$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9032b19f-5ab1-4765-944e-83a757678275/ee3be007-81e7-3675-b7b2-2bd5367aa64e.roa File: ee3be007-81e7-3675-b7b2-2bd5367aa64e.roa (raw, json) Hash identifier: ZqGTXv4ei351601gfAldd358IzPjal0K2wDRJrSq2h4= Subject key identifier: 80:81:EE:43:88:AA:06:2A:7B:9B:97:0F:1F:08:B1:65:6E:7E:52:E2 Certificate issuer: /CN=9032b19f-5ab1-4765-944e-83a757678275 Certificate serial: 010D0C9F4328584EF181FBC4CFB92146DE28ED80 Authority key identifier: F2:A5:DE:1B:78:B1:ED:60:C0:27:DE:41:B9:69:9D:BC:3E:D8:4E:44 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9032b19f-5ab1-4765-944e-83a757678275.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9032b19f-5ab1-4765-944e-83a757678275/ee3be007-81e7-3675-b7b2-2bd5367aa64e.roa Signing time: Mon 24 Aug 2026 13:00:12 +0000 ROA not before: Mon 24 Aug 2026 13:00:12 +0000 ROA not after: Sun 22 Nov 2026 14:00:12 +0000 asID: 152179 IP address blocks: 23.142.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9032b19f-5ab1-4765-944e-83a757678275/9032b19f-5ab1-4765-944e-83a757678275.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9032b19f-5ab1-4765-944e-83a757678275/9032b19f-5ab1-4765-944e-83a757678275.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9032b19f-5ab1-4765-944e-83a757678275.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f1:81:fb:c4:cf:b9:21:46:de:28:ed:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9032b19f-5ab1-4765-944e-83a757678275 Validity Not Before: Aug 24 13:00:12 2026 GMT Not After : Nov 22 14:00:12 2026 GMT Subject: CN=9ea4aa3d-62e5-41a3-af55-5aeb590097a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:cf:a3:27:06:78:39:39:ec:1d:16:c6:7b:90: 7a:77:8d:bb:15:e0:e3:a6:e2:13:08:b3:7a:f5:63: 66:93:4f:3f:5e:c6:ab:08:24:d7:eb:72:8e:74:bf: 50:b4:42:a5:96:61:bc:f8:40:a6:78:de:9c:de:e7: 81:91:14:c9:34:11:c0:d3:9c:f1:13:61:60:32:fa: c9:b2:45:43:03:0a:a7:b4:5d:a9:86:d0:4d:17:94: 84:d0:7d:28:db:72:c2:39:0f:a4:08:16:97:bc:12: 3d:b5:cd:fa:af:6f:98:fa:2a:f1:aa:d8:29:ca:2a: 18:05:29:0d:ee:13:2d:21:d3:f9:96:2b:d9:03:0f: 0f:80:e6:d6:3a:07:ba:77:71:86:8e:ea:ee:6a:09: d4:fb:43:2c:eb:0e:23:f7:bb:f2:ea:fe:f5:93:15: 2a:10:f2:88:b8:ae:03:76:25:02:03:1a:58:3d:99: 2e:d4:ff:4d:a8:1d:e7:2b:9d:4d:ad:b9:9e:97:62: 49:43:c4:57:5a:c3:6d:5d:aa:de:b2:1a:86:01:68: 05:ec:ab:b2:36:2f:8e:b7:1c:74:81:cf:c9:23:d0: 75:69:c3:6e:76:2a:01:cb:2c:07:cf:65:d1:fa:13: 32:d0:54:93:13:92:7f:e4:fd:62:b4:6f:67:ba:58: 15:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:81:EE:43:88:AA:06:2A:7B:9B:97:0F:1F:08:B1:65:6E:7E:52:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9032b19f-5ab1-4765-944e-83a757678275/ee3be007-81e7-3675-b7b2-2bd5367aa64e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9032b19f-5ab1-4765-944e-83a757678275/9032b19f-5ab1-4765-944e-83a757678275.crl X509v3 Authority Key Identifier: keyid:F2:A5:DE:1B:78:B1:ED:60:C0:27:DE:41:B9:69:9D:BC:3E:D8:4E:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9032b19f-5ab1-4765-944e-83a757678275.cer sbgp-ipAddrBlock: critical IPv4: 23.142.36.