$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/58f2afa5-5d7a-4f76-8a53-9229a75f1f45/2a8a8f1d-d263-3d7f-b2e7-ad8c2f6f8bdc.roa File: 2a8a8f1d-d263-3d7f-b2e7-ad8c2f6f8bdc.roa (raw, json) Hash identifier: 9Xq0DqBB+el684wfppcOBT5Xd3H7mCzoTRhKowE4HqI= Subject key identifier: EA:26:B8:BE:25:AD:19:8D:8F:F6:FD:95:E5:70:DA:D8:1E:1B:34:7C Certificate issuer: /CN=58f2afa5-5d7a-4f76-8a53-9229a75f1f45 Certificate serial: 010D0C9F4328584F20F79F44DF5A8BC70FD73500 Authority key identifier: 55:5D:08:E2:4B:7D:1D:9A:4E:72:44:47:DE:16:75:82:56:07:71:E2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/58f2afa5-5d7a-4f76-8a53-9229a75f1f45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/58f2afa5-5d7a-4f76-8a53-9229a75f1f45/2a8a8f1d-d263-3d7f-b2e7-ad8c2f6f8bdc.roa Signing time: Thu 10 Sep 2026 13:00:12 +0000 ROA not before: Thu 10 Sep 2026 13:00:12 +0000 ROA not after: Wed 09 Dec 2026 14:00:12 +0000 asID: 214483 IP address blocks: 23.142.52.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/58f2afa5-5d7a-4f76-8a53-9229a75f1f45/58f2afa5-5d7a-4f76-8a53-9229a75f1f45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/58f2afa5-5d7a-4f76-8a53-9229a75f1f45/58f2afa5-5d7a-4f76-8a53-9229a75f1f45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/58f2afa5-5d7a-4f76-8a53-9229a75f1f45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:20:f7:9f:44:df:5a:8b:c7:0f:d7:35:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=58f2afa5-5d7a-4f76-8a53-9229a75f1f45 Validity Not Before: Sep 10 13:00:12 2026 GMT Not After : Dec 9 14:00:12 2026 GMT Subject: CN=fd794797-8152-4b27-a642-4292bb907384 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:4d:34:40:d0:e1:d8:bd:32:83:2c:ec:2c:3f: df:60:9e:15:f6:c2:96:ea:9f:76:85:92:0d:9a:25: 94:09:42:26:66:dc:07:16:36:61:4a:43:b5:a6:ac: 54:e5:7c:33:9f:58:38:b0:15:c0:92:c7:cc:a1:2c: 9f:37:f7:e2:c3:cf:52:26:42:71:f9:e6:85:25:94: 96:22:4d:f2:16:f8:e6:b4:66:a8:03:7a:81:4d:77: 17:15:3f:af:8a:7a:59:fd:6a:17:cb:94:3a:17:fa: c0:f8:52:e3:b0:66:25:ad:d7:fb:44:04:68:b5:6a: 95:33:02:c2:38:62:1a:94:4e:d0:65:f9:bc:4c:f5: 8a:2b:b8:e7:71:9c:29:8a:95:83:49:81:58:c5:ff: 15:30:89:03:a7:f9:75:35:fb:72:b6:fe:ca:51:3e: db:38:7f:31:81:19:b3:59:8c:76:71:fa:12:04:1e: 22:6e:01:8f:b5:75:af:cc:20:cf:89:6e:6d:be:32: 3b:4b:0d:a7:ba:4e:1f:b8:a6:91:61:95:3b:d5:de: 55:e6:1f:3e:fe:a7:1e:22:b2:b5:22:2a:cf:d6:3a: 57:5a:72:92:f8:e0:16:be:d5:5c:e1:f3:9f:e0:56: b9:12:18:08:1c:67:ba:18:a7:22:e4:cb:f6:7c:05: 5a:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:26:B8:BE:25:AD:19:8D:8F:F6:FD:95:E5:70:DA:D8:1E:1B:34:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/58f2afa5-5d7a-4f76-8a53-9229a75f1f45/2a8a8f1d-d263-3d7f-b2e7-ad8c2f6f8bdc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/58f2afa5-5d7a-4f76-8a53-9229a75f1f45/58f2afa5-5d7a-4f76-8a53-9229a75f1f45.crl X509v3 Authority Key Identifier: keyid:55:5D:08:E2:4B:7D:1D:9A:4E:72:44:47:DE:16:75:82:56:07:71:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/58f2afa5-5d7a-4f76-8a53-9229a75f1f45.cer sbgp-ipAddrBlock: critical IPv4: 23.142.52.