$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/98399d2b-4b43-4883-9c4e-5af5322e7ec9/9e504e09-500f-3c5c-81cf-5004089e2279.roa File: 9e504e09-500f-3c5c-81cf-5004089e2279.roa (raw, json) Hash identifier: Opfb/1ksKDJ0mW99dC5PBwygEqFZT9TieJ9NCZ0uAGw= Subject key identifier: E8:46:27:89:09:DD:F8:4B:68:52:D9:7F:69:81:AC:A4:26:A8:DF:53 Certificate issuer: /CN=98399d2b-4b43-4883-9c4e-5af5322e7ec9 Certificate serial: 010D0C9F4328584F4987E2DDBECC7134318A1800 Authority key identifier: DA:E5:F1:08:2C:62:9A:F2:95:AD:DD:C2:2A:B6:92:04:9D:43:66:CB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/98399d2b-4b43-4883-9c4e-5af5322e7ec9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/98399d2b-4b43-4883-9c4e-5af5322e7ec9/9e504e09-500f-3c5c-81cf-5004089e2279.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 21859 IP address blocks: 23.154.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/98399d2b-4b43-4883-9c4e-5af5322e7ec9/98399d2b-4b43-4883-9c4e-5af5322e7ec9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/98399d2b-4b43-4883-9c4e-5af5322e7ec9/98399d2b-4b43-4883-9c4e-5af5322e7ec9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/98399d2b-4b43-4883-9c4e-5af5322e7ec9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:87:e2:dd:be:cc:71:34:31:8a:18:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98399d2b-4b43-4883-9c4e-5af5322e7ec9 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=ed705bc8-20f8-4f56-a3ba-da1eb0edf797 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:cd:c0:0d:52:c6:0d:7b:82:75:a5:04:f6:8c: 11:a2:3e:62:db:cd:92:7c:a4:37:b0:e9:57:1d:fa: 99:80:8b:95:3f:4b:24:aa:75:48:78:4c:db:bc:75: bc:6c:33:95:b5:05:5e:8c:d3:08:8b:99:a3:b8:3a: 6c:c6:cf:3d:af:5c:7d:a0:00:1d:cf:39:5a:1b:31: 8b:34:38:21:d5:cb:be:2f:a4:db:30:a6:1f:24:cf: a6:06:57:0d:88:c4:d3:73:b1:3a:10:cd:c4:d0:7f: 8f:ef:d5:fc:f2:da:b0:8a:7a:52:93:f9:67:29:c1: b7:17:b0:7e:d7:f0:71:0f:f7:31:d8:35:25:7a:5e: 00:3f:3e:fe:89:41:00:c6:41:cd:72:07:11:f0:49: d0:e1:10:72:d9:3c:3d:bb:6c:fc:c4:3a:4e:37:1b: 28:0c:f2:3e:58:08:4c:9c:33:b4:f8:37:91:c3:7c: 91:d7:1d:21:f5:cf:f3:36:c7:78:e5:2c:ae:c3:a0: c9:61:de:27:92:d6:c6:d1:a9:67:f3:59:6b:be:c6: 01:c9:aa:c8:d4:97:56:84:04:72:a5:59:33:b6:35: 6a:49:ac:61:73:13:05:34:11:58:0a:da:af:85:05: b3:e2:00:a0:39:c6:98:f9:f1:da:d2:19:71:6d:27: 28:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:46:27:89:09:DD:F8:4B:68:52:D9:7F:69:81:AC:A4:26:A8:DF:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/98399d2b-4b43-4883-9c4e-5af5322e7ec9/9e504e09-500f-3c5c-81cf-5004089e2279.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/98399d2b-4b43-4883-9c4e-5af5322e7ec9/98399d2b-4b43-4883-9c4e-5af5322e7ec9.crl X509v3 Authority Key Identifier: keyid:DA:E5:F1:08:2C:62:9A:F2:95:AD:DD:C2:2A:B6:92:04:9D:43:66:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/98399d2b-4b43-4883-9c4e-5af5322e7ec9.cer sbgp-ipAddrBlock: critical IPv4: 23.154.4.