$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/958d43d9-c341-46e7-b131-b154f01666e6/990b7dd1-611c-3ea1-aafc-3d83c74060da.roa File: 990b7dd1-611c-3ea1-aafc-3d83c74060da.roa (raw, json) Hash identifier: ccbgELAR7vRlVtz4/oAAfncEVsgP2e/eHV2SvFpl030= Subject key identifier: C8:C0:70:09:F5:62:E5:65:F4:08:5A:C8:B3:5D:2C:8F:57:F5:B2:CF Certificate issuer: /CN=958d43d9-c341-46e7-b131-b154f01666e6 Certificate serial: 010D0C9F4328584F1CC7A2F040D65D3CB9F0F200 Authority key identifier: E4:8F:F3:FC:95:1C:FA:80:6D:03:75:DF:E9:AB:35:C0:8E:5A:28:15 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/958d43d9-c341-46e7-b131-b154f01666e6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/958d43d9-c341-46e7-b131-b154f01666e6/990b7dd1-611c-3ea1-aafc-3d83c74060da.roa Signing time: Wed 09 Sep 2026 01:00:11 +0000 ROA not before: Wed 09 Sep 2026 01:00:11 +0000 ROA not after: Tue 08 Dec 2026 02:00:11 +0000 asID: 399687 IP address blocks: 23.189.240.0/24 maxlen: 24 146.19.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/958d43d9-c341-46e7-b131-b154f01666e6/958d43d9-c341-46e7-b131-b154f01666e6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/958d43d9-c341-46e7-b131-b154f01666e6/958d43d9-c341-46e7-b131-b154f01666e6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/958d43d9-c341-46e7-b131-b154f01666e6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:1c:c7:a2:f0:40:d6:5d:3c:b9:f0:f2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=958d43d9-c341-46e7-b131-b154f01666e6 Validity Not Before: Sep 9 01:00:11 2026 GMT Not After : Dec 8 02:00:11 2026 GMT Subject: CN=638367fd-1560-4cf5-b723-0ed972ee07ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:7d:72:b4:f4:e8:ac:96:70:9a:43:12:29:76: 31:0f:69:71:a6:28:ed:ad:e4:28:6d:4c:17:21:83: 9d:77:26:ce:28:10:90:3e:15:ad:f3:d4:a1:7a:8e: 7e:ce:14:99:b8:0d:b7:c3:37:97:4d:54:df:84:99: f5:a5:4a:91:7f:db:57:57:48:62:be:70:a1:c6:d2: 0d:5a:02:c1:fa:17:17:11:64:cb:50:53:fb:98:b2: 23:9c:9a:c0:78:7b:78:9e:f8:b4:5b:91:26:3d:83: 85:3e:ce:df:00:09:59:52:83:8b:52:41:38:ff:9a: 07:8d:c8:a5:cc:f3:1d:23:29:4f:53:ba:8e:b1:60: a0:3e:09:7a:90:b8:c3:01:1b:4a:99:8d:d2:15:08: 92:69:b9:3a:38:65:82:22:66:1a:29:62:3f:8e:16: 98:83:20:7a:55:f6:e4:0a:53:d7:1e:08:be:1a:01: 8b:7e:ea:a5:53:83:b3:0b:72:73:ff:87:2e:f9:09: a5:73:01:d6:14:25:3e:1b:6c:c1:b9:e2:c0:f4:36: 46:69:fd:99:42:c9:60:d8:84:f9:2e:00:7a:3d:35: ad:2c:2b:b6:1c:ec:9c:8c:cf:46:32:34:35:0d:46: 84:02:33:fc:4a:6a:7d:a3:d6:1e:55:a4:de:2b:00: c0:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:C0:70:09:F5:62:E5:65:F4:08:5A:C8:B3:5D:2C:8F:57:F5:B2:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/958d43d9-c341-46e7-b131-b154f01666e6/990b7dd1-611c-3ea1-aafc-3d83c74060da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/958d43d9-c341-46e7-b131-b154f01666e6/958d43d9-c341-46e7-b131-b154f01666e6.crl X509v3 Authority Key Identifier: keyid:E4:8F:F3:FC:95:1C:FA:80:6D:03:75:DF:E9:AB:35:C0:8E:5A:28:15 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/958d43d9-c341-46e7-b131-b154f01666e6.cer sbgp-ipAddrBlock: critical IPv4: 23.189.240.0/24 146.19.2.