$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0452da18-1252-4f2f-a3b1-80b32b6d2a9b/990e62b2-cd91-3feb-804a-c376755743b3.roa File: 990e62b2-cd91-3feb-804a-c376755743b3.roa (raw, json) Hash identifier: d8b7bg4U5wC8wJZmPXlrowJ5e991BkhHzc3xhaDnOAA= Subject key identifier: 19:0E:74:47:3B:4C:E8:62:70:59:99:64:1E:29:6E:3E:8C:AD:A6:A1 Certificate issuer: /CN=0452da18-1252-4f2f-a3b1-80b32b6d2a9b Certificate serial: 010D0C9F4328584F43DD68350568121BB8862500 Authority key identifier: 29:EA:2C:26:C3:E2:D4:1D:89:87:77:34:1F:B7:E0:3C:38:87:C9:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0452da18-1252-4f2f-a3b1-80b32b6d2a9b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0452da18-1252-4f2f-a3b1-80b32b6d2a9b/990e62b2-cd91-3feb-804a-c376755743b3.roa Signing time: Wed 23 Sep 2026 01:00:12 +0000 ROA not before: Wed 23 Sep 2026 01:00:12 +0000 ROA not after: Tue 22 Dec 2026 02:00:12 +0000 asID: 215748 IP address blocks: 23.157.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0452da18-1252-4f2f-a3b1-80b32b6d2a9b/0452da18-1252-4f2f-a3b1-80b32b6d2a9b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0452da18-1252-4f2f-a3b1-80b32b6d2a9b/0452da18-1252-4f2f-a3b1-80b32b6d2a9b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0452da18-1252-4f2f-a3b1-80b32b6d2a9b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:43:dd:68:35:05:68:12:1b:b8:86:25:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0452da18-1252-4f2f-a3b1-80b32b6d2a9b Validity Not Before: Sep 23 01:00:12 2026 GMT Not After : Dec 22 02:00:12 2026 GMT Subject: CN=37dd66b9-717e-4eba-ab51-63e636807735 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:f4:2e:12:15:f5:9f:12:42:b3:76:31:15:f4: 24:5f:1c:5f:de:bc:da:a6:2f:5a:f8:a1:e1:25:95: aa:75:a8:ae:8f:7d:18:79:97:ec:26:cc:3b:4e:bc: dd:df:13:3a:c2:06:99:6f:ed:ad:d9:39:86:14:8a: 5f:50:5c:ad:27:c5:43:12:17:1a:4f:2f:b9:f5:db: cb:37:c9:23:07:c9:ca:d3:dc:4a:1f:08:8d:bb:76: a7:d3:b7:fb:91:ce:41:27:90:50:4a:a3:b7:17:16: 45:bb:16:77:e9:b5:c0:34:77:67:33:90:12:42:55: fb:af:36:cd:a4:5f:de:f2:e4:87:c9:7d:05:6b:15: 49:c8:a2:89:24:bd:e2:a7:65:b4:f4:7b:ad:0a:48: f6:dc:be:7e:9c:5e:ea:f0:41:6d:14:53:9b:ab:1c: ec:c9:e6:14:9d:f5:dc:fb:ba:e8:23:ca:02:56:f0: 5f:b4:ca:7b:e3:5b:fc:6b:f1:6d:f3:3e:94:82:ab: 6f:76:23:14:83:08:21:a0:89:29:45:90:07:7e:10: da:34:83:67:74:64:b4:57:ca:6c:3a:98:aa:a8:24: f0:25:ae:0d:09:f6:78:3b:9a:a5:4d:7d:ca:b7:f6: a3:f3:2f:20:97:15:5b:ba:ac:28:09:05:8c:2d:59: 31:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:0E:74:47:3B:4C:E8:62:70:59:99:64:1E:29:6E:3E:8C:AD:A6:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0452da18-1252-4f2f-a3b1-80b32b6d2a9b/990e62b2-cd91-3feb-804a-c376755743b3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0452da18-1252-4f2f-a3b1-80b32b6d2a9b/0452da18-1252-4f2f-a3b1-80b32b6d2a9b.crl X509v3 Authority Key Identifier: keyid:29:EA:2C:26:C3:E2:D4:1D:89:87:77:34:1F:B7:E0:3C:38:87:C9:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/0452da18-1252-4f2f-a3b1-80b32b6d2a9b.cer sbgp-ipAddrBlock: critical IPv4: 23.157.204.