$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e44dc926-726a-4ad2-976b-e9b829bd0554/59d113d4-b1ad-3e63-83d8-6e7608e120f5.roa File: 59d113d4-b1ad-3e63-83d8-6e7608e120f5.roa (raw, json) Hash identifier: g9JHQpLrUF4s2rUBWkfdxL47cnMPCwP00aUKs39QjRY= Subject key identifier: 88:44:43:24:96:67:2D:6D:F1:05:3F:9E:CA:87:39:DA:63:C4:DD:F3 Certificate issuer: /CN=e44dc926-726a-4ad2-976b-e9b829bd0554 Certificate serial: 010D0C9F4328584F268D000634FA63FE10FD9F80 Authority key identifier: 43:3A:4A:91:E0:68:E5:3D:7D:AA:BE:3E:84:5C:4F:A6:4F:AC:3C:0F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e44dc926-726a-4ad2-976b-e9b829bd0554.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e44dc926-726a-4ad2-976b-e9b829bd0554/59d113d4-b1ad-3e63-83d8-6e7608e120f5.roa Signing time: Sat 12 Sep 2026 13:00:13 +0000 ROA not before: Sat 12 Sep 2026 13:00:13 +0000 ROA not after: Fri 11 Dec 2026 14:00:13 +0000 asID: 215748 IP address blocks: 23.157.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e44dc926-726a-4ad2-976b-e9b829bd0554/e44dc926-726a-4ad2-976b-e9b829bd0554.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e44dc926-726a-4ad2-976b-e9b829bd0554/e44dc926-726a-4ad2-976b-e9b829bd0554.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e44dc926-726a-4ad2-976b-e9b829bd0554.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:26:8d:00:06:34:fa:63:fe:10:fd:9f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e44dc926-726a-4ad2-976b-e9b829bd0554 Validity Not Before: Sep 12 13:00:13 2026 GMT Not After : Dec 11 14:00:13 2026 GMT Subject: CN=d804e60b-36b3-4593-a5b4-6fcb765ac97d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:1d:a0:91:45:3f:4e:a3:b4:e1:2c:07:9b:6e: 3c:fa:ca:69:37:27:d3:00:6f:bd:d8:9b:74:1b:95: fa:17:5f:74:bb:6f:df:af:a0:2c:a9:01:5b:05:c5: ff:d5:b2:18:ef:49:e1:6c:ec:af:3f:aa:77:ae:49: 83:f1:5e:bc:d9:b9:26:84:f7:17:fd:cb:dd:8e:79: c8:71:ec:60:55:da:30:4b:db:78:e1:b5:b4:76:97: 47:df:7a:10:c7:b6:e4:c6:24:6c:6d:cb:4b:85:b9: e3:f7:29:56:2b:97:05:91:17:db:eb:98:27:3b:f9: 7f:30:b9:99:74:04:f8:e8:c4:67:37:61:5a:bf:74: 80:46:ab:17:f7:64:57:41:c4:c1:10:88:2d:01:8a: 7f:82:98:a8:f6:98:cd:49:b1:dc:62:0e:97:97:19: 99:a7:20:bc:0e:36:4c:05:1f:b9:5f:ab:3b:51:c5: f7:f4:44:31:ce:72:e2:6f:44:f9:2a:1b:4d:ed:5c: 9b:70:2c:ea:e1:e0:c0:57:1f:c3:3e:38:90:4c:7d: 07:d9:a8:57:09:1d:94:bd:a3:7c:8e:8f:bb:36:ab: 4b:27:14:a6:1f:8a:a7:cf:b1:dc:a8:36:43:c8:20: ad:63:17:6e:48:c5:b3:de:24:61:6f:74:67:29:7a: 54:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:44:43:24:96:67:2D:6D:F1:05:3F:9E:CA:87:39:DA:63:C4:DD:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e44dc926-726a-4ad2-976b-e9b829bd0554/59d113d4-b1ad-3e63-83d8-6e7608e120f5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e44dc926-726a-4ad2-976b-e9b829bd0554/e44dc926-726a-4ad2-976b-e9b829bd0554.crl X509v3 Authority Key Identifier: keyid:43:3A:4A:91:E0:68:E5:3D:7D:AA:BE:3E:84:5C:4F:A6:4F:AC:3C:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/e44dc926-726a-4ad2-976b-e9b829bd0554.cer sbgp-ipAddrBlock: critical IPv4: 23.157.108.