$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/bfb35758-071b-31cf-8ca8-8b8646b148b0.roa File: bfb35758-071b-31cf-8ca8-8b8646b148b0.roa (raw, json) Hash identifier: Wdf6SHfg9cR/ZpyfBYzIldmP6tTShufyZ1poRI2Ewao= Subject key identifier: 0C:F7:F0:F5:66:7E:FC:36:60:29:26:E7:7E:FD:5B:84:43:80:AB:0A Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf Certificate serial: 010D0C9F4328584F119CF43C8612899EA2383880 Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/bfb35758-071b-31cf-8ca8-8b8646b148b0.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 14618 IP address blocks: 23.239.241.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:9c:f4:3c:86:12:89:9e:a2:38:38:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=b4ffabdd-6384-4db3-8702-a474d4ff85ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:38:13:8f:31:06:3a:61:21:7d:59:33:eb:a9: 2b:95:ef:3a:ee:cf:af:3a:46:90:61:7b:4b:f6:0b: 03:2e:ea:01:75:f6:81:d8:89:d1:de:cc:a9:83:7b: e4:ab:45:82:53:5b:4a:17:4c:a8:c3:80:65:ea:7f: 8b:2c:8e:4f:9a:23:a5:c1:e8:73:22:27:35:84:11: ad:c7:8c:1a:ec:86:4c:54:f2:ef:9f:50:0c:0b:86: bb:0b:21:0d:62:25:96:cd:fd:09:1e:cd:30:90:42: 45:36:9c:41:a8:2e:61:65:35:50:ea:ff:dc:f9:ee: 27:87:fe:6a:72:90:ef:59:e2:cf:d9:9e:e0:42:06: e5:4a:31:88:67:d0:c8:0e:1b:d6:0d:5b:ff:40:76: 5f:26:76:c5:85:17:83:7b:d1:93:59:1f:6c:55:6f: 76:47:cb:3d:23:4e:36:e1:83:6c:d4:dc:06:03:ef: ce:9d:45:4d:71:e1:19:ec:5b:24:71:8e:4c:0a:6c: e8:7a:e9:ab:30:5b:f3:6d:8b:60:c1:31:3e:d2:0d: d9:21:f0:20:11:38:ba:68:56:ff:21:e7:cb:dc:05: 9e:c1:b0:97:1c:44:74:7c:c1:b5:54:8f:6a:d3:cd: 77:ae:5a:3c:b0:ac:de:4e:59:74:25:b2:37:4b:ec: 99:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:F7:F0:F5:66:7E:FC:36:60:29:26:E7:7E:FD:5B:84:43:80:AB:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/bfb35758-071b-31cf-8ca8-8b8646b148b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl X509v3 Authority Key Identifier: keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer sbgp-ipAddrBlock: critical IPv4: 23.239.241.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:6e:0d:d7:25:e7:dc:9b:5b:40:47:92:f7:70:cc:60:46:4c: 69:fb:6f:2f:88:7f:2f:ce:19:b1:92:54:91:84:fa:35:72:f2: 65:ea:ed:b9:0a:d3:c2:5d:99:ba:a1:13:ca:ae:1f:c1:21:17: 5d:c3:d1:be:89:7c:9f:1a:94:f5:9d:11:ed:93:68:12:4e:67: 14:09:74:92:f1:38:1c:47:51:8a:cd:c4:13:4b:f4:83:1c:13: 2c:cf:a8:e3:cc:aa:17:ff:72:88:fa:59:44:b5:59:1d:2f:21: 80:e1:86:83:11:88:2d:cc:e6:63:5a:f5:6a:37:ca:d0:88:94: 8f:37:ff:fa:a2:88:0b:75:73:a5:d9:4f:d2:64:92:7b:32:ad: 5e:31:fe:84:78:ae:d0:cb:10:69:af:97:ed:2b:19:0c:53:0e: 1c:5d:b7:ab:4b:4d:35:df:5a:c3:2a:3c:60:a3:f5:c6:8f:69: 8d:16:ac:6c:84:34:77:40:0d:a6:c7:63:c6:b1:5b:eb:59:e1: 38:ca:c0:c3:6d:f1:aa:7c:f0:6f:cc:15:9e:cd:d4:c5:cd:fe: e1:c8:f8:62:c0:34:b1:28:af:c1:bc:ae:5a:62:d1:5f:9a:8f: 7a:86:9c:4e:28:e2:a6:9f:be:14:6d:b7:5b:33:ab:ad:bf:ee: 5f:ed:69:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8RnPQ8hhKJnqI4OIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy OWJmMB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk YjRmZmFiZGQtNjM4NC00ZGIzLTg3MDItYTQ3NGQ0ZmY4NWVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlDgTjzEGOmEhfVkz66krle867s+vOkaQYXtL 9gsDLuoBdfaB2InR3sypg3vkq0WCU1tKF0yow4Bl6n+LLI5PmiOlwehzIic1hBGt x4wa7IZMVPLvn1AMC4a7CyENYiWWzf0JHs0wkEJFNpxBqC5hZTVQ6v/c+e4nh/5q cpDvWeLP2Z7gQgblSjGIZ9DIDhvWDVv/QHZfJnbFhReDe9GTWR9sVW92R8s9I042 4YNs1NwGA+/OnUVNceEZ7FskcY5MCmzoeumrMFvzbYtgwTE+0g3ZIfAgETi6aFb/ IefL3AWewbCXHER0fMG1VI9q0813rlo8sKzeTll0JbI3S+yZ9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAz38PVmfvw2YCkm5379W4RDgKsKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2 ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvYmZiMzU3NTgtMDcxYi0z MWNmLThjYTgtOGI4NjQ2YjE0OGIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4 MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx YzIxODI5YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF+/xMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE9uDdcl59ybW0BHkvdwzGBGTGn7by+Ify/OGbGSVJGE+jVy8mXq7bkK 08JdmbqhE8quH8EhF13D0b6JfJ8alPWdEe2TaBJOZxQJdJLxOBxHUYrNxBNL9IMc EyzPqOPMqhf/coj6WUS1WR0vIYDhhoMRiC3M5mNa9Wo3ytCIlI83//qiiAt1c6XZ T9JkknsyrV4x/oR4rtDLEGmvl+0rGQxTDhxdt6tLTTXfWsMqPGCj9caPaY0WrGyE NHdADabHY8axW+tZ4TjKwMNt8ap88G/MFZ7N1MXN/uHI+GLANLEor8G8rlpi0V+a j3qGnE4o4qafvhRtt1szq62/7l/taYA= -----END CERTIFICATE-----Generated at Sun Oct 4 21:17:06 2026 by rpki-client