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:80:83:ef:53:7a:12:af:c1:09:1f:b3:b1:3c:02:ae:30:1d: 54:c2:05:8b:5a:7f:93:c7:c6:67:73:10:fb:67:c2:04:4c:ee: 86:29:be:e2:b7:69:17:d0:14:8f:32:7c:69:c6:93:0d:f1:72: a0:6e:3d:32:e2:84:57:cf:3c:85:23:c1:2b:67:07:5f:f4:61: 46:9e:0d:b6:ef:e9:1d:27:0a:85:10:be:12:55:2b:3f:37:6c: 92:e9:3b:54:73:d3:80:71:52:96:8a:5b:42:db:d0:5f:17:dc: 8e:1c:28:0f:69:1e:d6:b3:13:d1:22:c7:b8:23:b3:95:cd:b4: ef:9c:62:77:5b:b3:72:f2:09:f6:68:28:88:08:4b:24:3d:57: c3:4d:d8:fe:b1:e1:32:20:b3:a8:70:b6:5f:35:e8:5e:5f:24: 5c:ad:02:7c:85:47:99:29:83:39:c4:60:02:bf:37:d0:6e:d2: 6f:be:28:98:0d:81:4b:5a:7c:63:d6:11:a3:85:57:dd:7e:6e: 83:24:42:c4:75:4e:11:5f:c6:df:b1:85:89:5d:27:02:ee:29: 6d:49:e9:cc:96:da:0f:df:44:86:ad:f3:0e:57:98:ee:14:3f: e3:82:c6:9e:ae:d5:fe:78:de:84:8e:73:f6:66:8f:5b:23:5f: 7d:b3:a7:bc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9D3Wg1BWgSG7iGJQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDQ1MmRhMTgtMTI1Mi00ZjJmLWEzYjEtODBiMzJiNmQy YTliMB4XDTI2MDkyMzAxMDAxMloXDTI2MTIyMjAyMDAxMlowLzEtMCsGA1UEAxMk MzdkZDY2YjktNzE3ZS00ZWJhLWFiNTEtNjNlNjM2ODA3NzM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo/QuEhX1nxJCs3YxFfQkXxxf3rzapi9a+KHh JZWqdaiuj30YeZfsJsw7Trzd3xM6wgaZb+2t2TmGFIpfUFytJ8VDEhcaTy+59dvL N8kjB8nK09xKHwiNu3an07f7kc5BJ5BQSqO3FxZFuxZ36bXANHdnM5ASQlX7rzbN pF/e8uSHyX0FaxVJyKKJJL3ip2W09HutCkj23L5+nF7q8EFtFFObqxzsyeYUnfXc +7roI8oCVvBftMp741v8a/Ft8z6UgqtvdiMUgwghoIkpRZAHfhDaNINndGS0V8ps OpiqqCTwJa4NCfZ4O5qlTX3Kt/aj8y8glxVbuqwoCQWMLVkxswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBkOdEc7TOhicFmZZB4pbj6MraahMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8wNDUy ZGExOC0xMjUyLTRmMmYtYTNiMS04MGIzMmI2ZDJhOWIvOTkwZTYyYjItY2Q5MS0z ZmViLTgwNGEtYzM3Njc1NTc0M2IzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMDQ1MmRhMTgtMTI1Mi00ZjJmLWEz YjEtODBiMzJiNmQyYTliLzA0NTJkYTE4LTEyNTItNGYyZi1hM2IxLTgwYjMyYjZk MmE5Yi5jcmwwHwYDVR0jBBgwFoAUKeosJsPi1B2Jh3c0H7fgPDiHye0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8wNDUyZGExOC0xMjUyLTRmMmYtYTNiMS04MGIz MmI2ZDJhOWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF53MMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHeAg+9TehKvwQkfs7E8Aq4wHVTCBYtaf5PHxmdzEPtnwgRM7oYpvuK3 aRfQFI8yfGnGkw3xcqBuPTLihFfPPIUjwStnB1/0YUaeDbbv6R0nCoUQvhJVKz83 bJLpO1Rz04BxUpaKW0Lb0F8X3I4cKA9pHtazE9Eix7gjs5XNtO+cYndbs3LyCfZo KIgISyQ9V8NN2P6x4TIgs6hwtl816F5fJFytAnyFR5kpgznEYAK/N9Bu0m++KJgN gUtafGPWEaOFV91+boMkQsR1ThFfxt+xhYldJwLuKW1J6cyW2g/fRIat8w5XmO4U P+OCxp6u1f543oSOc/Zmj1sjX32zp7w= -----END CERTIFICATE-----Generated at Thu Sep 24 09:19:07 2026 by rpki-client