$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a1853cd3-3329-4b61-a321-f6705ea74197/19601375-8b5a-3c05-9dfe-bdc6f601106d.roa File: 19601375-8b5a-3c05-9dfe-bdc6f601106d.roa (raw, json) Hash identifier: QPSEEAPIzGM0UUuprBbmCcgCJnV7mCE3L5TjUzMAJss= Subject key identifier: 0F:0B:F7:44:C8:FC:C2:EF:58:8A:13:D4:16:14:B0:1D:DB:74:E0:98 Certificate issuer: /CN=a1853cd3-3329-4b61-a321-f6705ea74197 Certificate serial: 010D0C9F4328584F189794C01918C34920DF2A40 Authority key identifier: 2D:1A:A6:F8:8B:DB:6D:1F:8D:7A:34:72:43:B1:F2:AD:6E:F9:CD:0E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a1853cd3-3329-4b61-a321-f6705ea74197.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a1853cd3-3329-4b61-a321-f6705ea74197/19601375-8b5a-3c05-9dfe-bdc6f601106d.roa Signing time: Mon 07 Sep 2026 13:00:12 +0000 ROA not before: Mon 07 Sep 2026 13:00:12 +0000 ROA not after: Sun 06 Dec 2026 14:00:12 +0000 asID: 400554 IP address blocks: 23.134.120.0/24 maxlen: 24 2602:fb9d::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a1853cd3-3329-4b61-a321-f6705ea74197/a1853cd3-3329-4b61-a321-f6705ea74197.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a1853cd3-3329-4b61-a321-f6705ea74197/a1853cd3-3329-4b61-a321-f6705ea74197.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a1853cd3-3329-4b61-a321-f6705ea74197.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:18:97:94:c0:19:18:c3:49:20:df:2a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1853cd3-3329-4b61-a321-f6705ea74197 Validity Not Before: Sep 7 13:00:12 2026 GMT Not After : Dec 6 14:00:12 2026 GMT Subject: CN=476a60d4-00a7-41f5-8c23-247614ac9750 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:88:28:61:40:e1:03:0c:cf:0f:08:31:50:53: 9a:2d:e2:f1:d9:0b:2b:7d:c7:ba:7b:cd:c5:64:1a: 76:1d:be:6c:ea:05:91:84:31:51:ea:98:cd:51:d4: f0:66:3c:0d:98:bd:dd:e2:1a:b2:fc:85:0a:29:d9: a8:13:3f:68:9e:62:f0:72:fa:f0:b8:cd:dc:a0:55: 99:1b:e5:4e:5f:20:d2:21:2c:e6:a2:85:9c:38:02: a9:a1:e3:d0:82:ff:90:11:c2:1f:a5:a5:8f:14:70: ae:a7:54:67:84:64:25:33:f5:70:06:95:1d:c5:48: 76:4d:df:d6:b5:e6:21:69:35:32:51:e3:f1:e1:a8: d3:82:06:78:a5:68:42:39:bf:59:64:6a:1e:b1:83: e6:b7:98:e5:ab:9d:8f:1e:f2:b2:4b:8b:ee:84:b6: 34:a3:5a:f2:8e:98:82:7f:a0:3a:d5:f1:fa:be:a0: 63:4d:fe:c7:63:3b:ff:cd:b6:bb:d2:fb:d5:d5:38: 76:4f:d2:54:70:99:a6:25:35:16:27:d3:03:50:5e: 6f:62:6e:eb:23:16:c8:f2:db:8a:e0:c2:98:3f:be: 86:fa:c8:a1:89:26:17:c4:96:07:f0:6c:82:f9:14: c9:97:ba:e2:d4:28:a5:af:d1:46:2f:24:8b:5e:9b: 9f:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:0B:F7:44:C8:FC:C2:EF:58:8A:13:D4:16:14:B0:1D:DB:74:E0:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a1853cd3-3329-4b61-a321-f6705ea74197/19601375-8b5a-3c05-9dfe-bdc6f601106d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a1853cd3-3329-4b61-a321-f6705ea74197/a1853cd3-3329-4b61-a321-f6705ea74197.crl X509v3 Authority Key