$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/512e2f2f-c031-4aa3-b0d4-5400aa5a4325/e7592285-1d81-39f4-b9ef-2e69e22050f1.roa File: e7592285-1d81-39f4-b9ef-2e69e22050f1.roa (raw, json) Hash identifier: IIcI+ZwBM0umAE8MRMNSePpd84tRhE6HMbPXeUjn+o8= Subject key identifier: CE:56:69:97:DE:7C:39:82:36:01:A4:AD:EC:36:F9:0A:B7:EF:4B:9D Certificate issuer: /CN=512e2f2f-c031-4aa3-b0d4-5400aa5a4325 Certificate serial: 010D0C9F4328584F498B735D3DB46C1EBB544D80 Authority key identifier: 09:88:76:B1:1B:15:B4:FA:55:0C:E8:5E:DE:05:21:F0:25:75:92:CC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/512e2f2f-c031-4aa3-b0d4-5400aa5a4325.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/512e2f2f-c031-4aa3-b0d4-5400aa5a4325/e7592285-1d81-39f4-b9ef-2e69e22050f1.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 19710 IP address blocks: 23.138.52.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/512e2f2f-c031-4aa3-b0d4-5400aa5a4325/512e2f2f-c031-4aa3-b0d4-5400aa5a4325.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/512e2f2f-c031-4aa3-b0d4-5400aa5a4325/512e2f2f-c031-4aa3-b0d4-5400aa5a4325.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/512e2f2f-c031-4aa3-b0d4-5400aa5a4325.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:8b:73:5d:3d:b4:6c:1e:bb:54:4d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=512e2f2f-c031-4aa3-b0d4-5400aa5a4325 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=d76f55a2-d8a8-448a-9af0-cee4a0a31c35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:f3:f5:e5:dd:0b:6e:d8:9a:59:b6:85:12:06: 5b:91:b5:37:bc:6f:83:a6:80:ac:ca:15:05:35:63: 86:e6:df:35:9e:36:7c:43:d2:7c:0d:f5:0b:eb:47: b5:a5:28:52:3c:a3:f6:a8:d4:90:51:f4:db:37:74: 53:bb:66:1c:70:09:c5:41:a6:17:87:35:80:3a:8c: fb:76:23:2b:5a:ac:d9:c9:ee:cc:2f:43:97:06:19: 3c:f3:48:b6:c2:ce:c6:43:0b:24:db:26:a6:83:75: ab:56:2d:ce:06:eb:61:5a:55:58:06:d6:90:25:e0: b7:21:b6:cb:cb:36:dc:72:d7:47:77:9c:12:bb:28: a5:c9:49:7a:37:02:88:ca:46:36:92:c9:0d:88:39: 13:04:21:55:8d:e8:1e:f3:ea:50:2c:b9:c8:ab:f3: ce:45:b2:65:b7:51:45:e4:24:6b:9b:75:e3:06:61: 40:13:e3:f8:10:5d:1d:36:c5:f9:3b:4d:78:7a:cc: c7:86:8d:d9:70:54:50:18:0e:1c:7d:db:07:dc:32: db:04:8c:6d:9b:95:fb:bf:55:c4:61:ca:b8:f6:19: f5:92:ee:96:45:dd:ea:55:bb:e2:84:86:a9:4e:42: 45:59:d9:58:05:b6:78:21:bc:20:12:80:3f:7e:a5: de:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:56:69:97:DE:7C:39:82:36:01:A4:AD:EC:36:F9:0A:B7:EF:4B:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/512e2f2f-c031-4aa3-b0d4-5400aa5a4325/e7592285-1d81-39f4-b9ef-2e69e22050f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/512e2f2f-c031-4aa3-b0d4-5400aa5a4325/512e2f2f-c031-4aa3-b0d4-5400aa5a4325.crl X509v3 Authority Key Identifier: keyid:09:88:76:B1:1B:15:B4:FA:55:0C:E8:5E:DE:05:21:F0:25:75:92:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/512e2f2f-c031-4aa3-b0d4-5400aa5a4325.cer sbgp-ipAddrBlock: critical IPv4: 23.138.52.