$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d0aed758-847b-4853-9fce-f0451b5fa2b3/09a572b8-7960-3b89-a1a8-7f9e35951515.roa File: 09a572b8-7960-3b89-a1a8-7f9e35951515.roa (raw, json) Hash identifier: dTHFqk9wZYoNuV4BmKjJARYMQEvYt5eyARtgJGEyN8Y= Subject key identifier: 46:6A:09:F0:3D:DD:DB:FC:71:7C:53:81:2B:80:92:0C:F0:14:48:A0 Certificate issuer: /CN=d0aed758-847b-4853-9fce-f0451b5fa2b3 Certificate serial: 010D0C9F4328584ECBD1D7A611216221D73D2060 Authority key identifier: 26:29:49:3F:F3:82:BA:92:FA:C8:2C:6F:AB:48:07:F3:65:25:5C:27 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d0aed758-847b-4853-9fce-f0451b5fa2b3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d0aed758-847b-4853-9fce-f0451b5fa2b3/09a572b8-7960-3b89-a1a8-7f9e35951515.roa Signing time: Tue 11 Aug 2026 01:00:11 +0000 ROA not before: Tue 11 Aug 2026 01:00:11 +0000 ROA not after: Mon 09 Nov 2026 02:00:11 +0000 asID: 11831 IP address blocks: 23.111.79.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d0aed758-847b-4853-9fce-f0451b5fa2b3/d0aed758-847b-4853-9fce-f0451b5fa2b3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d0aed758-847b-4853-9fce-f0451b5fa2b3/d0aed758-847b-4853-9fce-f0451b5fa2b3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d0aed758-847b-4853-9fce-f0451b5fa2b3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:cb:d1:d7:a6:11:21:62:21:d7:3d:20:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d0aed758-847b-4853-9fce-f0451b5fa2b3 Validity Not Before: Aug 11 01:00:11 2026 GMT Not After : Nov 9 02:00:11 2026 GMT Subject: CN=db736c01-5156-42be-8f1f-6e9d78db802c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:9a:83:f1:78:e5:6f:37:d1:f3:8c:a1:41:f2: ae:5f:f3:d7:a2:9b:5a:d7:f8:f7:b5:d9:1d:cf:84: 19:11:84:02:65:e0:13:63:69:c2:4d:10:25:32:0e: c7:94:4e:de:f3:ee:19:d4:11:66:0b:e4:93:e2:80: 50:f8:39:3a:53:7d:5b:83:af:86:88:af:d1:32:d1: 02:df:3d:a9:07:d6:92:20:cc:31:55:23:64:06:6e: 8a:4b:9f:e7:f5:c4:93:b1:eb:25:3d:58:f7:d2:2e: 6b:58:7d:37:f2:d8:09:c5:e7:b1:0b:4c:44:ca:47: 8f:e0:a6:7c:0b:4b:d2:43:db:95:34:49:e3:7e:14: 5c:7c:f6:96:01:f7:96:01:25:a0:c8:18:f9:09:fc: 25:b1:c6:44:04:65:2d:fa:67:d5:af:85:8f:7f:e6: c7:7e:8a:ac:83:75:3c:6b:b5:10:14:16:ac:dd:51: 4a:56:db:85:03:f6:40:c2:14:ba:74:9a:71:35:b1: 0b:d9:92:e5:59:5f:01:47:4d:fa:7b:19:8b:7b:17: da:48:df:3f:49:69:b3:5c:cc:85:0d:84:7b:75:99: 2b:d5:34:14:a0:52:1f:4d:c0:c0:b5:29:0d:d5:d7: 0f:55:2d:bb:d8:53:d6:c7:67:d1:d0:4d:49:4c:ca: c2:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:6A:09:F0:3D:DD:DB:FC:71:7C:53:81:2B:80:92:0C:F0:14:48:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d0aed758-847b-4853-9fce-f0451b5fa2b3/09a572b8-7960-3b89-a1a8-7f9e35951515.