$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/70e37e41-10ad-3645-89a6-8e56f0894b2d.roa File: 70e37e41-10ad-3645-89a6-8e56f0894b2d.roa (raw, json) Hash identifier: az/Tk7yrA2pO5vM4+YtqcF+Xxxdrj0O+OJHze46ZQwM= Subject key identifier: 65:9C:19:16:6D:BC:4D:A5:F4:2E:D9:FC:EB:96:52:76:D3:F8:3D:89 Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf Certificate serial: 010D0C9F4328584F49758B6AE417D6B8413E0880 Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/70e37e41-10ad-3645-89a6-8e56f0894b2d.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 31898 IP address blocks: 23.239.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:75:8b:6a:e4:17:d6:b8:41:3e:08:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=d1f9da39-813b-43a3-ae5a-bd9c7dcfe5e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:9b:0f:b7:ce:bc:66:1b:8f:e0:48:a1:d2:7e: dc:8b:8a:f1:66:0e:93:57:2f:0c:58:75:a4:4d:4b: 26:3d:29:51:eb:92:58:01:fc:e8:d9:58:8a:5b:f0: ec:b0:2f:11:54:32:1c:05:ab:39:c0:d4:57:a2:93: 65:6c:a0:06:be:e8:76:17:e3:10:49:65:ce:cc:2a: f6:c6:67:55:02:26:af:e4:a5:e5:67:3d:c8:55:2b: a6:bc:16:50:7b:9b:c1:8f:8b:dc:cb:76:7b:f4:63: 68:a5:02:3c:b5:3a:9e:0f:0c:5b:c0:4c:c9:39:17: fa:dd:32:21:82:69:69:9b:38:7d:ef:d5:37:7c:54: 2f:6b:20:75:65:99:e5:1f:2e:e5:42:f5:53:c3:fd: 03:5e:73:dd:22:e2:d1:02:11:e6:82:91:dc:7e:71: 3d:41:93:cd:4a:f6:ac:df:e3:7e:e4:4c:a8:2a:f0: 34:80:8b:aa:b5:5b:99:d6:04:7d:fa:39:39:77:f5: cf:4e:7a:26:32:18:58:b6:b8:52:52:69:9e:bc:20: 58:8f:f0:fd:42:27:79:84:39:f4:32:61:1e:15:09: f6:85:7e:e0:e5:03:24:87:4e:7f:4d:56:d3:09:1e: db:53:2d:61:e5:55:8e:f4:bb:80:4e:ed:8c:c0:67: 00:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:9C:19:16:6D:BC:4D:A5:F4:2E:D9:FC:EB:96:52:76:D3:F8:3D:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/70e37e41-10ad-3645-89a6-8e56f0894b2d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl X509v3 Authority Key Identifier: keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer sbgp-ipAddrBlock: critical IPv4: 23.239.254.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:35:0c:9d:df:90:e3:d8:74:ae:89:af:15:51:c0:ad:55:73: e0:e9:25:b8:f1:35:02:61:54:28:14:25:b8:cb:cb:25:c6:35: 02:46:1a:dc:81:6f:2d:74:bb:1a:ef:10:5d:d8:5f:1f:70:ae: 42:b8:d1:36:5d:b3:2e:b4:1c:dc:7f:69:f0:e0:21:52:7e:d0: b2:2e:ff:77:aa:36:73:f5:90:e0:93:1f:88:5f:49:ee:23:7e: 03:2c:c6:bb:3c:80:77:fd:a9:33:37:25:19:e6:4c:b3:16:c5: ba:a7:6c:96:10:22:b2:1c:18:47:93:ce:49:1e:b0:fd:34:28: fd:46:96:f6:a6:80:de:ab:c8:3b:dd:86:4c:dd:14:e5:3d:04: ea:ab:d7:b9:9e:5e:2a:19:c7:2c:7d:73:4b:3d:32:51:2b:6d: 61:8c:65:12:fb:0f:bf:11:65:52:1c:9a:26:ff:c7:8b:95:96: 3e:09:a7:83:a7:5a:f7:17:60:95:11:4a:a8:6b:29:3d:58:4c: 64:78:86:32:b3:31:e3:da:4e:71:0d:40:79:10:ea:6f:e0:2c: e3:f2:7d:da:b3:3a:ec:5b:e3:f9:4e:b4:5b:fe:94:4a:20:3c: 8d:7c:d1:c5:e8:33:07:53:46:37:b2:0d:82:89:85:cf:31:d7: 7f:30:2f:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdYtq5BfWuEE+CIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy OWJmMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZDFmOWRhMzktODEzYi00M2EzLWFlNWEtYmQ5YzdkY2ZlNWU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkZsPt868ZhuP4Eih0n7ci4rxZg6TVy8MWHWk TUsmPSlR65JYAfzo2ViKW/DssC8RVDIcBas5wNRXopNlbKAGvuh2F+MQSWXOzCr2 xmdVAiav5KXlZz3IVSumvBZQe5vBj4vcy3Z79GNopQI8tTqeDwxbwEzJORf63TIh gmlpmzh979U3fFQvayB1ZZnlHy7lQvVTw/0DXnPdIuLRAhHmgpHcfnE9QZPNSvas 3+N+5EyoKvA0gIuqtVuZ1gR9+jk5d/XPTnomMhhYtrhSUmmevCBYj/D9Qid5hDn0 MmEeFQn2hX7g5QMkh05/TVbTCR7bUy1h5VWO9LuATu2MwGcAWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGWcGRZtvE2l9C7Z/OuWUnbT+D2JMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2 ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvNzBlMzdlNDEtMTBhZC0z NjQ1LTg5YTYtOGU1NmYwODk0YjJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4 MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx YzIxODI5YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF+/+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGQ1DJ3fkOPYdK6JrxVRwK1Vc+DpJbjxNQJhVCgUJbjLyyXGNQJGGtyB by10uxrvEF3YXx9wrkK40TZdsy60HNx/afDgIVJ+0LIu/3eqNnP1kOCTH4hfSe4j fgMsxrs8gHf9qTM3JRnmTLMWxbqnbJYQIrIcGEeTzkkesP00KP1GlvamgN6ryDvd hkzdFOU9BOqr17meXioZxyx9c0s9MlErbWGMZRL7D78RZVIcmib/x4uVlj4Jp4On WvcXYJURSqhrKT1YTGR4hjKzMePaTnENQHkQ6m/gLOPyfdqzOuxb4/lOtFv+lEog PI180cXoMwdTRjeyDYKJhc8x138wL/E= -----END CERTIFICATE-----Generated at Tue Oct 6 15:34:23 2026 by rpki-client