$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f936a1e1-90de-4d04-8bef-ca6fea25558c/3339bdc8-afeb-376d-a715-d1f4adb10703.roa File: 3339bdc8-afeb-376d-a715-d1f4adb10703.roa (raw, json) Hash identifier: VIEE0dOVBcktnEC2ZaKhlLqc5RS/is115Faq8chl4bo= Subject key identifier: DA:D9:70:AF:42:40:2A:A0:FA:7C:EA:0A:C4:F1:AA:66:9C:EE:6E:3F Certificate issuer: /CN=f936a1e1-90de-4d04-8bef-ca6fea25558c Certificate serial: 010D0C9F4328584F49749C6A154B3963E2383180 Authority key identifier: 2D:E0:44:BD:CC:7F:2A:10:CE:8B:D5:1E:FA:6B:B3:8E:7B:5C:7D:73 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f936a1e1-90de-4d04-8bef-ca6fea25558c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f936a1e1-90de-4d04-8bef-ca6fea25558c/3339bdc8-afeb-376d-a715-d1f4adb10703.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 9304 IP address blocks: 23.139.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f936a1e1-90de-4d04-8bef-ca6fea25558c/f936a1e1-90de-4d04-8bef-ca6fea25558c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f936a1e1-90de-4d04-8bef-ca6fea25558c/f936a1e1-90de-4d04-8bef-ca6fea25558c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f936a1e1-90de-4d04-8bef-ca6fea25558c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:9c:6a:15:4b:39:63:e2:38:31:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f936a1e1-90de-4d04-8bef-ca6fea25558c Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=78cd0faf-7e42-4241-80ab-e172d5a4b7e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:de:63:7b:17:3d:60:b5:94:26:df:f8:43:84: 5d:db:5c:13:66:b9:1b:af:b5:bd:1b:09:e4:4c:d6: 8e:1b:34:ab:00:e9:49:68:e5:9e:bd:e7:26:0b:d7: 88:f2:1c:1b:1f:8b:a4:f1:c7:11:03:75:2f:23:53: 36:31:c6:7e:87:2b:75:8e:0a:cf:74:38:65:67:98: 32:34:df:25:2a:95:cc:82:de:a7:cc:2b:f5:42:da: 0a:25:d3:a5:56:ff:59:ee:f8:36:8c:4b:f8:be:4e: f1:49:17:8c:54:be:61:e9:61:41:df:ab:88:f9:e2: 43:29:ef:56:c7:b1:eb:86:9f:d1:d7:d1:c3:07:a4: 2f:8d:ef:9a:d4:71:0b:ad:fa:47:8f:59:a3:87:fe: c1:d3:9e:32:33:c3:cb:88:b1:45:6c:b4:45:95:87: 03:c4:cf:a6:e1:95:c2:cd:b6:d8:53:01:73:3c:81: 88:a5:fe:3d:66:39:8f:2a:14:97:c9:23:80:34:73: e1:13:e7:55:06:9c:e5:91:dd:72:f4:80:b6:09:3a: 66:31:98:95:ed:cc:38:1d:56:fa:1d:da:d3:98:db: 8d:90:cc:3f:31:9c:0c:ce:88:29:34:a4:f1:6d:80: c2:5b:f1:17:39:2d:69:39:dd:bf:4d:fe:dd:0a:46: 1c:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:D9:70:AF:42:40:2A:A0:FA:7C:EA:0A:C4:F1:AA:66:9C:EE:6E:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f936a1e1-90de-4d04-8bef-ca6fea25558c/3339bdc8-afeb-376d-a715-d1f4adb10703.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f936a1e1-90de-4d04-8bef-ca6fea25558c/f936a1e1-90de-4d04-8bef-ca6fea25558c.crl X509v3 Authority Key Identifier: keyid:2D:E0:44:BD:CC:7F:2A:10:CE:8B:D5:1E:FA:6B:B3:8E:7B:5C:7D:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f936a1e1-90de-4d04-8bef-ca6fea25558c.cer sbgp-ipAddrBlock: critical IPv4: 23.139.132.