$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0a590b75-f68e-4b76-ac6c-42096c2d7738/d8b37bd7-5020-3ad9-a437-682d4f786e55.roa File: d8b37bd7-5020-3ad9-a437-682d4f786e55.roa (raw, json) Hash identifier: MCH+bRs6/x7OQ6CJQnK6mNHaEjYnp/vUSli63nyqf/s= Subject key identifier: EE:9B:1A:40:5C:C9:CB:C6:E7:B7:B6:B1:EF:58:4E:16:4F:4F:98:B7 Certificate issuer: /CN=0a590b75-f68e-4b76-ac6c-42096c2d7738 Certificate serial: 010D0C9F4328584F20F7D23DC094CA19F1FAA7A0 Authority key identifier: 5B:E3:C8:58:A6:2A:D0:83:69:51:79:6E:D1:EE:39:7D:0E:7F:14:8C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0a590b75-f68e-4b76-ac6c-42096c2d7738.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0a590b75-f68e-4b76-ac6c-42096c2d7738/d8b37bd7-5020-3ad9-a437-682d4f786e55.roa Signing time: Thu 10 Sep 2026 13:00:12 +0000 ROA not before: Thu 10 Sep 2026 13:00:12 +0000 ROA not after: Wed 09 Dec 2026 14:00:12 +0000 asID: 214483 IP address blocks: 23.149.116.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0a590b75-f68e-4b76-ac6c-42096c2d7738/0a590b75-f68e-4b76-ac6c-42096c2d7738.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0a590b75-f68e-4b76-ac6c-42096c2d7738/0a590b75-f68e-4b76-ac6c-42096c2d7738.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0a590b75-f68e-4b76-ac6c-42096c2d7738.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:20:f7:d2:3d:c0:94:ca:19:f1:fa:a7:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a590b75-f68e-4b76-ac6c-42096c2d7738 Validity Not Before: Sep 10 13:00:12 2026 GMT Not After : Dec 9 14:00:12 2026 GMT Subject: CN=87c8f6eb-b935-4cf6-a6f7-cbe9012662bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:d7:d4:d1:46:a3:60:d3:69:cd:78:80:c6:5c: 96:ac:96:d8:1f:62:44:94:5b:98:68:06:93:f0:f0: 65:f5:99:53:65:79:25:ad:e3:8f:b4:ec:c8:ef:e9: 6b:e8:c6:68:80:56:e9:16:04:eb:09:62:80:b0:2f: a9:cc:6d:06:b2:73:35:1a:d0:fa:b4:f6:c6:a8:40: 5f:cb:ec:95:8f:24:bd:6e:bf:5d:d5:50:31:be:5d: 0d:50:42:d0:22:60:09:75:5c:8e:5a:3a:83:c5:5f: cb:6d:d2:3c:a1:3c:2e:89:f1:95:06:16:dc:2b:fc: 46:9d:31:ff:cb:0f:53:5e:fd:6c:ef:d3:3f:80:4a: eb:8b:46:6a:01:fa:35:1e:32:6b:8f:d0:26:36:c3: 30:40:13:16:1f:9b:06:31:7e:f1:7b:5b:7c:f9:04: 85:b2:82:e8:ab:e2:35:34:03:ec:68:b8:bb:fe:01: 84:f5:ee:e2:d8:e5:55:82:50:80:0a:46:09:5b:99: e9:3c:ab:90:56:07:c5:a6:d8:cb:31:5f:24:01:27: 54:c2:e6:2c:2f:f1:87:bf:60:f5:b4:10:27:97:66: 75:80:2f:0f:48:7f:8c:ce:7d:0e:33:9b:91:c3:e8: 01:2c:41:5c:00:93:05:cb:c1:b6:f9:81:6b:78:14: c4:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:9B:1A:40:5C:C9:CB:C6:E7:B7:B6:B1:EF:58:4E:16:4F:4F:98:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0a590b75-f68e-4b76-ac6c-42096c2d7738/d8b37bd7-5020-3ad9-a437-682d4f786e55.