$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/25397c33-84d1-4a95-9d4c-421c7d95d0f8/4304d6b0-4f61-30c9-a0ef-e3e83e94e659.roa File: 4304d6b0-4f61-30c9-a0ef-e3e83e94e659.roa (raw, json) Hash identifier: bDvGZaIaoewoZKqOOn9jMk9Yk/BVtCbXdE0IWmYsZZ8= Subject key identifier: 0A:37:C1:BF:43:05:01:EC:C5:34:A6:12:49:45:08:48:4E:82:14:43 Certificate issuer: /CN=25397c33-84d1-4a95-9d4c-421c7d95d0f8 Certificate serial: 010D0C9F4328584F19FCF668461E7C4B6472CBD4 Authority key identifier: DF:7C:B0:66:7B:40:6A:C8:44:70:8F:60:B1:C5:86:D9:97:B1:B3:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/25397c33-84d1-4a95-9d4c-421c7d95d0f8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/25397c33-84d1-4a95-9d4c-421c7d95d0f8/4304d6b0-4f61-30c9-a0ef-e3e83e94e659.roa Signing time: Tue 08 Sep 2026 01:00:12 +0000 ROA not before: Tue 08 Sep 2026 01:00:12 +0000 ROA not after: Mon 07 Dec 2026 02:00:12 +0000 asID: 400792 IP address blocks: 23.151.140.0/24 maxlen: 24 2602:f75b::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/25397c33-84d1-4a95-9d4c-421c7d95d0f8/25397c33-84d1-4a95-9d4c-421c7d95d0f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/25397c33-84d1-4a95-9d4c-421c7d95d0f8/25397c33-84d1-4a95-9d4c-421c7d95d0f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/25397c33-84d1-4a95-9d4c-421c7d95d0f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:19:fc:f6:68:46:1e:7c:4b:64:72:cb:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=25397c33-84d1-4a95-9d4c-421c7d95d0f8 Validity Not Before: Sep 8 01:00:12 2026 GMT Not After : Dec 7 02:00:12 2026 GMT Subject: CN=2893f37f-da01-46d9-bfbd-329719c86164 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:cb:72:cf:d6:63:c5:9e:01:fc:6c:cb:1f:38: 91:c6:31:a6:eb:8d:ae:81:1b:3b:3b:20:32:db:09: 1f:a6:da:6f:ef:a4:aa:df:a1:39:2d:87:34:b1:6b: 80:d5:c4:49:2f:95:0b:b1:51:b1:97:32:3d:2a:3a: ce:62:82:49:d1:e4:de:68:f7:68:42:f9:8c:a3:39: 45:9a:03:90:b4:1c:4f:72:0a:b5:ff:36:40:67:32: e8:b0:66:04:7b:c2:b6:5b:87:fc:47:5d:b8:c4:cb: 2f:32:0d:d8:95:f3:cf:1e:d0:15:2c:69:74:41:98: af:b7:ea:06:2e:bf:f0:ad:18:9f:23:37:10:6f:62: b7:44:fe:e9:c3:93:a6:af:47:a4:02:97:5b:fc:89: 29:60:7b:74:cf:bc:37:71:69:cf:d3:bf:a7:bd:f6: ce:7d:6b:1d:62:b5:a0:2a:2c:ab:5d:8b:b4:85:19: dc:41:72:5b:c3:0a:78:e7:f3:21:97:43:94:c4:ab: f0:41:40:2c:27:16:60:81:c4:13:4d:d1:f7:33:0e: f1:eb:e9:d3:f2:90:73:ca:b2:de:8d:f2:cf:93:43: fe:a8:37:47:a5:af:98:8b:65:59:36:07:1d:63:55: 10:c7:8f:e6:83:df:59:af:d2:12:66:d7:07:a8:2d: 81:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:37:C1:BF:43:05:01:EC:C5:34:A6:12:49:45:08:48:4E:82:14:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/25397c33-84d1-4a95-9d4c-421c7d95d0f8/4304d6b0-4f61-30c9-a0ef-e3e83e94e659.