$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f/04579b92-c2ba-3e85-be33-ca6770cc41b1.roa File: 04579b92-c2ba-3e85-be33-ca6770cc41b1.roa (raw, json) Hash identifier: L8Ai+IE6BdPrQx+xa2XNN9Y7QJaWqhLl458VP072eW0= Subject key identifier: 5E:57:D3:FA:60:57:43:AB:03:4B:35:53:7A:B0:D8:9C:15:F4:F4:67 Certificate issuer: /CN=1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f Certificate serial: 010D0C9F4328584F2EED192C541117DB7AF08F20 Authority key identifier: 3C:C3:16:47:8C:B1:26:ED:0F:A9:63:29:A2:01:6E:85:BA:90:9A:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f/04579b92-c2ba-3e85-be33-ca6770cc41b1.roa Signing time: Tue 15 Sep 2026 13:00:12 +0000 ROA not before: Tue 15 Sep 2026 13:00:12 +0000 ROA not after: Mon 14 Dec 2026 14:00:12 +0000 asID: 211392 IP address blocks: 23.145.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:2e:ed:19:2c:54:11:17:db:7a:f0:8f:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f Validity Not Before: Sep 15 13:00:12 2026 GMT Not After : Dec 14 14:00:12 2026 GMT Subject: CN=488e04e2-a077-47b7-b919-86500262f0de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:18:ae:1e:d0:4d:d0:2e:12:77:28:85:dc:7a: d9:63:73:0c:14:1c:6c:e3:a2:02:eb:e2:03:9b:d2: 4c:79:7a:8f:43:c4:db:26:49:2f:8b:7b:95:a6:81: 68:6b:42:59:6e:32:c3:6e:55:c7:41:33:2f:39:12: 75:45:09:4d:3e:b2:3f:36:19:e9:35:d4:4f:bf:33: cd:f2:b6:41:d4:0c:53:ba:07:7f:d6:ee:ec:f4:6d: e6:f7:99:35:fb:48:9e:52:c9:58:49:bc:4f:f6:04: 28:00:0d:ae:65:c8:18:6e:45:b4:0f:87:f4:9f:d8: f5:22:6f:43:f0:c9:4e:f0:84:5f:d5:57:36:bf:2b: 89:f3:85:d3:db:46:15:ab:54:a9:b1:06:bb:ed:5c: 4c:08:13:6e:ba:e8:72:04:31:90:b0:58:28:25:e6: 13:5a:a8:12:ec:6d:4f:74:e1:25:56:f8:02:8d:2d: 00:f7:ab:1b:45:d2:c5:ea:6d:54:18:52:2a:f7:aa: 78:15:36:cb:39:cd:f5:e9:66:dc:07:b8:ac:c8:eb: 9c:a4:03:63:aa:60:ae:b7:03:65:8a:5c:e0:65:66: 64:dc:6a:57:a3:61:74:b7:0f:cf:95:81:80:36:90: fa:73:be:bf:7b:5b:78:9b:de:07:d7:86:56:c9:1c: 01:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:57:D3:FA:60:57:43:AB:03:4B:35:53:7A:B0:D8:9C:15:F4:F4:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f/04579b92-c2ba-3e85-be33-ca6770cc41b1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f.crl X509v3 Authority Key Identifier: keyid:3C:C3:16:47:8C:B1:26:ED:0F:A9:63:29:A2:01:6E:85:BA:90:9A:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f.cer sbgp-ipAddrBlock: critical IPv4: 23.145.136.