$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/a7c20d98-d772-40a7-b671-02859bf02e23/7dd289db-ca9c-38e2-a109-e2c9432f752e.roa File: 7dd289db-ca9c-38e2-a109-e2c9432f752e.roa (raw, json) Hash identifier: Y18WQvC+XjpZc6n+zvNdq2v2vRkWDYs+3Gx5xMKq1Pk= Subject key identifier: D4:6C:62:5D:CB:63:88:A4:50:9C:EF:9C:69:EB:B7:07:FF:BB:61:92 Certificate issuer: /CN=a7c20d98-d772-40a7-b671-02859bf02e23 Certificate serial: 010D0C9F4328584F3A17DE17CE36EF62D8643C40 Authority key identifier: 7E:83:65:54:DC:C0:CA:CE:FE:AB:92:8D:F1:C2:7C:18:ED:45:E2:9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/a7c20d98-d772-40a7-b671-02859bf02e23.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/a7c20d98-d772-40a7-b671-02859bf02e23/7dd289db-ca9c-38e2-a109-e2c9432f752e.roa Signing time: Sat 19 Sep 2026 13:00:12 +0000 ROA not before: Sat 19 Sep 2026 13:00:12 +0000 ROA not after: Fri 18 Dec 2026 14:00:12 +0000 asID: 14341 IP address blocks: 23.152.76.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/a7c20d98-d772-40a7-b671-02859bf02e23/a7c20d98-d772-40a7-b671-02859bf02e23.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/a7c20d98-d772-40a7-b671-02859bf02e23/a7c20d98-d772-40a7-b671-02859bf02e23.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/a7c20d98-d772-40a7-b671-02859bf02e23.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3a:17:de:17:ce:36:ef:62:d8:64:3c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a7c20d98-d772-40a7-b671-02859bf02e23 Validity Not Before: Sep 19 13:00:12 2026 GMT Not After : Dec 18 14:00:12 2026 GMT Subject: CN=9844d79a-31fb-49dd-b68d-39d9d80b2561 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:38:95:12:91:bc:5f:38:cb:7b:dd:8b:39:e0: 5c:64:1f:3b:97:dc:9a:ff:0b:b0:ab:d1:0f:e6:1e: ea:c9:b7:9b:ae:50:4d:e6:7b:31:23:04:d5:3c:2c: 8f:19:f1:a3:f7:45:16:9e:95:64:fb:d8:87:42:7a: 63:44:b0:2f:18:fa:f9:36:0d:96:4e:56:b1:1e:b7: e1:21:8f:99:aa:8f:76:ae:2d:ce:ee:e5:64:2b:db: 4b:75:a3:9c:e0:95:bc:7c:0e:78:86:cc:dc:fd:a8: e7:9f:e0:1e:e2:c1:81:30:fe:26:2c:40:0b:e8:5e: 54:ef:47:26:ad:5c:cb:c4:cd:fe:ab:80:e3:4b:20: 41:b6:2f:92:59:a3:dc:08:6a:45:43:3a:fa:fa:7b: 59:d3:2c:e3:55:9a:c0:35:52:55:d3:f8:24:00:0c: 92:db:a3:2b:eb:26:b2:da:e1:f6:4f:0e:59:6a:d5: af:09:41:7c:35:dc:ab:a9:09:34:90:3b:95:da:cf: 1a:aa:51:e7:eb:f9:42:c5:83:f3:86:66:9c:dc:08: ef:4c:9c:3c:8f:7f:34:37:bc:ae:20:74:ad:be:a0: b3:2f:67:92:4a:99:d8:ca:fb:10:8d:d8:fe:4b:fd: 0b:54:1f:5e:fa:40:33:af:2c:44:de:e6:19:57:b8: f8:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:6C:62:5D:CB:63:88:A4:50:9C:EF:9C:69:EB:B7:07:FF:BB:61:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/a7c20d98-d772-40a7-b671-02859bf02e23/7dd289db-ca9c-38e2-a109-e2c9432f752e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/a7c20d98-d772-40a7-b671-02859bf02e23/a7c20d98-d772-40a7-b671-02859bf02e23.crl X509v3 Authority Key Identifier: keyid:7E:83:65:54:DC:C0:CA:CE:FE:AB:92:8D:F1:C2:7C:18:ED:45:E2:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/a7c20d98-d772-40a7-b671-02859bf02e23.cer sbgp-ipAddrBlock: critical IPv4: 23.152.76.