$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395/936a75ba-7eb9-3709-9d13-c404379a1254.roa File: 936a75ba-7eb9-3709-9d13-c404379a1254.roa (raw, json) Hash identifier: XfN/3kQf97/RR6XzYpcAGSg40AP/UMYW6LfPGQg/jss= Subject key identifier: 03:1F:1B:3B:B4:4C:64:51:97:2B:51:29:64:82:E0:9F:45:56:43:6E Certificate issuer: /CN=e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395 Certificate serial: 010D0C9F4328584F146797AC24C953EF94CBBE80 Authority key identifier: 29:93:F0:1F:A9:62:E9:C2:CE:07:F5:20:1B:EF:1D:45:AF:2D:59:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395/936a75ba-7eb9-3709-9d13-c404379a1254.roa Signing time: Sun 06 Sep 2026 01:00:11 +0000 ROA not before: Sun 06 Sep 2026 01:00:11 +0000 ROA not after: Sat 05 Dec 2026 02:00:11 +0000 asID: 14618 IP address blocks: 23.179.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:14:67:97:ac:24:c9:53:ef:94:cb:be:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395 Validity Not Before: Sep 6 01:00:11 2026 GMT Not After : Dec 5 02:00:11 2026 GMT Subject: CN=005e600d-c727-4d31-9d95-30318085b6f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:15:0c:03:f9:a1:9e:e1:89:ca:28:4c:2c:4a: 4b:d1:d6:1e:ee:00:b7:30:07:67:36:b7:32:eb:2f: 09:4a:05:45:58:3a:73:91:90:28:ce:31:5e:c9:4b: 34:0d:9d:6b:38:39:d8:69:66:7d:2d:ba:64:73:52: aa:9a:a3:0e:d1:09:de:a6:4a:4e:0b:0f:b6:7c:a2: 01:b7:ee:9d:fc:e0:43:ce:f0:2a:02:b3:23:0b:ee: c4:bd:2e:b0:77:97:83:67:82:f8:de:05:c3:db:3d: dd:80:4a:44:ac:a4:a4:74:fd:74:58:ec:ca:9d:63: 8e:16:83:c9:12:03:fc:3a:34:5b:6e:4b:7b:89:3e: b3:b1:b3:20:8d:ed:37:9d:2e:62:c1:a2:0a:c8:dd: 2e:5d:eb:d3:04:72:cd:1e:74:f5:c4:dc:72:b9:47: 91:89:5f:f3:5a:b1:16:17:3f:d6:a6:e3:d1:02:2f: 41:15:bc:70:82:ae:63:a7:f0:4c:87:82:27:35:d2: e9:d4:f0:15:e1:ba:cf:2f:d6:af:53:7c:f1:11:53: e6:b1:f5:8d:59:27:80:ef:d9:57:80:dd:d9:5f:09: ef:bb:2e:9a:30:e8:23:15:6c:f2:a3:46:85:16:e1: 8f:60:ad:88:a0:37:da:a6:1e:41:52:ea:18:9b:91: 4d:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:1F:1B:3B:B4:4C:64:51:97:2B:51:29:64:82:E0:9F:45:56:43:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395/936a75ba-7eb9-3709-9d13-c404379a1254.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395.crl X509v3 Authority Key Identifier: keyid:29:93:F0:1F:A9:62:E9:C2:CE:07:F5:20:1B:EF:1D:45:AF:2D:59:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e7f5589e-4fa1-41af-9d3f-7dbd5fbdb395.cer sbgp-ipAddrBlock: critical IPv4: 23.179.145.