$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/89a9da60-7fcc-4f46-92c6-c30382b880a0/3e4d1d9a-dcda-3e92-8aee-dd04ae6991c1.roa File: 3e4d1d9a-dcda-3e92-8aee-dd04ae6991c1.roa (raw, json) Hash identifier: Qq2lKTwX0MnDRTFEo0ZXdmVoAc9Deh0O/GnG0EtqT8A= Subject key identifier: EA:FD:95:3B:0F:14:EF:EF:A7:92:66:7D:98:B0:59:70:CA:D9:B6:57 Certificate issuer: /CN=89a9da60-7fcc-4f46-92c6-c30382b880a0 Certificate serial: 010D0C9F4328584F093CD3A5F422A2DFCB6F4740 Authority key identifier: 66:D8:CD:9E:75:37:F8:2D:1E:84:97:C8:B6:60:09:AB:8C:26:0A:A3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/89a9da60-7fcc-4f46-92c6-c30382b880a0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/89a9da60-7fcc-4f46-92c6-c30382b880a0/3e4d1d9a-dcda-3e92-8aee-dd04ae6991c1.roa Signing time: Wed 02 Sep 2026 01:00:12 +0000 ROA not before: Wed 02 Sep 2026 01:00:12 +0000 ROA not after: Tue 01 Dec 2026 02:00:12 +0000 asID: 24062 IP address blocks: 23.156.116.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/89a9da60-7fcc-4f46-92c6-c30382b880a0/89a9da60-7fcc-4f46-92c6-c30382b880a0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/89a9da60-7fcc-4f46-92c6-c30382b880a0/89a9da60-7fcc-4f46-92c6-c30382b880a0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/89a9da60-7fcc-4f46-92c6-c30382b880a0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:09:3c:d3:a5:f4:22:a2:df:cb:6f:47:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89a9da60-7fcc-4f46-92c6-c30382b880a0 Validity Not Before: Sep 2 01:00:12 2026 GMT Not After : Dec 1 02:00:12 2026 GMT Subject: CN=4541f83e-68b1-434a-b0bc-8a62bec79215 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:4a:ae:cd:08:92:50:2d:70:64:7b:a8:73:3d: f6:e6:4e:d0:0b:a0:6f:a6:93:ef:bb:32:01:a4:3f: e7:b7:75:d9:3a:30:93:11:69:45:d0:08:a3:64:1d: 9f:8b:93:e3:77:7d:57:9d:0b:1b:a9:32:ac:2e:e5: ce:b4:0e:e4:e6:db:af:ca:b2:ec:99:9b:fe:5a:6c: 9c:98:b3:53:74:a8:4e:c3:10:77:80:e6:2e:45:6e: 63:84:84:98:93:6c:c1:94:41:aa:20:d5:a7:e0:52: 28:07:3f:bc:88:e9:ed:42:86:6c:9f:9a:cf:e9:93: 04:12:be:02:9f:90:6a:b4:98:b5:61:44:50:5d:57: fe:75:21:75:c1:32:81:2b:15:e7:87:f6:2b:6c:31: ca:7f:8a:59:8b:b3:ca:c4:d8:51:e6:2a:6a:f2:a6: b3:d0:84:ce:c3:7e:9c:42:5e:54:71:d9:3c:97:32: c8:0f:f0:9c:78:6f:d2:0f:86:38:c6:ae:04:09:a4: 5f:f5:f8:43:a3:e8:de:7e:d3:e0:08:69:77:c2:ef: 80:97:27:d2:0d:76:fe:1c:7b:10:18:a2:e9:6e:57: c1:38:46:b8:93:60:52:74:4a:56:ed:66:50:d5:ca: b0:80:79:73:ae:4e:84:ea:7a:ae:d2:27:62:2c:7c: 5f:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:FD:95:3B:0F:14:EF:EF:A7:92:66:7D:98:B0:59:70:CA:D9:B6:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/89a9da60-7fcc-4f46-92c6-c30382b880a0/3e4d1d9a-dcda-3e92-8aee-dd04ae6991c1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/89a9da60-7fcc-4f46-92c6-c30382b880a0/89a9da60-7fcc-4f46-92c6-c30382b880a0.crl X509v3 Authority Key Identifier: keyid:66:D8:CD:9E:75:37:F8:2D:1E:84:97:C8:B6:60:09:AB:8C:26:0A:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/89a9da60-7fcc-4f46-92c6-c30382b880a0.cer sbgp-ipAddrBlock: critical IPv4: 23.156.116.