$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4f9b83fa-37aa-4ca8-b07c-5d7a613af09b/2d17cd4f-6b8c-3bc6-a816-a2f2add58785.roa File: 2d17cd4f-6b8c-3bc6-a816-a2f2add58785.roa (raw, json) Hash identifier: ad0x5Ib4FNdh7PD7nrQXz0PAvsl1n68c+cP9y8qz9y8= Subject key identifier: 82:69:3D:BB:E3:5E:31:2D:62:75:23:0F:D0:7A:DA:96:59:92:01:7F Certificate issuer: /CN=4f9b83fa-37aa-4ca8-b07c-5d7a613af09b Certificate serial: 010D0C9F4328584F2EED14EF0BD9E09A78F67E00 Authority key identifier: 96:E7:5C:DB:BD:E9:BE:F2:79:CF:D5:33:3D:69:87:EE:15:7B:01:FA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4f9b83fa-37aa-4ca8-b07c-5d7a613af09b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4f9b83fa-37aa-4ca8-b07c-5d7a613af09b/2d17cd4f-6b8c-3bc6-a816-a2f2add58785.roa Signing time: Tue 15 Sep 2026 13:00:12 +0000 ROA not before: Tue 15 Sep 2026 13:00:12 +0000 ROA not after: Mon 14 Dec 2026 14:00:12 +0000 asID: 208504 IP address blocks: 23.154.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4f9b83fa-37aa-4ca8-b07c-5d7a613af09b/4f9b83fa-37aa-4ca8-b07c-5d7a613af09b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4f9b83fa-37aa-4ca8-b07c-5d7a613af09b/4f9b83fa-37aa-4ca8-b07c-5d7a613af09b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4f9b83fa-37aa-4ca8-b07c-5d7a613af09b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Sep 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:2e:ed:14:ef:0b:d9:e0:9a:78:f6:7e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f9b83fa-37aa-4ca8-b07c-5d7a613af09b Validity Not Before: Sep 15 13:00:12 2026 GMT Not After : Dec 14 14:00:12 2026 GMT Subject: CN=b0759b03-f213-41f2-afae-da845343fdff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:6d:e8:cf:68:fc:25:ae:ca:ad:7a:2c:0d:6e: 90:58:05:6b:82:e0:c3:04:92:4a:0c:a4:69:c8:e4: 14:cc:e5:1e:79:dc:e1:4f:ee:21:06:c5:75:a7:ec: 3d:9e:6e:98:f9:05:7c:e5:a0:f8:92:df:52:2d:1b: 0d:c4:38:98:13:87:3c:2e:48:d8:aa:ae:06:9b:e3: 5b:12:7c:23:ca:f6:cb:48:c0:b8:27:6a:a9:12:cc: 5f:df:8a:0c:af:e6:5d:f9:43:e4:11:5c:6e:21:32: e8:08:ee:f8:b0:64:4a:e4:c6:a9:bd:aa:89:a1:f5: f4:64:1f:d5:94:df:47:15:2a:36:55:74:44:70:27: 05:f3:c0:9a:79:88:71:dd:46:80:fa:00:e5:6f:da: 7e:65:5a:04:93:b7:0c:bc:30:03:8e:d6:32:31:93: 9f:b8:6b:1f:94:02:40:19:5b:ad:e5:52:30:7e:e5: 84:2d:60:eb:58:7e:da:d9:5a:2a:e2:21:a4:0e:d6: c4:a6:38:01:0f:16:61:5c:c5:11:7a:f2:80:d2:f3: 32:fd:c3:6a:35:39:19:0c:a1:3f:55:ae:d0:90:1e: 75:7b:56:62:6e:55:6a:f7:84:57:f2:32:ff:d4:92: b1:c1:c5:2b:12:3d:33:06:03:de:62:ba:19:24:eb: 9d:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:69:3D:BB:E3:5E:31:2D:62:75:23:0F:D0:7A:DA:96:59:92:01:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4f9b83fa-37aa-4ca8-b07c-5d7a613af09b/2d17cd4f-6b8c-3bc6-a816-a2f2add58785.