$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/440eb756-8dc2-423e-8aa8-850483061961/cffc0751-214e-3683-8617-17f9b430f096.roa File: cffc0751-214e-3683-8617-17f9b430f096.roa (raw, json) Hash identifier: ycM91WohEczzRfLcNH2MoHblUQ0xAxu/g6or4HZ5TAc= Subject key identifier: EC:02:3F:1B:35:E3:4C:7F:4F:70:17:2B:08:89:E8:44:21:F5:15:E1 Certificate issuer: /CN=440eb756-8dc2-423e-8aa8-850483061961 Certificate serial: 010D0C9F4328584F107F61FDDC551FE97FCA9380 Authority key identifier: 98:DE:E0:6B:BD:0C:34:A0:1B:EC:CC:5A:92:3B:75:31:00:0D:45:F9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/440eb756-8dc2-423e-8aa8-850483061961.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/440eb756-8dc2-423e-8aa8-850483061961/cffc0751-214e-3683-8617-17f9b430f096.roa Signing time: Fri 04 Sep 2026 15:25:03 +0000 ROA not before: Fri 04 Sep 2026 15:25:03 +0000 ROA not after: Thu 03 Dec 2026 16:25:03 +0000 asID: 401909 IP address blocks: 23.136.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/440eb756-8dc2-423e-8aa8-850483061961/440eb756-8dc2-423e-8aa8-850483061961.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/440eb756-8dc2-423e-8aa8-850483061961/440eb756-8dc2-423e-8aa8-850483061961.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/440eb756-8dc2-423e-8aa8-850483061961.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:10:7f:61:fd:dc:55:1f:e9:7f:ca:93:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=440eb756-8dc2-423e-8aa8-850483061961 Validity Not Before: Sep 4 15:25:03 2026 GMT Not After : Dec 3 16:25:03 2026 GMT Subject: CN=e898362b-b4ad-430f-8e70-f9f53a01c364 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:38:0d:03:57:9f:4d:8f:5a:da:60:53:48:09: 68:08:5a:20:61:00:cd:6e:b1:f9:e2:c9:8d:22:88: ac:72:41:de:88:97:bc:16:1b:fb:b5:b6:5b:28:bc: e1:36:ff:c6:c5:cd:ee:de:99:ba:6a:54:cc:85:e1: f1:c1:1f:45:bd:1c:7f:05:9a:66:1a:82:14:5c:c9: f7:6d:ab:79:75:0b:c7:24:af:25:3a:28:38:e7:5a: c4:e4:60:62:00:0f:3a:29:8d:67:28:58:5b:9f:7e: fc:bc:3b:e7:65:8f:5d:28:fa:d2:fa:9a:d5:00:b5: 68:83:18:90:b3:51:bc:6d:5f:25:c4:27:22:a2:3b: 6a:52:27:63:ba:01:e0:0b:69:d1:c5:36:29:e8:40: 1d:a2:30:75:58:8b:4c:3b:d3:3d:5f:59:ab:a3:08: 14:be:f6:78:fd:c1:f0:04:c5:db:bc:38:07:da:42: 4f:2b:0b:4c:d0:7b:c8:1e:17:cd:64:7b:88:1c:dc: 5f:8c:fb:9a:05:00:7a:bb:29:24:0d:e0:51:b0:58: 17:18:bb:3f:03:c0:32:1a:dd:5b:e7:e6:e4:39:15: 8d:dc:ef:b3:44:d8:02:5f:85:96:84:4e:aa:b4:42: 3e:04:c4:72:3c:20:e2:6f:d4:2a:1a:cb:8a:eb:45: 55:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:02:3F:1B:35:E3:4C:7F:4F:70:17:2B:08:89:E8:44:21:F5:15:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/440eb756-8dc2-423e-8aa8-850483061961/cffc0751-214e-3683-8617-17f9b430f096.