$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0d11eac1-cc02-42fc-822d-f4bbf31842d8/b2cbd41d-2dd3-3325-a83c-62c0941a2003.roa File: b2cbd41d-2dd3-3325-a83c-62c0941a2003.roa (raw, json) Hash identifier: yDlHmprIgrvkwztJ0D0cbdc6+hmwIIOI4wDEHymaSPE= Subject key identifier: 2B:41:0F:2E:B8:3A:C3:63:36:1B:02:77:20:67:CD:F5:23:76:C4:45 Certificate issuer: /CN=0d11eac1-cc02-42fc-822d-f4bbf31842d8 Certificate serial: 010D0C9F4328584F305291BEA70126D3E6982C00 Authority key identifier: BF:BE:8E:46:D3:0B:71:DF:06:A6:88:4E:23:16:8A:0E:7B:83:9C:5E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0d11eac1-cc02-42fc-822d-f4bbf31842d8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0d11eac1-cc02-42fc-822d-f4bbf31842d8/b2cbd41d-2dd3-3325-a83c-62c0941a2003.roa Signing time: Wed 16 Sep 2026 01:00:12 +0000 ROA not before: Wed 16 Sep 2026 01:00:12 +0000 ROA not after: Tue 15 Dec 2026 02:00:12 +0000 asID: 400619 IP address blocks: 23.153.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0d11eac1-cc02-42fc-822d-f4bbf31842d8/0d11eac1-cc02-42fc-822d-f4bbf31842d8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0d11eac1-cc02-42fc-822d-f4bbf31842d8/0d11eac1-cc02-42fc-822d-f4bbf31842d8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0d11eac1-cc02-42fc-822d-f4bbf31842d8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:30:52:91:be:a7:01:26:d3:e6:98:2c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d11eac1-cc02-42fc-822d-f4bbf31842d8 Validity Not Before: Sep 16 01:00:12 2026 GMT Not After : Dec 15 02:00:12 2026 GMT Subject: CN=39bf3749-4882-4662-b72a-c061aa7bdf5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:59:e8:96:02:d0:db:ce:48:1a:fb:32:3b:75: b8:3a:2d:22:ad:a4:2a:71:29:9d:bf:e4:50:03:e9: 7e:83:ad:d0:81:f1:e1:18:2c:46:c9:3e:69:90:1d: 8a:4e:b1:2b:e6:cc:40:8a:b4:03:db:36:2a:50:33: 52:6a:98:20:b6:4c:0c:48:64:54:29:e8:de:33:e5: 00:9c:af:a6:59:dd:db:16:81:ce:e0:16:17:b5:92: 09:62:a9:62:72:bc:34:c6:5d:e5:c9:af:1c:2c:0a: 07:e4:36:82:7a:6a:29:3c:82:e8:3b:b1:9f:ec:6f: 15:9f:a3:84:da:d8:fe:1a:55:51:29:8f:9a:34:d8: 9e:f6:52:4b:22:60:81:94:fa:91:b8:2b:d8:3d:c0: 37:24:8b:d5:cd:b7:0c:81:81:61:78:89:4f:2c:dc: 8c:62:c1:46:64:b2:91:5b:9c:e5:d1:93:47:5c:8b: cc:1b:25:2d:4c:47:93:31:1e:6d:65:96:65:d5:ea: 08:c5:55:6d:c6:de:6b:8f:f1:35:17:9a:6b:d1:d0: 12:d7:81:24:6b:fe:54:50:07:8a:d7:b2:fb:11:57: ca:04:03:2b:db:f0:0e:9b:53:23:fe:ad:d6:35:9e: cd:e0:13:cd:16:80:07:32:00:ff:11:47:6c:ec:b0: b5:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:41:0F:2E:B8:3A:C3:63:36:1B:02:77:20:67:CD:F5:23:76:C4:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0d11eac1-cc02-42fc-822d-f4bbf31842d8/b2cbd41d-2dd3-3325-a83c-62c0941a2003.