$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8a6c683d-5c01-47ea-838d-04c88d49f6ac/1aa4c712-289c-3632-8103-98b72f2ecced.roa File: 1aa4c712-289c-3632-8103-98b72f2ecced.roa (raw, json) Hash identifier: tND6hhXk1uCIrHWU/qFgeT6fbLWw06m1cmWk1UA7cuc= Subject key identifier: BE:DD:7E:3F:29:6A:B2:82:09:90:52:03:5B:C6:E8:4B:0A:75:6D:E0 Certificate issuer: /CN=8a6c683d-5c01-47ea-838d-04c88d49f6ac Certificate serial: 010D0C9F4328584F14678C752897E7A735048F80 Authority key identifier: F5:45:97:37:5A:1A:C6:CD:8D:EC:31:48:0B:CA:92:AC:DD:3E:7C:D9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8a6c683d-5c01-47ea-838d-04c88d49f6ac.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8a6c683d-5c01-47ea-838d-04c88d49f6ac/1aa4c712-289c-3632-8103-98b72f2ecced.roa Signing time: Sun 06 Sep 2026 01:00:11 +0000 ROA not before: Sun 06 Sep 2026 01:00:11 +0000 ROA not after: Sat 05 Dec 2026 02:00:11 +0000 asID: 402410 IP address blocks: 23.156.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8a6c683d-5c01-47ea-838d-04c88d49f6ac/8a6c683d-5c01-47ea-838d-04c88d49f6ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8a6c683d-5c01-47ea-838d-04c88d49f6ac/8a6c683d-5c01-47ea-838d-04c88d49f6ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8a6c683d-5c01-47ea-838d-04c88d49f6ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:14:67:8c:75:28:97:e7:a7:35:04:8f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a6c683d-5c01-47ea-838d-04c88d49f6ac Validity Not Before: Sep 6 01:00:11 2026 GMT Not After : Dec 5 02:00:11 2026 GMT Subject: CN=b01f9a9b-fa47-442f-a6e8-9a43dffd389d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:8d:97:93:89:3b:1f:4d:40:6a:2b:8a:28:f8: 99:71:b5:b6:bb:3b:c9:4c:69:cb:ab:f8:d9:15:94: 29:db:0d:7f:61:af:e0:e6:26:c2:1d:3f:83:15:a9: a6:3a:8b:56:fc:d8:b8:1f:ae:42:f5:e7:26:c0:12: 5d:54:78:e7:74:9a:b6:85:b6:02:40:e2:5b:d7:48: 63:ef:a4:65:97:b1:47:27:c8:58:94:77:a3:72:ce: 18:0e:c7:2e:87:45:99:e2:8e:e5:29:18:81:36:b8: 7c:19:9a:46:1c:a2:c3:f9:7f:43:66:17:fe:00:af: c5:17:ed:30:80:e7:b8:98:64:71:b0:17:96:43:be: 4e:3f:d6:31:4d:f2:e2:23:ce:84:2e:b4:c2:87:be: 60:07:b8:1b:1f:2a:64:da:d1:23:df:6a:1f:9e:9c: 23:d4:dd:7f:63:34:03:97:a3:ea:22:b6:57:68:ba: 73:49:91:51:6d:c5:3f:b5:f4:5b:1f:df:d4:28:12: be:6f:61:6a:67:17:e1:da:35:a4:9b:55:22:38:83: 62:3c:08:4e:51:c1:e2:4a:24:d4:4e:4a:c8:14:06: 99:be:30:13:de:e2:4c:26:85:58:c8:2e:ae:b4:b1: b7:1c:73:1a:64:1e:ef:37:4c:c9:82:5e:41:db:63: d8:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:DD:7E:3F:29:6A:B2:82:09:90:52:03:5B:C6:E8:4B:0A:75:6D:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8a6c683d-5c01-47ea-838d-04c88d49f6ac/1aa4c712-289c-3632-8103-98b72f2ecced.