$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c8252214-88a3-4807-bbe2-b344c3be7f19/a1bc269a-e265-3234-b628-e9d71b3d725d.roa File: a1bc269a-e265-3234-b628-e9d71b3d725d.roa (raw, json) Hash identifier: oIi7+FjPQBANtbADOwxf0ZBZbk791RD2Jhi0li7N2co= Subject key identifier: 14:D4:28:2A:5B:46:8C:BE:B1:97:C7:DD:42:29:A1:F0:27:86:5D:6E Certificate issuer: /CN=c8252214-88a3-4807-bbe2-b344c3be7f19 Certificate serial: 010D0C9F4328584F119CF2B3FF0485BBC461A110 Authority key identifier: 62:5C:F9:36:83:28:14:A8:E3:04:43:16:15:F5:84:D0:FC:D6:CF:1B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c8252214-88a3-4807-bbe2-b344c3be7f19.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c8252214-88a3-4807-bbe2-b344c3be7f19/a1bc269a-e265-3234-b628-e9d71b3d725d.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 25639 IP address blocks: 23.152.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c8252214-88a3-4807-bbe2-b344c3be7f19/c8252214-88a3-4807-bbe2-b344c3be7f19.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c8252214-88a3-4807-bbe2-b344c3be7f19/c8252214-88a3-4807-bbe2-b344c3be7f19.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c8252214-88a3-4807-bbe2-b344c3be7f19.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 Oct 2026 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:9c:f2:b3:ff:04:85:bb:c4:61:a1:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c8252214-88a3-4807-bbe2-b344c3be7f19 Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=2c64f774-e7ab-48f9-a037-d054d9acf5c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:86:a5:07:a5:b7:f5:91:32:10:3f:f3:10:70: e7:b5:02:df:c9:da:ff:3c:c6:31:c7:c9:3d:08:38: 18:b8:0b:69:db:56:82:50:42:4c:61:b3:98:2d:48: 8d:3b:8b:a4:ac:18:36:44:b0:70:a4:e1:5a:e6:74: f8:fd:cd:25:04:c7:31:59:bd:4d:49:82:81:a7:1e: 5d:a9:cd:a0:9e:b6:09:14:8f:52:34:23:4e:cc:5d: 6a:8d:ac:48:b1:95:14:65:55:f9:7d:a0:8d:62:94: 8d:e3:86:4c:44:fb:9c:fe:6b:58:84:96:84:16:40: 7d:86:58:39:43:4a:33:63:4c:2f:b5:f9:c2:f5:fb: 7f:47:9d:9e:3a:d9:50:89:16:8c:87:5a:84:46:1b: 30:5e:af:91:36:9e:e2:cd:3b:e2:30:88:f7:86:62: 39:5e:76:d7:49:26:ad:65:ba:da:35:74:45:0e:21: e8:95:f6:68:09:e6:9d:ef:c5:01:ad:08:b4:d8:1f: 1a:1e:3c:9c:9f:49:62:aa:ab:c9:24:9a:f2:0d:10: fb:59:6b:25:dd:6e:90:43:44:19:1b:95:a3:e2:70: e3:48:39:98:93:27:c2:62:a8:08:f9:10:aa:69:90: ce:d2:08:64:43:c4:ae:65:f4:d1:ce:a0:58:84:e4: 54:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:D4:28:2A:5B:46:8C:BE:B1:97:C7:DD:42:29:A1:F0:27:86:5D:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c8252214-88a3-4807-bbe2-b344c3be7f19/a1bc269a-e265-3234-b628-e9d71b3d725d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c8252214-88a3-4807-bbe2-b344c3be7f19/c8252214-88a3-4807-bbe2-b344c3be7f19.crl X509v3 Authority Key Identifier: keyid:62:5C:F9:36:83:28:14:A8:E3:04:43:16:15:F5:84:D0:FC:D6:CF:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c8252214-88a3-4807-bbe2-b344c3be7f19.cer sbgp-ipAddrBlock: critical IPv4: 23.152.208.