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:72:e4:79:1c:97:7a:8d:23:31:55:76:19:29:a5:c5:98:8d: 26:54:7d:9a:07:29:f3:28:67:4a:5d:17:bb:70:2b:5f:08:e5: 62:8c:8c:97:af:32:79:76:19:f2:4b:59:9f:89:d4:95:d7:cd: af:ed:b6:50:53:c1:dd:c1:a6:f1:cc:73:f1:66:3f:66:77:d9: 11:07:ea:32:7e:38:1d:7c:a6:d6:4d:92:97:2c:3f:67:0a:4a: ac:70:1a:20:d9:03:6b:f1:62:b7:92:99:0f:57:9c:4a:12:1b: 51:5e:50:04:78:97:07:91:9b:8f:ae:96:8c:ac:99:17:51:20: 59:e2:61:e6:44:68:e8:ba:38:b1:6b:ac:e3:69:b9:50:3c:ab: 74:6c:7f:89:76:0a:33:95:ca:c8:44:9e:41:4f:a5:eb:04:a5: 2d:be:55:a4:ce:24:8a:a0:8b:6d:d2:21:60:61:ca:c1:8b:c6: 4a:4e:8a:b5:dc:69:19:43:ce:ff:3c:ee:05:b5:f2:c5:94:0a: 12:5c:de:86:63:be:88:f3:21:4d:3d:5d:f8:36:9a:9d:ea:8f: b8:eb:6c:95:70:f5:06:cd:9d:09:a2:11:62:fe:78:ba:0b:d2: 4d:69:67:1e:f9:64:b6:b0:d5:c9:e2:6b:d6:59:24:3c:b5:f0: 3a:86:75:2a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE86F94XzjbvYthkPEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTdjMjBkOTgtZDc3Mi00MGE3LWI2NzEtMDI4NTliZjAy ZTIzMB4XDTI2MDkxOTEzMDAxMloXDTI2MTIxODE0MDAxMlowLzEtMCsGA1UEAxMk OTg0NGQ3OWEtMzFmYi00OWRkLWI2OGQtMzlkOWQ4MGIyNTYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArjiVEpG8XzjLe92LOeBcZB87l9ya/wuwq9EP 5h7qybebrlBN5nsxIwTVPCyPGfGj90UWnpVk+9iHQnpjRLAvGPr5Ng2WTlaxHrfh IY+Zqo92ri3O7uVkK9tLdaOc4JW8fA54hszc/ajnn+Ae4sGBMP4mLEAL6F5U70cm rVzLxM3+q4DjSyBBti+SWaPcCGpFQzr6+ntZ0yzjVZrANVJV0/gkAAyS26Mr6yay 2uH2Tw5ZatWvCUF8NdyrqQk0kDuV2s8aqlHn6/lCxYPzhmac3AjvTJw8j380N7yu IHStvqCzL2eSSpnYyvsQjdj+S/0LVB9e+kAzryxE3uYZV7j4BwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNRsYl3LY4ikUJzvnGnrtwf/u2GSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9hN2My MGQ5OC1kNzcyLTQwYTctYjY3MS0wMjg1OWJmMDJlMjMvN2RkMjg5ZGItY2E5Yy0z OGUyLWExMDktZTJjOTQzMmY3NTJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvYTdjMjBkOTgtZDc3Mi00MGE3LWI2 NzEtMDI4NTliZjAyZTIzL2E3YzIwZDk4LWQ3NzItNDBhNy1iNjcxLTAyODU5YmYw MmUyMy5jcmwwHwYDVR0jBBgwFoAUfoNlVNzAys7+q5KN8cJ8GO1F4p4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS9hN2MyMGQ5OC1kNzcyLTQwYTctYjY3MS0wMjg1 OWJmMDJlMjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5hMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJty5Hkcl3qNIzFVdhkppcWYjSZUfZoHKfMoZ0pdF7twK18I5WKMjJev Mnl2GfJLWZ+J1JXXza/ttlBTwd3BpvHMc/FmP2Z32REH6jJ+OB18ptZNkpcsP2cK SqxwGiDZA2vxYreSmQ9XnEoSG1FeUAR4lweRm4+uloysmRdRIFniYeZEaOi6OLFr rONpuVA8q3Rsf4l2CjOVyshEnkFPpesEpS2+VaTOJIqgi23SIWBhysGLxkpOirXc aRlDzv887gW18sWUChJc3oZjvojzIU09Xfg2mp3qj7jrbJVw9QbNnQmiEWL+eLoL 0k1pZx75ZLaw1cnia9ZZJDy18DqGdSo= -----END CERTIFICATE-----Generated at Mon Sep 21 21:22:06 2026 by rpki-client