$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f9f6775-d445-4be7-9398-1cbbeacb9707/4701df24-d7bf-33a8-aa62-b91271027365.roa File: 4701df24-d7bf-33a8-aa62-b91271027365.roa (raw, json) Hash identifier: C3COAu96hv5aggvU5cOXNOBRlXqARce7WQB7bUWzhas= Subject key identifier: 1E:74:8C:F8:5F:A0:24:2B:AC:7E:E0:BE:9B:12:76:B4:91:8A:62:73 Certificate issuer: /CN=8f9f6775-d445-4be7-9398-1cbbeacb9707 Certificate serial: 010D0C9F4328584F0ED243E3299482A60F9A0A80 Authority key identifier: E0:F5:8A:69:D8:CC:14:75:75:6C:0E:30:5C:47:6E:B4:9D:19:F4:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f9f6775-d445-4be7-9398-1cbbeacb9707.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f9f6775-d445-4be7-9398-1cbbeacb9707/4701df24-d7bf-33a8-aa62-b91271027365.roa Signing time: Fri 04 Sep 2026 01:00:12 +0000 ROA not before: Fri 04 Sep 2026 01:00:12 +0000 ROA not after: Thu 03 Dec 2026 02:00:12 +0000 asID: 57974 IP address blocks: 23.153.72.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f9f6775-d445-4be7-9398-1cbbeacb9707/8f9f6775-d445-4be7-9398-1cbbeacb9707.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f9f6775-d445-4be7-9398-1cbbeacb9707/8f9f6775-d445-4be7-9398-1cbbeacb9707.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f9f6775-d445-4be7-9398-1cbbeacb9707.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0e:d2:43:e3:29:94:82:a6:0f:9a:0a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f9f6775-d445-4be7-9398-1cbbeacb9707 Validity Not Before: Sep 4 01:00:12 2026 GMT Not After : Dec 3 02:00:12 2026 GMT Subject: CN=ee44b42d-9158-4138-aba2-1157ef92c7c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:73:56:28:c1:c7:83:b2:81:e1:a2:62:85:60: b2:19:db:08:d0:0a:dd:c1:b6:47:91:7f:5f:bc:bf: 87:de:8d:19:f7:9f:1a:2a:d7:57:b1:1c:71:90:d2: b1:d4:3f:96:e1:37:90:3b:3a:56:3f:39:1f:70:65: 87:fe:15:88:26:18:55:a4:c4:0f:fc:2a:74:85:ad: 52:d1:9a:a6:d8:b2:7a:31:da:e8:bb:78:17:77:b6: e0:4d:90:ed:1f:03:e1:7a:ae:7d:9d:e4:df:d1:62: 40:b7:08:e3:91:af:cf:0b:be:3f:cc:c8:9a:b5:3c: 80:1b:d6:bd:1b:73:55:34:06:b5:c3:03:38:5e:7c: c6:07:a2:b9:a7:a4:18:79:a6:93:01:f3:71:7d:e3: dd:43:6a:ae:80:f6:f6:3d:ea:a9:e0:48:0e:7b:7e: bb:35:be:7a:7e:93:4a:99:19:a2:c0:b5:3d:ab:42: d1:f4:48:66:a7:49:d0:01:60:0e:7d:24:cf:fa:63: 2d:9b:b9:27:a8:fa:29:30:be:0d:14:cd:c3:fa:27: 68:0e:01:f6:87:63:f6:78:ee:b0:cb:19:6c:25:95: 87:d8:18:21:3d:37:59:b6:92:26:60:68:22:08:12: ec:ca:2c:8d:f8:2a:89:10:fc:29:81:69:81:8a:31: 97:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:74:8C:F8:5F:A0:24:2B:AC:7E:E0:BE:9B:12:76:B4:91:8A:62:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f9f6775-d445-4be7-9398-1cbbeacb9707/4701df24-d7bf-33a8-aa62-b91271027365.