$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a07ba476-e067-424c-814a-2b920e23990d/089fd902-9225-391d-ae0e-3c7cd908bf12.roa File: 089fd902-9225-391d-ae0e-3c7cd908bf12.roa (raw, json) Hash identifier: 1gQIgAqxGSCs1e8yyMoneoaxbLGcEF9wVJ9xnvKpZvE= Subject key identifier: DD:A7:9F:11:A9:CD:8A:C8:A3:E7:91:1B:4D:51:2A:FE:51:F5:32:A9 Certificate issuer: /CN=a07ba476-e067-424c-814a-2b920e23990d Certificate serial: 010D0C9F4328584F0AFDD154BEFD5644DF994C00 Authority key identifier: 3C:59:1C:AA:2E:BC:6E:39:12:86:E6:18:66:AF:F3:9F:55:C7:82:08 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a07ba476-e067-424c-814a-2b920e23990d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a07ba476-e067-424c-814a-2b920e23990d/089fd902-9225-391d-ae0e-3c7cd908bf12.roa Signing time: Wed 02 Sep 2026 16:04:57 +0000 ROA not before: Wed 02 Sep 2026 16:04:57 +0000 ROA not after: Sun 01 Nov 2026 14:00:12 +0000 asID: 399951 IP address blocks: 23.152.120.0/24 maxlen: 24 23.152.121.0/24 maxlen: 24 23.187.176.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a07ba476-e067-424c-814a-2b920e23990d/a07ba476-e067-424c-814a-2b920e23990d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a07ba476-e067-424c-814a-2b920e23990d/a07ba476-e067-424c-814a-2b920e23990d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a07ba476-e067-424c-814a-2b920e23990d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0a:fd:d1:54:be:fd:56:44:df:99:4c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a07ba476-e067-424c-814a-2b920e23990d Validity Not Before: Sep 2 16:04:57 2026 GMT Not After : Nov 1 14:00:12 2026 GMT Subject: CN=176d2e17-0290-4bd0-8ec5-f59a2879fcab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:ca:da:1c:2f:e1:59:83:8f:0e:06:86:9b:0d: d3:4f:f8:54:50:c4:b1:89:cf:a3:8f:b5:7e:0d:34: 64:b1:b8:41:61:18:3d:21:41:61:91:08:fd:31:36: a2:28:92:27:5a:3e:15:ed:32:1e:4b:05:31:0d:4d: 34:8e:70:6e:9d:81:45:5f:fb:37:d7:5a:b0:49:e7: 46:01:c0:87:9a:f0:07:74:2e:5a:46:da:fc:1a:6d: ee:0d:e2:7e:7e:be:f3:19:30:aa:67:b9:91:45:7a: 07:37:fd:1c:47:9a:97:af:23:c0:e5:e3:6f:20:2e: 8f:ad:9f:7e:e2:d4:b7:d1:dc:60:dd:99:a1:22:b3: 85:95:7d:96:5f:30:09:8a:d2:d2:f6:d0:7d:77:21: 7e:65:78:02:25:d8:1d:69:45:87:a7:6d:bb:8f:b8: 42:e6:1d:8b:da:00:36:ec:32:cb:b7:db:af:99:c9: 9a:52:b4:e1:f7:e1:a1:b9:3d:4c:91:07:f0:c2:3a: 16:69:af:48:b9:e0:cd:c1:78:46:97:c3:f1:3a:6e: 25:41:94:9d:e5:b1:39:62:29:7b:c6:ad:56:6a:d6: 7c:40:56:c4:94:77:67:22:4b:63:75:20:0e:11:35: a7:a0:80:08:84:a9:0c:af:8f:b2:dc:f4:0c:84:fa: f7:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:A7:9F:11:A9:CD:8A:C8:A3:E7:91:1B:4D:51:2A:FE:51:F5:32:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a07ba476-e067-424c-814a-2b920e23990d/089fd902-9225-391d-ae0e-3c7cd908bf12.