$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de57fd18-3c65-43a3-96c1-a6fe61028c72/c1ffed43-8b3a-39e2-a537-fe314320f4bb.roa File: c1ffed43-8b3a-39e2-a537-fe314320f4bb.roa (raw, json) Hash identifier: +s3R43068cBXGrRg6IIMECOcXdFoOCygM1JnjU0B8tg= Subject key identifier: 59:CB:56:64:BB:3C:EA:D4:12:7D:90:FF:B3:52:0E:B4:30:21:30:91 Certificate issuer: /CN=de57fd18-3c65-43a3-96c1-a6fe61028c72 Certificate serial: 010D0C9F4328584F4974081AEFE4D81C51E34F20 Authority key identifier: C8:BC:1B:F5:2F:52:E9:4F:95:CB:7A:FC:18:0C:02:64:40:4C:82:3D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de57fd18-3c65-43a3-96c1-a6fe61028c72.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de57fd18-3c65-43a3-96c1-a6fe61028c72/c1ffed43-8b3a-39e2-a537-fe314320f4bb.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 400304 IP address blocks: 23.147.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de57fd18-3c65-43a3-96c1-a6fe61028c72/de57fd18-3c65-43a3-96c1-a6fe61028c72.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de57fd18-3c65-43a3-96c1-a6fe61028c72/de57fd18-3c65-43a3-96c1-a6fe61028c72.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de57fd18-3c65-43a3-96c1-a6fe61028c72.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:08:1a:ef:e4:d8:1c:51:e3:4f:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de57fd18-3c65-43a3-96c1-a6fe61028c72 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=d7690922-82f8-4f8f-a434-69606fba2be2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:67:2f:c7:51:8c:2d:79:60:6e:cf:42:a6:39: f5:b7:84:67:b7:e5:5e:25:08:91:92:d9:d4:ea:fc: c9:05:85:b3:e3:25:d1:a6:b8:99:b5:99:8e:c1:d1: 46:80:f7:49:f4:d0:9a:0f:74:7c:2d:02:75:e2:41: fa:96:14:42:c2:bd:cd:a7:54:6e:bc:0e:d7:c2:b4: ad:b0:cf:b1:a1:9e:9c:22:89:0f:2c:c5:91:a9:94: 4a:05:e2:1b:2f:cd:14:81:49:1e:c6:6a:44:24:ed: 27:ce:9c:fe:c8:e0:fb:fb:ca:24:75:cb:05:d9:f2: a4:c9:ef:64:98:94:1f:76:7c:ec:08:fe:c8:06:46: a3:83:f9:70:ad:a5:59:5c:b9:4d:27:2f:3b:c7:0c: 34:ef:cc:47:af:d1:89:8b:d8:c3:46:77:a8:1b:67: 4f:49:cb:0b:ec:94:57:6d:eb:47:65:d2:c0:82:43: 95:1b:3b:e8:05:76:45:5b:b8:6b:da:8a:84:85:69: 93:bc:ef:cd:1f:70:25:70:86:14:fc:d4:6c:77:9f: 74:d5:63:6a:6f:9e:df:e3:3e:b7:b3:a7:6f:83:22: 9b:69:00:07:c5:36:8a:5c:d4:5d:c6:99:8f:cd:01: 42:c5:e0:9e:f7:8e:20:c0:c6:ad:15:75:1e:1c:2e: 56:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:CB:56:64:BB:3C:EA:D4:12:7D:90:FF:B3:52:0E:B4:30:21:30:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de57fd18-3c65-43a3-96c1-a6fe61028c72/c1ffed43-8b3a-39e2-a537-fe314320f4bb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de57fd18-3c65-43a3-96c1-a6fe61028c72/de57fd18-3c65-43a3-96c1-a6fe61028c72.crl X509v3 Authority Key Identifier: keyid:C8:BC:1B:F5:2F:52:E9:4F:95:CB:7A:FC:18:0C:02:64:40:4C:82:3D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/de57fd18-3c65-43a3-96c1-a6fe61028c72.cer sbgp-ipAddrBlock: critical IPv4: 23.147.