$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/0f6c9aa4-6e5a-3441-b22a-975cabc9fed1.roa File: 0f6c9aa4-6e5a-3441-b22a-975cabc9fed1.roa (raw, json) Hash identifier: Jx3bF4OKzEW6B/pQzhv5VATqVHK0T6tAURKetl0ekIc= Subject key identifier: 55:D0:B0:C2:B0:9F:9D:C0:42:C0:78:29:1E:3B:D0:F3:7E:39:21:00 Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf Certificate serial: 010D0C9F4328584FB3A66CD58787A569EE7C7600 Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/0f6c9aa4-6e5a-3441-b22a-975cabc9fed1.roa Signing time: Mon 02 Nov 2026 02:00:13 +0000 ROA not before: Mon 02 Nov 2026 02:00:13 +0000 ROA not after: Sun 31 Jan 2027 02:00:13 +0000 asID: 16509 IP address blocks: 23.239.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Nov 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:b3:a6:6c:d5:87:87:a5:69:ee:7c:76:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf Validity Not Before: Nov 2 02:00:13 2026 GMT Not After : Jan 31 02:00:13 2027 GMT Subject: CN=2b060f10-0fd7-4862-947a-35df44684655 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:6b:07:1d:35:9a:f5:1a:c3:20:f5:b0:74:ad: b5:e2:1f:6a:25:ac:1c:15:aa:28:30:2a:2d:6e:2c: 56:d1:6f:62:02:da:85:88:56:60:5d:50:0d:62:5c: 4c:00:a9:45:39:0e:90:f4:9f:b2:2f:e6:72:50:be: cc:b5:85:87:88:77:e1:f6:9c:60:a4:37:36:23:81: 34:43:73:6d:4e:03:c5:f5:ac:99:9a:8a:89:82:32: f7:13:e4:49:45:12:74:b4:d7:22:28:7b:b8:81:e9: 3b:c1:e3:89:99:aa:b9:0a:55:65:56:32:04:35:73: 8f:35:cc:eb:61:35:a4:63:03:3d:14:29:36:e8:84: b4:43:ad:5f:92:53:be:3d:1b:ae:f8:cd:17:89:24: 54:b7:ba:bc:22:09:e1:e8:bc:4e:db:8a:6f:e6:bd: d1:93:63:8b:f3:71:2c:46:45:4e:09:a0:6f:c9:fd: f6:01:f5:65:1c:c1:14:ec:56:8c:e4:51:a1:0f:99: 66:8a:64:ed:27:f5:2f:f5:c1:12:24:58:ec:78:ca: 62:75:ab:23:ea:c5:7f:c8:4b:a1:1e:a6:cc:0f:b0: 41:a0:be:c4:e8:58:40:e1:b4:53:7a:83:37:8c:52: 9a:19:b2:0c:fd:33:83:3c:c3:21:ba:ba:74:f1:e8: 54:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:D0:B0:C2:B0:9F:9D:C0:42:C0:78:29:1E:3B:D0:F3:7E:39:21:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/0f6c9aa4-6e5a-3441-b22a-975cabc9fed1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl X509v3 Authority Key Identifier: keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer sbgp-ipAddrBlock: critical IPv4: 23.239.240.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ba:70:46:0b:34:c0:cc:f4:b5:34:65:e4:66:1d:a7:cf:67:04: 50:5f:9b:17:7d:77:7a:af:c4:36:53:8f:bd:40:fc:f9:b7:fc: 96:9d:07:2f:57:73:c0:c2:5e:70:1f:52:4a:17:b3:e3:1d:a3: 43:41:db:36:10:6e:e3:f4:7c:23:63:86:4a:7d:9e:c3:23:e1: 8a:a1:29:a2:77:89:39:64:bd:67:4f:63:e8:01:b9:bd:9f:fa: 7e:d8:92:c1:e6:e6:e0:ef:9e:2e:5c:59:8b:3f:35:51:fe:ba: a4:ab:ca:e2:97:e2:92:ce:02:8e:dd:bd:e1:c2:fa:85:2c:1d: 3f:8f:38:24:d7:f4:00:24:fb:7c:56:78:6f:ab:c3:d9:b6:3d: b5:16:5c:47:7c:b0:21:81:55:ed:7e:f8:0f:f5:e4:17:00:89: 57:af:4e:79:d5:74:c4:63:ad:4f:3e:3a:15:a4:0c:f0:39:16: b7:94:78:6d:21:f5:2a:f6:ab:9c:55:4f:7b:92:94:10:e5:44: 2d:97:fc:53:af:a3:79:7f:26:e3:18:25:a0:53:13:c0:fa:11: 1a:06:f2:32:d7:7d:a4:bb:be:68:ea:4b:42:b9:0e:8c:f3:a3: ad:99:d2:c2:b8:15:b9:37:46:c8:be:f3:8a:76:cb:69:1e:5c: 50:fe:d9:4a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+zpmzVh4elae58dgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy OWJmMB4XDTI2MTEwMjAyMDAxM1oXDTI3MDEzMTAyMDAxM1owLzEtMCsGA1UEAxMk MmIwNjBmMTAtMGZkNy00ODYyLTk0N2EtMzVkZjQ0Njg0NjU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiWsHHTWa9RrDIPWwdK214h9qJawcFaooMCot bixW0W9iAtqFiFZgXVANYlxMAKlFOQ6Q9J+yL+ZyUL7MtYWHiHfh9pxgpDc2I4E0 Q3NtTgPF9ayZmoqJgjL3E+RJRRJ0tNciKHu4gek7weOJmaq5ClVlVjIENXOPNczr YTWkYwM9FCk26IS0Q61fklO+PRuu+M0XiSRUt7q8Ignh6LxO24pv5r3Rk2OL83Es RkVOCaBvyf32AfVlHMEU7FaM5FGhD5lmimTtJ/Uv9cESJFjseMpidasj6sV/yEuh HqbMD7BBoL7E6FhA4bRTeoM3jFKaGbIM/TODPMMhurp08ehUSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFXQsMKwn53AQsB4KR470PN+OSEAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2 ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvMGY2YzlhYTQtNmU1YS0z NDQxLWIyMmEtOTc1Y2FiYzlmZWQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4 MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx YzIxODI5YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF+/wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALpwRgs0wMz0tTRl5GYdp89nBFBfmxd9d3qvxDZTj71A/Pm3/JadBy9X c8DCXnAfUkoXs+Mdo0NB2zYQbuP0fCNjhkp9nsMj4YqhKaJ3iTlkvWdPY+gBub2f +n7YksHm5uDvni5cWYs/NVH+uqSryuKX4pLOAo7dveHC+oUsHT+POCTX9AAk+3xW eG+rw9m2PbUWXEd8sCGBVe1++A/15BcAiVevTnnVdMRjrU8+OhWkDPA5FreUeG0h 9Sr2q5xVT3uSlBDlRC2X/FOvo3l/JuMYJaBTE8D6ERoG8jLXfaS7vmjqS0K5Dozz o62Z0sK4Fbk3Rsi+84p2y2keXFD+2Uo= -----END CERTIFICATE-----Generated at Thu Nov 5 05:25:01 2026 by rpki-client