$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/17ba49ac-37d6-4b90-b973-bee8a685e116/c487afe1-579f-3f90-86cf-bd88f53ebfb8.roa File: c487afe1-579f-3f90-86cf-bd88f53ebfb8.roa (raw, json) Hash identifier: BSP9H1C/H8B/oGjK3lbLwys21L6rNn6OhSPgpPSRgHM= Subject key identifier: 6B:4E:FB:EE:9E:C5:8D:61:37:45:C3:94:13:40:CA:92:3A:48:D3:25 Certificate issuer: /CN=17ba49ac-37d6-4b90-b973-bee8a685e116 Certificate serial: 010D0C9F4328584FB3A678810AF46FF8BE8DB900 Authority key identifier: 24:F8:90:91:66:EA:CD:1F:05:33:85:A2:E7:15:EA:8A:EF:FA:17:26 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/17ba49ac-37d6-4b90-b973-bee8a685e116.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/17ba49ac-37d6-4b90-b973-bee8a685e116/c487afe1-579f-3f90-86cf-bd88f53ebfb8.roa Signing time: Mon 02 Nov 2026 02:00:13 +0000 ROA not before: Mon 02 Nov 2026 02:00:13 +0000 ROA not after: Sun 31 Jan 2027 02:00:13 +0000 asID: 26187 IP address blocks: 23.147.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/17ba49ac-37d6-4b90-b973-bee8a685e116/17ba49ac-37d6-4b90-b973-bee8a685e116.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/17ba49ac-37d6-4b90-b973-bee8a685e116/17ba49ac-37d6-4b90-b973-bee8a685e116.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/17ba49ac-37d6-4b90-b973-bee8a685e116.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:b3:a6:78:81:0a:f4:6f:f8:be:8d:b9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17ba49ac-37d6-4b90-b973-bee8a685e116 Validity Not Before: Nov 2 02:00:13 2026 GMT Not After : Jan 31 02:00:13 2027 GMT Subject: CN=f7b32f1d-6f30-48c1-a6c1-cd17ef79310a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:cb:be:8a:08:be:6e:3b:4f:a9:46:b1:bd:0d: a5:63:0e:97:e6:89:38:64:0b:29:bc:84:88:89:28: bf:cc:21:41:06:d8:7b:13:e0:c9:9d:48:09:ea:fd: b8:1a:b9:8b:2e:5f:3c:26:97:da:b2:35:7d:5b:3b: f0:72:d9:01:57:87:5c:7b:1b:3b:c4:0c:aa:fc:aa: 7c:69:2c:06:ba:9d:ee:53:cb:31:dd:66:68:35:84: b7:d3:41:8d:b6:87:7a:bb:a9:72:8f:fd:90:d8:cf: b6:f1:5a:d7:e3:46:15:9b:66:f9:74:d2:1e:5f:68: dc:c5:29:10:75:7c:a6:e5:f0:7b:b8:88:d8:18:6c: 1e:c7:48:67:c9:00:37:20:aa:b1:4a:a5:18:4f:76: c4:c8:9f:a0:dd:7b:56:a8:36:b1:ca:30:00:dc:cd: 0c:2a:c5:09:56:28:46:8f:8e:02:a0:99:9d:d1:d3: 86:f9:f3:47:c0:6e:c1:1d:77:fe:c2:42:f1:d3:57: bf:ce:ca:fb:22:c8:4b:a6:47:58:01:ba:98:dd:10: 87:71:95:1c:85:fe:c1:4a:a1:bf:df:a9:d2:b3:51: 2c:24:a2:09:4e:79:34:80:71:d9:a2:e8:02:9c:f9: 4e:78:d3:43:0a:e6:7e:97:7d:ae:e6:22:59:70:7e: 2d:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:4E:FB:EE:9E:C5:8D:61:37:45:C3:94:13:40:CA:92:3A:48:D3:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/17ba49ac-37d6-4b90-b973-bee8a685e116/c487afe1-579f-3f90-86cf-bd88f53ebfb8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/17ba49ac-37d6-4b90-b973-bee8a685e116/17ba49ac-37d6-4b90-b973-bee8a685e116.crl X509v3 Authority Key Identifier: keyid:24:F8:90:91:66:EA:CD:1F:05:33:85:A2:E7:15:EA:8A:EF:FA:17:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/17ba49ac-37d6-4b90-b973-bee8a685e116.cer sbgp-ipAddrBlock: critical IPv4: 23.147.28.