$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/99b49bb6-2782-4a82-829c-d4b94eb646f1/87eb7ad8-367d-3484-866c-a694fd0c58a3.roa File: 87eb7ad8-367d-3484-866c-a694fd0c58a3.roa (raw, json) Hash identifier: QGQqZrB4QPD69IE32GpAt8rOM4Az1KRNrrcqsmyzNg0= Subject key identifier: B9:A1:27:BD:87:A0:28:7A:93:A9:F6:94:C1:A8:3A:9D:A4:12:74:41 Certificate issuer: /CN=99b49bb6-2782-4a82-829c-d4b94eb646f1 Certificate serial: 010D0C9F4328584F30527B361F9198E83B13AF40 Authority key identifier: D6:69:B4:0F:5D:A2:4C:D6:6A:FF:27:0A:E8:FE:F2:CC:F9:E8:6C:24 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/99b49bb6-2782-4a82-829c-d4b94eb646f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/99b49bb6-2782-4a82-829c-d4b94eb646f1/87eb7ad8-367d-3484-866c-a694fd0c58a3.roa Signing time: Wed 16 Sep 2026 01:00:12 +0000 ROA not before: Wed 16 Sep 2026 01:00:12 +0000 ROA not after: Tue 15 Dec 2026 02:00:12 +0000 asID: 212524 IP address blocks: 23.154.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/99b49bb6-2782-4a82-829c-d4b94eb646f1/99b49bb6-2782-4a82-829c-d4b94eb646f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/99b49bb6-2782-4a82-829c-d4b94eb646f1/99b49bb6-2782-4a82-829c-d4b94eb646f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/99b49bb6-2782-4a82-829c-d4b94eb646f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:30:52:7b:36:1f:91:98:e8:3b:13:af:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99b49bb6-2782-4a82-829c-d4b94eb646f1 Validity Not Before: Sep 16 01:00:12 2026 GMT Not After : Dec 15 02:00:12 2026 GMT Subject: CN=ff48ed70-13b4-4169-8eee-bfec1124fadb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:2e:37:75:46:aa:7a:4b:7a:7c:b0:75:5e:0e: e7:63:ab:67:98:0d:42:95:dd:89:87:43:00:da:8a: c3:d6:d1:6f:52:0a:8d:57:04:86:42:43:0d:4b:3a: b0:ce:1d:c1:e4:b8:a4:aa:33:7e:f7:01:81:c0:0d: 5b:87:de:79:5f:4a:cd:c5:2f:ed:06:d7:9e:97:6d: 4b:3f:5c:81:4b:df:b0:76:e1:39:13:84:28:40:3a: 1d:90:d0:9f:6f:aa:7b:b7:57:f8:da:06:19:78:df: b7:48:90:da:52:98:49:96:eb:bc:cc:9c:c1:1a:ca: 05:3a:0a:db:11:49:d8:be:44:ba:e3:6a:15:f0:8b: f2:37:49:e2:0d:74:06:d5:51:2f:5f:1c:51:c5:c8: df:f0:d0:22:45:e5:95:24:93:3b:81:67:aa:4b:d8: 02:e8:88:cc:ec:e8:c2:d9:79:37:b9:92:2d:78:ef: 7a:84:1b:2e:ac:d1:f8:ea:11:25:c5:ab:f6:36:f4: 1d:57:17:06:48:68:a0:d8:ad:97:e0:43:26:d7:fb: 01:c7:18:7a:18:56:a9:e0:4c:0b:c4:dc:cf:6f:c0: 7e:d0:b8:09:72:6c:cf:b9:32:97:91:bc:62:fb:c4: 2d:be:9c:c5:e2:aa:97:9a:b8:b3:70:36:9a:0c:aa: aa:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:A1:27:BD:87:A0:28:7A:93:A9:F6:94:C1:A8:3A:9D:A4:12:74:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/99b49bb6-2782-4a82-829c-d4b94eb646f1/87eb7ad8-367d-3484-866c-a694fd0c58a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/99b49bb6-2782-4a82-829c-d4b94eb646f1/99b49bb6-2782-4a82-829c-d4b94eb646f1.crl X509v3 Authority Key Identifier: keyid:D6:69:B4:0F:5D:A2:4C:D6:6A:FF:27:0A:E8:FE:F2:CC:F9:E8:6C:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/99b49bb6-2782-4a82-829c-d4b94eb646f1.cer sbgp-ipAddrBlock: critical IPv4: 23.154.