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c5:8a:a8:ba:59:ef:53:f3:8e:8f:8d:ff:12:87:17:b1:de:c1: 1b:37:78:a2:74:11:a3:88:08:ef:f7:2c:7f:fc:74:fb:e4:89: 31:97:b1:7b:d7:9c:c7:30:a3:e5:57:49:c8:21:d7:da:4b:6e: 9c:bc:ab:fc:82:55:52:dd:bc:26:dc:ba:7f:2e:5b:17:12:77: 74:48:c7:f7:9a:c4:9d:47:dd:5c:91:49:a1:67:f8:e0:60:83: f3:57:48:b2:e5:d9:32:98:db:43:1f:4d:69:6a:36:14:ca:b1: d7:94:e2:71:38:02:58:ff:2c:40:36:21:a8:4b:9d:16:66:ca: c5:07:f6:1a:5c:3c:37:39:e8:c0:80:77:79:9d:92:86:8f:9c: f4:db:02:38:1e:90:45:32:04:df:b3:53:dc:42:14:b5:1e:03: 06:f1:39:e7:84:0c:da:75:36:d1:20:16:af:f3:5d:85:59:e3: e8:5d:e8:9a:3c:f7:83:82:f9:db:90:5b:25:40:42:9e:70:66: b4:63:f6:a8:53:10:3a:b3:c9:c5:9b:2c:af:65:6a:c6:11:cc: 25:d0:f8:3f:38:ca:ff:c7:e4:24:c0:3b:fb:c6:c4:a4:9b:ad: 4a:09:45:db:18:a8:8e:12:96:53:bc:14:bf:5c:c1:fa:be:49: 59:b0:cd:4d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Ji3NdPbRsHrtUTYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTEyZTJmMmYtYzAzMS00YWEzLWIwZDQtNTQwMGFhNWE0 MzI1MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZDc2ZjU1YTItZDhhOC00NDhhLTlhZjAtY2VlNGEwYTMxYzM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3vP15d0LbtiaWbaFEgZbkbU3vG+DpoCsyhUF NWOG5t81njZ8Q9J8DfUL60e1pShSPKP2qNSQUfTbN3RTu2YccAnFQaYXhzWAOoz7 diMrWqzZye7ML0OXBhk880i2ws7GQwsk2yamg3WrVi3OButhWlVYBtaQJeC3IbbL yzbcctdHd5wSuyilyUl6NwKIykY2kskNiDkTBCFVjege8+pQLLnIq/PORbJlt1FF 5CRrm3XjBmFAE+P4EF0dNsX5O014eszHho3ZcFRQGA4cfdsH3DLbBIxtm5X7v1XE Ycq49hn1ku6WRd3qVbvihIapTkJFWdlYBbZ4IbwgEoA/fqXebwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM5WaZfefDmCNgGkrew2+Qq370udMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy81MTJl MmYyZi1jMDMxLTRhYTMtYjBkNC01NDAwYWE1YTQzMjUvZTc1OTIyODUtMWQ4MS0z OWY0LWI5ZWYtMmU2OWUyMjA1MGYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvNTEyZTJmMmYtYzAzMS00YWEzLWIw ZDQtNTQwMGFhNWE0MzI1LzUxMmUyZjJmLWMwMzEtNGFhMy1iMGQ0LTU0MDBhYTVh NDMyNS5jcmwwHwYDVR0jBBgwFoAUCYh2sRsVtPpVDOhe3gUh8CV1kswwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy81MTJlMmYyZi1jMDMxLTRhYTMtYjBkNC01NDAw YWE1YTQzMjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4o0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMWKqLpZ71Pzjo+N/xKHF7HewRs3eKJ0EaOICO/3LH/8dPvkiTGXsXvX nMcwo+VXScgh19pLbpy8q/yCVVLdvCbcun8uWxcSd3RIx/eaxJ1H3VyRSaFn+OBg g/NXSLLl2TKY20MfTWlqNhTKsdeU4nE4Alj/LEA2IahLnRZmysUH9hpcPDc56MCA d3mdkoaPnPTbAjgekEUyBN+zU9xCFLUeAwbxOeeEDNp1NtEgFq/zXYVZ4+hd6Jo8 94OC+duQWyVAQp5wZrRj9qhTEDqzycWbLK9lasYRzCXQ+D84yv/H5CTAO/vGxKSb rUoJRdsYqI4SllO8FL9cwfq+SVmwzU0= -----END CERTIFICATE-----Generated at Sat Oct 3 19:35:29 2026 by rpki-client