$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/20044893-520c-4759-8537-c02648d4012e/399a7856-294a-3666-870e-a30376203f04.roa File: 399a7856-294a-3666-870e-a30376203f04.roa (raw, json) Hash identifier: LUwxzj6GWIt/2nQm78Tz3u7YEu55THYArGsM7qR+ERI= Subject key identifier: 7B:66:3D:89:FC:9A:35:07:EC:F0:FC:FF:9E:38:B4:47:FF:0B:14:E7 Certificate issuer: /CN=20044893-520c-4759-8537-c02648d4012e Certificate serial: 010D0C9F4328584F07D775E67724EA595F50C840 Authority key identifier: 44:01:A3:4E:E8:95:A1:A5:35:F5:3B:BE:5D:9D:60:D6:59:1F:2F:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/20044893-520c-4759-8537-c02648d4012e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/20044893-520c-4759-8537-c02648d4012e/399a7856-294a-3666-870e-a30376203f04.roa Signing time: Tue 01 Sep 2026 13:00:12 +0000 ROA not before: Tue 01 Sep 2026 13:00:12 +0000 ROA not after: Mon 30 Nov 2026 14:00:12 +0000 asID: 394904 IP address blocks: 23.152.188.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/20044893-520c-4759-8537-c02648d4012e/20044893-520c-4759-8537-c02648d4012e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/20044893-520c-4759-8537-c02648d4012e/20044893-520c-4759-8537-c02648d4012e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/20044893-520c-4759-8537-c02648d4012e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:07:d7:75:e6:77:24:ea:59:5f:50:c8:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=20044893-520c-4759-8537-c02648d4012e Validity Not Before: Sep 1 13:00:12 2026 GMT Not After : Nov 30 14:00:12 2026 GMT Subject: CN=938afb13-c991-4667-b712-8b5d5a4c9cc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:13:c5:8a:f1:39:d9:fc:5c:d8:f9:7e:4a:ab: 2d:1d:0e:95:f2:3d:38:c4:3e:4b:f2:34:d3:55:36: b9:12:59:ed:51:65:92:5e:c8:88:48:83:e1:00:72: cc:c5:64:22:44:e6:7e:49:ca:d0:49:29:c8:f6:2c: ed:35:41:91:91:35:39:f3:0f:50:e9:a9:b2:80:ab: a8:64:0a:0d:85:69:98:fd:21:71:7e:bf:ff:37:f5: 5b:20:15:82:c9:1e:52:8f:86:b1:9c:ab:f1:e8:d5: ae:46:7a:94:64:1f:2f:49:40:f5:ec:33:2a:18:4a: 89:73:56:27:69:89:3d:86:5c:e3:00:81:71:99:ff: f4:cd:9e:97:62:99:62:7b:84:12:b2:07:ca:71:a7: bd:8f:97:8a:48:7f:16:34:84:e6:6d:48:24:24:4e: 9b:6a:41:3b:5f:ed:1e:4e:a1:74:c5:27:71:35:f6: 4a:0e:10:67:16:b5:d4:8c:51:37:ba:87:17:8a:a0: 76:79:90:12:ec:b1:5f:68:c0:d7:93:0f:6c:fd:7a: a0:5f:f2:01:36:94:f1:c2:e7:5b:0d:80:73:5b:5f: 02:fe:4e:c1:8d:2d:19:4e:c0:2f:ea:93:25:27:9a: a2:bf:9b:d6:72:d0:27:29:30:71:c7:bb:97:5e:22: b0:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:66:3D:89:FC:9A:35:07:EC:F0:FC:FF:9E:38:B4:47:FF:0B:14:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/20044893-520c-4759-8537-c02648d4012e/399a7856-294a-3666-870e-a30376203f04.