$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395/957e541f-3b25-31cf-a0e9-e7decfe8a11a.roa File: 957e541f-3b25-31cf-a0e9-e7decfe8a11a.roa (raw, json) Hash identifier: YCbDKu2tIg9G+JhM8iyceAVRxSN708I7eCd6KD7DwkU= Subject key identifier: 0F:D1:9E:2B:20:8A:2B:6C:78:0D:1F:95:51:1C:47:E9:C8:5B:15:E2 Certificate issuer: /CN=e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395 Certificate serial: 010D0C9F4328584F9FFDC65AD0BD77A5541CB030 Authority key identifier: 29:93:F0:1F:A9:62:E9:C2:CE:07:F5:20:1B:EF:1D:45:AF:2D:59:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395/957e541f-3b25-31cf-a0e9-e7decfe8a11a.roa Signing time: Mon 26 Oct 2026 01:00:13 +0000 ROA not before: Mon 26 Oct 2026 01:00:13 +0000 ROA not after: Sun 24 Jan 2027 02:00:13 +0000 asID: 16509 IP address blocks: 23.179.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Nov 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:9f:fd:c6:5a:d0:bd:77:a5:54:1c:b0:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395 Validity Not Before: Oct 26 01:00:13 2026 GMT Not After : Jan 24 02:00:13 2027 GMT Subject: CN=939cc28b-9af2-4218-aa8b-e600abf8737c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:e2:dd:1f:ca:3d:a9:65:db:f2:19:d8:c0:db: e9:46:6c:38:fa:6c:92:8c:d9:d2:aa:87:93:21:9f: e0:44:10:59:d3:03:29:52:7c:ad:d1:d0:d9:a8:21: 57:66:89:d1:35:9b:4f:c0:2a:c4:f1:f0:82:03:ae: b4:99:21:52:08:a9:1f:d3:06:1d:5f:0b:00:43:e4: cf:56:1a:60:a9:4f:39:83:2d:f3:ab:b6:b3:af:97: c1:fe:1e:ee:25:25:0e:99:d4:47:75:97:f3:e5:89: c4:e9:fa:8f:8a:9b:7d:b8:15:93:36:97:61:65:04: fc:f0:66:62:07:91:92:a9:32:57:81:e4:ee:6d:e6: 2b:4b:44:4d:59:93:f5:69:29:5b:0a:df:7b:c3:04: cc:03:69:ad:81:24:2c:29:bb:07:11:d6:17:6d:2b: ce:97:3e:ad:95:dc:db:f5:6f:6c:bb:12:72:fc:1c: 85:68:04:1c:3d:d7:98:09:9f:dc:c7:75:ff:ef:e1: f4:cf:fa:f8:de:88:82:23:d1:c8:6a:3b:60:a2:c9: 7d:fe:a3:cb:db:7b:e1:14:5f:cc:37:3c:26:83:a6: 36:dc:c2:c3:b4:8e:4e:c0:c1:cb:f5:ad:c4:a6:a6: a6:98:b0:8a:0e:17:b0:4f:ee:d5:83:d2:50:33:ba: f2:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:D1:9E:2B:20:8A:2B:6C:78:0D:1F:95:51:1C:47:E9:C8:5B:15:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395/957e541f-3b25-31cf-a0e9-e7decfe8a11a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395.crl X509v3 Authority Key Identifier: keyid:29:93:F0:1F:A9:62:E9:C2:CE:07:F5:20:1B:EF:1D:45:AF:2D:59:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395.cer sbgp-ipAddrBlock: critical IPv4: 23.179.144.