$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0c14a26f-a249-48dd-8320-2da501e5bef1/af6aca10-2975-394a-a754-8ac50b8a81a8.roa File: af6aca10-2975-394a-a754-8ac50b8a81a8.roa (raw, json) Hash identifier: 3RDC2wcPuU206MPoyw1RNUcjJhZScsG14Bd6NWB62rk= Subject key identifier: 29:49:5C:49:69:F6:2B:D9:AB:F5:79:16:78:13:56:6E:A1:76:5F:B3 Certificate issuer: /CN=0c14a26f-a249-48dd-8320-2da501e5bef1 Certificate serial: 010D0C9F4328584F2EED100CF937E083ECAC7B40 Authority key identifier: D6:13:A8:2D:17:14:A2:53:AC:66:88:51:78:3C:D1:E8:96:29:87:90 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0c14a26f-a249-48dd-8320-2da501e5bef1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0c14a26f-a249-48dd-8320-2da501e5bef1/af6aca10-2975-394a-a754-8ac50b8a81a8.roa Signing time: Tue 15 Sep 2026 13:00:12 +0000 ROA not before: Tue 15 Sep 2026 13:00:12 +0000 ROA not after: Mon 14 Dec 2026 14:00:12 +0000 asID: 395007 IP address blocks: 23.153.52.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0c14a26f-a249-48dd-8320-2da501e5bef1/0c14a26f-a249-48dd-8320-2da501e5bef1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0c14a26f-a249-48dd-8320-2da501e5bef1/0c14a26f-a249-48dd-8320-2da501e5bef1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0c14a26f-a249-48dd-8320-2da501e5bef1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:2e:ed:10:0c:f9:37:e0:83:ec:ac:7b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c14a26f-a249-48dd-8320-2da501e5bef1 Validity Not Before: Sep 15 13:00:12 2026 GMT Not After : Dec 14 14:00:12 2026 GMT Subject: CN=136c4d83-9096-4713-a479-9d1bac4e03f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:41:b2:7b:3a:29:f7:3d:be:5b:33:a5:3c:c7: 04:6d:5d:69:5a:aa:50:0d:cd:f0:19:0d:47:16:01: 96:4b:b3:67:2e:bb:3c:fd:e5:b1:78:de:aa:86:2e: 84:6d:a5:26:80:94:ac:e2:5a:7b:bd:fe:f8:53:56: bc:8e:28:ee:08:6b:4c:ce:94:19:f4:e7:46:a6:2d: 15:64:b2:4a:ae:23:5f:cc:ec:83:d7:2e:aa:c6:3f: 37:d7:b9:cd:62:da:73:e3:92:e0:57:40:95:12:9d: 55:17:43:95:c8:8e:9c:c8:8c:cd:5f:f8:27:2f:19: 13:5e:05:5b:1a:c7:cc:4b:b6:78:0b:a2:be:19:1a: 36:25:9e:59:19:77:e0:72:e0:88:b7:15:82:78:3c: cf:8a:7f:0f:10:fb:fb:4e:ff:14:f9:67:70:29:40: 16:81:63:86:c9:24:40:a2:75:82:42:5a:67:74:ff: 5f:db:c7:0d:4a:b2:6d:ee:e3:e3:b2:36:e6:a6:58: 7b:74:4b:b6:ab:64:40:a6:1c:05:09:75:6e:fe:51: 6b:9d:5b:1b:21:5d:2e:b9:99:48:5b:3a:54:67:f2: 32:f4:06:98:25:10:e6:dc:cd:08:5c:1a:dd:f9:81: b3:9b:4a:b4:b7:79:0a:12:0a:37:64:a7:82:5f:a3: f1:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:49:5C:49:69:F6:2B:D9:AB:F5:79:16:78:13:56:6E:A1:76:5F:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0c14a26f-a249-48dd-8320-2da501e5bef1/af6aca10-2975-394a-a754-8ac50b8a81a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0c14a26f-a249-48dd-8320-2da501e5bef1/0c14a26f-a249-48dd-8320-2da501e5bef1.crl X509v3 Authority Key Identifier: keyid:D6:13:A8:2D:17:14:A2:53:AC:66:88:51:78:3C:D1:E8:96:29:87:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0c14a26f-a249-48dd-8320-2da501e5bef1.cer sbgp-ipAddrBlock: critical IPv4: 23.153.52.