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a07ba476-e067-424c-814a-2b920e23990d/a07ba476-e067-424c-814a-2b920e23990d.crl X509v3 Authority Key Identifier: keyid:3C:59:1C:AA:2E:BC:6E:39:12:86:E6:18:66:AF:F3:9F:55:C7:82:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a07ba476-e067-424c-814a-2b920e23990d.cer sbgp-ipAddrBlock: critical IPv4: 23.152.120.0/23 23.187.176.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:fa:4a:7a:c0:e0:04:eb:ad:a9:f0:75:ae:63:76:c2:6e:61: 54:0d:07:44:f6:33:8c:10:46:86:b8:8e:48:94:eb:6d:57:df: be:6a:79:2f:bc:a5:4f:1a:5a:f3:cc:f5:fa:b9:a7:e6:24:fd: 74:dc:ca:3d:9b:eb:89:67:6e:97:27:d4:5f:23:5f:ca:57:a7: 7c:72:c3:b6:4a:0e:d3:35:50:ff:a6:bf:20:d4:08:0f:e1:90: f6:03:b2:94:d4:dd:8b:c7:0d:9e:c0:08:e8:fa:1e:71:3a:53: 0e:b8:9e:62:56:76:99:2b:96:e8:b5:98:ca:31:10:aa:db:fb: 3c:27:fa:d5:58:6d:4e:68:85:a2:16:d5:93:db:9c:d4:d9:3c: c9:81:cf:93:2c:2d:64:4d:a2:a4:42:14:e0:ea:8e:eb:37:c5: e3:37:76:04:6c:9c:7f:c8:f3:1c:bd:6d:11:4a:49:89:f6:dc: b5:0b:0e:c6:86:9b:df:3e:7e:87:f1:93:52:50:9e:10:7a:98: 5c:d7:e6:98:b1:a1:72:a5:35:8f:1e:17:79:ba:4d:51:1f:78: 94:38:fa:8c:86:0b:4a:53:90:3c:f5:2f:1b:d7:14:6a:5d:28: 87:12:17:62:fc:90:db:23:43:ad:7f:62:0c:16:71:3d:91:de: 96:ce:e6:df -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE8K/dFUvv1WRN+ZTAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTA3YmE0NzYtZTA2Ny00MjRjLTgxNGEtMmI5MjBlMjM5 OTBkMB4XDTI2MDkwMjE2MDQ1N1oXDTI2MTEwMTE0MDAxMlowLzEtMCsGA1UEAxMk MTc2ZDJlMTctMDI5MC00YmQwLThlYzUtZjU5YTI4NzlmY2FiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsMraHC/hWYOPDgaGmw3TT/hUUMSxic+jj7V+ DTRksbhBYRg9IUFhkQj9MTaiKJInWj4V7TIeSwUxDU00jnBunYFFX/s311qwSedG AcCHmvAHdC5aRtr8Gm3uDeJ+fr7zGTCqZ7mRRXoHN/0cR5qXryPA5eNvIC6PrZ9+ 4tS30dxg3ZmhIrOFlX2WXzAJitLS9tB9dyF+ZXgCJdgdaUWHp227j7hC5h2L2gA2 7DLLt9uvmcmaUrTh9+GhuT1MkQfwwjoWaa9IueDNwXhGl8PxOm4lQZSd5bE5Yil7 xq1WatZ8QFbElHdnIktjdSAOETWnoIAIhKkMr4+y3PQMhPr3IQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFN2nnxGpzYrIo+eRG01RKv5R9TKpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9hMDdi YTQ3Ni1lMDY3LTQyNGMtODE0YS0yYjkyMGUyMzk5MGQvMDg5ZmQ5MDItOTIyNS0z OTFkLWFlMGUtM2M3Y2Q5MDhiZjEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYTA3YmE0NzYtZTA2Ny00MjRjLTgx NGEtMmI5MjBlMjM5OTBkL2EwN2JhNDc2LWUwNjctNDI0Yy04MTRhLTJiOTIwZTIz OTkwZC5jcmwwHwYDVR0jBBgwFoAUPFkcqi68bjkShuYYZq/zn1XHgggwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9hMDdiYTQ3Ni1lMDY3LTQyNGMtODE0YS0yYjky MGUyMzk5MGQuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBF5h4AwQB F7uwMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAD76SnrA4ATrranwda5jdsJuYVQNB0T2M4wQRoa4jkiU621X 375qeS+8pU8aWvPM9fq5p+Yk/XTcyj2b64lnbpcn1F8jX8pXp3xyw7ZKDtM1UP+m vyDUCA/hkPYDspTU3YvHDZ7ACOj6HnE6Uw64nmJWdpkrlui1mMoxEKrb+zwn+tVY bU5ohaIW1ZPbnNTZPMmBz5MsLWRNoqRCFODqjus3xeM3dgRsnH/I8xy9bRFKSYn2 3LULDsaGm98+fofxk1JQnhB6mFzX5pixoXKlNY8eF3m6TVEfeJQ4+oyGC0pTkDz1 LxvXFGpdKIcSF2L8kNsjQ61/YgwWcT2R3pbO5t8= -----END CERTIFICATE-----Generated at Sat Sep 26 03:44:55 2026 by rpki-client