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:fc:eb:cd:fe:d2:fb:0b:dd:31:1f:f2:bf:ac:4a:9a:f6:65: 18:fb:b2:68:50:e4:c6:db:d8:c2:18:2a:53:12:61:b0:1d:08: 39:0e:d5:24:12:a6:7d:53:18:7b:33:17:af:49:ab:24:6c:d0: 9e:13:18:2a:3c:18:49:c9:e9:a5:1d:aa:65:84:0b:0a:3b:7f: 76:47:d0:00:e3:75:30:a6:b0:cc:85:fd:7d:c1:9e:2d:f4:7a: a6:ed:bb:33:11:50:1b:5d:06:c0:97:e4:6e:0a:d9:65:f2:76: 03:c5:6b:27:14:1d:12:5e:ab:f7:7d:80:cd:56:b7:41:97:51: 42:b7:da:c4:66:87:f6:d8:21:23:65:0b:5a:1c:1f:61:ad:6c: b5:9d:c1:86:bb:1d:d0:21:f7:3d:3d:07:f3:05:2e:8c:05:6f: 91:b4:bd:23:eb:8a:15:51:e2:7b:bb:04:15:1a:12:3f:67:9e: 41:af:9e:ea:92:93:a2:34:41:50:05:55:c2:63:82:11:93:64: 66:43:53:b7:26:59:7e:9f:41:5e:5a:00:92:20:b0:1b:b5:2f: 8e:09:7c:61:cf:d9:00:de:d0:f6:ce:99:38:c5:e7:40:e2:73: 45:53:0b:79:ab:88:e5:76:e6:42:3a:34:b7:0c:80:18:b7:5b: fd:05:39:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8UZ5esJMlT75TLvoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdmNTU4OWUtNGZhMS00MWFmLTlkM2YtN2RiZDVmYmRi Mzk1MB4XDTI2MDkwNjAxMDAxMVoXDTI2MTIwNTAyMDAxMVowLzEtMCsGA1UEAxMk MDA1ZTYwMGQtYzcyNy00ZDMxLTlkOTUtMzAzMTgwODViNmYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAghUMA/mhnuGJyihMLEpL0dYe7gC3MAdnNrcy 6y8JSgVFWDpzkZAozjFeyUs0DZ1rODnYaWZ9Lbpkc1KqmqMO0QnepkpOCw+2fKIB t+6d/OBDzvAqArMjC+7EvS6wd5eDZ4L43gXD2z3dgEpErKSkdP10WOzKnWOOFoPJ EgP8OjRbbkt7iT6zsbMgje03nS5iwaIKyN0uXevTBHLNHnT1xNxyuUeRiV/zWrEW Fz/WpuPRAi9BFbxwgq5jp/BMh4InNdLp1PAV4brPL9avU3zxEVPmsfWNWSeA79lX gN3ZXwnvuy6aMOgjFWzyo0aFFuGPYK2IoDfaph5BUuoYm5FNoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAMfGzu0TGRRlytRKWSC4J9FVkNuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9lN2Y1 NTg5ZS00ZmExLTQxYWYtOWQzZi03ZGJkNWZiZGIzOTUvOTM2YTc1YmEtN2ViOS0z NzA5LTlkMTMtYzQwNDM3OWExMjU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZTdmNTU4OWUtNGZhMS00MWFmLTlk M2YtN2RiZDVmYmRiMzk1L2U3ZjU1ODllLTRmYTEtNDFhZi05ZDNmLTdkYmQ1ZmJk YjM5NS5jcmwwHwYDVR0jBBgwFoAUKZPwH6li6cLOB/UgG+8dRa8tWRAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9lN2Y1NTg5ZS00ZmExLTQxYWYtOWQzZi03ZGJk NWZiZGIzOTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF7ORMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEv8683+0vsL3TEf8r+sSpr2ZRj7smhQ5Mbb2MIYKlMSYbAdCDkO1SQS pn1TGHszF69JqyRs0J4TGCo8GEnJ6aUdqmWECwo7f3ZH0ADjdTCmsMyF/X3Bni30 eqbtuzMRUBtdBsCX5G4K2WXydgPFaycUHRJeq/d9gM1Wt0GXUUK32sRmh/bYISNl C1ocH2GtbLWdwYa7HdAh9z09B/MFLowFb5G0vSPrihVR4nu7BBUaEj9nnkGvnuqS k6I0QVAFVcJjghGTZGZDU7cmWX6fQV5aAJIgsBu1L44JfGHP2QDe0PbOmTjF50Di c0VTC3mriOV25kI6NLcMgBi3W/0FOfQ= -----END CERTIFICATE-----Generated at Sat Sep 26 11:38:59 2026 by rpki-client