$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2db54220-b640-4de5-bf21-207b4ffc20dd/baa70988-7b5c-349e-b1ee-23e34d4c9e08.roa File: baa70988-7b5c-349e-b1ee-23e34d4c9e08.roa (raw, json) Hash identifier: WzTWuXaoAej9Yf5yebQmxIO8pa0cQEBjKn5HhRJy664= Subject key identifier: CF:A8:8A:E5:48:D4:98:5D:51:2D:0D:9A:CA:9B:D7:7D:3A:FD:E5:8B Certificate issuer: /CN=2db54220-b640-4de5-bf21-207b4ffc20dd Certificate serial: 010D0C9F4328584F30527B4323A130E873043C00 Authority key identifier: E4:E3:84:C6:FA:C4:11:1E:37:2F:F3:AD:8F:FB:C6:BB:97:62:03:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2db54220-b640-4de5-bf21-207b4ffc20dd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2db54220-b640-4de5-bf21-207b4ffc20dd/baa70988-7b5c-349e-b1ee-23e34d4c9e08.roa Signing time: Wed 16 Sep 2026 01:00:12 +0000 ROA not before: Wed 16 Sep 2026 01:00:12 +0000 ROA not after: Tue 15 Dec 2026 02:00:12 +0000 asID: 198487 IP address blocks: 23.155.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2db54220-b640-4de5-bf21-207b4ffc20dd/2db54220-b640-4de5-bf21-207b4ffc20dd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2db54220-b640-4de5-bf21-207b4ffc20dd/2db54220-b640-4de5-bf21-207b4ffc20dd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2db54220-b640-4de5-bf21-207b4ffc20dd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:30:52:7b:43:23:a1:30:e8:73:04:3c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2db54220-b640-4de5-bf21-207b4ffc20dd Validity Not Before: Sep 16 01:00:12 2026 GMT Not After : Dec 15 02:00:12 2026 GMT Subject: CN=61a22555-44ac-4aa4-9eed-d71dfbff7b72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:b9:7d:5e:6d:25:62:ee:c9:49:be:d4:38:f0: 92:16:9a:af:f7:a8:4c:d5:69:81:d0:09:26:37:c5: 3a:73:9e:16:c2:26:45:84:ca:15:65:76:fb:7c:2d: a5:5b:f0:ef:e2:c5:ff:35:5a:64:fe:d9:29:d4:80: d4:c5:c4:c8:31:11:9c:94:ae:50:e9:52:2d:f8:e4: 5f:8e:89:af:5d:29:d8:e1:30:6e:0e:6a:cc:17:90: e6:a0:fa:6f:47:0e:f0:53:7f:07:64:b7:d0:0d:6e: dc:0c:82:ab:ee:65:1c:cf:16:2f:83:5c:4b:65:c4: a5:78:c5:a6:ce:a0:90:aa:36:3f:4e:bd:1d:5f:cb: 3c:b9:97:81:fd:9d:e7:73:93:2f:28:19:47:6a:7e: 02:79:67:83:fa:83:49:73:db:b7:54:7e:31:35:41: 4b:b5:8b:e8:6a:75:5b:bd:b3:48:d1:67:ab:73:1e: 9a:d1:fd:29:1c:13:bc:a4:64:0d:c5:27:42:75:41: 8b:14:be:b5:6d:bb:70:76:76:3e:15:9c:3f:90:ff: 8d:64:4f:ce:c4:21:bb:4d:52:6a:03:56:0f:a1:47: d4:d0:5c:73:26:14:ae:31:b6:cd:8a:29:f7:41:e9: 06:18:dd:b4:95:c6:a6:ff:25:35:47:c5:5a:56:0d: 9e:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:A8:8A:E5:48:D4:98:5D:51:2D:0D:9A:CA:9B:D7:7D:3A:FD:E5:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2db54220-b640-4de5-bf21-207b4ffc20dd/baa70988-7b5c-349e-b1ee-23e34d4c9e08.