$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/aab7b42d-fa7a-3ddf-852b-515f2ce48610.roa File: aab7b42d-fa7a-3ddf-852b-515f2ce48610.roa (raw, json) Hash identifier: H5yIHWaqii9JrC0Hs9mH0i2uSDbYsH7rRxizMpHrOKw= Subject key identifier: B4:24:62:B5:2E:AC:14:EA:9A:AC:3A:A5:98:62:A1:EA:DC:49:7B:15 Certificate issuer: /CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82 Certificate serial: 010D0C9F4328584F3E4801FB69C55DF6C49482C0 Authority key identifier: A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/aab7b42d-fa7a-3ddf-852b-515f2ce48610.roa Signing time: Mon 21 Sep 2026 01:00:11 +0000 ROA not before: Mon 21 Sep 2026 01:00:11 +0000 ROA not after: Sun 20 Dec 2026 02:00:11 +0000 asID: 400866 IP address blocks: 23.251.53.0/24 maxlen: 24 23.251.54.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3e:48:01:fb:69:c5:5d:f6:c4:94:82:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82 Validity Not Before: Sep 21 01:00:11 2026 GMT Not After : Dec 20 02:00:11 2026 GMT Subject: CN=fe6f936c-9348-4657-bfc9-58eb50704120 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:a8:c3:1f:df:f3:50:02:22:47:37:b1:4e:ed: d6:6b:23:51:20:25:40:9a:09:41:1f:ae:12:e3:56: b7:68:4c:92:a1:1f:d3:5a:5e:51:01:b1:d9:58:4b: 79:fe:25:02:67:33:fb:67:80:5e:b6:43:50:b0:c3: e5:40:11:e5:bf:95:bc:2b:03:8e:53:2d:36:0c:b1: 3b:a9:b3:26:3d:79:fc:39:58:72:18:d7:74:79:49: 30:3a:e3:b2:14:d4:70:d0:c8:ab:10:51:50:ec:fd: 5d:f0:10:b1:58:31:e2:bb:c5:b6:dd:d1:b7:97:da: af:b9:71:8e:32:e2:68:f0:00:7b:58:6c:8c:05:bf: 35:34:d1:c0:2f:87:83:84:1f:30:47:98:15:1b:49: 72:f9:d1:94:2d:2e:1b:be:85:f3:3f:da:31:05:41: bf:c8:d6:07:81:1b:17:af:4c:22:bc:ee:e4:37:c2: 6a:4f:41:de:31:e5:67:6c:e3:0d:9f:6a:26:6f:0a: 09:34:b6:0f:11:85:45:5a:98:19:4b:0d:fd:44:05: 21:d4:c0:af:eb:af:aa:8f:7c:a7:8f:66:21:fa:68: d8:3b:0b:5d:88:7a:58:3a:24:ec:1f:f8:5e:99:46: 3f:eb:0f:8c:76:99:43:c5:1e:5e:2a:5e:95:d5:93: 42:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:24:62:B5:2E:AC:14:EA:9A:AC:3A:A5:98:62:A1:EA:DC:49:7B:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/aab7b42d-fa7a-3ddf-852b-515f2ce48610.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl X509v3 Authority Key Identifier: keyid:A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer sbgp-ipAddrBlock: critical IPv4: 23.251.53.0-23.251.54.