$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c487dbf3-3b16-4d19-9025-e64b6f47a247/6960f63e-10b9-3c01-b9b2-d1e5aeaecbb0.roa File: 6960f63e-10b9-3c01-b9b2-d1e5aeaecbb0.roa (raw, json) Hash identifier: nmZU19ZCKQVTLnnbHlr6YPgC1ZdXnlDBpuDjyo/zq5s= Subject key identifier: 76:22:85:DA:13:DC:70:7C:F5:4E:DE:C7:2A:6A:93:D0:A6:32:5C:B5 Certificate issuer: /CN=c487dbf3-3b16-4d19-9025-e64b6f47a247 Certificate serial: 010D0C9F4328584F2957B65592FA78B004C70900 Authority key identifier: 85:15:99:42:C3:72:B2:77:FC:D2:81:6C:46:72:C3:65:2D:B7:81:72 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c487dbf3-3b16-4d19-9025-e64b6f47a247.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c487dbf3-3b16-4d19-9025-e64b6f47a247/6960f63e-10b9-3c01-b9b2-d1e5aeaecbb0.roa Signing time: Sun 13 Sep 2026 13:00:11 +0000 ROA not before: Sun 13 Sep 2026 13:00:11 +0000 ROA not after: Sat 12 Dec 2026 14:00:11 +0000 asID: 807 IP address blocks: 23.147.64.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c487dbf3-3b16-4d19-9025-e64b6f47a247/c487dbf3-3b16-4d19-9025-e64b6f47a247.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c487dbf3-3b16-4d19-9025-e64b6f47a247/c487dbf3-3b16-4d19-9025-e64b6f47a247.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c487dbf3-3b16-4d19-9025-e64b6f47a247.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:29:57:b6:55:92:fa:78:b0:04:c7:09:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c487dbf3-3b16-4d19-9025-e64b6f47a247 Validity Not Before: Sep 13 13:00:11 2026 GMT Not After : Dec 12 14:00:11 2026 GMT Subject: CN=99e83db7-911c-4ec9-9b06-d96d77af7b0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:90:b1:e9:f2:b1:e3:78:89:57:4a:77:e3:86: 91:a9:54:7a:83:fd:a7:de:2d:44:d9:96:9c:2f:4f: 40:fe:dd:92:31:9f:5d:2e:a0:d9:e3:80:7c:26:7b: b1:06:b5:7f:82:c9:1e:89:06:93:28:aa:79:4f:a4: bd:b9:0c:bc:e5:77:ae:1e:b8:61:a3:54:df:91:0e: 54:df:66:be:c2:9f:ac:36:97:a5:40:25:51:bc:11: 29:e2:fa:40:b8:d2:10:ff:3b:ee:21:f8:15:9c:fc: a0:7e:16:52:d3:0f:86:6f:75:54:ab:d0:59:3b:94: 29:58:21:f4:9a:ce:78:33:21:c5:ed:00:b1:45:a8: bd:3a:7f:3f:6d:5b:41:db:eb:1a:29:92:01:8b:43: ea:f5:3b:51:32:08:5b:e0:68:18:57:90:f3:da:a1: 24:76:9d:9b:e4:9f:69:24:fc:88:49:cc:50:b0:b3: fc:fa:a4:10:ec:66:57:67:f8:94:f6:74:cd:37:04: 54:ec:df:aa:6e:93:58:77:12:00:ca:4e:b2:b6:15: 28:1b:a9:48:73:a6:18:85:63:8f:6a:da:a6:74:94: e7:08:be:27:57:89:1b:3c:a0:b0:2e:d0:dd:56:27: b3:3e:4f:33:d4:62:29:65:36:9a:55:31:cf:c3:e4: ef:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:22:85:DA:13:DC:70:7C:F5:4E:DE:C7:2A:6A:93:D0:A6:32:5C:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c487dbf3-3b16-4d19-9025-e64b6f47a247/6960f63e-10b9-3c01-b9b2-d1e5aeaecbb0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c487dbf3-3b16-4d19-9025-e64b6f47a247/c487dbf3-3b16-4d19-9025-e64b6f47a247.crl X509v3 Authority Key Identifier: keyid:85:15:99:42:C3:72:B2:77:FC:D2:81:6C:46:72:C3:65:2D:B7:81:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c487dbf3-3b16-4d19-9025-e64b6f47a247.cer sbgp-ipAddrBlock: critical IPv4: 23.147.64.