$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0a846bda-a477-4fe0-8f13-997253568b7e/df024027-651f-3384-b085-499c67c8e5f5.roa File: df024027-651f-3384-b085-499c67c8e5f5.roa (raw, json) Hash identifier: 4Slh2Gy3cPmVe0CD2zfMgIJF4A3aDdUy0iPEINPLwXY= Subject key identifier: 76:A2:77:2D:00:7A:B6:55:85:04:86:E9:C3:3C:5E:8B:96:CA:83:BD Certificate issuer: /CN=0a846bda-a477-4fe0-8f13-997253568b7e Certificate serial: 010D0C9F4328584ED431EC9AD8E51AB1D9B3EC40 Authority key identifier: DC:BA:E7:94:B6:81:A5:92:77:60:DA:DC:93:52:03:8D:85:F0:B8:69 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0a846bda-a477-4fe0-8f13-997253568b7e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0a846bda-a477-4fe0-8f13-997253568b7e/df024027-651f-3384-b085-499c67c8e5f5.roa Signing time: Fri 14 Aug 2026 01:00:13 +0000 ROA not before: Fri 14 Aug 2026 01:00:13 +0000 ROA not after: Thu 12 Nov 2026 02:00:13 +0000 asID: 14570 IP address blocks: 23.139.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0a846bda-a477-4fe0-8f13-997253568b7e/0a846bda-a477-4fe0-8f13-997253568b7e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0a846bda-a477-4fe0-8f13-997253568b7e/0a846bda-a477-4fe0-8f13-997253568b7e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0a846bda-a477-4fe0-8f13-997253568b7e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d4:31:ec:9a:d8:e5:1a:b1:d9:b3:ec:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a846bda-a477-4fe0-8f13-997253568b7e Validity Not Before: Aug 14 01:00:13 2026 GMT Not After : Nov 12 02:00:13 2026 GMT Subject: CN=f2bf0f19-7c07-4341-be3e-96b5aa94ef6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:53:d8:8d:01:4f:d7:c2:56:31:5c:35:b6:ce: a7:b6:ec:fc:e7:3b:fd:5e:9b:00:a9:e9:b1:20:96: 7d:4e:48:69:3b:73:6b:f0:eb:9c:34:76:79:51:2f: b7:0f:8f:22:ed:7b:d8:c6:69:93:cd:1b:b9:76:1e: 51:58:96:57:a6:35:55:e2:b7:92:02:9b:c4:d7:d1: 82:c5:ce:3f:a7:12:c3:98:07:ec:6a:80:e7:81:af: f4:33:d5:be:21:b1:b7:43:33:7b:ad:a9:4c:f8:96: 4f:74:f1:f1:42:8c:6d:52:f7:96:8a:eb:a7:86:0b: 40:ef:b5:93:a3:21:02:ea:d6:28:f1:1e:28:d7:9b: f4:9b:4f:8b:3f:15:a7:6d:17:de:60:63:39:50:70: 2b:3f:e1:52:bb:e2:12:c1:e3:3d:42:f7:92:59:c7: b4:32:e6:49:78:1e:bf:f2:d9:15:ed:9c:12:bc:c7: 60:68:bf:bf:a4:56:76:d3:f8:7b:fb:fe:c3:3d:d3: 5e:d4:20:b1:af:03:40:3d:1c:d3:86:40:c2:19:5e: 85:c8:3d:7a:ca:cc:12:1d:bc:9c:a1:33:57:91:f4: c5:72:fe:f5:12:90:03:ed:56:bb:12:58:7f:43:bb: e4:6b:a4:48:3b:4b:f0:76:59:b6:48:0d:28:fc:b4: 15:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:A2:77:2D:00:7A:B6:55:85:04:86:E9:C3:3C:5E:8B:96:CA:83:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0a846bda-a477-4fe0-8f13-997253568b7e/df024027-651f-3384-b085-499c67c8e5f5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0a846bda-a477-4fe0-8f13-997253568b7e/0a846bda-a477-4fe0-8f13-997253568b7e.crl X509v3 Authority Key Identifier: keyid:DC:BA:E7:94:B6:81:A5:92:77:60:DA:DC:93:52:03:8D:85:F0:B8:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0a846bda-a477-4fe0-8f13-997253568b7e.cer sbgp-ipAddrBlock: critical IPv4: 23.139.