$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/7d4b5dad-e51a-483b-88aa-d70fd450f144/5365b51e-9b07-3c7f-9bfa-2a8bcd8ae677.roa File: 5365b51e-9b07-3c7f-9bfa-2a8bcd8ae677.roa (raw, json) Hash identifier: yjbA2yJnyh9ICP9T5Y+SmGxdUKGx/PUKTGQPDIRL0tI= Subject key identifier: 20:E6:AC:2E:CC:A0:82:B8:8D:73:B6:33:D8:CA:A5:1E:B4:D3:EF:92 Certificate issuer: /CN=7d4b5dad-e51a-483b-88aa-d70fd450f144 Certificate serial: 010D0C9F4328584F4974EA60A6D5731581A9EB80 Authority key identifier: 70:A4:9E:86:C2:30:D5:98:62:55:71:40:02:B0:09:86:1E:92:BE:67 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/7d4b5dad-e51a-483b-88aa-d70fd450f144.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/7d4b5dad-e51a-483b-88aa-d70fd450f144/5365b51e-9b07-3c7f-9bfa-2a8bcd8ae677.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 40117 IP address blocks: 23.158.52.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/7d4b5dad-e51a-483b-88aa-d70fd450f144/7d4b5dad-e51a-483b-88aa-d70fd450f144.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/7d4b5dad-e51a-483b-88aa-d70fd450f144/7d4b5dad-e51a-483b-88aa-d70fd450f144.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/7d4b5dad-e51a-483b-88aa-d70fd450f144.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:ea:60:a6:d5:73:15:81:a9:eb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d4b5dad-e51a-483b-88aa-d70fd450f144 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=032f7dc2-a5b1-4e13-ae20-c40d4edb9364 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:f6:be:cd:7b:1a:78:a7:29:22:79:ea:b1:d3: 8a:f9:b4:c9:d1:a1:d9:eb:64:19:dd:4f:21:b0:fe: aa:61:1e:dc:b8:51:ad:d6:c5:2d:c3:1c:87:ea:6a: 9a:e3:69:b7:36:26:39:0a:bf:f4:7f:d9:99:15:71: b3:65:46:4c:2f:70:f5:c9:0d:b7:14:79:17:25:aa: 4c:6f:cf:b3:0b:31:1c:78:e5:27:2c:4c:1e:b4:6a: 53:75:08:a7:08:23:0f:c2:00:9d:fb:9c:8b:1c:b9: 3d:e7:9a:fe:ff:76:f7:10:bb:44:f4:37:4d:04:8b: 5f:91:4e:80:b6:08:ba:36:02:aa:e8:43:e1:15:46: 7d:53:b7:f4:f3:d6:35:63:79:8b:ae:58:0b:d3:ba: 40:95:7d:a1:d2:a6:f3:f7:d9:02:53:4c:a4:64:69: 66:5e:8a:4d:0c:a9:07:22:67:b8:6a:39:89:a0:a4: eb:02:30:ed:44:33:78:78:59:50:5e:d6:a2:37:e0: e8:00:d8:be:d1:4d:78:bf:90:19:70:28:05:b2:37: 28:72:b4:02:54:12:af:91:d4:2f:16:40:f4:a3:55: 80:e6:8c:5c:42:1c:54:49:15:ca:83:4d:29:fd:88: c3:6a:85:1c:88:14:5e:09:e7:b3:e5:57:41:f4:51: d3:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:E6:AC:2E:CC:A0:82:B8:8D:73:B6:33:D8:CA:A5:1E:B4:D3:EF:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/7d4b5dad-e51a-483b-88aa-d70fd450f144/5365b51e-9b07-3c7f-9bfa-2a8bcd8ae677.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/7d4b5dad-e51a-483b-88aa-d70fd450f144/7d4b5dad-e51a-483b-88aa-d70fd450f144.crl X509v3 Authority Key Identifier: keyid:70:A4:9E:86:C2:30:D5:98:62:55:71:40:02:B0:09:86:1E:92:BE:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/7d4b5dad-e51a-483b-88aa-d70fd450f144.cer sbgp-ipAddrBlock: critical IPv4: 23.158.52.