$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/7989b37d-2112-3094-a13a-f52f755aa5a8.roa File: 7989b37d-2112-3094-a13a-f52f755aa5a8.roa (raw, json) Hash identifier: mqk0lcXoW3LivUdjpj8MHDtEuqqptfloFfbFXkBirwI= Subject key identifier: 68:DD:FF:3E:BA:B0:05:42:91:3C:67:E4:A1:33:26:53:CF:C8:34:EE Certificate issuer: /CN=f2f0585e-a28e-4ead-9b1c-defd291ce54d Certificate serial: 010D0C9F4328584F497406EA4AC81FBD124F0F00 Authority key identifier: 7B:C6:78:77:88:93:19:53:E7:11:02:39:94:6D:8B:3D:13:7A:C2:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/7989b37d-2112-3094-a13a-f52f755aa5a8.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 23428 IP address blocks: 23.136.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/f2f0585e-a28e-4ead-9b1c-defd291ce54d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/f2f0585e-a28e-4ead-9b1c-defd291ce54d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:06:ea:4a:c8:1f:bd:12:4f:0f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f2f0585e-a28e-4ead-9b1c-defd291ce54d Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=1ab545a5-b61f-4fbf-8502-4123cfd2ad33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:67:e0:4c:6b:34:7c:ff:e9:ae:63:9f:30:46: 83:17:7c:be:bb:d9:ec:7f:18:ba:58:24:f0:a8:74: 75:20:3a:47:38:da:41:b8:aa:17:58:73:9e:ce:99: 34:cd:4e:4f:02:8f:7f:5a:5e:f5:90:04:d6:2f:2c: 18:02:21:59:66:37:f1:fd:cf:61:b3:e3:51:e4:67: 06:9d:42:71:2b:9b:f7:92:49:9b:f1:72:48:8f:56: 1c:0e:d6:dd:12:b0:bd:b0:0c:85:88:52:53:3b:f3: 3e:58:f4:54:98:92:7d:db:30:27:05:d5:61:1e:7e: fd:c1:01:aa:d0:e6:35:de:df:35:2a:45:17:fb:67: ba:8e:54:14:89:17:36:51:99:ce:a3:b8:1e:61:f7: 74:5c:6b:78:01:75:33:ef:ea:3f:25:47:47:0d:d6: db:ae:4e:71:7c:a5:3c:45:d5:d5:bb:7a:08:15:18: a4:c9:97:48:6f:5b:f1:61:7b:3c:55:7b:05:bb:95: 41:b2:69:7d:63:c5:93:3a:1e:7d:88:ce:a4:04:89: e2:4c:2c:c1:1c:56:7c:00:73:f3:9e:49:12:67:18: 94:ee:9d:66:76:b1:8b:d3:3f:cf:1f:9c:73:48:62: be:8a:ac:19:41:1a:2a:3c:8c:54:cf:c7:b5:b2:cc: 89:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:DD:FF:3E:BA:B0:05:42:91:3C:67:E4:A1:33:26:53:CF:C8:34:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/7989b37d-2112-3094-a13a-f52f755aa5a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/f2f0585e-a28e-4ead-9b1c-defd291ce54d.crl X509v3 Authority Key Identifier: keyid:7B:C6:78:77:88:93:19:53:E7:11:02:39:94:6D:8B:3D:13:7A:C2:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d.cer sbgp-ipAddrBlock: critical IPv4: 23.136.232.