$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9dfbf5d7-ddfe-4e2e-8a95-68ded6498913/c293780d-5803-3e0e-a47f-235faa11c550.roa File: c293780d-5803-3e0e-a47f-235faa11c550.roa (raw, json) Hash identifier: 0/PnodFyCk01H8JgngIq2P3RAmfgWA1K4LJRj9f5lqs= Subject key identifier: BA:28:34:8B:87:E7:81:BF:30:44:D5:C3:97:F1:CC:84:8D:76:C2:D1 Certificate issuer: /CN=9dfbf5d7-ddfe-4e2e-8a95-68ded6498913 Certificate serial: 010D0C9F4328584EE921EC6616D3ABAF5ECA3D50 Authority key identifier: 76:08:53:D4:B8:A9:B0:34:F2:33:1E:68:8B:DC:95:30:DA:0D:06:95 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9dfbf5d7-ddfe-4e2e-8a95-68ded6498913.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9dfbf5d7-ddfe-4e2e-8a95-68ded6498913/c293780d-5803-3e0e-a47f-235faa11c550.roa Signing time: Fri 21 Aug 2026 13:00:11 +0000 ROA not before: Fri 21 Aug 2026 13:00:11 +0000 ROA not after: Thu 19 Nov 2026 14:00:11 +0000 asID: 2914 IP address blocks: 23.133.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9dfbf5d7-ddfe-4e2e-8a95-68ded6498913/9dfbf5d7-ddfe-4e2e-8a95-68ded6498913.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9dfbf5d7-ddfe-4e2e-8a95-68ded6498913/9dfbf5d7-ddfe-4e2e-8a95-68ded6498913.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9dfbf5d7-ddfe-4e2e-8a95-68ded6498913.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e9:21:ec:66:16:d3:ab:af:5e:ca:3d:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9dfbf5d7-ddfe-4e2e-8a95-68ded6498913 Validity Not Before: Aug 21 13:00:11 2026 GMT Not After : Nov 19 14:00:11 2026 GMT Subject: CN=291fe1c9-9635-4276-8c05-d1d6de69bd90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:7b:c1:81:45:2b:1e:82:cd:8e:57:83:db:ed: 95:03:2b:c1:87:b2:7e:48:8c:10:3e:ed:d3:99:25: 7d:6b:f5:ac:dc:c1:f5:ce:c2:da:77:4e:d6:a6:be: d6:cf:93:2a:2b:88:11:36:15:10:39:84:72:91:bd: f9:d3:aa:b1:6b:09:65:40:6d:53:09:64:93:e8:aa: 7a:73:43:1c:7e:f3:7b:d8:9d:6a:73:f6:5f:8d:40: 04:bb:9d:04:16:e7:99:55:e4:d4:37:b4:ff:71:f4: fc:af:43:07:23:b5:ee:9c:84:a7:fc:cb:66:0c:50: 59:94:e4:9b:b9:08:09:81:26:e5:a7:c1:66:c5:a8: 81:66:eb:56:21:e3:9f:c6:8e:c7:b8:08:d5:2b:79: 10:5e:97:16:df:e1:cc:77:3a:ee:63:4e:09:68:55: 73:a4:c8:3a:a6:f3:ea:79:6b:f5:36:82:05:38:a0: 00:72:44:4f:b5:f7:63:f9:85:bc:92:57:24:47:13: 9c:99:4d:01:f3:d4:3b:bd:6c:d4:f6:d2:93:7f:c1: 0a:0c:13:5e:20:be:1f:f6:51:5b:63:25:a3:23:85: eb:5c:ab:d4:50:c2:8c:9d:a6:ea:05:3c:35:33:af: 3a:7b:76:64:05:d9:98:97:37:40:bf:e7:13:34:88: 5f:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:28:34:8B:87:E7:81:BF:30:44:D5:C3:97:F1:CC:84:8D:76:C2:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9dfbf5d7-ddfe-4e2e-8a95-68ded6498913/c293780d-5803-3e0e-a47f-235faa11c550.