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:e8:25:2e:80:e0:f5:4b:06:78:80:3f:16:cf:67:db:93:f7: c1:66:9e:66:7c:c8:7a:3e:34:6f:bf:de:12:02:c7:ad:81:a4: a2:e5:14:bc:dc:2c:b9:e6:76:1c:f1:d9:b4:3a:60:fa:85:72: bd:92:d9:e0:16:4f:3f:96:bd:8d:df:f3:bb:34:0f:89:a5:b1: 6b:b6:4b:42:91:3d:59:4e:97:a2:f0:6e:05:d6:70:fd:af:37: 76:98:26:fd:96:37:45:86:2d:1b:a1:18:96:69:ee:23:3c:e1: 99:a9:fb:ec:d7:25:4c:ab:09:bc:da:fb:88:82:a1:33:59:9b: 08:24:4e:35:e6:0b:56:e8:c0:36:de:e1:6a:8e:33:77:31:2d: 76:b6:20:37:85:14:a5:fb:64:29:71:75:b9:f5:65:65:62:3c: 7d:cf:3b:57:0a:2a:6f:a1:aa:fd:66:5f:ce:73:be:9d:b5:08: 47:02:6b:36:2b:60:1a:d6:7e:dd:c3:8a:ef:f1:89:1d:5a:c3: 50:4c:76:47:44:af:bc:a4:26:62:79:43:65:27:41:ca:7d:31: 9d:d0:37:76:83:c2:92:a2:83:71:55:8d:d7:c9:e6:cc:1d:94: be:35:bd:3c:b0:34:76:2d:c7:1a:0b:6b:be:da:ab:7c:b5:1a: dd:95:e3:12 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdOpgptVzFYGp64AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2Q0YjVkYWQtZTUxYS00ODNiLTg4YWEtZDcwZmQ0NTBm MTQ0MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MDMyZjdkYzItYTViMS00ZTEzLWFlMjAtYzQwZDRlZGI5MzY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlPa+zXsaeKcpInnqsdOK+bTJ0aHZ62QZ3U8h sP6qYR7cuFGt1sUtwxyH6mqa42m3NiY5Cr/0f9mZFXGzZUZML3D1yQ23FHkXJapM b8+zCzEceOUnLEwetGpTdQinCCMPwgCd+5yLHLk955r+/3b3ELtE9DdNBItfkU6A tgi6NgKq6EPhFUZ9U7f089Y1Y3mLrlgL07pAlX2h0qbz99kCU0ykZGlmXopNDKkH Ime4ajmJoKTrAjDtRDN4eFlQXtaiN+DoANi+0U14v5AZcCgFsjcocrQCVBKvkdQv FkD0o1WA5oxcQhxUSRXKg00p/YjDaoUciBReCeez5VdB9FHT3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCDmrC7MoIK4jXO2M9jKpR600++SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi83ZDRi NWRhZC1lNTFhLTQ4M2ItODhhYS1kNzBmZDQ1MGYxNDQvNTM2NWI1MWUtOWIwNy0z YzdmLTliZmEtMmE4YmNkOGFlNjc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvN2Q0YjVkYWQtZTUxYS00ODNiLTg4 YWEtZDcwZmQ0NTBmMTQ0LzdkNGI1ZGFkLWU1MWEtNDgzYi04OGFhLWQ3MGZkNDUw ZjE0NC5jcmwwHwYDVR0jBBgwFoAUcKSehsIw1ZhiVXFAArAJhh6SvmcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi83ZDRiNWRhZC1lNTFhLTQ4M2ItODhhYS1kNzBm ZDQ1MGYxNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF540MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEXoJS6A4PVLBniAPxbPZ9uT98FmnmZ8yHo+NG+/3hICx62BpKLlFLzc LLnmdhzx2bQ6YPqFcr2S2eAWTz+WvY3f87s0D4mlsWu2S0KRPVlOl6LwbgXWcP2v N3aYJv2WN0WGLRuhGJZp7iM84Zmp++zXJUyrCbza+4iCoTNZmwgkTjXmC1bowDbe 4WqOM3cxLXa2IDeFFKX7ZClxdbn1ZWViPH3PO1cKKm+hqv1mX85zvp21CEcCazYr YBrWft3Diu/xiR1aw1BMdkdEr7ykJmJ5Q2UnQcp9MZ3QN3aDwpKig3FVjdfJ5swd lL41vTywNHYtxxoLa77aq3y1Gt2V4xI= -----END CERTIFICATE-----Generated at Sun Sep 27 10:20:56 2026 by rpki-client