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d0aed758-847b-4853-9fce-f0451b5fa2b3/d0aed758-847b-4853-9fce-f0451b5fa2b3.crl X509v3 Authority Key Identifier: keyid:26:29:49:3F:F3:82:BA:92:FA:C8:2C:6F:AB:48:07:F3:65:25:5C:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d0aed758-847b-4853-9fce-f0451b5fa2b3.cer sbgp-ipAddrBlock: critical IPv4: 23.111.79.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption de:d5:4f:a9:cb:a3:eb:53:a2:60:37:59:9a:cb:ad:91:7d:de: 62:d4:0a:bc:dd:d6:aa:bf:cb:b4:11:2a:12:81:45:50:d9:8a: ea:b2:ae:98:54:3a:dd:eb:86:fd:65:30:c8:40:8c:b4:55:b3: 27:6c:2e:c0:cd:3f:88:f4:2c:6d:ab:a1:9b:06:dc:68:7f:75: 74:61:b6:88:5f:dd:f5:f0:94:f5:51:19:22:83:2b:cb:0a:92: 0a:68:e9:82:df:ac:16:5d:17:eb:77:55:4f:da:33:56:35:11: 09:a5:e1:ec:9c:9b:9b:9e:fa:d7:6f:62:97:35:77:dd:58:e9: ec:61:47:2d:22:77:01:f3:7a:4a:31:88:3c:ac:c5:10:89:dc: 8a:5d:5d:eb:28:9f:ea:d4:d8:94:6f:08:75:4c:0a:f6:0e:60: 85:41:6f:d4:b8:29:d6:4b:15:e1:0e:5a:32:ed:18:25:f5:3e: 3a:62:91:33:74:f3:ce:d2:04:24:ab:2f:d9:4d:20:7f:5e:03: 9b:58:1a:d8:83:f1:a2:66:98:be:ab:93:73:9c:b5:f4:73:ae: 3c:37:34:7f:c5:7a:89:8a:c7:82:95:3d:13:f5:20:ab:e7:9b: 46:96:4f:d4:ea:6d:af:86:b2:3f:40:0c:d6:fb:a3:7c:ad:c6: 8e:46:61:d4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7L0demESFiIdc9IGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDBhZWQ3NTgtODQ3Yi00ODUzLTlmY2UtZjA0NTFiNWZh MmIzMB4XDTI2MDgxMTAxMDAxMVoXDTI2MTEwOTAyMDAxMVowLzEtMCsGA1UEAxMk ZGI3MzZjMDEtNTE1Ni00MmJlLThmMWYtNmU5ZDc4ZGI4MDJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjJqD8XjlbzfR84yhQfKuX/PXopta1/j3tdkd z4QZEYQCZeATY2nCTRAlMg7HlE7e8+4Z1BFmC+ST4oBQ+Dk6U31bg6+GiK/RMtEC 3z2pB9aSIMwxVSNkBm6KS5/n9cSTseslPVj30i5rWH038tgJxeexC0xEykeP4KZ8 C0vSQ9uVNEnjfhRcfPaWAfeWASWgyBj5CfwlscZEBGUt+mfVr4WPf+bHfoqsg3U8 a7UQFBas3VFKVtuFA/ZAwhS6dJpxNbEL2ZLlWV8BR036exmLexfaSN8/SWmzXMyF DYR7dZkr1TQUoFIfTcDAtSkN1dcPVS272FPWx2fR0E1JTMrCzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEZqCfA93dv8cXxTgSuAkgzwFEigMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kMGFl ZDc1OC04NDdiLTQ4NTMtOWZjZS1mMDQ1MWI1ZmEyYjMvMDlhNTcyYjgtNzk2MC0z Yjg5LWExYTgtN2Y5ZTM1OTUxNTE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZDBhZWQ3NTgtODQ3Yi00ODUzLTlm Y2UtZjA0NTFiNWZhMmIzL2QwYWVkNzU4LTg0N2ItNDg1My05ZmNlLWYwNDUxYjVm YTJiMy5jcmwwHwYDVR0jBBgwFoAUJilJP/OCupL6yCxvq0gH82UlXCcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9kMGFlZDc1OC04NDdiLTQ4NTMtOWZjZS1mMDQ1 MWI1ZmEyYjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF29PMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAN7VT6nLo+tTomA3WZrLrZF93mLUCrzd1qq/y7QRKhKBRVDZiuqyrphU Ot3rhv1lMMhAjLRVsydsLsDNP4j0LG2roZsG3Gh/dXRhtohf3fXwlPVRGSKDK8sK kgpo6YLfrBZdF+t3VU/aM1Y1EQml4eycm5ue+tdvYpc1d91Y6exhRy0idwHzekox iDysxRCJ3IpdXeson+rU2JRvCHVMCvYOYIVBb9S4KdZLFeEOWjLtGCX1PjpikTN0 887SBCSrL9lNIH9eA5tYGtiD8aJmmL6rk3OctfRzrjw3NH/FeomKx4KVPRP1IKvn m0aWT9Tqba+Gsj9ADNb7o3ytxo5GYdQ= -----END CERTIFICATE-----Generated at Sat Sep 5 11:03:32 2026 by rpki-client