$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001/724dc813-9136-3075-bcba-f77834af4133.roa File: 724dc813-9136-3075-bcba-f77834af4133.roa (raw, json) Hash identifier: 8CmIzLE9LmYV3c2xkYjaKS6Zy5etRwcEey/ZtfyZLsc= Subject key identifier: 92:F5:17:C3:65:99:A3:36:FF:DC:75:41:D1:9A:46:F9:BD:B9:7E:EE Certificate issuer: /CN=add35f11-0294-4be9-94b7-49cac2bcb001 Certificate serial: 010D0C9F4328584F2957B1BF6849AD6D96DA9080 Authority key identifier: A5:7A:61:2C:B0:49:28:3C:1F:09:9D:0D:5E:0C:F3:8E:B9:58:F8:CA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001/724dc813-9136-3075-bcba-f77834af4133.roa Signing time: Sun 13 Sep 2026 13:00:11 +0000 ROA not before: Sun 13 Sep 2026 13:00:11 +0000 ROA not after: Sat 12 Dec 2026 14:00:11 +0000 asID: 923 IP address blocks: 23.144.156.0/24 maxlen: 24 207.167.121.0/24 maxlen: 24 2602:fbf5::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001/add35f11-0294-4be9-94b7-49cac2bcb001.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001/add35f11-0294-4be9-94b7-49cac2bcb001.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Sep 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:29:57:b1:bf:68:49:ad:6d:96:da:90:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=add35f11-0294-4be9-94b7-49cac2bcb001 Validity Not Before: Sep 13 13:00:11 2026 GMT Not After : Dec 12 14:00:11 2026 GMT Subject: CN=a74358dc-53b2-4bfd-9997-116f90e31d19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:65:9d:7d:73:37:34:86:8e:e4:9d:88:0b:94: 9b:84:b9:49:ae:73:22:52:cd:fe:d7:2b:03:07:95: bb:fe:ee:d4:7e:83:20:6d:bb:d0:b9:14:d3:c6:32: 42:96:2c:d9:8d:68:ed:38:fb:1d:14:d3:df:56:cf: ec:b2:31:11:5f:45:18:50:49:60:bc:7f:1d:67:f8: e9:c5:70:7f:d3:2f:96:37:9a:8f:13:69:16:7e:ee: 69:0f:7a:25:42:60:9e:6c:8a:0a:ab:1f:97:c8:46: 82:0d:55:da:63:c4:08:ae:78:61:c2:30:d9:fa:c4: 2a:7f:5f:30:d1:ac:b8:7e:b7:dc:ab:90:53:44:8b: b1:55:15:a2:0d:ca:b0:e8:0b:b1:a6:9b:29:84:63: c6:ce:cc:2f:8d:f6:4d:12:f8:25:c3:c9:e8:25:f1: d3:19:60:79:d0:de:b4:bf:7e:f8:3f:de:04:ab:39: 47:fb:a4:f7:5e:00:e7:e2:65:c2:27:80:8d:3a:6c: c5:de:37:db:3b:e1:31:51:22:79:8f:1d:83:cf:7e: 73:0b:0a:99:b0:ce:d7:e8:1c:d8:22:1f:1b:6d:54: c8:d5:a5:1f:24:f5:7f:24:95:d1:63:5a:89:6f:18: b3:a2:f7:13:0a:57:ad:d2:77:26:26:75:d7:f7:d7: 2c:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:F5:17:C3:65:99:A3:36:FF:DC:75:41:D1:9A:46:F9:BD:B9:7E:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001/724dc813-9136-3075-bcba-f77834af4133.