$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dda1859b-9b6c-47e8-8de0-488bb1a65637/d213cd2e-f31e-3c63-a3c0-c36ac894c40b.roa File: d213cd2e-f31e-3c63-a3c0-c36ac894c40b.roa (raw, json) Hash identifier: xydKTa9/iuKcAkXZmD4jihpCGQ+kIX2Dg8hea6DIbKw= Subject key identifier: B8:D4:F6:58:79:4D:5C:D9:9C:4F:5F:C4:E0:95:E4:C9:62:74:A3:11 Certificate issuer: /CN=dda1859b-9b6c-47e8-8de0-488bb1a65637 Certificate serial: 010D0C9F4328584F4C3D6B2028FCD2A3B398C060 Authority key identifier: D2:B4:52:E1:AB:44:F4:A8:D0:DA:27:FA:11:3A:57:DB:A3:95:CC:73 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dda1859b-9b6c-47e8-8de0-488bb1a65637.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dda1859b-9b6c-47e8-8de0-488bb1a65637/d213cd2e-f31e-3c63-a3c0-c36ac894c40b.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 152918 IP address blocks: 23.151.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dda1859b-9b6c-47e8-8de0-488bb1a65637/dda1859b-9b6c-47e8-8de0-488bb1a65637.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dda1859b-9b6c-47e8-8de0-488bb1a65637/dda1859b-9b6c-47e8-8de0-488bb1a65637.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dda1859b-9b6c-47e8-8de0-488bb1a65637.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:6b:20:28:fc:d2:a3:b3:98:c0:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dda1859b-9b6c-47e8-8de0-488bb1a65637 Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=054149e9-128c-443e-9ad8-2bf2628faa9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:95:a3:ad:2a:60:0d:ab:f9:89:d5:7d:2d:6e: 52:05:7a:2b:74:ac:f8:e2:a3:01:68:64:08:be:e0: 65:83:e7:e4:42:a1:9b:3a:d1:23:b9:a4:06:3a:2f: e7:39:ee:75:e2:30:41:41:44:af:4b:d3:17:15:66: e9:b3:bb:80:d1:9d:4e:c2:02:c2:6a:b5:b6:9a:59: 42:aa:4a:f7:0e:d3:01:be:da:5e:45:b4:ec:5d:d5: 68:9c:da:eb:d0:55:5c:b9:61:95:a3:b0:78:03:3b: 4e:4b:db:c5:ea:7b:9f:e0:18:7c:8c:fd:d2:4d:4f: 33:4c:52:5b:99:9c:56:e2:82:b6:b9:7c:ec:82:7d: d3:4f:8d:01:ff:33:4f:c6:97:bf:7b:27:0d:e5:9f: 0f:03:16:cb:1e:d1:5c:dd:ee:57:55:b9:a3:99:69: a8:3b:cf:fc:f5:93:5b:ac:08:3b:ff:9d:ec:7b:25: 53:b5:34:39:b5:cf:27:4d:7f:66:97:47:9f:32:9d: 72:61:fe:91:44:15:1a:9a:0b:79:bd:8d:73:1b:a1: b2:c3:ae:df:e4:e6:d6:f0:90:03:0b:46:31:3e:cb: 8f:b8:60:d9:af:a3:e5:9b:05:71:9b:3d:c8:cd:73: f5:1a:3e:2c:ad:5d:16:83:57:0d:63:c3:3d:20:92: 96:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:D4:F6:58:79:4D:5C:D9:9C:4F:5F:C4:E0:95:E4:C9:62:74:A3:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dda1859b-9b6c-47e8-8de0-488bb1a65637/d213cd2e-f31e-3c63-a3c0-c36ac894c40b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dda1859b-9b6c-47e8-8de0-488bb1a65637/dda1859b-9b6c-47e8-8de0-488bb1a65637.crl X509v3 Authority Key Identifier: keyid:D2:B4:52:E1:AB:44:F4:A8:D0:DA:27:FA:11:3A:57:DB:A3:95:CC:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dda1859b-9b6c-47e8-8de0-488bb1a65637.cer sbgp-ipAddrBlock: critical IPv4: 23.151.