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:f7:8c:3a:54:e3:c6:ce:fa:01:3f:8b:6c:42:7f:f1:98:ee: a7:08:d6:65:6f:71:74:ad:1c:9f:8e:5c:a0:c2:76:36:af:a2: f0:89:9c:20:06:0f:fa:d1:03:f3:5d:f2:6c:f8:64:b8:84:4e: c0:34:3a:c1:f5:96:44:6a:03:a0:2a:56:5a:2a:36:ba:95:8a: f1:45:d8:17:95:32:06:30:55:71:be:0b:dd:44:8f:94:73:48: 30:fa:0a:81:cf:78:eb:9f:8e:ab:2f:cf:19:fd:cf:ec:37:0c: d3:b2:ca:ac:59:0f:4a:0d:32:ae:e5:56:cf:09:08:d9:91:c7: df:d2:40:8a:0e:3a:50:b9:d6:ae:43:e3:f1:d8:90:29:0b:6e: 63:fc:0d:b4:cb:42:9e:03:00:ee:5a:37:87:ad:56:90:34:3f: 1f:96:12:bf:20:0f:9c:32:b5:c3:cc:23:7d:a5:a9:bd:c4:16: 15:b2:35:34:62:e5:a9:af:94:fc:15:7e:0f:a2:0e:c0:12:7e: af:62:f5:e5:f9:0e:bb:f8:a9:58:ca:05:4e:af:13:bd:6d:fc: 14:70:4b:4e:f3:17:82:34:4a:35:7c:5b:45:6b:06:77:94:58: e1:d6:c3:6c:17:04:9a:49:04:6d:1d:80:78:c6:31:72:e2:f3: 10:a9:22:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdJxqFUs5Y+I4MYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjkzNmExZTEtOTBkZS00ZDA0LThiZWYtY2E2ZmVhMjU1 NThjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NzhjZDBmYWYtN2U0Mi00MjQxLTgwYWItZTE3MmQ1YTRiN2UyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm95jexc9YLWUJt/4Q4Rd21wTZrkbr7W9Gwnk TNaOGzSrAOlJaOWevecmC9eI8hwbH4uk8ccRA3UvI1M2McZ+hyt1jgrPdDhlZ5gy NN8lKpXMgt6nzCv1QtoKJdOlVv9Z7vg2jEv4vk7xSReMVL5h6WFB36uI+eJDKe9W x7Hrhp/R19HDB6Qvje+a1HELrfpHj1mjh/7B054yM8PLiLFFbLRFlYcDxM+m4ZXC zbbYUwFzPIGIpf49ZjmPKhSXySOANHPhE+dVBpzlkd1y9IC2CTpmMZiV7cw4HVb6 HdrTmNuNkMw/MZwMzogpNKTxbYDCW/EXOS1pOd2/Tf7dCkYcuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNrZcK9CQCqg+nzqCsTxqmac7m4/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9mOTM2 YTFlMS05MGRlLTRkMDQtOGJlZi1jYTZmZWEyNTU1OGMvMzMzOWJkYzgtYWZlYi0z NzZkLWE3MTUtZDFmNGFkYjEwNzAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZjkzNmExZTEtOTBkZS00ZDA0LThi ZWYtY2E2ZmVhMjU1NThjL2Y5MzZhMWUxLTkwZGUtNGQwNC04YmVmLWNhNmZlYTI1 NTU4Yy5jcmwwHwYDVR0jBBgwFoAULeBEvcx/KhDOi9Ue+muzjntcfXMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9mOTM2YTFlMS05MGRlLTRkMDQtOGJlZi1jYTZm ZWEyNTU1OGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4uEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIb3jDpU48bO+gE/i2xCf/GY7qcI1mVvcXStHJ+OXKDCdjavovCJnCAG D/rRA/Nd8mz4ZLiETsA0OsH1lkRqA6AqVloqNrqVivFF2BeVMgYwVXG+C91Ej5Rz SDD6CoHPeOufjqsvzxn9z+w3DNOyyqxZD0oNMq7lVs8JCNmRx9/SQIoOOlC51q5D 4/HYkCkLbmP8DbTLQp4DAO5aN4etVpA0Px+WEr8gD5wytcPMI32lqb3EFhWyNTRi 5amvlPwVfg+iDsASfq9i9eX5Drv4qVjKBU6vE71t/BRwS07zF4I0SjV8W0VrBneU WOHWw2wXBJpJBG0dgHjGMXLi8xCpIkQ= -----END CERTIFICATE-----Generated at Sun Sep 27 05:39:04 2026 by rpki-client