$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9faf7a12-0176-44f9-9938-7bbccac3d238/37c64a1b-1bb8-3097-ac1e-2015293a739b.roa File: 37c64a1b-1bb8-3097-ac1e-2015293a739b.roa (raw, json) Hash identifier: 3pdapvwJTCUVRnp7e9Wd5SXC6DFPtpCI3VjWSt9TH2I= Subject key identifier: E6:40:24:AB:A3:FB:2B:1A:06:09:76:68:C5:24:5F:D5:A4:3A:E5:77 Certificate issuer: /CN=9faf7a12-0176-44f9-9938-7bbccac3d238 Certificate serial: 010D0C9F4328584F5EFDBBEAC2EA61A054C8FA00 Authority key identifier: 27:F5:34:9F:8C:B1:FD:33:07:55:93:76:CC:BC:45:98:C1:2E:B5:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9faf7a12-0176-44f9-9938-7bbccac3d238.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9faf7a12-0176-44f9-9938-7bbccac3d238/37c64a1b-1bb8-3097-ac1e-2015293a739b.roa Signing time: Fri 02 Oct 2026 18:12:41 +0000 ROA not before: Fri 02 Oct 2026 18:12:41 +0000 ROA not after: Mon 23 Nov 2026 01:46:54 +0000 asID: 21658 IP address blocks: 23.152.40.0/24 maxlen: 24 23.152.41.0/24 maxlen: 24 143.203.140.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9faf7a12-0176-44f9-9938-7bbccac3d238/9faf7a12-0176-44f9-9938-7bbccac3d238.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9faf7a12-0176-44f9-9938-7bbccac3d238/9faf7a12-0176-44f9-9938-7bbccac3d238.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9faf7a12-0176-44f9-9938-7bbccac3d238.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 Oct 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5e:fd:bb:ea:c2:ea:61:a0:54:c8:fa:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9faf7a12-0176-44f9-9938-7bbccac3d238 Validity Not Before: Oct 2 18:12:41 2026 GMT Not After : Nov 23 01:46:54 2026 GMT Subject: CN=9c944649-01ca-4e61-949d-0040583f8e30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:e2:87:54:e0:b9:6d:88:c4:ab:03:fc:a7:9a: 1e:78:e2:e7:a0:a9:02:04:7e:c2:aa:22:53:a5:f0: c3:20:16:19:41:d1:c6:59:d0:25:e7:4b:3b:52:68: 4a:9f:4f:ee:ec:d6:e3:8d:81:63:e4:07:aa:67:5e: c5:0d:07:94:7a:27:01:0e:64:c2:63:91:7a:69:98: 4d:3f:bf:96:ee:bd:94:53:dc:2a:c1:64:8f:33:7d: 18:8f:1f:2a:3f:06:a6:5a:67:41:71:c7:44:d8:76: 7d:10:88:79:39:4c:96:81:2a:85:1f:f3:69:fe:24: 88:cd:9a:33:e9:77:84:4e:f2:66:8a:0a:65:df:1e: f5:5e:83:46:65:af:5d:0f:b3:51:0e:d1:26:05:a1: 85:70:14:cd:fe:df:a8:65:33:5c:53:d2:85:f6:6e: 26:79:b3:df:5e:85:26:8d:fc:f1:3a:27:a0:27:32: 9e:14:4e:7d:8b:bb:c8:04:59:8b:d5:fe:91:24:1c: e1:ae:87:ac:32:62:37:69:67:af:ed:9b:52:2b:8d: 9a:f5:24:a3:5c:1a:30:28:9c:dc:5b:d6:45:9e:ab: cb:83:ac:0c:c9:3e:2d:65:7d:99:59:3b:45:74:b9: a2:8d:39:3b:75:44:49:fb:5d:99:42:80:86:3b:0d: 8e:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:40:24:AB:A3:FB:2B:1A:06:09:76:68:C5:24:5F:D5:A4:3A:E5:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9faf7a12-0176-44f9-9938-7bbccac3d238/37c64a1b-1bb8-3097-ac1e-2015293a739b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9faf7a12-0176-44f9-9938-7bbccac3d238/9faf7a12-0176-44f9-9938-7bbccac3d238.crl X509v3 Authority Key Identifier: keyid:27:F5:34:9F:8C:B1:FD:33:07:55:93:76:CC:BC:45:98:C1:2E:B5:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9faf7a12-0176-44f9-9938-7bbccac3d238.cer sbgp-ipAddrBlock: critical IPv4: 23.152.40.0/23 143.203.140.