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:4b:ed:3a:9b:78:67:f4:2d:a3:f1:49:47:da:82:5c:24:51: 25:7c:e1:da:28:b4:df:b2:a1:7d:28:cf:51:5c:ec:97:b5:16: bd:ef:21:d6:ef:fc:9d:3d:b6:bb:b5:40:65:1b:d8:2d:9a:c3: e7:22:84:20:4c:d0:28:7a:c7:07:4a:1b:f6:75:0d:a4:c2:0e: 4d:70:4b:91:46:fa:77:b8:a2:85:fa:6e:3b:8c:7e:d1:39:c5: ae:03:47:cf:8d:0d:81:79:4e:a7:0b:7a:03:cc:f7:74:34:5a: 3b:96:28:35:55:02:27:07:8c:58:11:3a:8e:0d:54:7e:24:ed: ac:02:f3:07:85:5f:23:43:b4:9c:40:17:2d:5b:a4:13:0d:01: 00:af:aa:d6:38:36:49:f3:3f:cf:e6:34:b4:ed:53:35:94:08: b5:76:35:a8:08:6e:79:a8:48:d9:ae:24:0d:5e:5d:a6:40:73: 75:40:ed:6d:77:10:04:c5:6f:0d:e0:5e:45:7c:20:b9:b4:97: 80:79:e3:5d:09:09:e9:bb:3d:2e:d5:07:13:29:d0:a9:61:4b: 7f:07:91:48:91:14:ba:cc:36:cc:52:df:90:ea:06:fc:e9:53: 17:40:3b:fc:84:65:a2:bf:48:0f:85:81:dd:59:34:6e:28:7a: 95:13:29:4e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8u7RksVBEX23rwjyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWI5YmYyZjQtYzgzMS00ZjFlLWEyZDUtZDdmYzQwNTM1 YzhmMB4XDTI2MDkxNTEzMDAxMloXDTI2MTIxNDE0MDAxMlowLzEtMCsGA1UEAxMk NDg4ZTA0ZTItYTA3Ny00N2I3LWI5MTktODY1MDAyNjJmMGRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsBiuHtBN0C4SdyiF3HrZY3MMFBxs46IC6+ID m9JMeXqPQ8TbJkkvi3uVpoFoa0JZbjLDblXHQTMvORJ1RQlNPrI/NhnpNdRPvzPN 8rZB1AxTugd/1u7s9G3m95k1+0ieUslYSbxP9gQoAA2uZcgYbkW0D4f0n9j1Im9D 8MlO8IRf1Vc2vyuJ84XT20YVq1SpsQa77VxMCBNuuuhyBDGQsFgoJeYTWqgS7G1P dOElVvgCjS0A96sbRdLF6m1UGFIq96p4FTbLOc316WbcB7isyOucpANjqmCutwNl ilzgZWZk3GpXo2F0tw/PlYGANpD6c76/e1t4m94H14ZWyRwBFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF5X0/pgV0OrA0s1U3qw2JwV9PRnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8xYjli ZjJmNC1jODMxLTRmMWUtYTJkNS1kN2ZjNDA1MzVjOGYvMDQ1NzliOTItYzJiYS0z ZTg1LWJlMzMtY2E2NzcwY2M0MWIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMWI5YmYyZjQtYzgzMS00ZjFlLWEy ZDUtZDdmYzQwNTM1YzhmLzFiOWJmMmY0LWM4MzEtNGYxZS1hMmQ1LWQ3ZmM0MDUz NWM4Zi5jcmwwHwYDVR0jBBgwFoAUPMMWR4yxJu0PqWMpogFuhbqQmokwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8xYjliZjJmNC1jODMxLTRmMWUtYTJkNS1kN2Zj NDA1MzVjOGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5GIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFlL7TqbeGf0LaPxSUfaglwkUSV84dootN+yoX0oz1Fc7Je1Fr3vIdbv /J09tru1QGUb2C2aw+cihCBM0Ch6xwdKG/Z1DaTCDk1wS5FG+ne4ooX6bjuMftE5 xa4DR8+NDYF5TqcLegPM93Q0WjuWKDVVAicHjFgROo4NVH4k7awC8weFXyNDtJxA Fy1bpBMNAQCvqtY4NknzP8/mNLTtUzWUCLV2NagIbnmoSNmuJA1eXaZAc3VA7W13 EATFbw3gXkV8ILm0l4B5410JCem7PS7VBxMp0KlhS38HkUiRFLrMNsxS35DqBvzp UxdAO/yEZaK/SA+Fgd1ZNG4oepUTKU4= -----END CERTIFICATE-----Generated at Sun Sep 20 21:29:05 2026 by rpki-client