$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/4504c39c-22d1-3edb-b2aa-7cf0cf6c6a22.roa File: 4504c39c-22d1-3edb-b2aa-7cf0cf6c6a22.roa (raw, json) Hash identifier: 1BGMC6/SjORD5hTYmSPaNSNxPfyOUo039Fhevz6Pl8M= Subject key identifier: 73:2C:7C:0A:F3:66:80:69:8C:55:BE:3B:5E:97:D4:03:0D:EE:95:BA Certificate issuer: /CN=5c19a246-d9fa-481a-a4d7-010af8c132b3 Certificate serial: 010D0C9F4328584F1E2CF8D375EAF3E0683B3A00 Authority key identifier: 18:19:AB:D0:11:8B:FC:C2:BE:FE:5D:73:73:40:43:BA:E5:93:AE:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/4504c39c-22d1-3edb-b2aa-7cf0cf6c6a22.roa Signing time: Wed 09 Sep 2026 13:00:11 +0000 ROA not before: Wed 09 Sep 2026 13:00:11 +0000 ROA not after: Tue 08 Dec 2026 14:00:11 +0000 asID: 26548 IP address blocks: 23.156.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:1e:2c:f8:d3:75:ea:f3:e0:68:3b:3a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c19a246-d9fa-481a-a4d7-010af8c132b3 Validity Not Before: Sep 9 13:00:11 2026 GMT Not After : Dec 8 14:00:11 2026 GMT Subject: CN=cef5ca54-e3a3-4814-ae90-4262f36d91cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:15:63:2f:85:a2:22:e7:13:a4:d6:50:00:38: 43:e8:b8:d7:99:36:6c:63:0e:71:9a:9a:b5:f9:ad: 75:16:fd:54:f9:71:5a:e5:07:f7:0a:9d:89:c7:ba: 03:3d:fd:d5:74:be:22:e6:d0:7f:3d:ab:1b:06:91: fd:93:dc:b5:f9:e1:78:be:f6:a3:e2:0f:c9:2e:1f: 1e:35:ac:00:a2:3e:3a:6e:d2:e8:47:32:50:7c:5e: be:e8:c6:93:ed:87:c4:79:bb:59:b0:67:c2:b4:e4: f1:f0:27:9a:3e:cb:9d:11:19:49:2d:bc:18:be:93: 4b:81:72:63:28:f0:d1:e3:d1:d9:58:2d:ce:92:e0: 23:9d:b6:de:5f:96:85:1a:3b:c9:46:4d:73:0c:91: 1d:df:26:8e:09:b5:fb:0b:d0:71:36:b4:96:1c:14: 5c:39:5b:be:1b:a8:ed:6d:19:64:8d:1d:09:74:f2: ad:31:d7:f6:fb:9b:ca:e2:ef:09:92:56:b7:5d:14: f3:4a:ca:36:5c:89:7f:25:58:12:85:2e:a3:7d:8f: 44:68:e8:f8:66:a2:15:15:e3:e3:97:93:81:99:9d: 9b:22:bc:e4:13:aa:a7:2f:19:28:d5:fe:0a:e6:a2: 55:24:c4:f4:90:b5:82:af:27:69:57:22:ea:ef:77: f1:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:2C:7C:0A:F3:66:80:69:8C:55:BE:3B:5E:97:D4:03:0D:EE:95:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/4504c39c-22d1-3edb-b2aa-7cf0cf6c6a22.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3/5c19a246-d9fa-481a-a4d7-010af8c132b3.crl X509v3 Authority Key Identifier: keyid:18:19:AB:D0:11:8B:FC:C2:BE:FE:5D:73:73:40:43:BA:E5:93:AE:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5c19a246-d9fa-481a-a4d7-010af8c132b3.cer sbgp-ipAddrBlock: critical IPv4: 23.156.136.