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:6a:27:71:3f:f8:f8:82:92:95:5c:16:b2:cc:69:a4:b8:71: eb:3a:f4:19:f2:13:5a:0b:ee:2e:0e:eb:7d:a6:e9:d3:2f:fc: da:dc:96:0d:26:8e:0b:e5:83:0d:08:6b:60:79:ac:5c:07:4b: dd:11:3a:b9:0a:46:3d:a7:4d:0f:5c:af:33:fd:13:da:0b:f4: 29:50:63:c9:01:5a:f0:c9:bc:b3:5c:80:01:92:d2:db:1a:7e: cb:b7:b4:fd:b3:54:18:fc:f6:fd:9a:c1:84:3f:c3:2d:e4:26: 84:77:8b:e9:e8:94:ee:91:88:9f:a5:15:8e:3b:f4:d0:f9:3f: 9e:35:35:56:32:b0:11:77:54:3c:ff:c5:86:73:bb:24:31:61: fd:31:c0:ae:05:91:1a:89:8c:00:d6:1c:05:90:a5:87:55:7c: 11:ca:8e:d5:81:3e:ea:d0:62:d2:16:96:3c:50:fc:18:53:5e: ca:81:07:a5:99:40:f4:00:2b:b4:62:ee:6b:e9:b7:5d:af:19: 0d:4d:81:6a:eb:a2:0e:ad:40:44:d7:52:76:62:2c:69:34:44: 60:29:56:d2:87:97:fe:2e:df:55:14:76:72:d7:96:4f:92:35: 35:a4:35:43:f4:cf:b6:f3:b7:f9:cd:eb:7b:84:ef:45:31:76: e3:0a:60:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8JPNOl9CKi38tvR0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODlhOWRhNjAtN2ZjYy00ZjQ2LTkyYzYtYzMwMzgyYjg4 MGEwMB4XDTI2MDkwMjAxMDAxMloXDTI2MTIwMTAyMDAxMlowLzEtMCsGA1UEAxMk NDU0MWY4M2UtNjhiMS00MzRhLWIwYmMtOGE2MmJlYzc5MjE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnEquzQiSUC1wZHuocz325k7QC6BvppPvuzIB pD/nt3XZOjCTEWlF0AijZB2fi5Pjd31XnQsbqTKsLuXOtA7k5tuvyrLsmZv+Wmyc mLNTdKhOwxB3gOYuRW5jhISYk2zBlEGqINWn4FIoBz+8iOntQoZsn5rP6ZMEEr4C n5BqtJi1YURQXVf+dSF1wTKBKxXnh/YrbDHKf4pZi7PKxNhR5ipq8qaz0ITOw36c Ql5Ucdk8lzLID/CceG/SD4Y4xq4ECaRf9fhDo+jeftPgCGl3wu+AlyfSDXb+HHsQ GKLpblfBOEa4k2BSdEpW7WZQ1cqwgHlzrk6E6nqu0idiLHxf5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOr9lTsPFO/vp5JmfZiwWXDK2bZXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS84OWE5 ZGE2MC03ZmNjLTRmNDYtOTJjNi1jMzAzODJiODgwYTAvM2U0ZDFkOWEtZGNkYS0z ZTkyLThhZWUtZGQwNGFlNjk5MWMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvODlhOWRhNjAtN2ZjYy00ZjQ2LTky YzYtYzMwMzgyYjg4MGEwLzg5YTlkYTYwLTdmY2MtNGY0Ni05MmM2LWMzMDM4MmI4 ODBhMC5jcmwwHwYDVR0jBBgwFoAUZtjNnnU3+C0ehJfItmAJq4wmCqMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS84OWE5ZGE2MC03ZmNjLTRmNDYtOTJjNi1jMzAz ODJiODgwYTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5x0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAItqJ3E/+PiCkpVcFrLMaaS4ces69BnyE1oL7i4O632m6dMv/Nrclg0m jgvlgw0Ia2B5rFwHS90ROrkKRj2nTQ9crzP9E9oL9ClQY8kBWvDJvLNcgAGS0tsa fsu3tP2zVBj89v2awYQ/wy3kJoR3i+nolO6RiJ+lFY479ND5P541NVYysBF3VDz/ xYZzuyQxYf0xwK4FkRqJjADWHAWQpYdVfBHKjtWBPurQYtIWljxQ/BhTXsqBB6WZ QPQAK7Ri7mvpt12vGQ1NgWrrog6tQETXUnZiLGk0RGApVtKHl/4u31UUdnLXlk+S NTWkNUP0z7bzt/nN63uE70UxduMKYKA= -----END CERTIFICATE-----Generated at Tue Sep 22 12:16:03 2026 by rpki-client