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/20044893-520c-4759-8537-c02648d4012e/20044893-520c-4759-8537-c02648d4012e.crl X509v3 Authority Key Identifier: keyid:44:01:A3:4E:E8:95:A1:A5:35:F5:3B:BE:5D:9D:60:D6:59:1F:2F:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/20044893-520c-4759-8537-c02648d4012e.cer sbgp-ipAddrBlock: critical IPv4: 23.152.188.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:52:d2:64:c0:0d:20:15:c4:91:9d:46:28:68:36:56:c2:ae: 73:82:0c:5f:96:c6:09:f1:35:72:28:c2:e0:35:9c:81:00:7a: d1:fb:ac:ad:9d:51:f8:5c:41:7d:5d:47:81:59:f9:fc:bb:1d: 05:54:09:74:7e:74:bc:28:11:52:8c:03:a4:1d:4d:be:bb:47: 37:83:26:a4:57:07:24:53:62:62:87:6d:05:38:02:02:c8:8d: 48:8b:f1:49:77:dc:17:ae:b8:c2:7d:ca:6e:20:71:55:0f:64: ff:73:25:8e:d4:dc:d0:84:ee:9b:9b:74:fe:af:60:4c:30:e6: c9:3e:01:59:8f:3a:dc:8a:4a:41:c0:85:48:e9:ca:ec:d3:58: 5f:63:d8:c3:75:88:0c:ff:53:f8:12:2f:7e:1d:e1:6b:b3:94: 5b:ca:c6:51:e7:05:f5:5c:7f:be:45:4c:2c:6b:68:6c:0e:ec: 91:b3:46:92:e1:7d:94:f2:18:19:0e:5c:01:cd:f1:ab:39:b9: 9a:3c:2c:70:3a:4e:05:17:88:c3:48:31:e6:44:3b:42:96:fe: 55:fb:da:ac:9b:cf:f9:18:3b:84:c7:9d:c1:bd:e8:cc:d7:08: 0a:73:9c:c1:cf:b4:43:36:ad:3f:fe:ef:d3:80:af:bc:41:ae: c6:4c:c2:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8H13XmdyTqWV9QyEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjAwNDQ4OTMtNTIwYy00NzU5LTg1MzctYzAyNjQ4ZDQw MTJlMB4XDTI2MDkwMTEzMDAxMloXDTI2MTEzMDE0MDAxMlowLzEtMCsGA1UEAxMk OTM4YWZiMTMtYzk5MS00NjY3LWI3MTItOGI1ZDVhNGM5Y2MxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3xPFivE52fxc2Pl+SqstHQ6V8j04xD5L8jTT VTa5ElntUWWSXsiISIPhAHLMxWQiROZ+ScrQSSnI9iztNUGRkTU58w9Q6amygKuo ZAoNhWmY/SFxfr//N/VbIBWCyR5Sj4axnKvx6NWuRnqUZB8vSUD17DMqGEqJc1Yn aYk9hlzjAIFxmf/0zZ6XYplie4QSsgfKcae9j5eKSH8WNITmbUgkJE6bakE7X+0e TqF0xSdxNfZKDhBnFrXUjFE3uocXiqB2eZAS7LFfaMDXkw9s/XqgX/IBNpTxwudb DYBzW18C/k7BjS0ZTsAv6pMlJ5qiv5vWctAnKTBxx7uXXiKwdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHtmPYn8mjUH7PD8/544tEf/CxTnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS8yMDA0 NDg5My01MjBjLTQ3NTktODUzNy1jMDI2NDhkNDAxMmUvMzk5YTc4NTYtMjk0YS0z NjY2LTg3MGUtYTMwMzc2MjAzZjA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvMjAwNDQ4OTMtNTIwYy00NzU5LTg1 MzctYzAyNjQ4ZDQwMTJlLzIwMDQ0ODkzLTUyMGMtNDc1OS04NTM3LWMwMjY0OGQ0 MDEyZS5jcmwwHwYDVR0jBBgwFoAURAGjTuiVoaU19Tu+XZ1g1lkfL3YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS8yMDA0NDg5My01MjBjLTQ3NTktODUzNy1jMDI2 NDhkNDAxMmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5i8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABNS0mTADSAVxJGdRihoNlbCrnOCDF+WxgnxNXIowuA1nIEAetH7rK2d UfhcQX1dR4FZ+fy7HQVUCXR+dLwoEVKMA6QdTb67RzeDJqRXByRTYmKHbQU4AgLI jUiL8Ul33BeuuMJ9ym4gcVUPZP9zJY7U3NCE7pubdP6vYEww5sk+AVmPOtyKSkHA hUjpyuzTWF9j2MN1iAz/U/gSL34d4WuzlFvKxlHnBfVcf75FTCxraGwO7JGzRpLh fZTyGBkOXAHN8as5uZo8LHA6TgUXiMNIMeZEO0KW/lX72qybz/kYO4THncG96MzX CApznMHPtEM2rT/+79OAr7xBrsZMwl8= -----END CERTIFICATE-----Generated at Sun Oct 11 11:32:36 2026 by rpki-client