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f9f6775-d445-4be7-9398-1cbbeacb9707/8f9f6775-d445-4be7-9398-1cbbeacb9707.crl X509v3 Authority Key Identifier: keyid:E0:F5:8A:69:D8:CC:14:75:75:6C:0E:30:5C:47:6E:B4:9D:19:F4:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f9f6775-d445-4be7-9398-1cbbeacb9707.cer sbgp-ipAddrBlock: critical IPv4: 23.153.72.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ca:d3:69:5e:fe:53:c9:57:b7:c1:ae:57:d0:26:79:af:a6:f6: 8f:98:fc:6b:bf:e3:1f:5f:3f:d2:9f:65:0c:23:13:b8:57:8a: 07:10:5a:66:0e:74:f0:11:25:66:01:34:50:00:78:f9:bd:37: 99:c7:7d:c7:ad:44:0f:fb:0d:b6:2d:d4:43:ea:a3:1c:15:bc: 5e:14:14:a6:e2:92:2c:12:b2:f0:c0:6a:81:26:06:3d:9b:f0: 31:70:1e:66:75:c4:62:79:5a:3b:78:6c:ef:65:fb:25:ad:cf: 7c:a1:5c:6a:3d:c4:25:dc:7c:8c:48:14:dd:14:11:d7:af:77: d4:33:23:57:58:c1:1d:0d:28:63:78:10:e7:17:01:99:63:6c: ad:26:41:d0:e3:b9:6b:85:40:17:22:9e:ea:62:aa:ac:e0:c7: 06:c8:5f:8f:c9:24:ab:ed:7a:dc:7a:3f:49:37:ed:e0:2d:52: 51:f9:fa:81:16:05:0b:08:ad:aa:9a:7f:89:3a:93:44:9b:4b: 63:67:69:5d:d5:25:27:99:a8:f0:01:de:5b:4a:4a:e8:0a:d1: 13:da:67:8a:ff:97:1a:31:cb:f3:b1:66:e9:83:82:32:e9:15: 95:6d:ad:db:cd:75:47:2f:2d:cb:e7:0c:32:25:f6:fc:71:8d: 78:65:3b:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8O0kPjKZSCpg+aCoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY5ZjY3NzUtZDQ0NS00YmU3LTkzOTgtMWNiYmVhY2I5 NzA3MB4XDTI2MDkwNDAxMDAxMloXDTI2MTIwMzAyMDAxMlowLzEtMCsGA1UEAxMk ZWU0NGI0MmQtOTE1OC00MTM4LWFiYTItMTE1N2VmOTJjN2MwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqXNWKMHHg7KB4aJihWCyGdsI0ArdwbZHkX9f vL+H3o0Z958aKtdXsRxxkNKx1D+W4TeQOzpWPzkfcGWH/hWIJhhVpMQP/Cp0ha1S 0Zqm2LJ6Mdrou3gXd7bgTZDtHwPheq59neTf0WJAtwjjka/PC74/zMiatTyAG9a9 G3NVNAa1wwM4XnzGB6K5p6QYeaaTAfNxfePdQ2qugPb2Peqp4EgOe367Nb56fpNK mRmiwLU9q0LR9Ehmp0nQAWAOfSTP+mMtm7knqPopML4NFM3D+idoDgH2h2P2eO6w yxlsJZWH2BghPTdZtpImYGgiCBLsyiyN+CqJEPwpgWmBijGX4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB50jPhfoCQrrH7gvpsSdrSRimJzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi84Zjlm Njc3NS1kNDQ1LTRiZTctOTM5OC0xY2JiZWFjYjk3MDcvNDcwMWRmMjQtZDdiZi0z M2E4LWFhNjItYjkxMjcxMDI3MzY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOGY5ZjY3NzUtZDQ0NS00YmU3LTkz OTgtMWNiYmVhY2I5NzA3LzhmOWY2Nzc1LWQ0NDUtNGJlNy05Mzk4LTFjYmJlYWNi OTcwNy5jcmwwHwYDVR0jBBgwFoAU4PWKadjMFHV1bA4wXEdutJ0Z9BIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi84ZjlmNjc3NS1kNDQ1LTRiZTctOTM5OC0xY2Ji ZWFjYjk3MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5lIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMrTaV7+U8lXt8GuV9Amea+m9o+Y/Gu/4x9fP9KfZQwjE7hXigcQWmYO dPARJWYBNFAAePm9N5nHfcetRA/7DbYt1EPqoxwVvF4UFKbikiwSsvDAaoEmBj2b 8DFwHmZ1xGJ5Wjt4bO9l+yWtz3yhXGo9xCXcfIxIFN0UEdevd9QzI1dYwR0NKGN4 EOcXAZljbK0mQdDjuWuFQBcinupiqqzgxwbIX4/JJKvtetx6P0k37eAtUlH5+oEW BQsIraqaf4k6k0SbS2NnaV3VJSeZqPAB3ltKSugK0RPaZ4r/lxoxy/OxZumDgjLp FZVtrdvNdUcvLcvnDDIl9vxxjXhlO9E= -----END CERTIFICATE-----Generated at Tue Sep 22 10:41:51 2026 by rpki-client