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:ee:5e:49:ed:07:5e:3f:07:c3:84:41:f1:53:08:57:c1:62: cc:82:7c:fb:92:00:3f:5d:87:12:07:d6:7f:30:15:4f:a9:7c: 68:b4:4b:69:02:fa:3a:53:2e:fb:ac:89:e0:48:73:a9:b4:ce: 6a:d2:30:59:f1:a0:8a:b8:5f:1d:86:ae:e4:c6:ed:53:13:b6: 20:88:25:2b:44:14:14:4d:47:cf:e6:6c:4d:4c:4e:64:4f:b2: f7:35:eb:ac:1e:87:d4:bd:5b:2b:86:b6:45:5a:94:f8:a2:ea: 72:20:e2:02:bb:e2:c4:5a:fd:67:fe:d5:35:c2:73:a1:92:7b: 71:17:bb:9f:f2:52:9f:8b:bd:6f:95:2d:9a:e9:4e:0f:44:c8: f5:d5:6f:10:49:7c:36:b3:48:c6:b2:b0:38:b1:ea:5e:ec:68: 96:c6:80:46:e8:a4:71:8c:84:ce:75:f6:3c:8e:cd:73:7a:50: b5:95:59:d0:9c:cf:31:4d:04:0e:b8:02:33:ee:44:77:74:43: 59:3c:12:22:64:d4:9a:24:5a:9b:73:ee:ab:a8:59:c1:ec:25: a8:83:00:54:ff:a9:0e:db:bf:33:4a:41:85:14:00:ba:ce:53: 1c:ba:0b:2b:8c:c1:0a:91:95:d3:76:83:a9:e5:89:7e:88:eb: a9:f7:6a:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8mjQAGNPpj/hD9n4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTQ0ZGM5MjYtNzI2YS00YWQyLTk3NmItZTliODI5YmQw NTU0MB4XDTI2MDkxMjEzMDAxM1oXDTI2MTIxMTE0MDAxM1owLzEtMCsGA1UEAxMk ZDgwNGU2MGItMzZiMy00NTkzLWE1YjQtNmZjYjc2NWFjOTdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiB2gkUU/TqO04SwHm248+sppNyfTAG+92Jt0 G5X6F190u2/fr6AsqQFbBcX/1bIY70nhbOyvP6p3rkmD8V682bkmhPcX/cvdjnnI cexgVdowS9t44bW0dpdH33oQx7bkxiRsbctLhbnj9ylWK5cFkRfb65gnO/l/MLmZ dAT46MRnN2Fav3SARqsX92RXQcTBEIgtAYp/gpio9pjNSbHcYg6XlxmZpyC8DjZM BR+5X6s7UcX39EQxznLib0T5KhtN7VybcCzq4eDAVx/DPjiQTH0H2ahXCR2UvaN8 jo+7NqtLJxSmH4qnz7HcqDZDyCCtYxduSMWz3iRhb3RnKXpUPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIhEQySWZy1t8QU/nsqHOdpjxN3zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9lNDRk YzkyNi03MjZhLTRhZDItOTc2Yi1lOWI4MjliZDA1NTQvNTlkMTEzZDQtYjFhZC0z ZTYzLTgzZDgtNmU3NjA4ZTEyMGY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvZTQ0ZGM5MjYtNzI2YS00YWQyLTk3 NmItZTliODI5YmQwNTU0L2U0NGRjOTI2LTcyNmEtNGFkMi05NzZiLWU5YjgyOWJk MDU1NC5jcmwwHwYDVR0jBBgwFoAUQzpKkeBo5T19qr4+hFxPpk+sPA8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi9lNDRkYzkyNi03MjZhLTRhZDItOTc2Yi1lOWI4 MjliZDA1NTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF51sMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABruXkntB14/B8OEQfFTCFfBYsyCfPuSAD9dhxIH1n8wFU+pfGi0S2kC +jpTLvusieBIc6m0zmrSMFnxoIq4Xx2GruTG7VMTtiCIJStEFBRNR8/mbE1MTmRP svc166weh9S9WyuGtkValPii6nIg4gK74sRa/Wf+1TXCc6GSe3EXu5/yUp+LvW+V LZrpTg9EyPXVbxBJfDazSMaysDix6l7saJbGgEbopHGMhM519jyOzXN6ULWVWdCc zzFNBA64AjPuRHd0Q1k8EiJk1JokWptz7quoWcHsJaiDAFT/qQ7bvzNKQYUUALrO Uxy6CyuMwQqRldN2g6nliX6I66n3auM= -----END CERTIFICATE-----Generated at Tue Sep 22 02:56:42 2026 by rpki-client