$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/917f6233-a0b4-4398-980d-f443910c2d2e/bb553ce9-58e8-35fa-9f33-0e83f284e60a.roa File: bb553ce9-58e8-35fa-9f33-0e83f284e60a.roa (raw, json) Hash identifier: IwRfHCYR1yDY1p0Q78woicczTMvuln+J0JCX9W00Q0s= Subject key identifier: FD:5C:FC:C6:36:54:80:8D:7B:FD:25:52:8A:37:2A:5A:9E:D1:09:A8 Certificate issuer: /CN=917f6233-a0b4-4398-980d-f443910c2d2e Certificate serial: 010D0C9F4328584F4F08296DF9A860D8F459E5C0 Authority key identifier: 0D:5F:05:D2:AF:C1:9E:BC:96:90:B6:FB:6A:DF:B1:9C:13:53:29:C6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/917f6233-a0b4-4398-980d-f443910c2d2e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/917f6233-a0b4-4398-980d-f443910c2d2e/bb553ce9-58e8-35fa-9f33-0e83f284e60a.roa Signing time: Sun 27 Sep 2026 01:00:12 +0000 ROA not before: Sun 27 Sep 2026 01:00:12 +0000 ROA not after: Sat 26 Dec 2026 02:00:12 +0000 asID: 979 IP address blocks: 23.144.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/917f6233-a0b4-4398-980d-f443910c2d2e/917f6233-a0b4-4398-980d-f443910c2d2e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/917f6233-a0b4-4398-980d-f443910c2d2e/917f6233-a0b4-4398-980d-f443910c2d2e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/917f6233-a0b4-4398-980d-f443910c2d2e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4f:08:29:6d:f9:a8:60:d8:f4:59:e5:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=917f6233-a0b4-4398-980d-f443910c2d2e Validity Not Before: Sep 27 01:00:12 2026 GMT Not After : Dec 26 02:00:12 2026 GMT Subject: CN=5a8bb068-1f6c-481b-86db-f14d3fba6390 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:8f:2d:b4:16:12:91:89:99:1a:ac:b7:eb:b5: a4:37:34:46:66:34:28:15:81:ab:b7:8e:87:2a:25: 7b:f2:a3:27:43:b2:8b:30:df:74:22:43:61:48:8e: 4f:8d:b0:29:43:8d:ef:4a:99:f8:a3:f3:a3:a3:a3: ea:8b:f2:bb:dd:6d:3e:4c:1c:c8:b7:74:d2:55:cd: fc:72:4e:c7:59:40:8e:33:ff:0a:dc:50:19:c5:36: 14:10:39:84:f4:07:ad:f3:16:42:e9:f6:fe:e2:5c: ff:44:ff:93:bc:3f:d9:3a:d8:5b:14:2b:de:58:e6: 39:7f:30:8a:33:cd:a2:64:c9:29:4d:9a:88:b9:b3: 35:30:de:32:ca:90:78:44:5c:34:f3:14:68:db:51: 8c:87:97:d9:25:1b:46:45:e6:15:25:23:c6:bd:7d: 9f:95:c5:6f:1d:a9:59:4c:c9:dc:3b:a7:77:b7:73: 99:9b:ad:33:2b:43:15:1f:2d:4d:f8:c4:97:3a:07: d8:59:c0:9b:7e:aa:d0:7c:a4:e5:52:5d:1f:3e:78: 7a:02:90:5b:fd:f7:f5:ab:46:9f:7a:da:de:82:90: 58:95:5a:0a:12:c1:cc:e7:7a:30:31:f8:35:a3:ba: 69:60:af:30:cb:c6:ad:32:70:e8:11:43:d8:7d:bd: ea:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:5C:FC:C6:36:54:80:8D:7B:FD:25:52:8A:37:2A:5A:9E:D1:09:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/917f6233-a0b4-4398-980d-f443910c2d2e/bb553ce9-58e8-35fa-9f33-0e83f284e60a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/917f6233-a0b4-4398-980d-f443910c2d2e/917f6233-a0b4-4398-980d-f443910c2d2e.crl X509v3 Authority Key Identifier: keyid:0D:5F:05:D2:AF:C1:9E:BC:96:90:B6:FB:6A:DF:B1:9C:13:53:29:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/917f6233-a0b4-4398-980d-f443910c2d2e.cer sbgp-ipAddrBlock: critical IPv4: 23.144.4.