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:2e:3f:53:ab:35:4f:c1:d5:c0:33:35:0a:79:e7:fc:89:05: de:e8:27:f8:51:d6:69:5e:04:20:4f:16:31:3b:15:48:af:d9: b0:c7:40:8d:d2:b0:96:f6:c3:3b:8c:f0:a3:82:c2:11:13:cf: e6:c6:46:2b:4d:73:12:30:45:76:b1:d5:a4:1a:fa:24:2b:43: a9:3d:15:ff:60:be:81:ed:56:03:85:73:0b:e5:32:c1:8d:f1: cb:34:62:02:fb:5a:90:9d:34:d0:70:2d:00:66:d6:75:b2:d2: 06:8d:3c:29:d9:3b:5a:cd:d4:a9:5c:51:d4:30:3d:d5:0d:e9: 9f:36:a7:35:bc:38:ae:7c:1a:a2:f8:35:26:f2:0a:c9:9d:4d: 90:de:1f:b1:9d:17:86:30:2b:77:1b:f8:df:ed:72:4c:4e:39: 3f:e4:61:5b:53:d3:56:8e:74:f5:c6:16:d5:4e:ae:7a:10:85: a8:c3:00:09:b0:29:5c:84:7b:c1:ba:21:5a:2b:f8:37:ed:ed: 37:74:3b:b6:d1:df:50:a0:68:bd:d3:5c:31:a2:21:2a:40:b7: cf:a8:71:ec:31:a3:bd:39:33:c0:ff:f0:e2:e4:a8:24:64:55: 89:80:67:69:95:8b:31:67:23:8e:c4:db:15:94:3d:c1:ec:cc: be:72:3f:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+f/cZa0L13pVQcsDAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdmNTU4OWUtNGZhMS00MWFmLTlkM2YtN2RiZDVmYmRi Mzk1MB4XDTI2MTAyNjAxMDAxM1oXDTI3MDEyNDAyMDAxM1owLzEtMCsGA1UEAxMk OTM5Y2MyOGItOWFmMi00MjE4LWFhOGItZTYwMGFiZjg3MzdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt+LdH8o9qWXb8hnYwNvpRmw4+mySjNnSqoeT IZ/gRBBZ0wMpUnyt0dDZqCFXZonRNZtPwCrE8fCCA660mSFSCKkf0wYdXwsAQ+TP VhpgqU85gy3zq7azr5fB/h7uJSUOmdRHdZfz5YnE6fqPipt9uBWTNpdhZQT88GZi B5GSqTJXgeTubeYrS0RNWZP1aSlbCt97wwTMA2mtgSQsKbsHEdYXbSvOlz6tldzb 9W9suxJy/ByFaAQcPdeYCZ/cx3X/7+H0z/r43oiCI9HIajtgosl9/qPL23vhFF/M Nzwmg6Y23MLDtI5OwMHL9a3EpqammLCKDhewT+7Vg9JQM7rylwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA/RnisgiitseA0flVEcR+nIWxXiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9lN2Y1 NTg5ZS00ZmExLTQxYWYtOWQzZi03ZGJkNWZiZGIzOTUvOTU3ZTU0MWYtM2IyNS0z MWNmLWEwZTktZTdkZWNmZThhMTFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZTdmNTU4OWUtNGZhMS00MWFmLTlk M2YtN2RiZDVmYmRiMzk1L2U3ZjU1ODllLTRmYTEtNDFhZi05ZDNmLTdkYmQ1ZmJk YjM5NS5jcmwwHwYDVR0jBBgwFoAUKZPwH6li6cLOB/UgG+8dRa8tWRAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9lN2Y1NTg5ZS00ZmExLTQxYWYtOWQzZi03ZGJk NWZiZGIzOTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF7OQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADQuP1OrNU/B1cAzNQp55/yJBd7oJ/hR1mleBCBPFjE7FUiv2bDHQI3S sJb2wzuM8KOCwhETz+bGRitNcxIwRXax1aQa+iQrQ6k9Ff9gvoHtVgOFcwvlMsGN 8cs0YgL7WpCdNNBwLQBm1nWy0gaNPCnZO1rN1KlcUdQwPdUN6Z82pzW8OK58GqL4 NSbyCsmdTZDeH7GdF4YwK3cb+N/tckxOOT/kYVtT01aOdPXGFtVOrnoQhajDAAmw KVyEe8G6IVor+Dft7Td0O7bR31CgaL3TXDGiISpAt8+ocewxo705M8D/8OLkqCRk VYmAZ2mVizFnI47E2xWUPcHszL5yP70= -----END CERTIFICATE-----Generated at Sun Nov 15 21:52:08 2026 by rpki-client