:b9:78:39: 0f:9d:64:ca:ad:b9:5f:a1:4f:bb:6c:02:2a:da:e7:f2:f0:f4: c4:fb:31:4b:50:61:d7:c0:6d:9a:ef:f3:a0:fb:17:45:c1:7b: 05:2b:a0:39:d9:2c:27:d5:3c:b6:55:10:7c:e5:65:d4:78:c1: a7:c1:ea:11:83:41:f3:4c:5b:86:c6:c0:b7:43:86:89:c2:ce: 97:8e:66:ac:36:65:eb:10:18:63:cd:32:89:36:bd:5b:88:2a: 08:8d:c3:42:e2:99:fc:5c:b9:d5:99:05:e0:23:a3:20:5d:7c: e8:68:2f:a7:6d:b5:e4:89:1a:3b:98:a0:82:17:46:84:ea:34: 24:d2:93:1a:b5:4f:9c:a5:b1:46:64:de:61:06:f4:e9:68:77: 6e:9d:78:35 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+dMxnG9kZSHtYeSwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDI0YjhlYjMtYmE0My00ZmQ2LTkxMjAtNDExZjUzYTc4 NmVkMB4XDTI2MTAyNTAxMDAxM1oXDTI3MDEyMzAyMDAxM1owLzEtMCsGA1UEAxMk YTdmMmVmMzctODdjNS00OWU5LWE1NjEtMTRlNjkzYTU1NjY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1N9dI0eL6IupgR1Azc2QxPn7ojDsdRQTG2Yv 3cUU1m77Av8CKMmEXzibEEiSYtJQrJc0axyDLLm7Va4jPz7uOsSUSbP5DCHRSgzQ 4QSgrB+MkUi/6XZXZdsZ4fcfweQfpd8o3JAY1BZhTy+/9ncymRyHMu+Pzj5Bh7+4 1/xfGlqOBTAHm6OFaFxTCYc9izdCXewhBYR3W40rsAv5UpaONSo6GsWFC+puwhXI E+VBck4cbRa7kdNCmKEJ05okaRhXENdtgjHXn9FdMzPciVwPyqpMvrbuh/u368yu yB6HLQPnA/GTXgyUjkfpwYE1l0wATDeFMnYKorXqh/EBlVxLPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMFvz/kXbXCeC9F1WADZ5hCG35W+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS8wMjRi OGViMy1iYTQzLTRmZDYtOTEyMC00MTFmNTNhNzg2ZWQvY2ZlOTIyNjktOWJjYi0z OTExLTgxNGUtMDhkYjk1Njc4ODQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvMDI0YjhlYjMtYmE0My00ZmQ2LTkx MjAtNDExZjUzYTc4NmVkLzAyNGI4ZWIzLWJhNDMtNGZkNi05MTIwLTQxMWY1M2E3 ODZlZC5jcmwwHwYDVR0jBBgwFoAUvKHXgpooFhHf3PGAW9f56hiQOHAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS8wMjRiOGViMy1iYTQzLTRmZDYtOTEyMC00MTFm NTNhNzg2ZWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5w0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG421YlsqQuKD8zH3sbiCNXoafmE1YAPWp2UpzPbt7YPhWKitRCUfpm0 9O30W1ngI9hlKBrDqK1XdxdIQanQ2flfQ3xW92E0uEvcRnHjydS5Zaj3RahnipaS p38knwu4aSWg1xBO6drudrl4OQ+dZMqtuV+hT7tsAira5/Lw9MT7MUtQYdfAbZrv 86D7F0XBewUroDnZLCfVPLZVEHzlZdR4wafB6hGDQfNMW4bGwLdDhonCzpeOZqw2 ZesQGGPNMok2vVuIKgiNw0LimfxcudWZBeAjoyBdfOhoL6dtteSJGjuYoIIXRoTq NCTSkxq1T5ylsUZk3mEG9Olod26deDU= -----END CERTIFICATE-----Generated at Mon Oct 26 00:52:24 2026 by rpki-client