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:ca:e9:f2:5b:71:a0:96:a5:04:73:d8:a9:36:c9:d8:7b:89: 77:4d:58:be:76:f8:19:08:18:7a:c3:09:cf:5e:45:72:fd:6b: a6:ee:65:67:9f:6e:a1:bd:3e:11:bf:cd:64:1f:31:f8:78:8e: 33:36:78:4f:9a:b5:85:c5:f3:6d:30:f2:8e:30:ce:ef:27:c2: ad:f0:ff:55:3e:b7:43:f5:e0:08:f7:28:26:08:d5:9e:e1:e7: ac:64:86:d8:7a:31:8f:1d:b8:67:fa:14:b8:9e:d4:d6:83:4e: 90:ef:07:d1:64:b2:36:35:bd:ef:2e:1d:f3:de:fe:05:65:7e: aa:a2:81:99:66:e0:a0:d2:fb:25:cf:7d:3b:04:a7:8c:97:0c: 57:44:e9:f6:5e:5d:1d:e0:73:38:d0:0b:72:87:04:1b:9e:53: 9b:d6:a8:f2:db:11:2a:e9:e4:e2:f6:77:3a:0c:22:50:5d:df: 7c:78:db:2d:90:9e:a2:d0:b0:db:74:95:93:a8:f6:5c:ee:27: 8a:01:bb:f3:fb:b5:4d:91:2c:58:a6:8a:fe:a5:30:2a:ad:d0: 44:f4:96:52:0a:80:99:e2:7c:6b:60:dd:e7:d1:2b:e1:da:d4: db:e2:77:a7:ac:ce:91:b5:4a:c6:42:df:b3:df:75:16:00:b3: 97:c9:ed:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9PCClt+ahg2PRZ5cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTE3ZjYyMzMtYTBiNC00Mzk4LTk4MGQtZjQ0MzkxMGMy ZDJlMB4XDTI2MDkyNzAxMDAxMloXDTI2MTIyNjAyMDAxMlowLzEtMCsGA1UEAxMk NWE4YmIwNjgtMWY2Yy00ODFiLTg2ZGItZjE0ZDNmYmE2MzkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqI8ttBYSkYmZGqy367WkNzRGZjQoFYGrt46H KiV78qMnQ7KLMN90IkNhSI5PjbApQ43vSpn4o/Ojo6Pqi/K73W0+TBzIt3TSVc38 ck7HWUCOM/8K3FAZxTYUEDmE9Aet8xZC6fb+4lz/RP+TvD/ZOthbFCveWOY5fzCK M82iZMkpTZqIubM1MN4yypB4RFw08xRo21GMh5fZJRtGReYVJSPGvX2flcVvHalZ TMncO6d3t3OZm60zK0MVHy1N+MSXOgfYWcCbfqrQfKTlUl0fPnh6ApBb/ff1q0af etregpBYlVoKEsHM53owMfg1o7ppYK8wy8atMnDoEUPYfb3qmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP1c/MY2VICNe/0lUoo3Klqe0QmoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC85MTdm NjIzMy1hMGI0LTQzOTgtOTgwZC1mNDQzOTEwYzJkMmUvYmI1NTNjZTktNThlOC0z NWZhLTlmMzMtMGU4M2YyODRlNjBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvOTE3ZjYyMzMtYTBiNC00Mzk4LTk4 MGQtZjQ0MzkxMGMyZDJlLzkxN2Y2MjMzLWEwYjQtNDM5OC05ODBkLWY0NDM5MTBj MmQyZS5jcmwwHwYDVR0jBBgwFoAUDV8F0q/BnryWkLb7at+xnBNTKcYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC85MTdmNjIzMy1hMGI0LTQzOTgtOTgwZC1mNDQz OTEwYzJkMmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5AEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFnK6fJbcaCWpQRz2Kk2ydh7iXdNWL52+BkIGHrDCc9eRXL9a6buZWef bqG9PhG/zWQfMfh4jjM2eE+atYXF820w8o4wzu8nwq3w/1U+t0P14Aj3KCYI1Z7h 56xkhth6MY8duGf6FLie1NaDTpDvB9FksjY1ve8uHfPe/gVlfqqigZlm4KDS+yXP fTsEp4yXDFdE6fZeXR3gczjQC3KHBBueU5vWqPLbESrp5OL2dzoMIlBd33x42y2Q nqLQsNt0lZOo9lzuJ4oBu/P7tU2RLFimiv6lMCqt0ET0llIKgJnifGtg3efRK+Ha 1Nvid6eszpG1SsZC37PfdRYAs5fJ7Ss= -----END CERTIFICATE-----Generated at Sat Oct 10 07:53:18 2026 by rpki-client