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4f9b83fa-37aa-4ca8-b07c-5d7a613af09b/4f9b83fa-37aa-4ca8-b07c-5d7a613af09b.crl X509v3 Authority Key Identifier: keyid:96:E7:5C:DB:BD:E9:BE:F2:79:CF:D5:33:3D:69:87:EE:15:7B:01:FA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4f9b83fa-37aa-4ca8-b07c-5d7a613af09b.cer sbgp-ipAddrBlock: critical IPv4: 23.154.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:b1:53:ec:79:55:fc:2f:f9:2d:07:7a:8e:1a:40:19:24:8f: 36:df:7e:c9:b3:aa:9a:bf:7e:7d:68:b3:8c:5e:80:30:4e:7d: e2:90:f1:9d:55:d2:8b:56:5d:bc:e5:9f:18:86:a6:5b:e0:a6: 73:c7:71:9c:a4:bd:c5:36:6e:61:8f:93:67:84:d1:8e:b8:d5: 0b:62:8a:b9:b1:2c:0b:18:c3:14:08:46:7c:0f:58:de:a9:05: 55:ab:48:84:94:9d:b9:d6:82:93:00:69:7b:0e:64:50:7c:bd: ec:64:72:ba:14:82:5f:d9:cf:0c:d3:f0:04:cd:32:a5:6e:c8: c5:1c:ee:c1:fb:06:27:18:a8:b5:d0:a3:e4:80:4b:6b:d9:47: 7f:f1:a4:22:e3:e2:55:10:c7:a5:cd:da:42:a8:41:f7:12:69: 8f:9c:06:38:a6:ec:18:80:da:29:5b:8b:c9:6d:ca:c8:40:e5: 56:d8:ed:dd:a1:a2:88:30:ad:81:62:ad:b6:df:16:73:c5:99: 99:86:10:78:53:c2:34:d8:3b:f4:52:c4:48:34:26:52:e3:52: 31:3e:48:e9:4f:74:e5:16:0d:0d:71:ce:c8:f2:88:5a:a5:da: ca:c8:75:fb:40:74:43:ca:6f:f8:e4:cd:6a:cf:ee:9b:8f:20: d3:36:09:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8u7RTvC9ngmnj2fgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGY5YjgzZmEtMzdhYS00Y2E4LWIwN2MtNWQ3YTYxM2Fm MDliMB4XDTI2MDkxNTEzMDAxMloXDTI2MTIxNDE0MDAxMlowLzEtMCsGA1UEAxMk YjA3NTliMDMtZjIxMy00MWYyLWFmYWUtZGE4NDUzNDNmZGZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjW3oz2j8Ja7KrXosDW6QWAVrguDDBJJKDKRp yOQUzOUeedzhT+4hBsV1p+w9nm6Y+QV85aD4kt9SLRsNxDiYE4c8LkjYqq4Gm+Nb EnwjyvbLSMC4J2qpEsxf34oMr+Zd+UPkEVxuITLoCO74sGRK5MapvaqJofX0ZB/V lN9HFSo2VXREcCcF88CaeYhx3UaA+gDlb9p+ZVoEk7cMvDADjtYyMZOfuGsflAJA GVut5VIwfuWELWDrWH7a2Voq4iGkDtbEpjgBDxZhXMURevKA0vMy/cNqNTkZDKE/ Va7QkB51e1ZiblVq94RX8jL/1JKxwcUrEj0zBgPeYroZJOudAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIJpPbvjXjEtYnUjD9B62pZZkgF/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80Zjli ODNmYS0zN2FhLTRjYTgtYjA3Yy01ZDdhNjEzYWYwOWIvMmQxN2NkNGYtNmI4Yy0z YmM2LWE4MTYtYTJmMmFkZDU4Nzg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNGY5YjgzZmEtMzdhYS00Y2E4LWIw N2MtNWQ3YTYxM2FmMDliLzRmOWI4M2ZhLTM3YWEtNGNhOC1iMDdjLTVkN2E2MTNh ZjA5Yi5jcmwwHwYDVR0jBBgwFoAUludc273pvvJ5z9UzPWmH7hV7AfowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80ZjliODNmYS0zN2FhLTRjYTgtYjA3Yy01ZDdh NjEzYWYwOWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5qYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGWxU+x5Vfwv+S0Heo4aQBkkjzbffsmzqpq/fn1os4xegDBOfeKQ8Z1V 0otWXbzlnxiGplvgpnPHcZykvcU2bmGPk2eE0Y641QtiirmxLAsYwxQIRnwPWN6p BVWrSISUnbnWgpMAaXsOZFB8vexkcroUgl/ZzwzT8ATNMqVuyMUc7sH7BicYqLXQ o+SAS2vZR3/xpCLj4lUQx6XN2kKoQfcSaY+cBjim7BiA2ilbi8ltyshA5VbY7d2h oogwrYFirbbfFnPFmZmGEHhTwjTYO/RSxEg0JlLjUjE+SOlPdOUWDQ1xzsjyiFql 2srIdftAdEPKb/jkzWrP7puPINM2Cak= -----END CERTIFICATE-----Generated at Thu Sep 24 13:01:25 2026 by rpki-client