$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4d754a75-6fef-427a-8a5d-d152fb72f46d/eafd673f-1b99-3314-a8b5-d658f6891223.roa File: eafd673f-1b99-3314-a8b5-d658f6891223.roa (raw, json) Hash identifier: W+N4ivgytRnS1raKWDfv2vULdTLqurJ8xdX+h6GQCxI= Subject key identifier: 65:B1:84:95:72:4A:31:D9:3E:90:89:A7:66:7A:B2:22:23:97:A0:83 Certificate issuer: /CN=4d754a75-6fef-427a-8a5d-d152fb72f46d Certificate serial: 010D0C9F4328584F4987F37493918BC528113240 Authority key identifier: E4:23:FA:30:4E:50:F0:F7:51:74:45:81:BD:6E:13:37:F9:19:D9:4B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4d754a75-6fef-427a-8a5d-d152fb72f46d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4d754a75-6fef-427a-8a5d-d152fb72f46d/eafd673f-1b99-3314-a8b5-d658f6891223.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 32913 IP address blocks: 23.157.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4d754a75-6fef-427a-8a5d-d152fb72f46d/4d754a75-6fef-427a-8a5d-d152fb72f46d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4d754a75-6fef-427a-8a5d-d152fb72f46d/4d754a75-6fef-427a-8a5d-d152fb72f46d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4d754a75-6fef-427a-8a5d-d152fb72f46d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:87:f3:74:93:91:8b:c5:28:11:32:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d754a75-6fef-427a-8a5d-d152fb72f46d Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=d512aae5-4ce1-4153-92a3-22a0a315d285 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:8e:d7:7c:a1:14:bf:bd:78:5e:54:5e:d9:7a: 65:d1:a6:0f:37:75:3e:47:ce:11:5e:24:70:ab:8f: 2f:bf:c8:ce:9d:30:1a:bf:26:8e:61:b7:c7:94:6d: aa:a2:dc:90:73:fe:12:3f:16:4b:f4:74:ba:cb:44: d4:80:c1:e6:c0:b7:e3:cb:01:61:03:6b:0d:ad:98: 74:20:4e:5a:55:e2:48:e1:02:7e:33:1e:9c:5a:88: 72:30:39:59:8c:41:d7:bd:7c:69:b4:4d:de:1a:b0: b9:3c:09:b9:07:b4:99:e9:b4:b6:68:a3:a2:54:ec: 1a:d1:3b:df:05:45:cc:40:65:52:44:83:68:e5:99: dc:42:b9:33:e7:14:d6:b9:15:b2:36:fc:ea:a3:61: 13:5c:42:dc:25:1c:e6:08:f1:b4:07:a5:fe:02:59: 11:11:52:97:06:e9:51:de:b0:30:7d:62:3c:cd:4d: 78:84:83:0c:27:f4:77:21:9e:78:44:99:1f:cf:f3: 1e:81:78:f8:3a:32:0e:21:50:8c:8f:33:b4:84:48: 9e:83:55:57:3f:e3:ab:ab:c4:d0:21:07:7e:ee:2e: 9b:9d:f8:0c:93:32:bf:fb:e1:1b:e8:9a:99:d2:f0: 08:30:a3:2d:4e:27:74:01:3e:01:41:89:a1:60:4d: 5a:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:B1:84:95:72:4A:31:D9:3E:90:89:A7:66:7A:B2:22:23:97:A0:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4d754a75-6fef-427a-8a5d-d152fb72f46d/eafd673f-1b99-3314-a8b5-d658f6891223.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4d754a75-6fef-427a-8a5d-d152fb72f46d/4d754a75-6fef-427a-8a5d-d152fb72f46d.crl X509v3 Authority Key Identifier: keyid:E4:23:FA:30:4E:50:F0:F7:51:74:45:81:BD:6E:13:37:F9:19:D9:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4d754a75-6fef-427a-8a5d-d152fb72f46d.cer sbgp-ipAddrBlock: critical IPv4: 23.157.