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:fa:95:f0:0c:72:7a:f1:5a:9a:59:43:7a:5b:bd:79:c5:c2: 10:89:98:f4:ed:fc:e9:ac:24:f0:e5:9e:1e:5b:9e:3d:6a:64: f7:eb:33:44:28:98:dd:32:27:43:bd:03:bf:56:38:c7:a6:41: 64:78:d3:bd:a0:b2:32:e1:3d:84:80:f3:a9:61:8c:89:41:fa: 70:17:2b:40:35:9d:2a:36:02:5d:7d:20:aa:cb:72:8a:d8:76: a4:5c:b1:f8:cb:75:f4:ac:a5:5b:92:9c:a8:ec:77:f7:fc:97: 52:d4:f7:31:8c:18:b9:38:93:7c:0d:fe:b8:56:0a:2e:17:dc: 88:83:89:53:b5:d2:49:10:17:c0:2d:ea:1c:4e:4c:bc:aa:ec: c0:4d:2a:4b:f1:54:a9:8f:f4:69:02:eb:bc:27:9b:6e:3d:c9: 40:7a:73:59:90:db:3a:87:ab:3d:37:24:f9:09:3d:ac:39:0b: 75:24:ce:8e:27:58:cc:cc:7d:d2:03:69:e6:c4:92:98:2b:62: 9e:b6:db:b4:c5:0f:9a:34:48:ad:b6:6c:0e:d7:fc:bb:9a:2b: 66:5c:21:f0:7d:8e:13:85:da:44:d4:3e:76:d1:45:b9:b6:18: 19:fc:5b:8c:2f:4c:ea:a9:b1:53:4e:2a:e7:da:c1:79:f0:28: 5a:2e:33:35 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE8cx6LwQNZdPLnw8gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTU4ZDQzZDktYzM0MS00NmU3LWIxMzEtYjE1NGYwMTY2 NmU2MB4XDTI2MDkwOTAxMDAxMVoXDTI2MTIwODAyMDAxMVowLzEtMCsGA1UEAxMk NjM4MzY3ZmQtMTU2MC00Y2Y1LWI3MjMtMGVkOTcyZWUwN2JhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs31ytPTorJZwmkMSKXYxD2lxpijtreQobUwX IYOddybOKBCQPhWt89Sheo5+zhSZuA23wzeXTVTfhJn1pUqRf9tXV0hivnChxtIN WgLB+hcXEWTLUFP7mLIjnJrAeHt4nvi0W5EmPYOFPs7fAAlZUoOLUkE4/5oHjcil zPMdIylPU7qOsWCgPgl6kLjDARtKmY3SFQiSabk6OGWCImYaKWI/jhaYgyB6Vfbk ClPXHgi+GgGLfuqlU4OzC3Jz/4cu+QmlcwHWFCU+G2zBueLA9DZGaf2ZQslg2IT5 LgB6PTWtLCu2HOycjM9GMjQ1DUaEAjP8Smp9o9YeVaTeKwDArwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFMjAcAn1YuVl9AhayLNdLI9X9bLPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi85NThk NDNkOS1jMzQxLTQ2ZTctYjEzMS1iMTU0ZjAxNjY2ZTYvOTkwYjdkZDEtNjExYy0z ZWExLWFhZmMtM2Q4M2M3NDA2MGRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOTU4ZDQzZDktYzM0MS00NmU3LWIx MzEtYjE1NGYwMTY2NmU2Lzk1OGQ0M2Q5LWMzNDEtNDZlNy1iMTMxLWIxNTRmMDE2 NjZlNi5jcmwwHwYDVR0jBBgwFoAU5I/z/JUc+oBtA3Xf6as1wI5aKBUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi85NThkNDNkOS1jMzQxLTQ2ZTctYjEzMS1iMTU0 ZjAxNjY2ZTYuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAF73wAwQA khMCMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBADn6lfAMcnrxWppZQ3pbvXnFwhCJmPTt/OmsJPDlnh5bnj1q ZPfrM0QomN0yJ0O9A79WOMemQWR4072gsjLhPYSA86lhjIlB+nAXK0A1nSo2Al19 IKrLcorYdqRcsfjLdfSspVuSnKjsd/f8l1LU9zGMGLk4k3wN/rhWCi4X3IiDiVO1 0kkQF8At6hxOTLyq7MBNKkvxVKmP9GkC67wnm249yUB6c1mQ2zqHqz03JPkJPaw5 C3Ukzo4nWMzMfdIDaebEkpgrYp6227TFD5o0SK22bA7X/LuaK2ZcIfB9jhOF2kTU PnbRRbm2GBn8W4wvTOqpsVNOKufawXnwKFouMzU= -----END CERTIFICATE-----Generated at Fri Oct 9 04:47:12 2026 by rpki-client