$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281/28b7558c-0a86-30e8-a429-1570b46f2dc7.roa File: 28b7558c-0a86-30e8-a429-1570b46f2dc7.roa (raw, json) Hash identifier: crkwOK29e3cxP5sMrvrpqK6GlfiAwSEEtGBuT4LgGiY= Subject key identifier: F0:DE:FD:BD:56:C0:B7:8E:47:BD:2C:84:4E:94:A8:88:77:0A:6B:C8 Certificate issuer: /CN=66ee137c-4201-4a21-a4f5-2f3161305281 Certificate serial: 010D0C9F4328584F498868CC05D32CD77C539D80 Authority key identifier: 93:AB:BA:5B:78:E6:75:D1:1A:42:E2:19:57:D6:1E:B4:6E:0D:DB:C6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281/28b7558c-0a86-30e8-a429-1570b46f2dc7.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 20473 IP address blocks: 23.154.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281/66ee137c-4201-4a21-a4f5-2f3161305281.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281/66ee137c-4201-4a21-a4f5-2f3161305281.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:88:68:cc:05:d3:2c:d7:7c:53:9d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66ee137c-4201-4a21-a4f5-2f3161305281 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=edfcc29a-2b97-4f6c-a9a0-37fe781944e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:09:b9:e1:76:0f:c9:c2:2d:4a:fe:26:9e:4e: 63:60:21:9b:8c:bf:15:a5:0f:33:f3:8c:d5:30:d2: b5:4e:b0:7a:53:4a:c5:78:6b:2e:1a:72:6f:dd:c8: f5:f6:80:07:58:67:67:70:da:94:27:02:10:7c:cb: e0:ee:0f:7f:ff:78:a6:fb:a4:c0:ff:c0:d1:ac:83: 0d:8a:d3:b6:b3:18:c6:93:17:26:29:5d:02:b4:2c: 31:2d:6b:5a:02:94:69:56:6f:59:7d:84:77:cf:6d: e2:27:de:63:bb:ff:34:91:08:43:5c:b0:5b:ca:57: ae:d9:58:65:db:22:b8:26:36:ac:76:34:99:3c:b0: 90:d5:72:fc:be:8e:07:c6:67:66:96:38:1b:e5:f4: e4:8d:14:ad:03:b3:40:6e:08:e4:bb:c7:0e:c9:51: aa:26:b5:ae:6c:af:d5:38:2f:56:bc:45:76:e2:fc: 8e:94:3a:e6:c0:5b:9a:eb:49:eb:8b:c7:cb:ad:ae: ee:36:59:3d:23:f6:0d:a4:89:ab:f6:59:8b:94:1c: a2:d8:1b:79:d0:c3:d1:87:eb:8b:74:43:ed:9c:c2: 49:4b:32:31:6e:3d:83:6c:84:6d:fd:72:fa:15:73: 37:d5:d3:4d:8f:de:e9:7e:d0:3c:dd:d6:01:2a:28: 46:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:DE:FD:BD:56:C0:B7:8E:47:BD:2C:84:4E:94:A8:88:77:0A:6B:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281/28b7558c-0a86-30e8-a429-1570b46f2dc7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281/66ee137c-4201-4a21-a4f5-2f3161305281.crl X509v3 Authority Key Identifier: keyid:93:AB:BA:5B:78:E6:75:D1:1A:42:E2:19:57:D6:1E:B4:6E:0D:DB:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281.cer sbgp-ipAddrBlock: critical IPv4: 23.154.88.