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:19:8a:cb:3a:6d:6c:51:17:67:4e:92:0c:7a:d0:a3:37:5b: 71:6a:d9:5c:a6:06:33:d5:2e:a4:6a:3f:57:a7:81:11:9d:0d: 68:c2:b3:db:b7:e2:fa:28:a7:a8:81:0d:a4:c7:04:5e:21:bf: ed:28:5d:0b:b0:d5:db:e8:b1:16:d0:d1:8e:66:a7:47:ae:8d: a4:9b:dc:4e:33:08:f8:4b:1a:31:d4:68:f9:23:4a:77:e4:28: 4f:15:4e:f8:63:b5:4d:24:58:5f:25:0c:34:0f:ef:ea:ee:69: 72:d9:c4:c2:ae:e7:ab:70:ce:28:c9:4c:89:3f:56:bc:b0:f2: da:01:4d:a7:33:2e:90:37:4d:ea:06:4b:1f:6e:06:6f:a4:4f: d5:66:63:b4:a7:93:d4:b0:ba:8a:2d:1e:b1:b3:f0:69:1d:4e: 70:fd:36:57:3c:21:85:c1:93:f8:f8:69:35:78:d2:0e:07:1c: 5d:22:6f:89:66:8e:b2:bf:99:66:4f:db:c5:7d:92:83:88:12: 50:82:6b:24:ec:07:46:95:8b:bd:32:76:2f:b5:a3:0e:11:5f: bb:8d:fc:7c:34:9c:06:47:94:5b:12:36:99:7a:75:1f:e6:42: 15:b9:3c:34:3d:4d:7d:0a:06:79:18:e1:d4:34:e7:05:14:0e: 33:18:63:88 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE9e/bvqwuphoFTI+gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWZhZjdhMTItMDE3Ni00NGY5LTk5MzgtN2JiY2NhYzNk MjM4MB4XDTI2MTAwMjE4MTI0MVoXDTI2MTEyMzAxNDY1NFowLzEtMCsGA1UEAxMk OWM5NDQ2NDktMDFjYS00ZTYxLTk0OWQtMDA0MDU4M2Y4ZTMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmOKHVOC5bYjEqwP8p5oeeOLnoKkCBH7CqiJT pfDDIBYZQdHGWdAl50s7UmhKn0/u7NbjjYFj5AeqZ17FDQeUeicBDmTCY5F6aZhN P7+W7r2UU9wqwWSPM30Yjx8qPwamWmdBccdE2HZ9EIh5OUyWgSqFH/Np/iSIzZoz 6XeETvJmigpl3x71XoNGZa9dD7NRDtEmBaGFcBTN/t+oZTNcU9KF9m4mebPfXoUm jfzxOiegJzKeFE59i7vIBFmL1f6RJBzhroesMmI3aWev7ZtSK42a9SSjXBowKJzc W9ZFnqvLg6wMyT4tZX2ZWTtFdLmijTk7dURJ+12ZQoCGOw2OOwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFOZAJKuj+ysaBgl2aMUkX9WkOuV3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85ZmFm N2ExMi0wMTc2LTQ0ZjktOTkzOC03YmJjY2FjM2QyMzgvMzdjNjRhMWItMWJiOC0z MDk3LWFjMWUtMjAxNTI5M2E3MzliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOWZhZjdhMTItMDE3Ni00NGY5LTk5 MzgtN2JiY2NhYzNkMjM4LzlmYWY3YTEyLTAxNzYtNDRmOS05OTM4LTdiYmNjYWMz ZDIzOC5jcmwwHwYDVR0jBBgwFoAUJ/U0n4yx/TMHVZN2zLxFmMEutRAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85ZmFmN2ExMi0wMTc2LTQ0ZjktOTkzOC03YmJj Y2FjM2QyMzguY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBF5goAwQC j8uMMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBABMZiss6bWxRF2dOkgx60KM3W3Fq2VymBjPVLqRqP1engRGd DWjCs9u34voop6iBDaTHBF4hv+0oXQuw1dvosRbQ0Y5mp0eujaSb3E4zCPhLGjHU aPkjSnfkKE8VTvhjtU0kWF8lDDQP7+ruaXLZxMKu56twzijJTIk/Vryw8toBTacz LpA3TeoGSx9uBm+kT9VmY7Snk9SwuootHrGz8GkdTnD9Nlc8IYXBk/j4aTV40g4H HF0ib4lmjrK/mWZP28V9koOIElCCayTsB0aVi70ydi+1ow4RX7uN/Hw0nAZHlFsS Npl6dR/mQhW5PDQ9TX0KBnkY4dQ05wUUDjMYY4g= -----END CERTIFICATE-----Generated at Sun Oct 4 21:11:53 2026 by rpki-client