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:f5:19:c8:2a:41:47:1e:d0:83:f7:de:4c:b8:a4:17:29:26: fd:f0:69:34:c8:01:7a:1e:02:1a:f9:fd:9a:d8:24:d0:d1:6f: a4:6b:55:e9:e8:13:13:47:a8:4b:85:41:27:ea:9d:4d:77:29: cf:5e:b1:65:b4:dd:f8:d9:f3:0b:19:37:dc:8e:78:8f:17:81: 37:46:b3:f5:25:bc:df:06:0e:68:58:c1:a5:8b:89:3c:a8:00: e3:23:55:f7:fb:82:9f:bf:48:cd:9b:8b:91:e5:cb:55:96:55: 15:b9:c5:97:d4:21:f4:c4:64:e3:40:ff:9c:6a:79:87:5b:a2: 08:30:9e:72:3d:75:d7:8d:16:e5:f5:e1:fd:4a:41:85:14:78: e4:75:4c:b7:a4:bc:97:1d:a4:fb:3e:2f:63:c7:20:24:03:7a: b8:c1:d9:76:8e:41:c0:92:a6:f3:d4:22:e6:11:ac:90:3f:db: b6:03:21:92:1e:d5:30:9f:e4:2a:20:19:2c:04:c0:c8:34:da: 36:34:e8:16:29:b4:43:dc:8d:ff:19:3d:9f:6f:4a:ef:09:15: 82:73:0d:1d:38:6b:45:d6:c7:e7:4e:40:cb:65:2d:9a:f0:62: ec:ec:42:16:86:7f:cd:85:74:f5:e5:c8:f5:bb:de:05:55:59: e2:bf:93:8f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+zpniBCvRv+L6NuQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTdiYTQ5YWMtMzdkNi00YjkwLWI5NzMtYmVlOGE2ODVl MTE2MB4XDTI2MTEwMjAyMDAxM1oXDTI3MDEzMTAyMDAxM1owLzEtMCsGA1UEAxMk ZjdiMzJmMWQtNmYzMC00OGMxLWE2YzEtY2QxN2VmNzkzMTBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAscu+igi+bjtPqUaxvQ2lYw6X5ok4ZAspvISI iSi/zCFBBth7E+DJnUgJ6v24GrmLLl88JpfasjV9WzvwctkBV4dcexs7xAyq/Kp8 aSwGup3uU8sx3WZoNYS300GNtod6u6lyj/2Q2M+28VrX40YVm2b5dNIeX2jcxSkQ dXym5fB7uIjYGGwex0hnyQA3IKqxSqUYT3bEyJ+g3XtWqDaxyjAA3M0MKsUJVihG j44CoJmd0dOG+fNHwG7BHXf+wkLx01e/zsr7IshLpkdYAbqY3RCHcZUchf7BSqG/ 36nSs1EsJKIJTnk0gHHZougCnPlOeNNDCuZ+l32u5iJZcH4tvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGtO++6exY1hN0XDlBNAypI6SNMlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8xN2Jh NDlhYy0zN2Q2LTRiOTAtYjk3My1iZWU4YTY4NWUxMTYvYzQ4N2FmZTEtNTc5Zi0z ZjkwLTg2Y2YtYmQ4OGY1M2ViZmI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvMTdiYTQ5YWMtMzdkNi00YjkwLWI5 NzMtYmVlOGE2ODVlMTE2LzE3YmE0OWFjLTM3ZDYtNGI5MC1iOTczLWJlZThhNjg1 ZTExNi5jcmwwHwYDVR0jBBgwFoAUJPiQkWbqzR8FM4Wi5xXqiu/6FyYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi8xN2JhNDlhYy0zN2Q2LTRiOTAtYjk3My1iZWU4 YTY4NWUxMTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5McMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGr1GcgqQUce0IP33ky4pBcpJv3waTTIAXoeAhr5/ZrYJNDRb6RrVeno ExNHqEuFQSfqnU13Kc9esWW03fjZ8wsZN9yOeI8XgTdGs/UlvN8GDmhYwaWLiTyo AOMjVff7gp+/SM2bi5Hly1WWVRW5xZfUIfTEZONA/5xqeYdboggwnnI9ddeNFuX1 4f1KQYUUeOR1TLekvJcdpPs+L2PHICQDerjB2XaOQcCSpvPUIuYRrJA/27YDIZIe 1TCf5CogGSwEwMg02jY06BYptEPcjf8ZPZ9vSu8JFYJzDR04a0XWx+dOQMtlLZrw YuzsQhaGf82FdPXlyPW73gVVWeK/k48= -----END CERTIFICATE-----Generated at Sun Nov 15 18:40:08 2026 by rpki-client