$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0e02cfee-5059-46c1-94a4-fb948d32f733/2959d7d0-71b3-320d-b3b4-97d0db6c8750.roa File: 2959d7d0-71b3-320d-b3b4-97d0db6c8750.roa (raw, json) Hash identifier: ceeNPpOt0+TtXcZzv9bBdsGuCJiBPuSW/0ilTj7UMvk= Subject key identifier: 83:64:38:0B:C0:D9:6F:37:B5:C9:80:4A:D0:3C:FC:71:F6:56:12:C7 Certificate issuer: /CN=0e02cfee-5059-46c1-94a4-fb948d32f733 Certificate serial: 010D0C9F4328584FB0BDE5F09281FDC13A86A740 Authority key identifier: C0:B3:04:21:09:55:24:F5:3D:66:F2:23:52:D9:78:87:34:AE:80:54 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0e02cfee-5059-46c1-94a4-fb948d32f733.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0e02cfee-5059-46c1-94a4-fb948d32f733/2959d7d0-71b3-320d-b3b4-97d0db6c8750.roa Signing time: Sun 01 Nov 2026 01:00:13 +0000 ROA not before: Sun 01 Nov 2026 01:00:13 +0000 ROA not after: Sat 30 Jan 2027 02:00:13 +0000 asID: 401111 IP address blocks: 23.152.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0e02cfee-5059-46c1-94a4-fb948d32f733/0e02cfee-5059-46c1-94a4-fb948d32f733.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0e02cfee-5059-46c1-94a4-fb948d32f733/0e02cfee-5059-46c1-94a4-fb948d32f733.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0e02cfee-5059-46c1-94a4-fb948d32f733.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Nov 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:b0:bd:e5:f0:92:81:fd:c1:3a:86:a7:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e02cfee-5059-46c1-94a4-fb948d32f733 Validity Not Before: Nov 1 01:00:13 2026 GMT Not After : Jan 30 02:00:13 2027 GMT Subject: CN=19735a83-0474-4d14-8db2-fb5c876c065d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:5a:fb:44:aa:2d:26:aa:cc:49:95:37:1b:31: a9:64:01:12:81:65:3c:46:53:51:c5:d7:46:a6:bd: 35:b7:f2:c3:6c:57:83:64:88:7a:53:c2:77:2c:43: 4b:38:0a:f1:6f:89:25:a9:75:00:56:1f:ac:b8:83: cc:86:60:16:80:2a:5d:c2:08:02:70:da:d3:02:55: d4:23:0d:04:50:5d:27:30:60:15:63:64:08:b7:11: 47:fa:85:4e:be:ad:93:10:bd:13:89:4d:d9:0f:11: c3:91:36:9d:49:66:5f:8b:0f:d6:0d:d0:72:45:fe: ce:9a:72:81:7f:27:51:a5:29:75:07:5b:f1:e4:ee: b6:46:a9:f4:89:1d:8e:5c:9a:b2:5b:e0:b1:27:39: 7a:e4:d3:20:c3:2a:ab:3f:86:40:0d:43:cc:54:db: 66:60:71:69:dd:f2:5c:47:b0:39:41:64:72:c9:5f: af:77:1d:4a:a3:9e:78:3b:02:cd:74:12:39:5d:e6: f6:b3:69:b7:62:90:eb:5c:f1:de:be:1d:6c:3f:3d: e9:54:43:40:be:d9:c7:1a:bb:76:a5:37:08:c7:d0: a1:59:e5:14:d3:c6:f1:dc:81:75:39:86:53:b4:3a: c1:a3:ee:03:da:67:04:b4:87:1a:b2:aa:f0:81:4e: ee:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:64:38:0B:C0:D9:6F:37:B5:C9:80:4A:D0:3C:FC:71:F6:56:12:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0e02cfee-5059-46c1-94a4-fb948d32f733/2959d7d0-71b3-320d-b3b4-97d0db6c8750.