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9dfbf5d7-ddfe-4e2e-8a95-68ded6498913/9dfbf5d7-ddfe-4e2e-8a95-68ded6498913.crl X509v3 Authority Key Identifier: keyid:76:08:53:D4:B8:A9:B0:34:F2:33:1E:68:8B:DC:95:30:DA:0D:06:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9dfbf5d7-ddfe-4e2e-8a95-68ded6498913.cer sbgp-ipAddrBlock: critical IPv4: 23.133.148.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:e8:04:c6:d3:2b:17:3e:68:b1:d3:bb:a8:7f:e4:bb:98:fa: 56:98:48:10:90:e4:43:d3:14:7a:21:9a:e5:31:f2:bd:2c:e1: 50:5a:77:46:92:fc:5a:37:f3:27:db:69:ba:e4:ec:53:7e:4e: ee:43:8d:30:cc:97:2e:31:c8:96:7b:44:7e:e5:18:9d:44:f7: 9e:76:5e:56:b3:de:da:24:bc:13:aa:56:1e:ce:83:9d:56:67: f0:21:7a:8e:bf:85:48:78:44:1a:52:6c:ce:4d:6a:6e:ac:bc: 3b:f0:d9:77:2f:bc:4c:77:1b:b6:ba:49:97:31:a4:48:13:0b: 06:57:6e:02:f4:ca:69:a8:77:7d:38:b0:7b:8f:1c:cc:f2:25: fb:96:97:cf:be:5d:dd:5d:10:4e:15:02:e0:dc:54:9e:98:12: c2:a0:53:08:db:42:d2:5b:e2:62:4c:2a:6a:66:7c:fa:c2:51: 02:16:44:36:fe:71:84:0e:88:9a:24:88:43:44:94:83:a8:3c: 83:38:e0:0c:f0:38:10:8a:11:3e:a0:01:6f:5f:4f:25:2e:d6: cb:3a:2b:c5:a1:ff:e3:37:3f:2f:be:fe:da:ad:be:72:08:c2: 5f:c0:3f:42:0d:41:95:7f:8f:7d:da:3f:e2:72:f7:d1:86:e9: 66:53:30:f5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7pIexmFtOrr17KPVAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWRmYmY1ZDctZGRmZS00ZTJlLThhOTUtNjhkZWQ2NDk4 OTEzMB4XDTI2MDgyMTEzMDAxMVoXDTI2MTExOTE0MDAxMVowLzEtMCsGA1UEAxMk MjkxZmUxYzktOTYzNS00Mjc2LThjMDUtZDFkNmRlNjliZDkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtXvBgUUrHoLNjleD2+2VAyvBh7J+SIwQPu3T mSV9a/Ws3MH1zsLad07Wpr7Wz5MqK4gRNhUQOYRykb3506qxawllQG1TCWST6Kp6 c0McfvN72J1qc/ZfjUAEu50EFueZVeTUN7T/cfT8r0MHI7XunISn/MtmDFBZlOSb uQgJgSblp8FmxaiBZutWIeOfxo7HuAjVK3kQXpcW3+HMdzruY04JaFVzpMg6pvPq eWv1NoIFOKAAckRPtfdj+YW8klckRxOcmU0B89Q7vWzU9tKTf8EKDBNeIL4f9lFb YyWjI4XrXKvUUMKMnabqBTw1M686e3ZkBdmYlzdAv+cTNIhfewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLooNIuH54G/METVw5fxzISNdsLRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy85ZGZi ZjVkNy1kZGZlLTRlMmUtOGE5NS02OGRlZDY0OTg5MTMvYzI5Mzc4MGQtNTgwMy0z ZTBlLWE0N2YtMjM1ZmFhMTFjNTUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvOWRmYmY1ZDctZGRmZS00ZTJlLThh OTUtNjhkZWQ2NDk4OTEzLzlkZmJmNWQ3LWRkZmUtNGUyZS04YTk1LTY4ZGVkNjQ5 ODkxMy5jcmwwHwYDVR0jBBgwFoAUdghT1LipsDTyMx5oi9yVMNoNBpUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy85ZGZiZjVkNy1kZGZlLTRlMmUtOGE5NS02OGRl ZDY0OTg5MTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4WUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIzoBMbTKxc+aLHTu6h/5LuY+laYSBCQ5EPTFHohmuUx8r0s4VBad0aS /Fo38yfbabrk7FN+Tu5DjTDMly4xyJZ7RH7lGJ1E9552Xlaz3tokvBOqVh7Og51W Z/Aheo6/hUh4RBpSbM5Nam6svDvw2XcvvEx3G7a6SZcxpEgTCwZXbgL0ymmod304 sHuPHMzyJfuWl8++Xd1dEE4VAuDcVJ6YEsKgUwjbQtJb4mJMKmpmfPrCUQIWRDb+ cYQOiJokiENElIOoPIM44AzwOBCKET6gAW9fTyUu1ss6K8Wh/+M3Py++/tqtvnII wl/AP0INQZV/j33aP+Jy99GG6WZTMPU= -----END CERTIFICATE-----Generated at Fri Sep 25 20:54:18 2026 by rpki-client