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:a9:9e:5f:48:72:f3:6a:e0:bb:a4:b2:c9:f1:5f:29:84:cc: d8:27:32:0e:51:5e:51:7d:1d:f1:c5:16:84:6d:a0:f6:2f:65: 39:5b:4b:65:8c:51:a8:3f:84:19:c6:b8:6e:d0:03:f1:30:c4: 68:5c:e8:a6:4e:2f:55:02:57:ad:61:1d:6b:25:2c:bf:35:a2: 4d:77:c6:1f:a6:9f:ec:bb:02:f9:de:a0:84:b7:ee:d5:8d:80: 92:77:4e:f3:24:7e:7d:d1:2a:b5:0f:76:cd:cf:d8:92:2e:ae: d7:7b:42:18:99:ff:bd:6c:13:05:19:44:40:7c:b1:89:df:89: 04:f8:28:4f:be:da:ea:7f:3c:b7:84:c1:90:7d:2b:9d:75:b6: f7:c0:ec:fb:d2:00:15:73:d6:bc:33:58:af:5e:af:4b:bc:42: 85:cb:be:e2:f7:38:a3:27:04:f1:b2:0c:29:13:50:a0:e8:a6: bf:6b:db:07:9a:cd:66:64:a9:c5:69:13:22:ed:48:49:ff:5a: 5c:9f:be:86:03:c5:9e:1f:cd:6b:01:50:d4:37:02:f9:32:e8: 31:01:ca:b5:91:e1:1a:ab:b9:3c:cf:45:a8:81:3d:2f:65:5e: 1f:87:84:08:b0:9a:35:45:85:c7:8b:c5:c2:07:a6:d0:70:36: 4c:32:39:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jh/N0k5GLxSgRMkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGQ3NTRhNzUtNmZlZi00MjdhLThhNWQtZDE1MmZiNzJm NDZkMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZDUxMmFhZTUtNGNlMS00MTUzLTkyYTMtMjJhMGEzMTVkMjg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm47XfKEUv714XlRe2Xpl0aYPN3U+R84RXiRw q48vv8jOnTAavyaOYbfHlG2qotyQc/4SPxZL9HS6y0TUgMHmwLfjywFhA2sNrZh0 IE5aVeJI4QJ+Mx6cWohyMDlZjEHXvXxptE3eGrC5PAm5B7SZ6bS2aKOiVOwa0Tvf BUXMQGVSRINo5ZncQrkz5xTWuRWyNvzqo2ETXELcJRzmCPG0B6X+AlkREVKXBulR 3rAwfWI8zU14hIMMJ/R3IZ54RJkfz/MegXj4OjIOIVCMjzO0hEieg1VXP+Orq8TQ IQd+7i6bnfgMkzK/++Eb6JqZ0vAIMKMtTid0AT4BQYmhYE1a6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGWxhJVySjHZPpCJp2Z6siIjl6CDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZDc1 NGE3NS02ZmVmLTQyN2EtOGE1ZC1kMTUyZmI3MmY0NmQvZWFmZDY3M2YtMWI5OS0z MzE0LWE4YjUtZDY1OGY2ODkxMjIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGQ3NTRhNzUtNmZlZi00MjdhLThh NWQtZDE1MmZiNzJmNDZkLzRkNzU0YTc1LTZmZWYtNDI3YS04YTVkLWQxNTJmYjcy ZjQ2ZC5jcmwwHwYDVR0jBBgwFoAU5CP6ME5Q8PdRdEWBvW4TN/kZ2UswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ZDc1NGE3NS02ZmVmLTQyN2EtOGE1ZC1kMTUy ZmI3MmY0NmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF52YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACCpnl9IcvNq4LukssnxXymEzNgnMg5RXlF9HfHFFoRtoPYvZTlbS2WM Uag/hBnGuG7QA/EwxGhc6KZOL1UCV61hHWslLL81ok13xh+mn+y7AvneoIS37tWN gJJ3TvMkfn3RKrUPds3P2JIurtd7QhiZ/71sEwUZREB8sYnfiQT4KE++2up/PLeE wZB9K511tvfA7PvSABVz1rwzWK9er0u8QoXLvuL3OKMnBPGyDCkTUKDopr9r2wea zWZkqcVpEyLtSEn/WlyfvoYDxZ4fzWsBUNQ3Avky6DEByrWR4RqruTzPRaiBPS9l Xh+HhAiwmjVFhceLxcIHptBwNkwyOeA= -----END CERTIFICATE-----Generated at Tue Oct 6 21:06:07 2026 by rpki-client