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/440eb756-8dc2-423e-8aa8-850483061961/440eb756-8dc2-423e-8aa8-850483061961.crl X509v3 Authority Key Identifier: keyid:98:DE:E0:6B:BD:0C:34:A0:1B:EC:CC:5A:92:3B:75:31:00:0D:45:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/440eb756-8dc2-423e-8aa8-850483061961.cer sbgp-ipAddrBlock: critical IPv4: 23.136.172.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:0b:25:6d:bf:00:74:bf:65:c3:09:fd:4d:2a:df:2b:16:e2: 3e:5a:24:83:87:54:0d:59:23:a6:e5:b9:45:b1:95:9e:14:69: 18:1a:ed:33:15:35:c3:0a:a1:18:f5:30:a3:ff:6e:b8:f0:d5: ca:c0:31:20:5f:5f:56:5e:d8:0b:a2:64:17:4e:76:48:f5:5b: 78:3b:db:55:d4:1f:95:f9:76:ca:9a:1a:23:00:48:c2:0f:15: dc:fc:e7:0c:d9:18:c7:b8:46:bd:70:b0:40:96:a3:35:c3:3f: ad:2a:26:fb:69:7f:98:3c:f1:e2:ca:25:5e:59:5d:c5:c0:b8: 12:85:f1:87:98:f2:83:5e:cf:e1:f6:1d:22:b5:b9:45:4a:af: c1:bc:37:7f:57:03:c4:d4:15:15:30:13:50:29:68:0c:33:bb: f3:92:c9:ec:f6:e2:ac:ad:ed:4f:9b:6e:d8:90:7b:13:0d:dd: d7:6d:2c:dc:76:f4:e8:40:86:1a:0e:7a:12:c5:7f:33:86:b9: 96:e1:ac:a2:53:06:41:3f:a9:a8:ec:5f:02:6f:d2:2c:8b:07: 66:b0:f8:ed:27:51:6b:44:5e:5c:99:1f:f3:3e:b1:fe:f1:23: a6:5b:93:86:27:6e:4a:3b:ed:3b:ca:f4:3c:41:23:d0:07:d4: 01:01:4e:6b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8Qf2H93FUf6X/Kk4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDQwZWI3NTYtOGRjMi00MjNlLThhYTgtODUwNDgzMDYx OTYxMB4XDTI2MDkwNDE1MjUwM1oXDTI2MTIwMzE2MjUwM1owLzEtMCsGA1UEAxMk ZTg5ODM2MmItYjRhZC00MzBmLThlNzAtZjlmNTNhMDFjMzY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgDgNA1efTY9a2mBTSAloCFogYQDNbrH54smN IoisckHeiJe8Fhv7tbZbKLzhNv/Gxc3u3pm6alTMheHxwR9FvRx/BZpmGoIUXMn3 bat5dQvHJK8lOig451rE5GBiAA86KY1nKFhbn378vDvnZY9dKPrS+prVALVogxiQ s1G8bV8lxCciojtqUidjugHgC2nRxTYp6EAdojB1WItMO9M9X1mrowgUvvZ4/cHw BMXbvDgH2kJPKwtM0HvIHhfNZHuIHNxfjPuaBQB6uykkDeBRsFgXGLs/A8AyGt1b 5+bkORWN3O+zRNgCX4WWhE6qtEI+BMRyPCDib9QqGsuK60VVuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOwCPxs140x/T3AXKwiJ6EQh9RXhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi80NDBl Yjc1Ni04ZGMyLTQyM2UtOGFhOC04NTA0ODMwNjE5NjEvY2ZmYzA3NTEtMjE0ZS0z NjgzLTg2MTctMTdmOWI0MzBmMDk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvNDQwZWI3NTYtOGRjMi00MjNlLThh YTgtODUwNDgzMDYxOTYxLzQ0MGViNzU2LThkYzItNDIzZS04YWE4LTg1MDQ4MzA2 MTk2MS5jcmwwHwYDVR0jBBgwFoAUmN7ga70MNKAb7Mxakjt1MQANRfkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi80NDBlYjc1Ni04ZGMyLTQyM2UtOGFhOC04NTA0 ODMwNjE5NjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4isMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGQLJW2/AHS/ZcMJ/U0q3ysW4j5aJIOHVA1ZI6bluUWxlZ4UaRga7TMV NcMKoRj1MKP/brjw1crAMSBfX1Ze2AuiZBdOdkj1W3g721XUH5X5dsqaGiMASMIP Fdz85wzZGMe4Rr1wsECWozXDP60qJvtpf5g88eLKJV5ZXcXAuBKF8YeY8oNez+H2 HSK1uUVKr8G8N39XA8TUFRUwE1ApaAwzu/OSyez24qyt7U+bbtiQexMN3ddtLNx2 9OhAhhoOehLFfzOGuZbhrKJTBkE/qajsXwJv0iyLB2aw+O0nUWtEXlyZH/M+sf7x I6Zbk4Ynbko77TvK9DxBI9AH1AEBTms= -----END CERTIFICATE-----Generated at Fri Sep 25 18:02:57 2026 by rpki-client