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001/add35f11-0294-4be9-94b7-49cac2bcb001.crl X509v3 Authority Key Identifier: keyid:A5:7A:61:2C:B0:49:28:3C:1F:09:9D:0D:5E:0C:F3:8E:B9:58:F8:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/add35f11-0294-4be9-94b7-49cac2bcb001.cer sbgp-ipAddrBlock: critical IPv4: 23.144.156.0/24 207.167.121.0/24 IPv6: 2602:fbf5::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ad:f2:31:2b:ad:4d:27:10:8a:72:50:b4:e6:50:ab:8e:11:ab: 3d:45:67:0f:f5:b7:e4:9f:48:43:5e:18:e4:63:d6:f8:d6:44: 37:8f:9b:e8:77:3c:c3:9d:00:a5:88:57:15:03:d6:d8:9f:01: 6d:7c:9e:93:29:ab:b2:56:31:aa:e6:a0:ac:86:58:0f:d7:34: 14:35:b7:81:5e:1b:88:8b:89:4c:cb:c8:7d:cd:18:a6:05:8b: 08:bf:63:66:b1:7a:88:2b:b0:e3:14:07:b0:09:7e:1c:fe:41: c4:60:f1:1c:d8:2a:c2:40:e8:e4:e2:94:8a:86:8c:f6:3b:22: 10:43:03:6a:f3:bf:dd:63:52:2f:bc:69:10:5c:8e:f6:5f:a5: 57:76:d2:82:3d:75:f5:39:d7:aa:e8:ae:60:2b:be:b0:b3:d5: 99:85:83:d4:0e:02:b1:dc:72:55:65:49:ef:6f:25:12:51:dd: 37:20:8d:29:4e:bf:7b:45:9f:b2:87:d3:d0:ab:c4:06:57:ca: 4f:60:47:eb:89:5b:25:d9:84:d2:0e:61:77:2a:e7:49:dc:66: a6:f3:62:69:f1:fc:11:8b:75:63:a2:e2:4f:e3:13:ce:e1:42: 17:1e:b2:8f:15:76:2b:26:9e:b0:9d:60:22:8e:0a:f9:61:3a: 5c:9f:25:03 -----BEGIN CERTIFICATE----- MIIGWTCCBUGgAwIBAgIUAQ0Mn0MoWE8pV7G/aEmtbZbakIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWRkMzVmMTEtMDI5NC00YmU5LTk0YjctNDljYWMyYmNi MDAxMB4XDTI2MDkxMzEzMDAxMVoXDTI2MTIxMjE0MDAxMVowLzEtMCsGA1UEAxMk YTc0MzU4ZGMtNTNiMi00YmZkLTk5OTctMTE2ZjkwZTMxZDE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtGWdfXM3NIaO5J2IC5SbhLlJrnMiUs3+1ysD B5W7/u7UfoMgbbvQuRTTxjJClizZjWjtOPsdFNPfVs/ssjERX0UYUElgvH8dZ/jp xXB/0y+WN5qPE2kWfu5pD3olQmCebIoKqx+XyEaCDVXaY8QIrnhhwjDZ+sQqf18w 0ay4frfcq5BTRIuxVRWiDcqw6AuxppsphGPGzswvjfZNEvglw8noJfHTGWB50N60 v374P94EqzlH+6T3XgDn4mXCJ4CNOmzF3jfbO+ExUSJ5jx2Dz35zCwqZsM7X6BzY Ih8bbVTI1aUfJPV/JJXRY1qJbxizovcTClet0ncmJnXX99csOwIDAQABo4IDazCC A2cwHQYDVR0OBBYEFJL1F8NlmaM2/9x1QdGaRvm9uX7uMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hZGQz NWYxMS0wMjk0LTRiZTktOTRiNy00OWNhYzJiY2IwMDEvNzI0ZGM4MTMtOTEzNi0z MDc1LWJjYmEtZjc3ODM0YWY0MTMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYWRkMzVmMTEtMDI5NC00YmU5LTk0 YjctNDljYWMyYmNiMDAxL2FkZDM1ZjExLTAyOTQtNGJlOS05NGI3LTQ5Y2FjMmJj YjAwMS5jcmwwHwYDVR0jBBgwFoAUpXphLLBJKDwfCZ0NXgzzjrlY+MowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hZGQzNWYxMS0wMjk0LTRiZTktOTRiNy00OWNh YzJiY2IwMDEuY2VyMDUGCCsGAQUFBwEHAQH/BCYwJDASBAIAATAMAwQAF5CcAwQA z6d5MA4EAgACMAgDBgQmAvv1ADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCt8jErrU0nEIpyULTmUKuOEas9 RWcP9bfkn0hDXhjkY9b41kQ3j5vodzzDnQCliFcVA9bYnwFtfJ6TKauyVjGq5qCs hlgP1zQUNbeBXhuIi4lMy8h9zRimBYsIv2NmsXqIK7DjFAewCX4c/kHEYPEc2CrC QOjk4pSKhoz2OyIQQwNq87/dY1IvvGkQXI72X6VXdtKCPXX1Odeq6K5gK76ws9WZ hYPUDgKx3HJVZUnvbyUSUd03II0pTr97RZ+yh9PQq8QGV8pPYEfriVsl2YTSDmF3 KudJ3Gam82Jp8fwRi3VjouJP4xPO4UIXHrKPFXYrJp6wnWAijgr5YTpcnyUD -----END CERTIFICATE-----Generated at Sun Sep 20 15:14:46 2026 by rpki-client