$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/37090917-e988-493b-8a89-f34e7d005ea2/3570a563-f623-3151-b534-9cb0477556c6.roa File: 3570a563-f623-3151-b534-9cb0477556c6.roa (raw, json) Hash identifier: NIPB1gWcSJNR1SbTvvW6wfihYwq3EDRio0h7nNq/Ce0= Subject key identifier: 2B:3E:2D:1E:A1:0C:9E:59:BA:9D:E0:72:CC:55:2A:64:24:37:86:C6 Certificate issuer: /CN=37090917-e988-493b-8a89-f34e7d005ea2 Certificate serial: 010D0C9F4328584F06729F6102F80BC9627A33C0 Authority key identifier: BD:65:DF:2B:A0:5A:98:CC:7D:82:FD:EE:FE:3D:C9:EE:C0:15:B1:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/37090917-e988-493b-8a89-f34e7d005ea2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/37090917-e988-493b-8a89-f34e7d005ea2/3570a563-f623-3151-b534-9cb0477556c6.roa Signing time: Tue 01 Sep 2026 01:00:12 +0000 ROA not before: Tue 01 Sep 2026 01:00:12 +0000 ROA not after: Mon 30 Nov 2026 02:00:12 +0000 asID: 402395 IP address blocks: 23.156.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/37090917-e988-493b-8a89-f34e7d005ea2/37090917-e988-493b-8a89-f34e7d005ea2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/37090917-e988-493b-8a89-f34e7d005ea2/37090917-e988-493b-8a89-f34e7d005ea2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/37090917-e988-493b-8a89-f34e7d005ea2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:06:72:9f:61:02:f8:0b:c9:62:7a:33:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=37090917-e988-493b-8a89-f34e7d005ea2 Validity Not Before: Sep 1 01:00:12 2026 GMT Not After : Nov 30 02:00:12 2026 GMT Subject: CN=7d8332b8-122e-4bf7-ad36-d9fe52a65ab0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:c1:1e:4c:75:6e:eb:21:86:f1:42:5e:77:a4: b4:b7:1d:68:39:cc:0f:2d:a4:ea:6c:56:db:b6:37: aa:db:bd:36:2c:40:d5:78:62:4a:66:83:be:0d:4a: 91:e7:68:03:46:59:ae:e6:4b:e7:2b:cd:59:db:77: 51:9b:9c:83:2d:05:49:61:b9:13:0c:d2:48:34:6f: 4f:e1:38:7f:3a:df:ae:89:4c:39:5f:7e:de:99:14: 64:3c:77:68:8c:1f:3b:9d:a1:41:45:f5:3d:7f:7b: 2d:f0:05:5b:ee:c5:ed:6d:d7:ea:77:a1:35:18:81: be:da:43:f7:64:ec:dc:6b:a6:a3:57:ad:66:cf:6e: fb:f0:59:5e:dc:af:b9:74:b9:14:fc:8b:aa:2f:13: c0:55:3f:dd:21:33:e1:c2:ea:95:90:c0:53:7a:bb: 12:60:d1:02:81:b0:e7:8a:94:63:66:98:fc:5b:1a: 0e:34:53:89:65:8d:2d:07:91:05:85:e2:f8:ef:b5: a7:6a:fd:c6:35:95:96:7d:1e:39:99:05:92:2a:b8: 25:0d:b7:5a:3c:25:9b:a6:63:9c:37:df:62:8e:f3: b4:9b:05:55:80:d8:6a:64:5e:fb:8f:d8:24:d9:16: db:9a:cc:ba:58:64:09:8a:74:98:44:38:b0:35:f2: 63:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:3E:2D:1E:A1:0C:9E:59:BA:9D:E0:72:CC:55:2A:64:24:37:86:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/37090917-e988-493b-8a89-f34e7d005ea2/3570a563-f623-3151-b534-9cb0477556c6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/37090917-e988-493b-8a89-f34e7d005ea2/37090917-e988-493b-8a89-f34e7d005ea2.crl X509v3 Authority Key Identifier: keyid:BD:65:DF:2B:A0:5A:98:CC:7D:82:FD:EE:FE:3D:C9:EE:C0:15:B1:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/37090917-e988-493b-8a89-f34e7d005ea2.cer sbgp-ipAddrBlock: critical IPv4: 23.156.140.