Identifier: keyid:2D:1A:A6:F8:8B:DB:6D:1F:8D:7A:34:72:43:B1:F2:AD:6E:F9:CD:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a1853cd3-3329-4b61-a321-f6705ea74197.cer sbgp-ipAddrBlock: critical IPv4: 23.134.120.0/24 IPv6: 2602:fb9d::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:bd:b0:27:06:66:b4:aa:84:f1:bf:52:4b:6f:df:0d:d9:5e: 9e:e8:c2:05:98:73:ee:46:4f:40:93:d7:de:23:ec:77:1e:9c: 86:3f:18:db:28:fc:44:b7:aa:18:25:67:33:6e:42:59:21:42: 81:fc:3a:19:e1:e1:b0:e6:f2:7d:b3:a0:3e:f5:0d:6d:fa:aa: ab:2a:f5:78:5c:03:56:e9:ac:49:d9:8b:c2:5e:9f:2b:87:f2: 3b:11:30:16:61:5a:c8:f5:c4:ee:7f:08:3e:6c:b5:7c:42:e2: 25:3c:7e:86:22:74:b3:b4:1e:ad:02:89:d6:09:dc:36:91:fe: a4:fa:67:fe:81:fd:3b:c1:7d:86:4c:31:d3:27:dc:b2:90:b1: 92:49:26:28:74:2c:d1:0a:a1:32:9b:1f:ee:90:37:3f:88:5d: 15:b7:5c:81:c2:6f:13:af:e3:87:2a:15:db:06:7f:e3:4c:11: 80:6a:61:13:9d:8d:b8:72:0c:41:f2:6b:dc:02:ff:af:1b:bc: 74:2a:ed:2d:a4:f2:51:36:5c:70:cd:98:7b:04:6f:ab:4a:a1: 83:27:fa:63:c6:02:0c:c0:d8:c2:1c:02:fd:29:85:9a:24:3a: 48:a4:94:6f:49:16:6f:d2:3a:a0:86:66:73:74:e8:ea:a4:81: 49:a6:32:78 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE8Yl5TAGRjDSSDfKkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTE4NTNjZDMtMzMyOS00YjYxLWEzMjEtZjY3MDVlYTc0 MTk3MB4XDTI2MDkwNzEzMDAxMloXDTI2MTIwNjE0MDAxMlowLzEtMCsGA1UEAxMk NDc2YTYwZDQtMDBhNy00MWY1LThjMjMtMjQ3NjE0YWM5NzUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl4goYUDhAwzPDwgxUFOaLeLx2Qsrfce6e83F ZBp2Hb5s6gWRhDFR6pjNUdTwZjwNmL3d4hqy/IUKKdmoEz9onmLwcvrwuM3coFWZ G+VOXyDSISzmooWcOAKpoePQgv+QEcIfpaWPFHCup1RnhGQlM/VwBpUdxUh2Td/W teYhaTUyUePx4ajTggZ4pWhCOb9ZZGoesYPmt5jlq52PHvKyS4vuhLY0o1ryjpiC f6A61fH6vqBjTf7HYzv/zba70vvV1Th2T9JUcJmmJTUWJ9MDUF5vYm7rIxbI8tuK 4MKYP76G+sihiSYXxJYH8GyC+RTJl7ri1Cilr9FGLySLXpuf3QIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFA8L90TI/MLvWIoT1BYUsB3bdOCYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hMTg1 M2NkMy0zMzI5LTRiNjEtYTMyMS1mNjcwNWVhNzQxOTcvMTk2MDEzNzUtOGI1YS0z YzA1LTlkZmUtYmRjNmY2MDExMDZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYTE4NTNjZDMtMzMyOS00YjYxLWEz MjEtZjY3MDVlYTc0MTk3L2ExODUzY2QzLTMzMjktNGI2MS1hMzIxLWY2NzA1ZWE3 NDE5Ny5jcmwwHwYDVR0jBBgwFoAULRqm+IvbbR+NejRyQ7HyrW75zQ4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hMTg1M2NkMy0zMzI5LTRiNjEtYTMyMS1mNjcw NWVhNzQxOTcuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF4Z4MA4E AgACMAgDBgAmAvudADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBmvbAnBma0qoTxv1JLb98N2V6e6MIFmHPu Rk9Ak9feI+x3HpyGPxjbKPxEt6oYJWczbkJZIUKB/DoZ4eGw5vJ9s6A+9Q1t+qqr KvV4XANW6axJ2YvCXp8rh/I7ETAWYVrI9cTufwg+bLV8QuIlPH6GInSztB6tAonW Cdw2kf6k+mf+gf07wX2GTDHTJ9yykLGSSSYodCzRCqEymx/ukDc/iF0Vt1yBwm8T r+OHKhXbBn/jTBGAamETnY24cgxB8mvcAv+vG7x0Ku0tpPJRNlxwzZh7BG+rSqGD J/pjxgIMwNjCHAL9KYWaJDpIpJRvSRZv0jqghmZzdOjqpIFJpjJ4 -----END CERTIFICATE-----Generated at Sun Sep 20 14:00:19 2026 by rpki-client