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:7c:7d:56:40:2e:9a:2a:ec:cc:b4:85:1d:7e:b0:0b:ec:71: 9d:4f:d5:10:26:97:d7:5b:41:2c:ec:a6:4c:c1:45:14:c6:69: 15:d3:49:9b:9f:c0:1d:42:6f:bb:61:eb:4a:17:62:a0:e2:0f: 07:eb:61:bc:22:89:a4:01:e3:d4:db:da:d0:30:d1:8b:aa:97: d6:49:1f:5d:00:7a:bf:5f:31:9a:76:ad:d2:f0:78:3a:b6:1b: 8a:05:2e:13:1d:47:4f:9d:75:53:d1:e9:98:89:1b:cb:7e:ad: c3:99:fb:c7:ce:6f:05:ff:20:33:aa:a5:22:a2:3f:37:f8:88: 62:77:99:c8:ed:d2:26:72:79:ff:d4:2d:d7:2f:e7:d7:97:3d: 9c:04:ef:c1:68:e9:a6:a8:99:cb:f8:01:f0:4b:49:c7:17:12: 72:05:26:ea:9e:16:5a:9f:bd:a2:fb:00:77:34:73:d5:df:cf: 34:ae:88:d6:27:f5:72:be:f4:8a:54:e3:2f:b4:de:4f:6f:e4: 01:0a:d2:86:63:75:60:03:ec:ca:96:2a:5e:f4:19:c1:6e:a0: ea:73:f1:78:a0:a5:4d:32:15:5e:8c:24:ae:a2:f2:b9:5b:b9: 1d:4a:0c:52:04:58:bb:27:ce:a2:89:26:dc:6e:50:40:a3:ff: d6:d3:77:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JiGjMBdMs13xTnYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZlZTEzN2MtNDIwMS00YTIxLWE0ZjUtMmYzMTYxMzA1 MjgxMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZWRmY2MyOWEtMmI5Ny00ZjZjLWE5YTAtMzdmZTc4MTk0NGUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0wm54XYPycItSv4mnk5jYCGbjL8VpQ8z84zV MNK1TrB6U0rFeGsuGnJv3cj19oAHWGdncNqUJwIQfMvg7g9//3im+6TA/8DRrIMN itO2sxjGkxcmKV0CtCwxLWtaApRpVm9ZfYR3z23iJ95ju/80kQhDXLBbyleu2Vhl 2yK4JjasdjSZPLCQ1XL8vo4Hxmdmljgb5fTkjRStA7NAbgjku8cOyVGqJrWubK/V OC9WvEV24vyOlDrmwFua60nri8fLra7uNlk9I/YNpImr9lmLlByi2Bt50MPRh+uL dEPtnMJJSzIxbj2DbIRt/XL6FXM31dNNj97pftA83dYBKihGzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPDe/b1WwLeOR70shE6UqIh3CmvIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC82NmVl MTM3Yy00MjAxLTRhMjEtYTRmNS0yZjMxNjEzMDUyODEvMjhiNzU1OGMtMGE4Ni0z MGU4LWE0MjktMTU3MGI0NmYyZGM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNjZlZTEzN2MtNDIwMS00YTIxLWE0 ZjUtMmYzMTYxMzA1MjgxLzY2ZWUxMzdjLTQyMDEtNGEyMS1hNGY1LTJmMzE2MTMw NTI4MS5jcmwwHwYDVR0jBBgwFoAUk6u6W3jmddEaQuIZV9YetG4N28YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC82NmVlMTM3Yy00MjAxLTRhMjEtYTRmNS0yZjMx NjEzMDUyODEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5pYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACJ8fVZALpoq7My0hR1+sAvscZ1P1RAml9dbQSzspkzBRRTGaRXTSZuf wB1Cb7th60oXYqDiDwfrYbwiiaQB49Tb2tAw0Yuql9ZJH10Aer9fMZp2rdLweDq2 G4oFLhMdR0+ddVPR6ZiJG8t+rcOZ+8fObwX/IDOqpSKiPzf4iGJ3mcjt0iZyef/U Ldcv59eXPZwE78Fo6aaomcv4AfBLSccXEnIFJuqeFlqfvaL7AHc0c9XfzzSuiNYn 9XK+9IpU4y+03k9v5AEK0oZjdWAD7MqWKl70GcFuoOpz8XigpU0yFV6MJK6i8rlb uR1KDFIEWLsnzqKJJtxuUECj/9bTd1g= -----END CERTIFICATE-----Generated at Sun Sep 27 00:09:55 2026 by rpki-client