$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e/07cd9fc5-1051-39bc-bd56-dadd655c312e.roa File: 07cd9fc5-1051-39bc-bd56-dadd655c312e.roa (raw, json) Hash identifier: I9piquiDnEwfTmInQAvCq0IaQmTHM9lqgjfoHCHt0mg= Subject key identifier: B1:BC:5E:6F:EA:EE:60:C9:7F:BB:44:E2:F2:B6:C6:0A:16:E8:B9:AF Certificate issuer: /CN=5933af70-fae4-44c6-9e42-2b9eda3c1e0e Certificate serial: 010D0C9F4328584F58CD55279399AC1BB7F77200 Authority key identifier: 5F:4A:62:AF:2E:C7:84:2A:E0:C5:DA:E6:B6:94:D8:89:17:4F:D5:1A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e/07cd9fc5-1051-39bc-bd56-dadd655c312e.roa Signing time: Wed 30 Sep 2026 13:00:13 +0000 ROA not before: Wed 30 Sep 2026 13:00:13 +0000 ROA not after: Tue 29 Dec 2026 14:00:13 +0000 asID: 400226 IP address blocks: 23.128.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e/5933af70-fae4-44c6-9e42-2b9eda3c1e0e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e/5933af70-fae4-44c6-9e42-2b9eda3c1e0e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Oct 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:58:cd:55:27:93:99:ac:1b:b7:f7:72:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5933af70-fae4-44c6-9e42-2b9eda3c1e0e Validity Not Before: Sep 30 13:00:13 2026 GMT Not After : Dec 29 14:00:13 2026 GMT Subject: CN=542e2151-2058-4cfa-93b2-8734f66654ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:be:1f:70:b0:c7:2e:52:ab:37:8e:03:b8:b3: 95:1d:64:8d:c5:2a:f4:7d:f3:75:bc:91:3c:96:c9: 60:cd:93:96:3a:b2:34:72:63:57:36:37:7b:3f:7d: a7:81:cc:4f:a4:38:ed:d9:2b:ce:b7:6d:da:12:0d: e8:7e:17:e0:b6:a6:36:1f:8b:83:52:70:b2:8d:fb: e8:3a:7d:d3:3b:16:92:4a:86:c4:69:da:e0:38:e2: f3:19:5c:e7:e5:2f:98:a3:c7:6f:ac:b0:f9:28:be: 85:f3:57:57:20:5b:2e:9a:e0:9e:13:4c:0e:e5:cb: 01:fb:e5:2c:09:c2:31:74:8f:95:0c:8e:c5:aa:27: 11:ed:9e:ec:e2:91:c9:33:40:81:9d:ef:97:d1:e2: 11:4c:37:a9:94:d1:5a:6c:49:47:a3:9e:29:b6:30: cd:98:6d:0b:fe:c1:11:b4:ad:fd:b8:8c:05:35:5a: b6:68:4e:30:dd:8f:4e:14:3e:05:dd:8f:e8:08:fe: 1b:40:d8:15:2d:f4:16:44:fe:1c:6a:15:6a:06:31: b6:52:d2:f3:97:d6:52:29:dd:30:a8:ed:4b:c2:2d: c9:18:57:22:50:47:2a:4d:63:5e:f2:2e:88:63:4b: da:8d:37:13:da:2c:2a:22:1b:d0:fa:cd:3f:90:b5: 22:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:BC:5E:6F:EA:EE:60:C9:7F:BB:44:E2:F2:B6:C6:0A:16:E8:B9:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e/07cd9fc5-1051-39bc-bd56-dadd655c312e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e/5933af70-fae4-44c6-9e42-2b9eda3c1e0e.crl X509v3 Authority Key Identifier: keyid:5F:4A:62:AF:2E:C7:84:2A:E0:C5:DA:E6:B6:94:D8:89:17:4F:D5:1A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5933af70-fae4-44c6-9e42-2b9eda3c1e0e.cer sbgp-ipAddrBlock: critical IPv4: 23.128.248.