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0e02cfee-5059-46c1-94a4-fb948d32f733/0e02cfee-5059-46c1-94a4-fb948d32f733.crl X509v3 Authority Key Identifier: keyid:C0:B3:04:21:09:55:24:F5:3D:66:F2:23:52:D9:78:87:34:AE:80:54 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0e02cfee-5059-46c1-94a4-fb948d32f733.cer sbgp-ipAddrBlock: critical IPv4: 23.152.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:31:8e:53:df:f9:53:91:db:41:97:ed:86:0b:8d:2b:96:83: 3f:5d:e5:60:a7:34:c4:a7:c2:23:c6:31:4d:ce:36:42:e4:96: 8f:03:96:a4:b3:0a:65:55:04:fb:18:44:1b:ef:ad:6f:72:c0: 9e:8d:1d:1e:6b:a4:08:03:38:69:cc:d1:12:a2:5e:59:95:2f: 1a:af:e0:8e:54:fe:c7:2e:e9:2b:4e:a8:10:d2:91:67:a7:e6: 6b:9c:65:ac:8e:4e:15:76:51:d2:2f:1b:65:01:b4:d3:2c:0f: b6:0e:c1:19:1e:95:9b:08:6d:00:d6:4f:3d:f4:ae:f1:a4:e0: 6b:6f:6d:d7:ab:7d:8f:0f:98:60:77:01:93:5d:4a:2b:a8:c7: 08:61:8f:b0:61:65:11:97:f0:ec:ed:e2:14:ab:cb:da:cf:ce: 65:d8:13:0c:dd:48:13:7b:1b:e5:21:48:00:49:8b:aa:c6:be: 65:41:7b:b5:df:5a:11:7a:f2:c7:5d:65:7b:ff:19:dd:b3:b8: d0:6f:17:7b:fe:e2:cf:a1:ad:e9:ad:ab:9f:07:1c:07:3a:ad: 22:3d:9d:ee:27:a6:73:d7:00:1d:fa:35:e1:54:14:57:14:16: 27:90:f6:40:41:9a:d9:5d:79:3a:31:36:0c:08:ff:e5:d7:88: 93:20:d8:82 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+wveXwkoH9wTqGp0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGUwMmNmZWUtNTA1OS00NmMxLTk0YTQtZmI5NDhkMzJm NzMzMB4XDTI2MTEwMTAxMDAxM1oXDTI3MDEzMDAyMDAxM1owLzEtMCsGA1UEAxMk MTk3MzVhODMtMDQ3NC00ZDE0LThkYjItZmI1Yzg3NmMwNjVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoFr7RKotJqrMSZU3GzGpZAESgWU8RlNRxddG pr01t/LDbFeDZIh6U8J3LENLOArxb4klqXUAVh+suIPMhmAWgCpdwggCcNrTAlXU Iw0EUF0nMGAVY2QItxFH+oVOvq2TEL0TiU3ZDxHDkTadSWZfiw/WDdByRf7OmnKB fydRpSl1B1vx5O62Rqn0iR2OXJqyW+CxJzl65NMgwyqrP4ZADUPMVNtmYHFp3fJc R7A5QWRyyV+vdx1Ko554OwLNdBI5Xeb2s2m3YpDrXPHevh1sPz3pVENAvtnHGrt2 pTcIx9ChWeUU08bx3IF1OYZTtDrBo+4D2mcEtIcasqrwgU7u8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFINkOAvA2W83tcmAStA8/HH2VhLHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS8wZTAy Y2ZlZS01MDU5LTQ2YzEtOTRhNC1mYjk0OGQzMmY3MzMvMjk1OWQ3ZDAtNzFiMy0z MjBkLWIzYjQtOTdkMGRiNmM4NzUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvMGUwMmNmZWUtNTA1OS00NmMxLTk0 YTQtZmI5NDhkMzJmNzMzLzBlMDJjZmVlLTUwNTktNDZjMS05NGE0LWZiOTQ4ZDMy ZjczMy5jcmwwHwYDVR0jBBgwFoAUwLMEIQlVJPU9ZvIjUtl4hzSugFQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS8wZTAyY2ZlZS01MDU5LTQ2YzEtOTRhNC1mYjk0 OGQzMmY3MzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5gUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGoxjlPf+VOR20GX7YYLjSuWgz9d5WCnNMSnwiPGMU3ONkLklo8DlqSz CmVVBPsYRBvvrW9ywJ6NHR5rpAgDOGnM0RKiXlmVLxqv4I5U/scu6StOqBDSkWen 5mucZayOThV2UdIvG2UBtNMsD7YOwRkelZsIbQDWTz30rvGk4GtvbderfY8PmGB3 AZNdSiuoxwhhj7BhZRGX8Ozt4hSry9rPzmXYEwzdSBN7G+UhSABJi6rGvmVBe7Xf WhF68sddZXv/Gd2zuNBvF3v+4s+hremtq58HHAc6rSI9ne4npnPXAB36NeFUFFcU FieQ9kBBmtldeToxNgwI/+XXiJMg2II= -----END CERTIFICATE-----Generated at Thu Nov 5 04:25:59 2026 by rpki-client