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:4c:b5:b9:c4:ef:ac:13:86:31:ad:c5:ad:95:fa:a7:b5:ae: 65:c2:73:52:0a:e7:b6:94:64:84:f1:34:aa:03:db:1d:23:34: c3:c6:c3:e2:de:bf:6b:86:6e:fc:c9:88:36:d6:b8:28:b0:4e: c3:65:95:1f:b7:64:e2:6b:27:27:4a:f0:44:95:b1:81:a2:d6: b1:b0:0c:f0:29:93:94:2e:35:4d:93:e9:ca:d0:e0:10:93:70: e3:52:af:8e:a8:de:12:9c:27:d4:1c:12:0d:e7:57:90:af:d4: c9:d8:66:4e:13:55:52:61:6d:82:25:b4:22:53:d7:61:b2:46: 43:f1:01:da:2e:1c:50:fc:45:69:9d:c9:17:fd:d5:b5:63:80: 37:46:93:5a:0c:d0:80:e2:b1:1c:03:9f:57:38:04:88:a8:ba: 3f:e3:4a:33:dd:18:6f:58:5b:bc:5d:2f:6b:5c:fa:2e:97:c9: c4:29:70:9d:e8:a2:b0:36:5d:4b:22:57:14:b1:de:32:b3:e1: 0d:5c:24:57:90:b2:9e:02:0f:00:92:90:16:c8:31:f0:f0:c1: 11:fe:77:76:3d:a0:12:57:29:d2:47:c5:c6:ab:31:0e:79:c8: 14:61:6b:38:9f:70:0b:17:18:d9:46:08:17:b5:75:fa:2f:e5: 71:89:6c:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8RnPKz/wSFu8RhoRAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzgyNTIyMTQtODhhMy00ODA3LWJiZTItYjM0NGMzYmU3 ZjE5MB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk MmM2NGY3NzQtZTdhYi00OGY5LWEwMzctZDA1NGQ5YWNmNWM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgoalB6W39ZEyED/zEHDntQLfydr/PMYxx8k9 CDgYuAtp21aCUEJMYbOYLUiNO4ukrBg2RLBwpOFa5nT4/c0lBMcxWb1NSYKBpx5d qc2gnrYJFI9SNCNOzF1qjaxIsZUUZVX5faCNYpSN44ZMRPuc/mtYhJaEFkB9hlg5 Q0ozY0wvtfnC9ft/R52eOtlQiRaMh1qERhswXq+RNp7izTviMIj3hmI5XnbXSSat ZbraNXRFDiHolfZoCead78UBrQi02B8aHjycn0liqqvJJJryDRD7WWsl3W6QQ0QZ G5Wj4nDjSDmYkyfCYqgI+RCqaZDO0ghkQ8SuZfTRzqBYhORUbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBTUKCpbRoy+sZfH3UIpofAnhl1uMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jODI1 MjIxNC04OGEzLTQ4MDctYmJlMi1iMzQ0YzNiZTdmMTkvYTFiYzI2OWEtZTI2NS0z MjM0LWI2MjgtZTlkNzFiM2Q3MjVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYzgyNTIyMTQtODhhMy00ODA3LWJi ZTItYjM0NGMzYmU3ZjE5L2M4MjUyMjE0LTg4YTMtNDgwNy1iYmUyLWIzNDRjM2Jl N2YxOS5jcmwwHwYDVR0jBBgwFoAUYlz5NoMoFKjjBEMWFfWE0PzWzxswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9jODI1MjIxNC04OGEzLTQ4MDctYmJlMi1iMzQ0 YzNiZTdmMTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5jQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABlMtbnE76wThjGtxa2V+qe1rmXCc1IK57aUZITxNKoD2x0jNMPGw+Le v2uGbvzJiDbWuCiwTsNllR+3ZOJrJydK8ESVsYGi1rGwDPApk5QuNU2T6crQ4BCT cONSr46o3hKcJ9QcEg3nV5Cv1MnYZk4TVVJhbYIltCJT12GyRkPxAdouHFD8RWmd yRf91bVjgDdGk1oM0IDisRwDn1c4BIiouj/jSjPdGG9YW7xdL2tc+i6XycQpcJ3o orA2XUsiVxSx3jKz4Q1cJFeQsp4CDwCSkBbIMfDwwRH+d3Y9oBJXKdJHxcarMQ55 yBRhazifcAsXGNlGCBe1dfov5XGJbL0= -----END CERTIFICATE-----Generated at Tue Oct 6 06:10:27 2026 by rpki-client