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:c0:65:10:50:02:d1:38:bf:8e:33:a4:c3:77:49:fb:12:ba: bb:7d:78:81:bf:ed:23:7a:54:96:df:d3:d3:a8:1f:3e:ae:b7: 0e:34:f9:18:36:9a:31:4d:ad:28:0c:89:6e:5f:c7:be:0e:40: 45:08:67:cd:e5:4d:1f:2d:ea:54:3e:81:c3:5a:51:eb:41:4b: 52:d0:45:ae:50:09:bc:5b:a9:18:f7:dc:7c:45:e6:17:be:d0: b4:c8:8a:22:ee:52:5b:ca:e6:7d:f5:eb:5a:76:be:34:ec:00: 18:31:6b:01:83:20:2d:43:e0:f3:d5:79:70:6f:15:cf:44:c5: 4a:14:ac:4e:60:67:00:2f:bf:b2:da:4b:55:b4:3e:ae:40:4c: 4f:db:d8:24:a2:eb:55:39:bb:2a:07:42:27:ba:f4:2e:50:b6: ad:f7:cc:07:e6:02:62:d5:9f:36:b0:cf:59:a7:2c:27:c2:84: ae:70:34:69:dc:4f:35:d2:32:15:c9:b0:fc:09:8a:bc:63:fa: 6f:f6:60:b4:42:84:3f:6b:51:df:b5:39:3d:a6:76:f6:f9:6e: f0:21:d2:53:cd:cc:e2:23:bd:31:25:86:54:64:ad:7d:8a:7b: ac:46:ca:71:61:f0:2e:e0:0a:ac:31:06:57:eb:2f:c4:f8:7e: 08:d6:1b:2e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8eLPjTderz4Gg7OgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWMxOWEyNDYtZDlmYS00ODFhLWE0ZDctMDEwYWY4YzEz MmIzMB4XDTI2MDkwOTEzMDAxMVoXDTI2MTIwODE0MDAxMVowLzEtMCsGA1UEAxMk Y2VmNWNhNTQtZTNhMy00ODE0LWFlOTAtNDI2MmYzNmQ5MWNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwxVjL4WiIucTpNZQADhD6LjXmTZsYw5xmpq1 +a11Fv1U+XFa5Qf3Cp2Jx7oDPf3VdL4i5tB/PasbBpH9k9y1+eF4vvaj4g/JLh8e NawAoj46btLoRzJQfF6+6MaT7YfEebtZsGfCtOTx8CeaPsudERlJLbwYvpNLgXJj KPDR49HZWC3OkuAjnbbeX5aFGjvJRk1zDJEd3yaOCbX7C9BxNrSWHBRcOVu+G6jt bRlkjR0JdPKtMdf2+5vK4u8Jkla3XRTzSso2XIl/JVgShS6jfY9EaOj4ZqIVFePj l5OBmZ2bIrzkE6qnLxko1f4K5qJVJMT0kLWCrydpVyLq73fxAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHMsfArzZoBpjFW+O16X1AMN7pW6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS81YzE5 YTI0Ni1kOWZhLTQ4MWEtYTRkNy0wMTBhZjhjMTMyYjMvNDUwNGMzOWMtMjJkMS0z ZWRiLWIyYWEtN2NmMGNmNmM2YTIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNWMxOWEyNDYtZDlmYS00ODFhLWE0 ZDctMDEwYWY4YzEzMmIzLzVjMTlhMjQ2LWQ5ZmEtNDgxYS1hNGQ3LTAxMGFmOGMx MzJiMy5jcmwwHwYDVR0jBBgwFoAUGBmr0BGL/MK+/l1zc0BDuuWTrnAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS81YzE5YTI0Ni1kOWZhLTQ4MWEtYTRkNy0wMTBh ZjhjMTMyYjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5yIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFHAZRBQAtE4v44zpMN3SfsSurt9eIG/7SN6VJbf09OoHz6utw40+Rg2 mjFNrSgMiW5fx74OQEUIZ83lTR8t6lQ+gcNaUetBS1LQRa5QCbxbqRj33HxF5he+ 0LTIiiLuUlvK5n3161p2vjTsABgxawGDIC1D4PPVeXBvFc9ExUoUrE5gZwAvv7La S1W0Pq5ATE/b2CSi61U5uyoHQie69C5Qtq33zAfmAmLVnzawz1mnLCfChK5wNGnc TzXSMhXJsPwJirxj+m/2YLRChD9rUd+1OT2mdvb5bvAh0lPNzOIjvTElhlRkrX2K e6xGynFh8C7gCqwxBlfrL8T4fgjWGy4= -----END CERTIFICATE-----Generated at Mon Sep 21 13:54:21 2026 by rpki-client