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:c5:fc:20:b4:c8:72:a0:b4:d9:61:8d:b9:53:50:47:bb:b8: a3:9a:7d:5f:bf:b8:50:29:b7:80:4c:45:47:fc:2b:bf:bd:29: df:34:55:f3:3b:ca:b9:91:22:ee:2f:f6:92:83:25:73:b3:95: 9f:11:9a:02:38:99:65:4b:f5:16:46:8e:2e:9b:1a:eb:1e:99: d3:52:c7:e5:e5:4d:87:47:c3:24:44:1c:c9:21:31:01:1a:16: 86:2e:8d:29:15:12:c3:07:b7:b6:b9:ba:c2:e5:38:ac:65:ce: b2:06:00:94:e5:cb:88:cd:ac:11:a2:a5:3c:fa:0f:31:8d:ec: e8:37:1b:cc:17:99:62:1d:29:ae:c4:26:87:45:9d:a8:7a:68: f0:74:82:bb:63:65:15:72:1f:4c:28:46:8d:db:ba:81:d4:08: 7f:7b:83:fb:5d:1a:3f:f6:b7:11:e7:91:c4:cc:a6:4f:6e:86: 26:e4:0a:82:6e:9e:2a:6c:d8:4a:bd:56:05:e4:6b:89:2f:34: 2c:13:05:96:6c:dc:66:fd:26:24:c8:48:18:99:84:71:bb:ae: 8d:cf:0b:5e:a1:ac:5f:71:4c:21:14:4c:78:0e:49:e7:88:b5: 49:cd:b3:c7:b8:bf:c3:51:e8:14:3b:ce:1e:f7:7a:e4:fb:30: c5:cc:d7:bb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdAga7+TYHFHjTyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGU1N2ZkMTgtM2M2NS00M2EzLTk2YzEtYTZmZTYxMDI4 YzcyMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZDc2OTA5MjItODJmOC00ZjhmLWE0MzQtNjk2MDZmYmEyYmUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgWcvx1GMLXlgbs9Cpjn1t4Rnt+VeJQiRktnU 6vzJBYWz4yXRpriZtZmOwdFGgPdJ9NCaD3R8LQJ14kH6lhRCwr3Np1RuvA7XwrSt sM+xoZ6cIokPLMWRqZRKBeIbL80UgUkexmpEJO0nzpz+yOD7+8okdcsF2fKkye9k mJQfdnzsCP7IBkajg/lwraVZXLlNJy87xww078xHr9GJi9jDRneoG2dPScsL7JRX betHZdLAgkOVGzvoBXZFW7hr2oqEhWmTvO/NH3AlcIYU/NRsd5901WNqb57f4z63 s6dvgyKbaQAHxTaKXNRdxpmPzQFCxeCe944gwMatFXUeHC5W3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFnLVmS7POrUEn2Q/7NSDrQwITCRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9kZTU3 ZmQxOC0zYzY1LTQzYTMtOTZjMS1hNmZlNjEwMjhjNzIvYzFmZmVkNDMtOGIzYS0z OWUyLWE1MzctZmUzMTQzMjBmNGJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZGU1N2ZkMTgtM2M2NS00M2EzLTk2 YzEtYTZmZTYxMDI4YzcyL2RlNTdmZDE4LTNjNjUtNDNhMy05NmMxLWE2ZmU2MTAy OGM3Mi5jcmwwHwYDVR0jBBgwFoAUyLwb9S9S6U+Vy3r8GAwCZEBMgj0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9kZTU3ZmQxOC0zYzY1LTQzYTMtOTZjMS1hNmZl NjEwMjhjNzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5OYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAjF/CC0yHKgtNlhjblTUEe7uKOafV+/uFApt4BMRUf8K7+9Kd80VfM7 yrmRIu4v9pKDJXOzlZ8RmgI4mWVL9RZGji6bGusemdNSx+XlTYdHwyREHMkhMQEa FoYujSkVEsMHt7a5usLlOKxlzrIGAJTly4jNrBGipTz6DzGN7Og3G8wXmWIdKa7E JodFnah6aPB0grtjZRVyH0woRo3buoHUCH97g/tdGj/2txHnkcTMpk9uhibkCoJu nips2Eq9VgXka4kvNCwTBZZs3Gb9JiTISBiZhHG7ro3PC16hrF9xTCEUTHgOSeeI tUnNs8e4v8NR6BQ7zh73euT7MMXM17s= -----END CERTIFICATE-----Generated at Sun Sep 27 16:59:59 2026 by rpki-client