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0d11eac1-cc02-42fc-822d-f4bbf31842d8/0d11eac1-cc02-42fc-822d-f4bbf31842d8.crl X509v3 Authority Key Identifier: keyid:BF:BE:8E:46:D3:0B:71:DF:06:A6:88:4E:23:16:8A:0E:7B:83:9C:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0d11eac1-cc02-42fc-822d-f4bbf31842d8.cer sbgp-ipAddrBlock: critical IPv4: 23.153.36.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:0c:a7:1e:59:d6:85:6c:11:77:05:87:58:a5:6f:f9:66:45: a1:69:42:0c:ca:cf:17:aa:1d:93:8f:c5:c4:1d:bc:2c:49:73: 26:71:9e:42:bb:f0:53:ea:b8:55:8c:7d:04:94:5d:c4:49:52: 7c:d2:29:c7:55:00:20:78:5c:d4:75:2e:29:28:d6:15:97:73: b4:a9:8c:75:77:26:f5:63:3e:41:27:3f:2f:14:47:9c:e8:b2: 2e:46:d0:e2:b7:a2:44:76:2a:f9:7c:9f:f3:8a:3f:48:09:46: 8e:c0:42:1d:f9:c2:24:aa:26:68:b3:4e:cf:23:21:0b:0c:55: c0:a0:21:b9:96:ad:b9:1d:de:1b:b2:14:df:32:65:4f:b4:1c: 78:09:e2:24:bd:d0:68:eb:5c:11:1d:c4:9b:5a:4a:73:49:63: fa:a1:76:60:a5:d4:4a:b1:a5:cf:2c:7c:c1:01:b7:92:cf:2c: 3b:12:e4:2d:f1:7d:e6:b8:3c:ce:e0:16:55:17:87:9b:95:71: f2:3e:7d:f3:38:01:f9:38:bf:72:5c:4c:a6:0d:22:8e:66:da: ed:5d:6b:1b:88:43:dc:78:74:2b:55:e1:3c:1a:3f:69:2e:5d: 81:aa:f4:53:40:0a:f9:5d:c5:1c:fe:7b:0d:91:85:2b:43:c1: 3a:82:68:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8wUpG+pwEm0+aYLAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGQxMWVhYzEtY2MwMi00MmZjLTgyMmQtZjRiYmYzMTg0 MmQ4MB4XDTI2MDkxNjAxMDAxMloXDTI2MTIxNTAyMDAxMlowLzEtMCsGA1UEAxMk MzliZjM3NDktNDg4Mi00NjYyLWI3MmEtYzA2MWFhN2JkZjVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiFnolgLQ285IGvsyO3W4Oi0iraQqcSmdv+RQ A+l+g63QgfHhGCxGyT5pkB2KTrEr5sxAirQD2zYqUDNSapggtkwMSGRUKejeM+UA nK+mWd3bFoHO4BYXtZIJYqlicrw0xl3lya8cLAoH5DaCemopPILoO7Gf7G8Vn6OE 2tj+GlVRKY+aNNie9lJLImCBlPqRuCvYPcA3JIvVzbcMgYFheIlPLNyMYsFGZLKR W5zl0ZNHXIvMGyUtTEeTMR5tZZZl1eoIxVVtxt5rj/E1F5pr0dAS14Eka/5UUAeK 17L7EVfKBAMr2/AOm1Mj/q3WNZ7N4BPNFoAHMgD/EUds7LC11QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCtBDy64OsNjNhsCdyBnzfUjdsRFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS8wZDEx ZWFjMS1jYzAyLTQyZmMtODIyZC1mNGJiZjMxODQyZDgvYjJjYmQ0MWQtMmRkMy0z MzI1LWE4M2MtNjJjMDk0MWEyMDAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvMGQxMWVhYzEtY2MwMi00MmZjLTgy MmQtZjRiYmYzMTg0MmQ4LzBkMTFlYWMxLWNjMDItNDJmYy04MjJkLWY0YmJmMzE4 NDJkOC5jcmwwHwYDVR0jBBgwFoAUv76ORtMLcd8GpohOIxaKDnuDnF4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS8wZDExZWFjMS1jYzAyLTQyZmMtODIyZC1mNGJi ZjMxODQyZDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5kkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEMMpx5Z1oVsEXcFh1ilb/lmRaFpQgzKzxeqHZOPxcQdvCxJcyZxnkK7 8FPquFWMfQSUXcRJUnzSKcdVACB4XNR1Liko1hWXc7SpjHV3JvVjPkEnPy8UR5zo si5G0OK3okR2Kvl8n/OKP0gJRo7AQh35wiSqJmizTs8jIQsMVcCgIbmWrbkd3huy FN8yZU+0HHgJ4iS90GjrXBEdxJtaSnNJY/qhdmCl1Eqxpc8sfMEBt5LPLDsS5C3x fea4PM7gFlUXh5uVcfI+ffM4Afk4v3JcTKYNIo5m2u1daxuIQ9x4dCtV4TwaP2ku XYGq9FNACvldxRz+ew2RhStDwTqCaEA= -----END CERTIFICATE-----Generated at Fri Sep 25 00:09:51 2026 by rpki-client