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:aa:2f:44:b2:dc:f4:2e:a3:38:c0:7c:e2:74:a5:d3:1f:46: 72:46:e2:0e:7b:e4:a5:75:b5:50:c1:15:d8:f6:b8:19:2c:e0: f7:fc:a5:7b:53:fc:90:1b:7e:5b:63:ee:4b:dc:92:96:7b:2b: 1c:f9:b1:5b:11:50:c5:91:3e:5f:ea:a9:2f:50:0f:cb:9d:f6: 21:c2:be:1f:d9:eb:4a:d6:7c:c9:d9:a9:7e:be:c1:6c:a2:74: 55:08:26:f6:33:5b:0d:6f:6e:5c:95:cf:64:76:50:c7:36:78: 9f:fe:03:0e:26:2b:73:20:00:2b:e1:0a:e5:89:33:90:8c:d0: 29:43:31:8b:3d:7c:cd:6d:d6:08:21:ae:f9:70:71:87:f7:88: e3:c0:8b:f7:c6:5c:53:d2:95:19:bd:2e:c2:bb:87:32:8d:ff: ea:52:b6:ab:08:85:fb:de:c1:63:1d:68:15:e7:c6:f8:86:13: d0:0c:cb:1c:63:ed:33:82:c2:fd:33:f3:01:b4:d2:3d:e2:5b: f2:53:1d:f3:e1:da:12:68:ca:33:13:36:ff:6f:d7:f8:20:85: fb:2d:cc:f4:8f:11:4d:09:3b:e7:64:27:5e:26:43:85:e7:52: 8a:8b:c2:55:77:00:ab:32:25:fb:c8:08:e0:80:4b:57:9b:2e: 33:84:e0:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8u7RAM+Tfgg+yse0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGMxNGEyNmYtYTI0OS00OGRkLTgzMjAtMmRhNTAxZTVi ZWYxMB4XDTI2MDkxNTEzMDAxMloXDTI2MTIxNDE0MDAxMlowLzEtMCsGA1UEAxMk MTM2YzRkODMtOTA5Ni00NzEzLWE0NzktOWQxYmFjNGUwM2YzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq0Gyezop9z2+WzOlPMcEbV1pWqpQDc3wGQ1H FgGWS7NnLrs8/eWxeN6qhi6EbaUmgJSs4lp7vf74U1a8jijuCGtMzpQZ9OdGpi0V ZLJKriNfzOyD1y6qxj8317nNYtpz45LgV0CVEp1VF0OVyI6cyIzNX/gnLxkTXgVb GsfMS7Z4C6K+GRo2JZ5ZGXfgcuCItxWCeDzPin8PEPv7Tv8U+WdwKUAWgWOGySRA onWCQlpndP9f28cNSrJt7uPjsjbmplh7dEu2q2RAphwFCXVu/lFrnVsbIV0uuZlI WzpUZ/Iy9AaYJRDm3M0IXBrd+YGzm0q0t3kKEgo3ZKeCX6PxIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFClJXElp9ivZq/V5FngTVm6hdl+zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS8wYzE0 YTI2Zi1hMjQ5LTQ4ZGQtODMyMC0yZGE1MDFlNWJlZjEvYWY2YWNhMTAtMjk3NS0z OTRhLWE3NTQtOGFjNTBiOGE4MWE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvMGMxNGEyNmYtYTI0OS00OGRkLTgz MjAtMmRhNTAxZTViZWYxLzBjMTRhMjZmLWEyNDktNDhkZC04MzIwLTJkYTUwMWU1 YmVmMS5jcmwwHwYDVR0jBBgwFoAU1hOoLRcUolOsZohReDzR6JYph5AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS8wYzE0YTI2Zi1hMjQ5LTQ4ZGQtODMyMC0yZGE1 MDFlNWJlZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5k0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABmqL0Sy3PQuozjAfOJ0pdMfRnJG4g575KV1tVDBFdj2uBks4Pf8pXtT /JAbfltj7kvckpZ7Kxz5sVsRUMWRPl/qqS9QD8ud9iHCvh/Z60rWfMnZqX6+wWyi dFUIJvYzWw1vblyVz2R2UMc2eJ/+Aw4mK3MgACvhCuWJM5CM0ClDMYs9fM1t1ggh rvlwcYf3iOPAi/fGXFPSlRm9LsK7hzKN/+pStqsIhfvewWMdaBXnxviGE9AMyxxj 7TOCwv0z8wG00j3iW/JTHfPh2hJoyjMTNv9v1/gghfstzPSPEU0JO+dkJ14mQ4Xn UoqLwlV3AKsyJfvICOCAS1ebLjOE4NA= -----END CERTIFICATE-----Generated at Sun Sep 27 05:56:54 2026 by rpki-client