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:aa:fe:57:49:ee:19:e3:d1:2c:36:58:36:51:df:96:6b:d0: 8f:4d:99:29:59:0e:c9:4a:47:2a:0d:f2:83:e9:0c:49:bc:87: a8:50:b8:fc:16:b2:50:b5:a0:89:52:4e:41:44:dc:b7:d4:bc: eb:39:32:4b:62:4a:44:95:3a:a0:de:20:98:37:2c:84:91:35: 33:6c:3f:6c:e8:79:8c:32:54:e7:20:c8:52:f7:45:54:2c:bc: 83:12:c5:48:ee:cc:a9:47:e8:4b:ca:fb:40:65:98:92:10:8c: a3:5c:0e:26:3a:6a:17:cb:0b:a9:23:98:6e:0a:16:1f:41:2a: d1:a8:74:d2:8c:c3:3d:83:7c:66:2b:0d:22:34:2e:20:2c:f5: 2b:a5:0b:f0:0a:81:af:7e:d4:f3:78:75:56:91:c6:d7:4f:c2: ba:5d:df:4e:c0:59:40:af:3c:d5:30:23:18:cd:57:ea:13:39: 92:64:f8:72:b9:b7:48:ac:b0:ec:13:af:d8:dc:a7:02:dd:84: 77:b1:79:fc:25:4a:44:1e:04:a0:dc:09:1f:da:91:5d:18:60: b2:ec:ee:6a:98:a6:eb:80:1a:f1:6e:2b:ba:66:7c:63:a8:6b: 20:46:08:6b:92:c2:7f:5e:98:29:bf:9c:9f:d9:84:3b:21:ff: 84:34:d7:2d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8pV7ZVkvp4sATHCQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzQ4N2RiZjMtM2IxNi00ZDE5LTkwMjUtZTY0YjZmNDdh MjQ3MB4XDTI2MDkxMzEzMDAxMVoXDTI2MTIxMjE0MDAxMVowLzEtMCsGA1UEAxMk OTllODNkYjctOTExYy00ZWM5LTliMDYtZDk2ZDc3YWY3YjBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAipCx6fKx43iJV0p344aRqVR6g/2n3i1E2Zac L09A/t2SMZ9dLqDZ44B8JnuxBrV/gskeiQaTKKp5T6S9uQy85XeuHrhho1TfkQ5U 32a+wp+sNpelQCVRvBEp4vpAuNIQ/zvuIfgVnPygfhZS0w+Gb3VUq9BZO5QpWCH0 ms54MyHF7QCxRai9On8/bVtB2+saKZIBi0Pq9TtRMghb4GgYV5Dz2qEkdp2b5J9p JPyIScxQsLP8+qQQ7GZXZ/iU9nTNNwRU7N+qbpNYdxIAyk6ythUoG6lIc6YYhWOP atqmdJTnCL4nV4kbPKCwLtDdViezPk8z1GIpZTaaVTHPw+TveQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHYihdoT3HB89U7exypqk9CmMly1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jNDg3 ZGJmMy0zYjE2LTRkMTktOTAyNS1lNjRiNmY0N2EyNDcvNjk2MGY2M2UtMTBiOS0z YzAxLWI5YjItZDFlNWFlYWVjYmIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzQ4N2RiZjMtM2IxNi00ZDE5LTkw MjUtZTY0YjZmNDdhMjQ3L2M0ODdkYmYzLTNiMTYtNGQxOS05MDI1LWU2NGI2ZjQ3 YTI0Ny5jcmwwHwYDVR0jBBgwFoAUhRWZQsNysnf80oFsRnLDZS23gXIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9jNDg3ZGJmMy0zYjE2LTRkMTktOTAyNS1lNjRi NmY0N2EyNDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5NAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAaq/ldJ7hnj0Sw2WDZR35Zr0I9NmSlZDslKRyoN8oPpDEm8h6hQuPwW slC1oIlSTkFE3LfUvOs5MktiSkSVOqDeIJg3LISRNTNsP2zoeYwyVOcgyFL3RVQs vIMSxUjuzKlH6EvK+0BlmJIQjKNcDiY6ahfLC6kjmG4KFh9BKtGodNKMwz2DfGYr DSI0LiAs9SulC/AKga9+1PN4dVaRxtdPwrpd307AWUCvPNUwIxjNV+oTOZJk+HK5 t0issOwTr9jcpwLdhHexefwlSkQeBKDcCR/akV0YYLLs7mqYpuuAGvFuK7pmfGOo ayBGCGuSwn9emCm/nJ/ZhDsh/4Q01y0= -----END CERTIFICATE-----Generated at Tue Sep 22 20:31:17 2026 by rpki-client