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ca:b1:42:39:b9:99:2c:ac:bd:63:2f:27:bd:3a:8a:85:3b:8b: 42:87:cf:d7:f6:36:42:9a:15:e4:ba:e8:87:28:59:c7:50:42: 5f:42:01:1a:26:5b:bc:d3:cf:cd:db:b5:1d:75:e3:97:bb:2a: e3:84:60:d7:c8:dd:8d:33:28:ed:57:c6:47:3f:1e:c8:bc:81: ed:82:1a:4c:73:ba:a4:23:82:1e:14:11:86:aa:81:09:1d:54: ac:77:01:ae:09:d6:23:ed:0a:02:1b:a0:ce:c5:49:19:51:4d: a7:4b:4b:a9:ac:91:c1:b5:b6:df:3d:fe:86:46:09:42:e6:a0: de:b0:42:8f:b7:6a:cf:ef:f2:28:f9:f3:5b:c4:3e:b1:a8:f6: 0f:5b:3a:50:99:e9:87:1e:2c:44:78:96:8f:34:16:a6:b5:02: 41:01:65:2e:5a:e6:05:b5:95:ce:db:08:ab:84:d7:5f:dc:73: e3:ce:12:d9:fb:56:b4:df:72:09:e3:90:57:5f:2d:99:14:e3: dc:be:8e:78:78:e1:34:bb:4e:e6:29:2b:6b:b0:2b:44:4d:23: c8:02:4d:01:11:6b:92:4d:21:f1:14:54:82:9d:fa:a3:0b:f3: 22:a3:3a:43:66:29:c9:03:36:a8:e6:65:c2:3b:03:68:5d:0a: 32:74:f6:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8g959E31qLxw/XNQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNThmMmFmYTUtNWQ3YS00Zjc2LThhNTMtOTIyOWE3NWYx ZjQ1MB4XDTI2MDkxMDEzMDAxMloXDTI2MTIwOTE0MDAxMlowLzEtMCsGA1UEAxMk ZmQ3OTQ3OTctODE1Mi00YjI3LWE2NDItNDI5MmJiOTA3Mzg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuk00QNDh2L0ygyzsLD/fYJ4V9sKW6p92hZIN miWUCUImZtwHFjZhSkO1pqxU5Xwzn1g4sBXAksfMoSyfN/fiw89SJkJx+eaFJZSW Ik3yFvjmtGaoA3qBTXcXFT+vinpZ/WoXy5Q6F/rA+FLjsGYlrdf7RARotWqVMwLC OGIalE7QZfm8TPWKK7jncZwpipWDSYFYxf8VMIkDp/l1Nftytv7KUT7bOH8xgRmz WYx2cfoSBB4ibgGPtXWvzCDPiW5tvjI7Sw2nuk4fuKaRYZU71d5V5h8+/qceIrK1 IirP1jpXWnKS+OAWvtVc4fOf4Fa5EhgIHGe6GKci5Mv2fAVa0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOomuL4lrRmNj/b9leVw2tgeGzR8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81OGYy YWZhNS01ZDdhLTRmNzYtOGE1My05MjI5YTc1ZjFmNDUvMmE4YThmMWQtZDI2My0z ZDdmLWIyZTctYWQ4YzJmNmY4YmRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNThmMmFmYTUtNWQ3YS00Zjc2LThh NTMtOTIyOWE3NWYxZjQ1LzU4ZjJhZmE1LTVkN2EtNGY3Ni04YTUzLTkyMjlhNzVm MWY0NS5jcmwwHwYDVR0jBBgwFoAUVV0I4kt9HZpOckRH3hZ1glYHceIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC81OGYyYWZhNS01ZDdhLTRmNzYtOGE1My05MjI5 YTc1ZjFmNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF440MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMqxQjm5mSysvWMvJ706ioU7i0KHz9f2NkKaFeS66IcoWcdQQl9CARom W7zTz83btR1145e7KuOEYNfI3Y0zKO1Xxkc/Hsi8ge2CGkxzuqQjgh4UEYaqgQkd VKx3Aa4J1iPtCgIboM7FSRlRTadLS6mskcG1tt89/oZGCULmoN6wQo+3as/v8ij5 81vEPrGo9g9bOlCZ6YceLER4lo80Fqa1AkEBZS5a5gW1lc7bCKuE11/cc+POEtn7 VrTfcgnjkFdfLZkU49y+jnh44TS7TuYpK2uwK0RNI8gCTQERa5JNIfEUVIKd+qML 8yKjOkNmKckDNqjmZcI7A2hdCjJ09vQ= -----END CERTIFICATE-----Generated at Fri Sep 11 03:31:14 2026 by rpki-client