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:94:a6:be:26:91:fb:24:2a:6f:da:67:40:09:7e:9b:76:c3: f3:b7:dd:92:67:79:72:df:33:06:10:2b:c3:ba:f1:fb:1f:bd: 8e:db:38:91:b9:38:86:54:86:0a:cf:99:b4:b5:8e:a2:a1:2d: a5:1e:2e:88:bd:37:61:de:9c:67:86:98:23:c7:0d:d7:44:5b: b8:ac:5d:0f:b5:65:a2:63:9a:13:d6:cb:34:95:57:6b:63:90: 53:3d:4c:a8:a8:39:66:df:8d:66:0b:24:f5:a9:c3:9f:d3:93: 66:67:df:89:1e:4e:4d:b0:d5:34:f0:c6:d8:c4:70:d7:cb:a2: c9:b6:f0:0e:b1:ee:c9:b0:6f:0b:0c:11:9c:ea:ca:4d:37:24: ee:1d:80:9d:50:5e:ea:be:9c:4c:e4:cd:33:a6:5a:0c:b5:2e: ad:88:89:c1:d2:1a:ce:94:61:b5:03:78:1d:63:35:ee:be:7a: fc:ce:ef:5f:f6:81:3f:40:d0:9e:89:43:31:0c:70:5c:27:0f: 5a:25:8f:49:9c:23:1a:6e:15:0f:eb:ca:7a:9e:66:85:43:98: 12:7f:43:de:e0:68:cb:11:95:7d:2d:2d:8f:65:fb:08:53:ca: 8a:7d:c2:2f:25:c2:8b:59:2b:92:a2:fa:b2:cf:27:31:74:d6: 63:ea:f8:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdAbqSsgfvRJPDwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjJmMDU4NWUtYTI4ZS00ZWFkLTliMWMtZGVmZDI5MWNl NTRkMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MWFiNTQ1YTUtYjYxZi00ZmJmLTg1MDItNDEyM2NmZDJhZDMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiWfgTGs0fP/prmOfMEaDF3y+u9nsfxi6WCTw qHR1IDpHONpBuKoXWHOezpk0zU5PAo9/Wl71kATWLywYAiFZZjfx/c9hs+NR5GcG nUJxK5v3kkmb8XJIj1YcDtbdErC9sAyFiFJTO/M+WPRUmJJ92zAnBdVhHn79wQGq 0OY13t81KkUX+2e6jlQUiRc2UZnOo7geYfd0XGt4AXUz7+o/JUdHDdbbrk5xfKU8 RdXVu3oIFRikyZdIb1vxYXs8VXsFu5VBsml9Y8WTOh59iM6kBIniTCzBHFZ8AHPz nkkSZxiU7p1mdrGL0z/PH5xzSGK+iqwZQRoqPIxUz8e1ssyJqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGjd/z66sAVCkTxn5KEzJlPPyDTuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mMmYw NTg1ZS1hMjhlLTRlYWQtOWIxYy1kZWZkMjkxY2U1NGQvNzk4OWIzN2QtMjExMi0z MDk0LWExM2EtZjUyZjc1NWFhNWE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZjJmMDU4NWUtYTI4ZS00ZWFkLTli MWMtZGVmZDI5MWNlNTRkL2YyZjA1ODVlLWEyOGUtNGVhZC05YjFjLWRlZmQyOTFj ZTU0ZC5jcmwwHwYDVR0jBBgwFoAUe8Z4d4iTGVPnEQI5lG2LPRN6wo8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9mMmYwNTg1ZS1hMjhlLTRlYWQtOWIxYy1kZWZk MjkxY2U1NGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4joMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGCUpr4mkfskKm/aZ0AJfpt2w/O33ZJneXLfMwYQK8O68fsfvY7bOJG5 OIZUhgrPmbS1jqKhLaUeLoi9N2HenGeGmCPHDddEW7isXQ+1ZaJjmhPWyzSVV2tj kFM9TKioOWbfjWYLJPWpw5/Tk2Zn34keTk2w1TTwxtjEcNfLosm28A6x7smwbwsM EZzqyk03JO4dgJ1QXuq+nEzkzTOmWgy1Lq2IicHSGs6UYbUDeB1jNe6+evzO71/2 gT9A0J6JQzEMcFwnD1olj0mcIxpuFQ/rynqeZoVDmBJ/Q97gaMsRlX0tLY9l+whT yop9wi8lwotZK5Ki+rLPJzF01mPq+N0= -----END CERTIFICATE-----Generated at Sun Oct 4 02:16:36 2026 by rpki-client