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/25397c33-84d1-4a95-9d4c-421c7d95d0f8/25397c33-84d1-4a95-9d4c-421c7d95d0f8.crl X509v3 Authority Key Identifier: keyid:DF:7C:B0:66:7B:40:6A:C8:44:70:8F:60:B1:C5:86:D9:97:B1:B3:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/25397c33-84d1-4a95-9d4c-421c7d95d0f8.cer sbgp-ipAddrBlock: critical IPv4: 23.151.140.0/24 IPv6: 2602:f75b::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:5b:0e:94:15:e1:72:07:44:1c:a4:c7:10:6a:e6:d8:7d:88: e8:ad:3d:11:39:18:66:e9:8a:51:02:4c:e3:e9:87:b5:33:fa: 9f:3e:2f:71:e3:ca:dc:d4:93:16:05:de:3e:a2:ce:99:eb:aa: d5:8f:14:d6:7c:91:f4:f8:a0:25:ea:28:fa:c4:de:e3:93:cc: d4:89:0f:6e:0e:93:94:cf:77:c2:56:a7:f4:db:84:40:13:a1: da:2d:85:6d:27:88:90:2e:9b:5f:20:cd:e8:49:9f:46:e0:bd: 38:d1:d1:51:22:88:fe:75:11:de:c3:51:5f:db:65:85:0e:1c: 1e:25:d4:12:73:b3:5b:e6:65:cf:1e:42:96:a4:0d:3a:14:45: 1d:b9:3d:19:59:66:04:62:ab:f8:0e:76:fc:60:32:47:35:5a: 02:0c:b7:0c:b6:f1:81:48:c0:d7:2b:fc:f0:a2:ec:30:8e:e0: 13:94:4e:76:96:d0:8d:c6:26:43:bc:36:5e:e7:48:59:64:a0: 95:1f:2d:cc:7d:a5:73:bb:40:14:71:d6:1c:6d:56:42:a4:de: 27:ca:d5:48:3d:1f:47:4f:35:ad:13:30:46:d9:11:a8:a7:2e: 53:19:20:43:7c:46:aa:13:e0:8a:bc:18:10:e1:5f:f6:63:d1: 57:24:91:2c -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE8Z/PZoRh58S2Ryy9QwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjUzOTdjMzMtODRkMS00YTk1LTlkNGMtNDIxYzdkOTVk MGY4MB4XDTI2MDkwODAxMDAxMloXDTI2MTIwNzAyMDAxMlowLzEtMCsGA1UEAxMk Mjg5M2YzN2YtZGEwMS00NmQ5LWJmYmQtMzI5NzE5Yzg2MTY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Mtyz9ZjxZ4B/GzLHziRxjGm642ugRs7OyAy 2wkfptpv76Sq36E5LYc0sWuA1cRJL5ULsVGxlzI9KjrOYoJJ0eTeaPdoQvmMozlF mgOQtBxPcgq1/zZAZzLosGYEe8K2W4f8R124xMsvMg3YlfPPHtAVLGl0QZivt+oG Lr/wrRifIzcQb2K3RP7pw5Omr0ekApdb/IkpYHt0z7w3cWnP07+nvfbOfWsdYrWg KiyrXYu0hRncQXJbwwp45/Mhl0OUxKvwQUAsJxZggcQTTdH3Mw7x6+nT8pBzyrLe jfLPk0P+qDdHpa+Yi2VZNgcdY1UQx4/mg99Zr9ISZtcHqC2BBQIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFAo3wb9DBQHsxTSmEklFCEhOghRDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8yNTM5 N2MzMy04NGQxLTRhOTUtOWQ0Yy00MjFjN2Q5NWQwZjgvNDMwNGQ2YjAtNGY2MS0z MGM5LWEwZWYtZTNlODNlOTRlNjU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMjUzOTdjMzMtODRkMS00YTk1LTlk NGMtNDIxYzdkOTVkMGY4LzI1Mzk3YzMzLTg0ZDEtNGE5NS05ZDRjLTQyMWM3ZDk1 ZDBmOC5jcmwwHwYDVR0jBBgwFoAU33ywZntAashEcI9gscWG2Zexsx4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8yNTM5N2MzMy04NGQxLTRhOTUtOWQ0Yy00MjFj N2Q5NWQwZjguY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF5eMMA4E AgACMAgDBgQmAvdbADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAKWw6UFeFyB0QcpMcQaubYfYjorT0RORhm 6YpRAkzj6Ye1M/qfPi9x48rc1JMWBd4+os6Z66rVjxTWfJH0+KAl6ij6xN7jk8zU iQ9uDpOUz3fCVqf024RAE6HaLYVtJ4iQLptfIM3oSZ9G4L040dFRIoj+dRHew1Ff 22WFDhweJdQSc7Nb5mXPHkKWpA06FEUduT0ZWWYEYqv4Dnb8YDJHNVoCDLcMtvGB SMDXK/zwouwwjuATlE52ltCNxiZDvDZe50hZZKCVHy3MfaVzu0AUcdYcbVZCpN4n ytVIPR9HTzWtEzBG2RGopy5TGSBDfEaqE+CKvBgQ4V/2Y9FXJJEs -----END CERTIFICATE-----Generated at Wed Sep 23 01:30:37 2026 by rpki-client