$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/956c8740-f351-4625-a3ff-54fb1e6a5b97/a06833e4-c499-3a4c-80b3-c2b4de9a3dda.roa File: a06833e4-c499-3a4c-80b3-c2b4de9a3dda.roa (raw, json) Hash identifier: gOvh5Ps3fPiuL28kQpQZ3zgB/NXzlXir8HGgkZR8ZDM= Subject key identifier: DB:D4:2F:C2:90:53:AA:A8:36:96:73:8D:BD:95:1C:F2:2E:12:7D:80 Certificate issuer: /CN=956c8740-f351-4625-a3ff-54fb1e6a5b97 Certificate serial: 010D0C9F4328584F3CE27A1B5A1BF2C0C36EEDE8 Authority key identifier: BB:D2:7B:65:6D:CD:DF:15:B1:AD:AB:28:F0:F5:C8:F7:A3:1B:25:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/956c8740-f351-4625-a3ff-54fb1e6a5b97.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/956c8740-f351-4625-a3ff-54fb1e6a5b97/a06833e4-c499-3a4c-80b3-c2b4de9a3dda.roa Signing time: Sun 20 Sep 2026 13:00:12 +0000 ROA not before: Sun 20 Sep 2026 13:00:12 +0000 ROA not after: Sat 19 Dec 2026 14:00:12 +0000 asID: 11715 IP address blocks: 23.136.92.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/956c8740-f351-4625-a3ff-54fb1e6a5b97/956c8740-f351-4625-a3ff-54fb1e6a5b97.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/956c8740-f351-4625-a3ff-54fb1e6a5b97/956c8740-f351-4625-a3ff-54fb1e6a5b97.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/956c8740-f351-4625-a3ff-54fb1e6a5b97.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3c:e2:7a:1b:5a:1b:f2:c0:c3:6e:ed:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=956c8740-f351-4625-a3ff-54fb1e6a5b97 Validity Not Before: Sep 20 13:00:12 2026 GMT Not After : Dec 19 14:00:12 2026 GMT Subject: CN=c075f4a5-061c-45cd-9259-035fa7710dd5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:7c:f5:e0:87:28:28:1d:06:fa:2f:dc:2f:65: dc:c0:48:00:ff:a3:67:90:1a:f5:af:a5:a6:61:f1: c6:8c:bb:e3:89:42:97:03:53:14:63:f5:5e:04:5e: 01:db:ee:33:22:0b:45:f5:4c:00:ab:84:74:bb:89: 6f:d3:c9:18:29:4b:93:60:bf:21:43:43:34:b8:01: 24:26:f1:db:2f:56:93:0f:ed:13:71:5d:38:d7:f4: 2d:58:09:55:73:0d:b4:7c:b6:4c:5c:49:0d:97:01: ed:4d:0e:f3:79:64:ca:73:00:9b:a6:ff:75:49:b5: f6:33:d2:fb:93:f3:2d:9d:f5:93:0e:8e:6d:ab:03: ad:7f:1d:2a:93:7a:34:d4:65:ad:01:a4:ff:01:a5: 19:9e:ec:76:bf:14:87:59:95:5e:1f:b5:cb:32:ae: cd:87:86:74:74:ca:89:3a:e4:9a:cf:12:4b:aa:4a: 90:5c:1e:41:23:79:42:ec:22:b1:a2:58:9d:79:6c: 9b:1a:f8:82:23:8f:0c:81:f9:5e:5d:ea:8a:c0:c9: bb:3d:d5:76:78:75:53:29:3b:20:7c:97:4d:d7:57: 31:1a:3f:de:46:e4:60:ab:b0:87:4a:fa:ca:a3:d3: b1:98:bc:a2:51:56:44:42:90:88:e4:ab:19:69:33: 57:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:D4:2F:C2:90:53:AA:A8:36:96:73:8D:BD:95:1C:F2:2E:12:7D:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/956c8740-f351-4625-a3ff-54fb1e6a5b97/a06833e4-c499-3a4c-80b3-c2b4de9a3dda.