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:84:3a:9f:1a:2d:07:9a:e1:17:ad:d5:75:dc:c7:3e:eb:08: 23:dc:55:e1:86:8e:02:38:63:0d:ed:db:98:83:ce:83:b7:c1: 46:df:d2:19:3a:75:c1:fe:e1:2d:63:09:5e:2f:ee:20:6c:10: 57:a2:72:c9:fe:b4:37:a4:d4:33:2b:26:cb:aa:dd:92:4f:2c: 60:10:6e:2a:d1:ef:0b:6d:14:e8:90:17:4c:b9:80:07:68:33: 94:54:3a:b0:c7:2d:39:fd:29:e1:f9:13:3a:ec:46:9a:b3:60: 71:e7:0b:85:3e:3e:c7:32:73:27:a6:3b:b6:ba:27:a2:d4:26: fa:68:97:31:2e:e1:38:c5:4b:60:e7:48:6f:48:c6:5d:53:32: 6a:3b:28:72:f7:eb:a8:65:fb:2f:dd:b6:a3:8e:60:01:ec:9f: 85:b2:e7:95:fe:37:49:60:55:97:44:6a:fb:6e:d0:90:00:8a: aa:77:2c:86:ad:38:cd:08:7a:bf:16:49:35:c9:3f:d5:6b:9d: 43:97:aa:34:b8:45:ec:89:2a:72:a5:e6:db:57:a1:20:65:e3: 78:f4:c2:ef:b9:04:7e:2f:06:8d:37:94:20:86:91:0b:4f:9a: 87:2e:a0:f2:ad:dd:c3:81:e2:7c:f5:07:8f:41:c6:97:32:37: d7:55:e5:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jh+LdvsxxNDGKGAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTgzOTlkMmItNGI0My00ODgzLTljNGUtNWFmNTMyMmU3 ZWM5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZWQ3MDViYzgtMjBmOC00ZjU2LWEzYmEtZGExZWIwZWRmNzk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzM3ADVLGDXuCdaUE9owRoj5i282SfKQ3sOlX HfqZgIuVP0skqnVIeEzbvHW8bDOVtQVejNMIi5mjuDpsxs89r1x9oAAdzzlaGzGL NDgh1cu+L6TbMKYfJM+mBlcNiMTTc7E6EM3E0H+P79X88tqwinpSk/lnKcG3F7B+ 1/BxD/cx2DUlel4APz7+iUEAxkHNcgcR8EnQ4RBy2Tw9u2z8xDpONxsoDPI+WAhM nDO0+DeRw3yR1x0h9c/zNsd45Syuw6DJYd4nktbG0aln81lrvsYByarI1JdWhARy pVkztjVqSaxhcxMFNBFYCtqvhQWz4gCgOcaY+fHa0hlxbScopQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOhGJ4kJ3fhLaFLZf2mBrKQmqN9TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi85ODM5 OWQyYi00YjQzLTQ4ODMtOWM0ZS01YWY1MzIyZTdlYzkvOWU1MDRlMDktNTAwZi0z YzVjLTgxY2YtNTAwNDA4OWUyMjc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvOTgzOTlkMmItNGI0My00ODgzLTlj NGUtNWFmNTMyMmU3ZWM5Lzk4Mzk5ZDJiLTRiNDMtNDg4My05YzRlLTVhZjUzMjJl N2VjOS5jcmwwHwYDVR0jBBgwFoAU2uXxCCximvKVrd3CKraSBJ1DZsswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi85ODM5OWQyYi00YjQzLTQ4ODMtOWM0ZS01YWY1 MzIyZTdlYzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5oEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHuEOp8aLQea4Ret1XXcxz7rCCPcVeGGjgI4Yw3t25iDzoO3wUbf0hk6 dcH+4S1jCV4v7iBsEFeicsn+tDek1DMrJsuq3ZJPLGAQbirR7wttFOiQF0y5gAdo M5RUOrDHLTn9KeH5EzrsRpqzYHHnC4U+PscycyemO7a6J6LUJvpolzEu4TjFS2Dn SG9Ixl1TMmo7KHL366hl+y/dtqOOYAHsn4Wy55X+N0lgVZdEavtu0JAAiqp3LIat OM0Ier8WSTXJP9VrnUOXqjS4ReyJKnKl5ttXoSBl43j0wu+5BH4vBo03lCCGkQtP mocuoPKt3cOB4nz1B49BxpcyN9dV5SE= -----END CERTIFICATE-----Generated at Fri Sep 25 22:54:20 2026 by rpki-client