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2db54220-b640-4de5-bf21-207b4ffc20dd/2db54220-b640-4de5-bf21-207b4ffc20dd.crl X509v3 Authority Key Identifier: keyid:E4:E3:84:C6:FA:C4:11:1E:37:2F:F3:AD:8F:FB:C6:BB:97:62:03:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2db54220-b640-4de5-bf21-207b4ffc20dd.cer sbgp-ipAddrBlock: critical IPv4: 23.155.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:df:65:f2:a0:a5:f5:02:96:73:de:a6:94:d1:4d:b5:cd:86: b2:ea:1d:46:8e:af:c7:fa:ff:58:b7:15:ec:50:9c:92:43:41: 9f:9a:0a:3c:58:c6:8b:9e:6f:a1:9f:e8:3a:53:1b:e6:94:5b: bf:45:56:ca:aa:f3:28:5d:00:8a:f4:fd:6e:cd:0c:91:73:2a: 4c:68:73:e9:e1:10:ce:6d:04:7c:34:ac:bc:38:88:f2:a3:b4: e6:1b:a4:51:2a:28:68:54:65:4b:7a:a3:f2:2b:be:7c:32:99: fe:15:c4:17:9c:85:f6:36:e2:fe:3e:0d:a6:21:ee:76:22:fe: 5c:1d:46:50:76:d8:ac:49:16:cb:51:74:16:ca:48:9c:9b:ea: 5d:b7:24:89:7a:52:cf:72:bf:c4:10:ca:02:a6:50:37:19:5a: af:74:6d:c4:01:c8:e8:5b:e4:b1:af:19:f0:25:ce:93:7a:2a: 98:30:e3:b3:07:0b:42:17:a1:b8:cf:0f:7b:e8:b5:0b:53:a0: 22:94:f3:3a:0e:72:bc:e6:c7:92:62:08:66:cb:b0:45:d2:50: fe:eb:06:0a:40:4c:25:6b:1f:2a:fd:66:7c:b5:c8:3d:7a:f2: d6:b7:ae:0f:68:7e:3b:b1:3b:d6:91:e3:63:69:04:fd:4b:b8: b7:9c:ec:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8wUntDI6Ew6HMEPAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmRiNTQyMjAtYjY0MC00ZGU1LWJmMjEtMjA3YjRmZmMy MGRkMB4XDTI2MDkxNjAxMDAxMloXDTI2MTIxNTAyMDAxMlowLzEtMCsGA1UEAxMk NjFhMjI1NTUtNDRhYy00YWE0LTllZWQtZDcxZGZiZmY3YjcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlbl9Xm0lYu7JSb7UOPCSFpqv96hM1WmB0Akm N8U6c54WwiZFhMoVZXb7fC2lW/Dv4sX/NVpk/tkp1IDUxcTIMRGclK5Q6VIt+ORf jomvXSnY4TBuDmrMF5DmoPpvRw7wU38HZLfQDW7cDIKr7mUczxYvg1xLZcSleMWm zqCQqjY/Tr0dX8s8uZeB/Z3nc5MvKBlHan4CeWeD+oNJc9u3VH4xNUFLtYvoanVb vbNI0Wercx6a0f0pHBO8pGQNxSdCdUGLFL61bbtwdnY+FZw/kP+NZE/OxCG7TVJq A1YPoUfU0FxzJhSuMbbNiin3QekGGN20lcam/yU1R8VaVg2eyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM+oiuVI1JhdUS0Nmsqb1306/eWLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8yZGI1 NDIyMC1iNjQwLTRkZTUtYmYyMS0yMDdiNGZmYzIwZGQvYmFhNzA5ODgtN2I1Yy0z NDllLWIxZWUtMjNlMzRkNGM5ZTA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMmRiNTQyMjAtYjY0MC00ZGU1LWJm MjEtMjA3YjRmZmMyMGRkLzJkYjU0MjIwLWI2NDAtNGRlNS1iZjIxLTIwN2I0ZmZj MjBkZC5jcmwwHwYDVR0jBBgwFoAU5OOExvrEER43L/Otj/vGu5diA5YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8yZGI1NDIyMC1iNjQwLTRkZTUtYmYyMS0yMDdi NGZmYzIwZGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5t4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABzfZfKgpfUClnPeppTRTbXNhrLqHUaOr8f6/1i3FexQnJJDQZ+aCjxY xoueb6Gf6DpTG+aUW79FVsqq8yhdAIr0/W7NDJFzKkxoc+nhEM5tBHw0rLw4iPKj tOYbpFEqKGhUZUt6o/Irvnwymf4VxBechfY24v4+DaYh7nYi/lwdRlB22KxJFstR dBbKSJyb6l23JIl6Us9yv8QQygKmUDcZWq90bcQByOhb5LGvGfAlzpN6Kpgw47MH C0IXobjPD3votQtToCKU8zoOcrzmx5JiCGbLsEXSUP7rBgpATCVrHyr9Zny1yD16 8ta3rg9ofjuxO9aR42NpBP1LuLec7Go= -----END CERTIFICATE-----Generated at Mon Sep 21 06:26:44 2026 by rpki-client