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8a6c683d-5c01-47ea-838d-04c88d49f6ac/8a6c683d-5c01-47ea-838d-04c88d49f6ac.crl X509v3 Authority Key Identifier: keyid:F5:45:97:37:5A:1A:C6:CD:8D:EC:31:48:0B:CA:92:AC:DD:3E:7C:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8a6c683d-5c01-47ea-838d-04c88d49f6ac.cer sbgp-ipAddrBlock: critical IPv4: 23.156.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:e0:c4:bf:32:b1:7d:ce:c6:12:09:01:b1:ff:f9:64:24:90: 4c:3a:99:6c:9c:19:a0:f7:cf:c4:12:61:2f:b8:d7:7c:2c:f8: 1d:3f:40:c2:7b:2e:4e:34:a9:36:25:c5:64:28:76:e1:7f:98: 7b:35:ca:9b:fe:4b:cd:5b:fc:62:89:e5:ba:83:22:01:2c:cc: 9f:21:a5:65:54:b2:2d:0d:a0:b4:86:99:31:e4:3d:7b:a3:f2: df:15:f7:1c:4e:e7:4a:30:db:f2:79:8f:33:c8:ca:84:e0:b8: 98:e3:95:dc:cf:aa:e5:34:1b:3a:55:46:ab:1f:a7:f6:b4:de: 8a:69:fb:ec:b8:45:28:81:af:22:35:31:c9:45:6b:18:de:fe: 7e:ad:01:aa:c6:a0:67:d8:2f:64:e5:b3:98:96:2a:5d:3c:ed: 12:c4:75:54:ff:c8:74:fe:b4:25:20:77:ff:f3:6b:5c:25:8f: 80:0a:e1:07:2a:67:7e:f0:a6:5b:64:57:2d:75:93:e8:5d:02: 63:c3:95:55:e2:74:02:94:bd:20:88:a7:06:a6:10:5a:a4:48: 63:84:6d:46:b9:2b:f5:07:6b:0c:c1:b9:67:7d:b7:ea:28:77: 74:6c:9b:ac:f7:f5:e1:56:df:e2:87:66:3b:6d:6b:01:19:9f: f1:57:a0:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8UZ4x1KJfnpzUEj4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGE2YzY4M2QtNWMwMS00N2VhLTgzOGQtMDRjODhkNDlm NmFjMB4XDTI2MDkwNjAxMDAxMVoXDTI2MTIwNTAyMDAxMVowLzEtMCsGA1UEAxMk YjAxZjlhOWItZmE0Ny00NDJmLWE2ZTgtOWE0M2RmZmQzODlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoI2Xk4k7H01AaiuKKPiZcbW2uzvJTGnLq/jZ FZQp2w1/Ya/g5ibCHT+DFammOotW/Ni4H65C9ecmwBJdVHjndJq2hbYCQOJb10hj 76Rll7FHJ8hYlHejcs4YDscuh0WZ4o7lKRiBNrh8GZpGHKLD+X9DZhf+AK/FF+0w gOe4mGRxsBeWQ75OP9YxTfLiI86ELrTCh75gB7gbHypk2tEj32ofnpwj1N1/YzQD l6PqIrZXaLpzSZFRbcU/tfRbH9/UKBK+b2FqZxfh2jWkm1UiOINiPAhOUcHiSiTU TkrIFAaZvjAT3uJMJoVYyC6utLG3HHMaZB7vN0zJgl5B22PYZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL7dfj8parKCCZBSA1vG6EsKdW3gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS84YTZj NjgzZC01YzAxLTQ3ZWEtODM4ZC0wNGM4OGQ0OWY2YWMvMWFhNGM3MTItMjg5Yy0z NjMyLTgxMDMtOThiNzJmMmVjY2VkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvOGE2YzY4M2QtNWMwMS00N2VhLTgz OGQtMDRjODhkNDlmNmFjLzhhNmM2ODNkLTVjMDEtNDdlYS04MzhkLTA0Yzg4ZDQ5 ZjZhYy5jcmwwHwYDVR0jBBgwFoAU9UWXN1oaxs2N7DFIC8qSrN0+fNkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS84YTZjNjgzZC01YzAxLTQ3ZWEtODM4ZC0wNGM4 OGQ0OWY2YWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5zcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA/gxL8ysX3OxhIJAbH/+WQkkEw6mWycGaD3z8QSYS+413ws+B0/QMJ7 Lk40qTYlxWQoduF/mHs1ypv+S81b/GKJ5bqDIgEszJ8hpWVUsi0NoLSGmTHkPXuj 8t8V9xxO50ow2/J5jzPIyoTguJjjldzPquU0GzpVRqsfp/a03opp++y4RSiBryI1 MclFaxje/n6tAarGoGfYL2Tls5iWKl087RLEdVT/yHT+tCUgd//za1wlj4AK4Qcq Z37wpltkVy11k+hdAmPDlVXidAKUvSCIpwamEFqkSGOEbUa5K/UHawzBuWd9t+oo d3Rsm6z39eFW3+KHZjttawEZn/FXoBE= -----END CERTIFICATE-----Generated at Sat Sep 26 11:14:28 2026 by rpki-client