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/956c8740-f351-4625-a3ff-54fb1e6a5b97/956c8740-f351-4625-a3ff-54fb1e6a5b97.crl X509v3 Authority Key Identifier: keyid:BB:D2:7B:65:6D:CD:DF:15:B1:AD:AB:28:F0:F5:C8:F7:A3:1B:25:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/956c8740-f351-4625-a3ff-54fb1e6a5b97.cer sbgp-ipAddrBlock: critical IPv4: 23.136.92.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:55:50:69:dc:ae:8b:13:8b:1c:93:ea:f2:70:89:68:30:05: c7:31:6f:d0:25:83:75:6a:72:ca:16:ae:14:52:b2:8e:6a:b8: 1b:9d:1e:d1:26:08:4c:7b:af:bd:b6:c4:c9:1c:71:2b:f6:5a: bf:f4:89:54:3a:2e:63:d0:85:52:d1:43:69:e6:a4:dd:26:5e: 5f:e7:2f:ab:79:8a:1d:0a:8f:70:44:e6:64:e9:fa:e6:27:92: 53:7f:25:aa:2c:ab:70:f7:52:ac:4d:da:d1:2e:05:49:ab:69: 67:8e:56:e7:e5:b0:c4:3c:0a:1d:b5:23:4f:19:c8:40:21:7e: 40:a5:6e:4d:05:b7:8e:10:40:22:e0:85:06:ff:f9:27:f0:a1: 79:08:e7:1c:88:36:c5:0c:c7:8a:88:bb:41:4c:24:51:de:d7: 3e:1d:0a:50:ed:21:c9:dd:a1:56:79:94:ca:d8:6f:f2:32:69: dd:67:3b:57:26:ee:7d:60:49:d3:5d:21:64:d5:c1:3b:e1:1f: 46:c3:bc:b9:a7:a4:8b:27:79:ff:32:af:32:ea:f5:38:de:70: 3b:72:98:d1:a3:66:f7:01:7b:80:ac:7c:5d:0c:b2:36:5b:f0: 61:2d:4b:ca:45:bc:30:e9:9c:b5:d1:a0:f2:95:48:5f:2e:0b: fa:c7:50:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE884nobWhvywMNu7egwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTU2Yzg3NDAtZjM1MS00NjI1LWEzZmYtNTRmYjFlNmE1 Yjk3MB4XDTI2MDkyMDEzMDAxMloXDTI2MTIxOTE0MDAxMlowLzEtMCsGA1UEAxMk YzA3NWY0YTUtMDYxYy00NWNkLTkyNTktMDM1ZmE3NzEwZGQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi3z14IcoKB0G+i/cL2XcwEgA/6NnkBr1r6Wm YfHGjLvjiUKXA1MUY/VeBF4B2+4zIgtF9UwAq4R0u4lv08kYKUuTYL8hQ0M0uAEk JvHbL1aTD+0TcV041/QtWAlVcw20fLZMXEkNlwHtTQ7zeWTKcwCbpv91SbX2M9L7 k/MtnfWTDo5tqwOtfx0qk3o01GWtAaT/AaUZnux2vxSHWZVeH7XLMq7Nh4Z0dMqJ OuSazxJLqkqQXB5BI3lC7CKxolideWybGviCI48MgfleXeqKwMm7PdV2eHVTKTsg fJdN11cxGj/eRuRgq7CHSvrKo9OxmLyiUVZEQpCI5KsZaTNXuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNvUL8KQU6qoNpZzjb2VHPIuEn2AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi85NTZj ODc0MC1mMzUxLTQ2MjUtYTNmZi01NGZiMWU2YTViOTcvYTA2ODMzZTQtYzQ5OS0z YTRjLTgwYjMtYzJiNGRlOWEzZGRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvOTU2Yzg3NDAtZjM1MS00NjI1LWEz ZmYtNTRmYjFlNmE1Yjk3Lzk1NmM4NzQwLWYzNTEtNDYyNS1hM2ZmLTU0ZmIxZTZh NWI5Ny5jcmwwHwYDVR0jBBgwFoAUu9J7ZW3N3xWxraso8PXI96MbJUwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi85NTZjODc0MC1mMzUxLTQ2MjUtYTNmZi01NGZi MWU2YTViOTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4hcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAxVUGncrosTixyT6vJwiWgwBccxb9Alg3VqcsoWrhRSso5quBudHtEm CEx7r722xMkccSv2Wr/0iVQ6LmPQhVLRQ2nmpN0mXl/nL6t5ih0Kj3BE5mTp+uYn klN/Jaosq3D3UqxN2tEuBUmraWeOVuflsMQ8Ch21I08ZyEAhfkClbk0Ft44QQCLg hQb/+SfwoXkI5xyINsUMx4qIu0FMJFHe1z4dClDtIcndoVZ5lMrYb/Iyad1nO1cm 7n1gSdNdIWTVwTvhH0bDvLmnpIsnef8yrzLq9TjecDtymNGjZvcBe4CsfF0MsjZb 8GEtS8pFvDDpnLXRoPKVSF8uC/rHUHg= -----END CERTIFICATE-----Generated at Tue Oct 6 23:13:36 2026 by rpki-client