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:d5:d5:ea:69:ea:d5:08:b2:1b:52:64:b5:70:75:59:42:f1: fe:7c:da:e7:05:a9:ec:89:05:1c:c0:ff:cf:45:0a:7b:06:17: 09:4b:0d:fa:8f:bf:75:f3:4a:08:54:98:5f:eb:0c:2f:f2:9c: 4b:f4:cd:5c:ac:64:c8:7b:c6:fd:0e:ef:ba:88:e5:9b:57:21: 99:f1:ee:7c:7f:d0:be:37:35:85:67:b9:ed:02:96:42:d0:f2: 91:bc:e6:35:ff:b4:92:dd:ca:e1:af:41:89:30:d4:e0:f8:2f: bd:d0:92:8c:23:b0:32:c8:05:57:79:d2:85:fa:5e:85:51:e5: 98:af:1b:1b:9c:56:f4:20:cf:53:6e:eb:49:56:43:42:57:6a: a7:e9:bd:d3:1f:84:9c:bf:24:48:0c:e7:54:b7:1a:59:c2:10: 98:10:21:62:87:30:47:e2:32:00:33:32:1d:54:5d:4f:f5:7a: f7:ff:3f:e9:ce:e0:a5:6f:a4:f7:1b:3c:d4:84:49:76:ec:07: d5:30:3d:57:cb:81:46:54:f2:31:8c:73:2d:39:b6:19:6e:cf: b4:dc:94:d1:03:7f:94:71:cb:f9:4b:5f:83:1c:be:78:06:47: fd:3a:f6:dd:e9:c5:1e:8d:ef:7e:4d:a4:52:1e:7b:85:9b:4e: 47:ba:2f:08 -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWE8+SAH7acVd9sSUgsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGNmNDhlYjUtYzA4YS00NzkzLThkZDgtYTgzZjY2MGMz ZjgyMB4XDTI2MDkyMTAxMDAxMVoXDTI2MTIyMDAyMDAxMVowLzEtMCsGA1UEAxMk ZmU2ZjkzNmMtOTM0OC00NjU3LWJmYzktNThlYjUwNzA0MTIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiqjDH9/zUAIiRzexTu3WayNRICVAmglBH64S 41a3aEySoR/TWl5RAbHZWEt5/iUCZzP7Z4BetkNQsMPlQBHlv5W8KwOOUy02DLE7 qbMmPXn8OVhyGNd0eUkwOuOyFNRw0MirEFFQ7P1d8BCxWDHiu8W23dG3l9qvuXGO MuJo8AB7WGyMBb81NNHAL4eDhB8wR5gVG0ly+dGULS4bvoXzP9oxBUG/yNYHgRsX r0wivO7kN8JqT0HeMeVnbOMNn2ombwoJNLYPEYVFWpgZSw39RAUh1MCv66+qj3yn j2Yh+mjYOwtdiHpYOiTsH/hemUY/6w+MdplDxR5eKl6V1ZNCfQIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFLQkYrUurBTqmqw6pZhioercSXsVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kY2Y0 OGViNS1jMDhhLTQ3OTMtOGRkOC1hODNmNjYwYzNmODIvYWFiN2I0MmQtZmE3YS0z ZGRmLTg1MmItNTE1ZjJjZTQ4NjEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGNmNDhlYjUtYzA4YS00NzkzLThk ZDgtYTgzZjY2MGMzZjgyL2RjZjQ4ZWI1LWMwOGEtNDc5My04ZGQ4LWE4M2Y2NjBj M2Y4Mi5jcmwwHwYDVR0jBBgwFoAUp+mNaBvetQDnDAiM9OEaQQcLY14wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9kY2Y0OGViNS1jMDhhLTQ3OTMtOGRkOC1hODNm NjYwYzNmODIuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAAX+zUD BAAX+zYwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEAgdXV6mnq1QiyG1JktXB1WULx/nza5wWp7IkFHMD/z0UK ewYXCUsN+o+/dfNKCFSYX+sML/KcS/TNXKxkyHvG/Q7vuojlm1chmfHufH/Qvjc1 hWe57QKWQtDykbzmNf+0kt3K4a9BiTDU4PgvvdCSjCOwMsgFV3nShfpehVHlmK8b G5xW9CDPU27rSVZDQldqp+m90x+EnL8kSAznVLcaWcIQmBAhYocwR+IyADMyHVRd T/V69/8/6c7gpW+k9xs81IRJduwH1TA9V8uBRlTyMYxzLTm2GW7PtNyU0QN/lHHL +Utfgxy+eAZH/Tr23enFHo3vfk2kUh57hZtOR7ovCA== -----END CERTIFICATE-----Generated at Tue Sep 22 09:08:09 2026 by rpki-client