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption db:2d:44:d5:8c:eb:4b:17:1f:51:ef:a5:9a:4e:da:27:72:b5: df:93:29:44:d8:fa:e6:7e:a4:3f:18:59:ff:30:65:2b:41:09: c7:aa:85:9c:5b:44:b8:78:0f:9a:97:c4:21:c0:26:47:b4:35: ec:ec:c4:9b:a1:98:a0:46:0b:ad:8a:c9:2b:0e:4a:26:6a:66: 57:50:21:f3:60:83:95:47:55:9d:36:ea:71:12:4d:71:c4:a7: e6:84:95:00:96:ac:8f:da:19:8c:a7:e1:83:8b:f6:8a:7d:28: 83:e4:8a:e7:16:4b:15:27:1c:b4:0c:8b:87:ac:97:81:6e:e2: bc:09:36:48:d4:0f:d3:84:ea:bf:55:fb:89:16:dc:a2:c6:29: 2e:f1:06:b5:18:4d:8d:9e:11:33:7e:bc:1c:05:eb:ee:13:5c: b0:fd:4e:ae:65:0b:b6:6b:56:96:91:5e:28:1f:cf:b4:1e:39: 2c:89:45:5f:60:e1:71:67:ab:40:e6:5a:ae:4b:fd:7e:19:4e: 26:04:1d:d9:a1:ed:31:b8:51:9b:2d:4d:9b:b7:90:25:c7:97: b0:44:fe:8c:94:a4:c6:18:29:c8:cb:65:d5:6d:08:07:21:b4: 67:a1:79:78:51:ef:96:62:6e:6a:78:3f:25:99:4d:b2:f8:4e: fc:08:0e:bc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9YzVUnk5msG7f3cgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTkzM2FmNzAtZmFlNC00NGM2LTllNDItMmI5ZWRhM2Mx ZTBlMB4XDTI2MDkzMDEzMDAxM1oXDTI2MTIyOTE0MDAxM1owLzEtMCsGA1UEAxMk NTQyZTIxNTEtMjA1OC00Y2ZhLTkzYjItODczNGY2NjY1NGNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg74fcLDHLlKrN44DuLOVHWSNxSr0ffN1vJE8 lslgzZOWOrI0cmNXNjd7P32ngcxPpDjt2SvOt23aEg3ofhfgtqY2H4uDUnCyjfvo On3TOxaSSobEadrgOOLzGVzn5S+Yo8dvrLD5KL6F81dXIFsumuCeE0wO5csB++Us CcIxdI+VDI7FqicR7Z7s4pHJM0CBne+X0eIRTDeplNFabElHo54ptjDNmG0L/sER tK39uIwFNVq2aE4w3Y9OFD4F3Y/oCP4bQNgVLfQWRP4cahVqBjG2UtLzl9ZSKd0w qO1Lwi3JGFciUEcqTWNe8i6IY0vajTcT2iwqIhvQ+s0/kLUiFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLG8Xm/q7mDJf7tE4vK2xgoW6LmvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81OTMz YWY3MC1mYWU0LTQ0YzYtOWU0Mi0yYjllZGEzYzFlMGUvMDdjZDlmYzUtMTA1MS0z OWJjLWJkNTYtZGFkZDY1NWMzMTJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTkzM2FmNzAtZmFlNC00NGM2LTll NDItMmI5ZWRhM2MxZTBlLzU5MzNhZjcwLWZhZTQtNDRjNi05ZTQyLTJiOWVkYTNj MWUwZS5jcmwwHwYDVR0jBBgwFoAUX0piry7HhCrgxdrmtpTYiRdP1RowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81OTMzYWY3MC1mYWU0LTQ0YzYtOWU0Mi0yYjll ZGEzYzFlMGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4D4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANstRNWM60sXH1HvpZpO2idytd+TKUTY+uZ+pD8YWf8wZStBCceqhZxb RLh4D5qXxCHAJke0NezsxJuhmKBGC62KySsOSiZqZldQIfNgg5VHVZ026nESTXHE p+aElQCWrI/aGYyn4YOL9op9KIPkiucWSxUnHLQMi4esl4Fu4rwJNkjUD9OE6r9V +4kW3KLGKS7xBrUYTY2eETN+vBwF6+4TXLD9Tq5lC7ZrVpaRXigfz7QeOSyJRV9g 4XFnq0DmWq5L/X4ZTiYEHdmh7TG4UZstTZu3kCXHl7BE/oyUpMYYKcjLZdVtCAch tGeheXhR75Zibmp4PyWZTbL4TvwIDrw= -----END CERTIFICATE-----Generated at Sat Oct 10 11:11:00 2026 by rpki-client