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0a590b75-f68e-4b76-ac6c-42096c2d7738/0a590b75-f68e-4b76-ac6c-42096c2d7738.crl X509v3 Authority Key Identifier: keyid:5B:E3:C8:58:A6:2A:D0:83:69:51:79:6E:D1:EE:39:7D:0E:7F:14:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/0a590b75-f68e-4b76-ac6c-42096c2d7738.cer sbgp-ipAddrBlock: critical IPv4: 23.149.116.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:98:74:e7:bb:ba:ef:4a:8b:70:83:e9:b3:29:da:e2:7b:43: 22:82:a2:79:87:a7:ad:2d:4a:24:56:b7:79:72:56:d2:e6:f7: 0d:9d:81:c0:8a:c6:9c:4e:5b:6f:5a:59:ae:27:f9:f0:30:16: 6d:71:38:04:08:97:6d:de:f0:da:09:6b:97:2c:2c:09:fd:c7: 6b:53:df:fd:cc:35:bd:13:b6:cc:3e:a4:8a:57:0b:8c:65:7e: 9f:3a:ed:33:fd:0e:cc:cc:e2:81:93:8f:3f:97:92:91:0e:6c: b9:54:2b:89:24:96:72:fd:9d:eb:30:6e:21:d2:8c:f8:51:23: 5f:aa:bd:3d:e4:ca:cc:46:ee:18:fe:03:16:30:b5:e1:bb:e9: 36:7b:dd:36:6d:0c:b3:ff:e8:68:f9:04:e7:45:a0:ad:ad:7e: 05:d9:54:44:3d:bd:72:41:8b:33:15:d5:54:35:b8:3f:01:8f: 11:59:5a:64:fa:a2:5c:ed:24:28:1b:47:f4:d1:f1:a3:45:a7: aa:af:4b:7d:29:e2:df:a6:5e:00:58:4b:d0:f3:90:02:6a:f7: 4e:50:ba:cf:75:6d:4b:da:5b:8d:9f:7c:c1:22:65:bb:3e:8a: 54:a0:b5:63:e9:ec:2c:71:f5:2c:5f:e8:e5:3f:b3:00:9d:21: 61:75:30:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8g99I9wJTKGfH6p6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE1OTBiNzUtZjY4ZS00Yjc2LWFjNmMtNDIwOTZjMmQ3 NzM4MB4XDTI2MDkxMDEzMDAxMloXDTI2MTIwOTE0MDAxMlowLzEtMCsGA1UEAxMk ODdjOGY2ZWItYjkzNS00Y2Y2LWE2ZjctY2JlOTAxMjY2MmJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi9fU0UajYNNpzXiAxlyWrJbYH2JElFuYaAaT 8PBl9ZlTZXklreOPtOzI7+lr6MZogFbpFgTrCWKAsC+pzG0GsnM1GtD6tPbGqEBf y+yVjyS9br9d1VAxvl0NUELQImAJdVyOWjqDxV/LbdI8oTwuifGVBhbcK/xGnTH/ yw9TXv1s79M/gErri0ZqAfo1HjJrj9AmNsMwQBMWH5sGMX7xe1t8+QSFsoLoq+I1 NAPsaLi7/gGE9e7i2OVVglCACkYJW5npPKuQVgfFptjLMV8kASdUwuYsL/GHv2D1 tBAnl2Z1gC8PSH+Mzn0OM5uRw+gBLEFcAJMFy8G2+YFreBTExwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO6bGkBcycvG57e2se9YThZPT5i3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8wYTU5 MGI3NS1mNjhlLTRiNzYtYWM2Yy00MjA5NmMyZDc3MzgvZDhiMzdiZDctNTAyMC0z YWQ5LWE0MzctNjgyZDRmNzg2ZTU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvMGE1OTBiNzUtZjY4ZS00Yjc2LWFj NmMtNDIwOTZjMmQ3NzM4LzBhNTkwYjc1LWY2OGUtNGI3Ni1hYzZjLTQyMDk2YzJk NzczOC5jcmwwHwYDVR0jBBgwFoAUW+PIWKYq0INpUXlu0e45fQ5/FIwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi8wYTU5MGI3NS1mNjhlLTRiNzYtYWM2Yy00MjA5 NmMyZDc3MzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5V0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFaYdOe7uu9Ki3CD6bMp2uJ7QyKConmHp60tSiRWt3lyVtLm9w2dgcCK xpxOW29aWa4n+fAwFm1xOAQIl23e8NoJa5csLAn9x2tT3/3MNb0Ttsw+pIpXC4xl fp867TP9DszM4oGTjz+XkpEObLlUK4kklnL9neswbiHSjPhRI1+qvT3kysxG7hj+ AxYwteG76TZ73TZtDLP/6Gj5BOdFoK2tfgXZVEQ9vXJBizMV1VQ1uD8BjxFZWmT6 olztJCgbR/TR8aNFp6qvS30p4t+mXgBYS9DzkAJq905Qus91bUvaW42ffMEiZbs+ ilSgtWPp7Cxx9Sxf6OU/swCdIWF1MFI= -----END CERTIFICATE-----Generated at Sun Sep 20 18:37:58 2026 by rpki-client