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:67:34:05:ea:b4:1a:02:15:d4:7b:99:5c:89:44:74:2b:bc: 53:d2:b8:e5:5c:fa:c7:ed:5c:24:ff:0e:34:a1:60:82:50:b2: 28:31:1b:63:cf:3d:62:32:a4:e6:47:c8:63:73:57:c4:41:1b: e6:30:6f:15:dc:e8:63:16:d7:45:f8:00:6f:ae:6d:17:06:9f: 09:6c:7a:f8:0c:9d:58:c7:ef:44:20:cb:af:6d:42:9a:65:54: 77:13:4b:2e:62:52:1d:3b:11:22:4f:c4:15:62:a3:ee:3b:e7: b1:56:ae:da:d5:f7:c5:49:61:f0:b6:75:f0:5f:87:ee:8f:7b: b9:99:4a:d3:5c:4d:b7:82:13:a0:eb:d9:ae:31:75:91:0b:d3: e9:d2:57:11:9f:30:16:cc:d0:e3:07:ab:7a:1e:fd:6f:87:45: 13:f4:09:97:01:8e:54:57:dd:9c:1e:e8:9c:5f:97:0c:58:44: 21:cc:ab:57:9c:c3:b3:be:ce:a9:4c:b3:19:8c:c8:f3:41:42: 62:bd:7e:c8:9b:64:81:56:16:6e:ca:ab:5c:c7:3d:5e:0c:86: 27:89:17:49:f0:1f:7b:d9:cf:6a:7c:51:18:32:ba:f0:de:e4: 54:3a:c1:ca:1b:de:7f:b2:16:8a:c5:50:bb:a5:30:f7:1a:37: c3:3a:d6:35 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPWsgKPzSo7OYwGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGRhMTg1OWItOWI2Yy00N2U4LThkZTAtNDg4YmIxYTY1 NjM3MB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk MDU0MTQ5ZTktMTI4Yy00NDNlLTlhZDgtMmJmMjYyOGZhYTlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl5WjrSpgDav5idV9LW5SBXordKz44qMBaGQI vuBlg+fkQqGbOtEjuaQGOi/nOe514jBBQUSvS9MXFWbps7uA0Z1OwgLCarW2mllC qkr3DtMBvtpeRbTsXdVonNrr0FVcuWGVo7B4AztOS9vF6nuf4Bh8jP3STU8zTFJb mZxW4oK2uXzsgn3TT40B/zNPxpe/eycN5Z8PAxbLHtFc3e5XVbmjmWmoO8/89ZNb rAg7/53seyVTtTQ5tc8nTX9ml0efMp1yYf6RRBUamgt5vY1zG6Gyw67f5ObW8JAD C0YxPsuPuGDZr6PlmwVxmz3IzXP1Gj4srV0Wg1cNY8M9IJKWHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLjU9lh5TVzZnE9fxOCV5MlidKMRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9kZGEx ODU5Yi05YjZjLTQ3ZTgtOGRlMC00ODhiYjFhNjU2MzcvZDIxM2NkMmUtZjMxZS0z YzYzLWEzYzAtYzM2YWM4OTRjNDBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvZGRhMTg1OWItOWI2Yy00N2U4LThk ZTAtNDg4YmIxYTY1NjM3L2RkYTE4NTliLTliNmMtNDdlOC04ZGUwLTQ4OGJiMWE2 NTYzNy5jcmwwHwYDVR0jBBgwFoAU0rRS4atE9KjQ2if6ETpX26OVzHMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9kZGExODU5Yi05YjZjLTQ3ZTgtOGRlMC00ODhi YjFhNjU2MzcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5fcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC1nNAXqtBoCFdR7mVyJRHQrvFPSuOVc+sftXCT/DjShYIJQsigxG2PP PWIypOZHyGNzV8RBG+YwbxXc6GMW10X4AG+ubRcGnwlsevgMnVjH70Qgy69tQppl VHcTSy5iUh07ESJPxBVio+4757FWrtrV98VJYfC2dfBfh+6Pe7mZStNcTbeCE6Dr 2a4xdZEL0+nSVxGfMBbM0OMHq3oe/W+HRRP0CZcBjlRX3Zwe6JxflwxYRCHMq1ec w7O+zqlMsxmMyPNBQmK9fsibZIFWFm7Kq1zHPV4MhieJF0nwH3vZz2p8URgyuvDe 5FQ6wcob3n+yForFULulMPcaN8M61jU= -----END CERTIFICATE-----Generated at Sun Sep 27 02:49:48 2026 by rpki-client