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:50:f4:6f:47:d4:a4:75:a0:34:a7:dc:0b:65:3b:9a:37:45: d8:fd:3a:06:93:1a:ff:f2:f4:8a:71:20:65:41:f4:08:e7:08: 2e:29:5e:7e:53:05:11:1b:c6:ea:a4:f4:32:27:f1:8e:92:e2: 45:5a:b5:1e:c8:84:f0:7d:11:99:ef:76:50:9c:2e:d3:25:d2: 38:53:19:ba:19:06:7c:d2:24:3e:6c:1b:62:58:7f:8a:b2:04: c5:42:d3:f8:9d:93:95:2a:a0:c8:ad:08:ab:c0:08:0b:64:5e: 74:41:a1:98:53:37:6e:3d:2d:9c:3f:41:3b:7d:18:ef:c7:b0: c3:72:7d:8d:02:b8:d5:85:ba:38:71:8b:a3:a8:b0:87:84:30: 5b:78:e4:6f:bc:5e:ea:ac:24:1d:54:8b:9d:c8:d2:0e:81:12: a3:c9:64:11:81:63:27:bc:25:64:c4:71:d2:90:2b:cf:c0:1e: 32:74:5d:37:92:d5:90:88:b0:90:fc:0c:1a:23:d8:6c:8c:6d: 05:77:34:4b:84:0e:81:f6:9b:3f:a6:0a:b1:d0:ac:a8:0b:c8: 4d:86:02:2b:b7:72:e1:5c:fd:26:6a:02:fb:3c:32:fb:63:52: 4a:4e:ea:6a:de:98:c1:02:c5:3a:bb:28:81:c2:15:63:2c:e8: 97:cd:d0:83 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7UMeya2OUasdmz7EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE4NDZiZGEtYTQ3Ny00ZmUwLThmMTMtOTk3MjUzNTY4 YjdlMB4XDTI2MDgxNDAxMDAxM1oXDTI2MTExMjAyMDAxM1owLzEtMCsGA1UEAxMk ZjJiZjBmMTktN2MwNy00MzQxLWJlM2UtOTZiNWFhOTRlZjZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmVPYjQFP18JWMVw1ts6ntuz85zv9XpsAqemx IJZ9TkhpO3Nr8OucNHZ5US+3D48i7XvYxmmTzRu5dh5RWJZXpjVV4reSApvE19GC xc4/pxLDmAfsaoDnga/0M9W+IbG3QzN7ralM+JZPdPHxQoxtUveWiuunhgtA77WT oyEC6tYo8R4o15v0m0+LPxWnbRfeYGM5UHArP+FSu+ISweM9QveSWce0MuZJeB6/ 8tkV7ZwSvMdgaL+/pFZ20/h7+/7DPdNe1CCxrwNAPRzThkDCGV6FyD16yswSHbyc oTNXkfTFcv71EpAD7Va7Elh/Q7vka6RIO0vwdlm2SA0o/LQVFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHaidy0AerZVhQSG6cM8XouWyoO9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8wYTg0 NmJkYS1hNDc3LTRmZTAtOGYxMy05OTcyNTM1NjhiN2UvZGYwMjQwMjctNjUxZi0z Mzg0LWIwODUtNDk5YzY3YzhlNWY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMGE4NDZiZGEtYTQ3Ny00ZmUwLThm MTMtOTk3MjUzNTY4YjdlLzBhODQ2YmRhLWE0NzctNGZlMC04ZjEzLTk5NzI1MzU2 OGI3ZS5jcmwwHwYDVR0jBBgwFoAU3LrnlLaBpZJ3YNrck1IDjYXwuGkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8wYTg0NmJkYS1hNDc3LTRmZTAtOGYxMy05OTcy NTM1NjhiN2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4t4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIZQ9G9H1KR1oDSn3AtlO5o3Rdj9OgaTGv/y9IpxIGVB9AjnCC4pXn5T BREbxuqk9DIn8Y6S4kVatR7IhPB9EZnvdlCcLtMl0jhTGboZBnzSJD5sG2JYf4qy BMVC0/idk5UqoMitCKvACAtkXnRBoZhTN249LZw/QTt9GO/HsMNyfY0CuNWFujhx i6OosIeEMFt45G+8XuqsJB1Ui53I0g6BEqPJZBGBYye8JWTEcdKQK8/AHjJ0XTeS 1ZCIsJD8DBoj2GyMbQV3NEuEDoH2mz+mCrHQrKgLyE2GAiu3cuFc/SZqAvs8Mvtj UkpO6mremMECxTq7KIHCFWMs6JfN0IM= -----END CERTIFICATE-----Generated at Sun Oct 11 09:03:29 2026 by rpki-client