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:a9:50:99:eb:56:f6:95:7c:c5:3b:15:a3:0f:32:cb:dc:0a: b3:2b:a8:f2:a3:02:47:49:23:34:4b:94:23:c5:48:b4:2e:df: 91:6b:8a:bc:a3:0d:de:c6:92:91:aa:78:37:ce:ea:57:59:7d: 94:3c:20:f2:63:b8:cf:33:ec:c9:8f:99:7b:5c:22:e1:90:d8: 73:3a:c7:34:0f:05:9c:18:dd:a7:ce:e0:27:3e:9f:54:46:7d: 11:20:81:6d:ca:52:e5:e2:b0:65:c6:f6:f5:c4:d0:6f:9a:5a: 17:3a:d4:1e:de:89:6e:cc:f0:84:41:a3:bb:7d:9b:3e:67:5c: 20:11:64:70:df:19:55:6f:99:ee:5d:24:47:6f:0e:d9:44:00: 82:75:02:c4:43:a9:3d:2a:b5:ad:36:88:05:aa:57:22:b0:f1: eb:a7:83:aa:09:b9:75:28:a5:25:1d:6d:eb:71:3e:56:1a:de: 25:b7:95:5e:3d:5b:e2:f5:a3:5a:2b:51:14:fc:a2:10:ae:98: 9f:d4:67:9a:9c:c8:93:62:86:a3:35:fa:1f:e9:1e:de:64:28: 67:c2:2f:71:47:7d:c5:93:5f:9f:ac:06:61:05:b1:d9:93:01: fa:90:f7:cd:cf:8b:26:ca:d5:ba:dc:9d:b3:ba:9d:45:f1:52: 4c:8e:da:bb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8wUns2H5GY6DsTr0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTliNDliYjYtMjc4Mi00YTgyLTgyOWMtZDRiOTRlYjY0 NmYxMB4XDTI2MDkxNjAxMDAxMloXDTI2MTIxNTAyMDAxMlowLzEtMCsGA1UEAxMk ZmY0OGVkNzAtMTNiNC00MTY5LThlZWUtYmZlYzExMjRmYWRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqi43dUaqekt6fLB1Xg7nY6tnmA1Cld2Jh0MA 2orD1tFvUgqNVwSGQkMNSzqwzh3B5LikqjN+9wGBwA1bh955X0rNxS/tBteel21L P1yBS9+wduE5E4QoQDodkNCfb6p7t1f42gYZeN+3SJDaUphJluu8zJzBGsoFOgrb EUnYvkS642oV8IvyN0niDXQG1VEvXxxRxcjf8NAiReWVJJM7gWeqS9gC6IjM7OjC 2Xk3uZIteO96hBsurNH46hElxav2NvQdVxcGSGig2K2X4EMm1/sBxxh6GFap4EwL xNzPb8B+0LgJcmzPuTKXkbxi+8QtvpzF4qqXmrizcDaaDKqq4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLmhJ72HoCh6k6n2lMGoOp2kEnRBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85OWI0 OWJiNi0yNzgyLTRhODItODI5Yy1kNGI5NGViNjQ2ZjEvODdlYjdhZDgtMzY3ZC0z NDg0LTg2NmMtYTY5NGZkMGM1OGEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOTliNDliYjYtMjc4Mi00YTgyLTgy OWMtZDRiOTRlYjY0NmYxLzk5YjQ5YmI2LTI3ODItNGE4Mi04MjljLWQ0Yjk0ZWI2 NDZmMS5jcmwwHwYDVR0jBBgwFoAU1mm0D12iTNZq/ycK6P7yzPnobCQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85OWI0OWJiNi0yNzgyLTRhODItODI5Yy1kNGI5 NGViNjQ2ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5p4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEapUJnrVvaVfMU7FaMPMsvcCrMrqPKjAkdJIzRLlCPFSLQu35Friryj Dd7GkpGqeDfO6ldZfZQ8IPJjuM8z7MmPmXtcIuGQ2HM6xzQPBZwY3afO4Cc+n1RG fREggW3KUuXisGXG9vXE0G+aWhc61B7eiW7M8IRBo7t9mz5nXCARZHDfGVVvme5d JEdvDtlEAIJ1AsRDqT0qta02iAWqVyKw8eung6oJuXUopSUdbetxPlYa3iW3lV49 W+L1o1orURT8ohCumJ/UZ5qcyJNihqM1+h/pHt5kKGfCL3FHfcWTX5+sBmEFsdmT AfqQ983PiybK1brcnbO6nUXxUkyO2rs= -----END CERTIFICATE-----Generated at Sat Sep 26 09:32:45 2026 by rpki-client