$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ac21a503-f3b0-48ad-b925-50edbd303108/b1573bdb-5902-3ac6-9c53-69941ae15029.roa File: b1573bdb-5902-3ac6-9c53-69941ae15029.roa (raw, json) Hash identifier: tq7fgQlmdZgXHwarE9Fg4d9iobUeXC0n2DLKD+0cXJ8= Subject key identifier: 01:71:84:5D:7C:9A:D4:1B:1C:27:69:DE:24:8D:8C:42:C5:DB:F5:30 Certificate issuer: /CN=ac21a503-f3b0-48ad-b925-50edbd303108 Certificate serial: 010D0C9F4328584F4988A3F4B217428A5F7F1D60 Authority key identifier: DF:3F:C9:5D:28:C8:1E:12:25:AA:6C:A1:B6:E3:F8:3A:22:3B:B0:DF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ac21a503-f3b0-48ad-b925-50edbd303108.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ac21a503-f3b0-48ad-b925-50edbd303108/b1573bdb-5902-3ac6-9c53-69941ae15029.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 32561 IP address blocks: 23.153.104.0/24 maxlen: 32 2602:faa0::/40 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ac21a503-f3b0-48ad-b925-50edbd303108/ac21a503-f3b0-48ad-b925-50edbd303108.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ac21a503-f3b0-48ad-b925-50edbd303108/ac21a503-f3b0-48ad-b925-50edbd303108.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ac21a503-f3b0-48ad-b925-50edbd303108.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 16 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:88:a3:f4:b2:17:42:8a:5f:7f:1d:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac21a503-f3b0-48ad-b925-50edbd303108 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=5c6a7baf-054c-47ed-80b7-2e921d37be20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:0b:9d:63:6b:1d:68:97:34:48:d5:4a:7b:46: bb:22:c7:65:92:db:12:af:fc:55:1d:41:0b:ed:4d: e5:58:d9:06:b9:60:e5:d0:3e:6e:84:d7:03:40:bf: a1:82:48:c3:b7:4d:4b:12:a9:6c:ec:2e:8c:df:8c: d5:fb:09:b3:c0:b7:f7:76:1f:f1:34:71:d5:a9:fd: 32:0a:d1:49:84:ee:6f:60:8f:0f:27:aa:07:d0:c5: 19:2e:0c:d3:ef:69:41:63:32:a5:bb:9e:a8:da:e6: cc:ca:24:8e:c0:d5:f8:78:a8:e4:09:2a:9b:38:ec: 14:20:9a:5f:91:29:c6:9e:4b:0c:5c:af:1c:b4:37: d5:68:97:cd:45:69:4f:84:4a:04:99:d2:02:b3:1e: 43:bf:b2:4a:c0:a5:94:18:e6:0d:82:d8:aa:0f:80: 2b:27:17:5d:ea:e0:ee:67:8c:9e:2e:af:ca:05:9b: eb:03:b9:96:8b:0b:4f:50:cb:86:8a:a7:09:10:d1: b5:99:1b:7f:f4:58:fc:c2:c0:f4:ea:ed:57:47:2d: 47:36:4d:88:ce:3e:98:42:15:b4:66:34:8a:ef:97: ca:de:5c:e3:0a:79:8d:0e:2e:8a:e0:db:b4:2a:cb: d6:a3:a1:d0:cb:de:ea:9c:99:12:5d:bb:56:91:e2: 7e:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:71:84:5D:7C:9A:D4:1B:1C:27:69:DE:24:8D:8C:42:C5:DB:F5:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ac21a503-f3b0-48ad-b925-50edbd303108/b1573bdb-5902-3ac6-9c53-69941ae15029.