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:e6:ca:0d:5d:93:fb:0f:d4:18:a6:5a:59:67:01:21:b8:6f: 03:86:bc:a9:80:26:9c:e3:4b:00:d4:9c:7e:6e:bd:77:9e:6e: 71:75:0a:ab:e9:84:4e:b5:5c:af:a4:39:49:eb:d4:a8:35:14: e1:a7:cd:a6:c9:ba:70:2a:1a:41:f8:3c:05:59:de:3b:47:99: b8:42:e9:d5:67:9a:42:a2:7e:18:11:b9:d9:76:00:ad:cb:70: 94:61:a5:99:09:ee:84:c9:3e:2e:3d:25:20:32:4d:08:d7:56: d1:af:5c:d6:49:0c:02:1c:d9:c5:44:17:21:66:0e:89:21:29: 20:7b:7c:03:c2:2c:06:ef:4e:4b:47:1f:db:1f:12:d9:b7:5c: 85:5a:e1:fe:47:01:89:e3:64:b0:2a:15:02:4f:78:96:32:bd: a2:92:88:00:e4:9c:6f:06:fe:bc:92:62:e4:d5:f5:4a:0f:ae: 2a:1c:71:69:5a:0f:9e:f6:d0:6f:3f:7d:07:45:69:64:66:f7: 3c:f8:aa:ce:18:23:10:df:e6:c6:ef:1e:37:00:5c:bf:10:de: d7:25:39:f7:87:6a:8b:97:a5:a7:9b:4f:0c:96:eb:2d:eb:4f: 1f:c3:89:2c:02:18:95:84:a1:78:30:38:21:8d:73:85:9e:7c: 1f:6e:2d:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8Gcp9hAvgLyWJ6M8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzcwOTA5MTctZTk4OC00OTNiLThhODktZjM0ZTdkMDA1 ZWEyMB4XDTI2MDkwMTAxMDAxMloXDTI2MTEzMDAyMDAxMlowLzEtMCsGA1UEAxMk N2Q4MzMyYjgtMTIyZS00YmY3LWFkMzYtZDlmZTUyYTY1YWIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAncEeTHVu6yGG8UJed6S0tx1oOcwPLaTqbFbb tjeq2702LEDVeGJKZoO+DUqR52gDRlmu5kvnK81Z23dRm5yDLQVJYbkTDNJING9P 4Th/Ot+uiUw5X37emRRkPHdojB87naFBRfU9f3st8AVb7sXtbdfqd6E1GIG+2kP3 ZOzca6ajV61mz2778Fle3K+5dLkU/IuqLxPAVT/dITPhwuqVkMBTersSYNECgbDn ipRjZpj8WxoONFOJZY0tB5EFheL477Wnav3GNZWWfR45mQWSKrglDbdaPCWbpmOc N99ijvO0mwVVgNhqZF77j9gk2Rbbmsy6WGQJinSYRDiwNfJjTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCs+LR6hDJ5Zup3gcsxVKmQkN4bGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS8zNzA5 MDkxNy1lOTg4LTQ5M2ItOGE4OS1mMzRlN2QwMDVlYTIvMzU3MGE1NjMtZjYyMy0z MTUxLWI1MzQtOWNiMDQ3NzU1NmM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvMzcwOTA5MTctZTk4OC00OTNiLThh ODktZjM0ZTdkMDA1ZWEyLzM3MDkwOTE3LWU5ODgtNDkzYi04YTg5LWYzNGU3ZDAw NWVhMi5jcmwwHwYDVR0jBBgwFoAUvWXfK6BamMx9gv3u/j3J7sAVsQAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS8zNzA5MDkxNy1lOTg4LTQ5M2ItOGE4OS1mMzRl N2QwMDVlYTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5yMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF7myg1dk/sP1BimWllnASG4bwOGvKmAJpzjSwDUnH5uvXeebnF1Cqvp hE61XK+kOUnr1Kg1FOGnzabJunAqGkH4PAVZ3jtHmbhC6dVnmkKifhgRudl2AK3L cJRhpZkJ7oTJPi49JSAyTQjXVtGvXNZJDAIc2cVEFyFmDokhKSB7fAPCLAbvTktH H9sfEtm3XIVa4f5HAYnjZLAqFQJPeJYyvaKSiADknG8G/rySYuTV9UoPrioccWla D5720G8/fQdFaWRm9zz4qs4YIxDf5sbvHjcAXL8Q3tclOfeHaouXpaebTwyW6y3r Tx/DiSwCGJWEoXgwOCGNc4WefB9uLWY= -----END CERTIFICATE-----Generated at Mon Sep 28 20:57:58 2026 by rpki-client