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:a3:b9:eb:96:b3:75:a3:46:80:4f:2c:af:05:90:1f:27:ab: ac:82:85:36:e3:d8:f9:b7:b2:84:9a:73:ec:6c:3c:44:00:b2: 20:61:97:3b:67:17:c6:09:a1:c8:60:c9:d4:37:87:8f:41:85: 00:59:ad:03:c0:4e:bf:5e:c3:cc:4d:f0:53:90:a7:a2:5f:44: a6:2d:cf:a2:47:0d:3d:2b:8b:f1:98:3a:61:cd:17:c9:32:f4: 2b:fe:5f:b0:e6:90:4c:1b:e6:d2:0a:9f:80:1c:a7:a0:c9:42: b2:18:d9:e1:db:7d:f8:cd:c8:4c:86:8f:17:04:67:8c:e9:79: 55:90:d6:f6:7a:19:d3:0c:ef:73:49:ad:f5:ff:75:33:9f:5a: d8:c0:af:2c:94:c2:b4:27:82:0e:0a:96:42:ed:85:b3:1c:69: c8:ac:03:36:bb:ad:e7:fc:03:8e:81:2d:da:fc:e7:3e:08:d6: 15:f9:a5:30:ce:97:d0:d3:03:24:4b:bf:d6:95:b3:00:32:0b: b8:4c:4b:41:f1:04:c2:88:d6:ff:ff:2f:42:95:e2:d4:37:43: 1d:d9:87:39:d8:21:35:a2:b7:4b:51:12:cc:f6:c5:21:23:5f: 17:59:49:5f:5d:4f:57:22:a6:a2:b3:02:61:88:d5:26:86:6d: a1:e2:5c:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7xgfvEz7khRt4o7YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTAzMmIxOWYtNWFiMS00NzY1LTk0NGUtODNhNzU3Njc4 Mjc1MB4XDTI2MDgyNDEzMDAxMloXDTI2MTEyMjE0MDAxMlowLzEtMCsGA1UEAxMk OWVhNGFhM2QtNjJlNS00MWEzLWFmNTUtNWFlYjU5MDA5N2E2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApM+jJwZ4OTnsHRbGe5B6d427FeDjpuITCLN6 9WNmk08/XsarCCTX63KOdL9QtEKllmG8+ECmeN6c3ueBkRTJNBHA05zxE2FgMvrJ skVDAwqntF2phtBNF5SE0H0o23LCOQ+kCBaXvBI9tc36r2+Y+irxqtgpyioYBSkN 7hMtIdP5livZAw8PgObWOge6d3GGjuruagnU+0Ms6w4j97vy6v71kxUqEPKIuK4D diUCAxpYPZku1P9NqB3nK51Nrbmel2JJQ8RXWsNtXareshqGAWgF7KuyNi+Otxx0 gc/JI9B1acNudioByywHz2XR+hMy0FSTE5J/5P1itG9nulgVvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFICB7kOIqgYqe5uXDx8IsWVuflLiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC85MDMy YjE5Zi01YWIxLTQ3NjUtOTQ0ZS04M2E3NTc2NzgyNzUvZWUzYmUwMDctODFlNy0z Njc1LWI3YjItMmJkNTM2N2FhNjRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvOTAzMmIxOWYtNWFiMS00NzY1LTk0 NGUtODNhNzU3Njc4Mjc1LzkwMzJiMTlmLTVhYjEtNDc2NS05NDRlLTgzYTc1NzY3 ODI3NS5jcmwwHwYDVR0jBBgwFoAU8qXeG3ix7WDAJ95BuWmdvD7YTkQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC85MDMyYjE5Zi01YWIxLTQ3NjUtOTQ0ZS04M2E3 NTc2NzgyNzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF44kMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHijueuWs3WjRoBPLK8FkB8nq6yChTbj2Pm3soSac+xsPEQAsiBhlztn F8YJochgydQ3h49BhQBZrQPATr9ew8xN8FOQp6JfRKYtz6JHDT0ri/GYOmHNF8ky 9Cv+X7DmkEwb5tIKn4Acp6DJQrIY2eHbffjNyEyGjxcEZ4zpeVWQ1vZ6GdMM73NJ rfX/dTOfWtjAryyUwrQngg4KlkLthbMcacisAza7ref8A46BLdr85z4I1hX5pTDO l9DTAyRLv9aVswAyC7hMS0HxBMKI1v//L0KV4tQ3Qx3ZhznYITWit0tREsz2xSEj XxdZSV9dT1cipqKzAmGI1SaGbaHiXEk= -----END CERTIFICATE-----Generated at Tue Sep 29 12:40:26 2026 by rpki-client