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ac21a503-f3b0-48ad-b925-50edbd303108/ac21a503-f3b0-48ad-b925-50edbd303108.crl X509v3 Authority Key Identifier: keyid:DF:3F:C9:5D:28:C8:1E:12:25:AA:6C:A1:B6:E3:F8:3A:22:3B:B0:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/ac21a503-f3b0-48ad-b925-50edbd303108.cer sbgp-ipAddrBlock: critical IPv4: 23.153.104.0/24 IPv6: 2602:faa0::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:b4:5c:98:cf:7c:d3:c1:f6:77:30:e3:8f:a6:03:33:7f:5f: 8c:47:63:db:25:17:cc:d9:4e:4d:15:cd:2a:ea:ff:35:17:8d: 03:38:df:17:3d:1a:d1:21:50:6a:fa:bb:78:cf:ad:86:be:25: cd:6b:be:e8:9d:be:e6:f3:03:2d:a6:9f:04:69:94:56:ba:60: 8d:0b:44:36:2b:4b:69:0c:7a:fd:b6:69:33:6c:bc:a5:cc:82: 55:aa:f6:3e:48:86:f3:4b:08:1f:08:37:a3:56:28:b2:2c:12: d9:eb:df:44:f7:72:b1:af:e0:7d:35:42:48:eb:a1:58:8e:66: a0:25:2c:a8:2b:8b:da:ae:6c:36:86:a7:49:2a:63:78:30:ad: 1e:26:de:59:6b:6c:b0:e6:cc:2e:3d:fb:0a:d3:9f:16:c9:1c: a5:67:1d:53:0d:62:a9:a0:f4:48:7e:43:91:fc:88:6f:d5:e8: ba:e6:77:1c:8b:25:55:d5:6d:48:d5:f2:d0:8e:83:80:a8:65: a0:c6:06:e2:87:ee:99:c1:dc:cb:8a:04:6f:90:0b:35:e5:32: 2e:ff:8e:46:47:7f:5c:6a:d6:d1:e1:25:55:7c:5d:39:aa:9b: 23:42:c1:25:d6:48:7d:96:13:9c:d8:7e:e8:f7:3b:57:07:58: 32:63:80:d5 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE9JiKP0shdCil9/HWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWMyMWE1MDMtZjNiMC00OGFkLWI5MjUtNTBlZGJkMzAz MTA4MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NWM2YTdiYWYtMDU0Yy00N2VkLTgwYjctMmU5MjFkMzdiZTIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkAudY2sdaJc0SNVKe0a7IsdlktsSr/xVHUEL 7U3lWNkGuWDl0D5uhNcDQL+hgkjDt01LEqls7C6M34zV+wmzwLf3dh/xNHHVqf0y CtFJhO5vYI8PJ6oH0MUZLgzT72lBYzKlu56o2ubMyiSOwNX4eKjkCSqbOOwUIJpf kSnGnksMXK8ctDfVaJfNRWlPhEoEmdICsx5Dv7JKwKWUGOYNgtiqD4ArJxdd6uDu Z4yeLq/KBZvrA7mWiwtPUMuGiqcJENG1mRt/9Fj8wsD06u1XRy1HNk2Izj6YQhW0 ZjSK75fK3lzjCnmNDi6K4Nu0KsvWo6HQy97qnJkSXbtWkeJ+LQIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFAFxhF18mtQbHCdp3iSNjELF2/UwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9hYzIx YTUwMy1mM2IwLTQ4YWQtYjkyNS01MGVkYmQzMDMxMDgvYjE1NzNiZGItNTkwMi0z YWM2LTljNTMtNjk5NDFhZTE1MDI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYWMyMWE1MDMtZjNiMC00OGFkLWI5 MjUtNTBlZGJkMzAzMTA4L2FjMjFhNTAzLWYzYjAtNDhhZC1iOTI1LTUwZWRiZDMw MzEwOC5jcmwwHwYDVR0jBBgwFoAU3z/JXSjIHhIlqmyhtuP4OiI7sN8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9hYzIxYTUwMy1mM2IwLTQ4YWQtYjkyNS01MGVk YmQzMDMxMDguY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF5loMA4E AgACMAgDBgAmAvqgADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBNtFyYz3zTwfZ3MOOPpgMzf1+MR2PbJRfM 2U5NFc0q6v81F40DON8XPRrRIVBq+rt4z62GviXNa77onb7m8wMtpp8EaZRWumCN C0Q2K0tpDHr9tmkzbLylzIJVqvY+SIbzSwgfCDejViiyLBLZ699E93Kxr+B9NUJI 66FYjmagJSyoK4varmw2hqdJKmN4MK0eJt5Za2yw5swuPfsK058WyRylZx1TDWKp oPRIfkOR/Ihv1ei65ncciyVV1W1I1fLQjoOAqGWgxgbih+6ZwdzLigRvkAs15TIu /45GR39catbR4SVVfF05qpsjQsEl1kh9lhOc2H7o9ztXB1gyY4DV -----END CERTIFICATE-----Generated at Thu Oct 15 09:59:57 2026 by rpki-client