$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/cda2dd6b-7ad6-4c49-80a2-5ab58364f431/f9acfb91-84a4-3f30-be71-5feb1d187251.roa File: f9acfb91-84a4-3f30-be71-5feb1d187251.roa (raw, json) Hash identifier: q6cKDi0Nzut9AwOHQrZzc3bUgEGif3LcXOjqb/E67jI= Subject key identifier: 44:92:AD:61:C4:91:C8:86:67:55:3B:BB:8F:68:63:A2:5B:BA:17:1F Certificate issuer: /CN=cda2dd6b-7ad6-4c49-80a2-5ab58364f431 Certificate serial: 010D0C9F4328584F35E7CD029C8CA4C546A7B140 Authority key identifier: 48:4C:07:42:A3:06:64:E2:4A:CA:BF:C1:42:46:3A:CF:54:53:C6:60 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/cda2dd6b-7ad6-4c49-80a2-5ab58364f431.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/cda2dd6b-7ad6-4c49-80a2-5ab58364f431/f9acfb91-84a4-3f30-be71-5feb1d187251.roa Signing time: Fri 18 Sep 2026 01:00:12 +0000 ROA not before: Fri 18 Sep 2026 01:00:12 +0000 ROA not after: Thu 17 Dec 2026 02:00:12 +0000 asID: 402187 IP address blocks: 23.153.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/cda2dd6b-7ad6-4c49-80a2-5ab58364f431/cda2dd6b-7ad6-4c49-80a2-5ab58364f431.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/cda2dd6b-7ad6-4c49-80a2-5ab58364f431/cda2dd6b-7ad6-4c49-80a2-5ab58364f431.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/cda2dd6b-7ad6-4c49-80a2-5ab58364f431.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:35:e7:cd:02:9c:8c:a4:c5:46:a7:b1:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cda2dd6b-7ad6-4c49-80a2-5ab58364f431 Validity Not Before: Sep 18 01:00:12 2026 GMT Not After : Dec 17 02:00:12 2026 GMT Subject: CN=225d6a11-d2c6-47d6-9aba-ae5b89eb796a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:a9:cc:48:0e:c4:21:ac:67:fd:ae:8e:3c:f5: 9a:22:a3:b3:c6:c1:ff:cb:92:bf:e3:bf:13:8a:d4: b5:95:64:e9:f0:83:0b:81:28:49:26:7d:61:4d:60: fd:a4:e3:76:6c:ef:8b:66:e6:01:d0:a3:e7:be:95: 7e:87:31:5c:cf:ef:36:46:cd:30:5d:8e:59:f2:d7: 54:49:17:95:f8:b7:fb:3a:e6:35:c5:30:d9:a3:22: 53:b6:ef:37:f3:33:e1:5e:71:bb:42:0f:55:e5:5e: 6e:af:a4:4a:21:3a:cc:40:91:73:53:7f:0d:0f:a2: ae:30:d3:4c:19:19:84:eb:a2:8d:b0:ef:d1:92:4c: b7:88:01:5e:cb:2c:31:5f:d6:09:29:ca:47:23:cd: a1:c5:de:73:f6:90:99:de:cf:a2:b2:e2:bc:82:cb: 59:48:9d:9a:de:6f:35:7b:80:96:81:81:0a:9b:b3: 85:9d:09:ab:d6:3e:c1:d6:67:2a:43:37:74:24:6e: da:76:24:b9:8a:17:c4:2c:6c:2a:cd:ed:89:44:29: de:cb:fb:55:41:09:1e:c3:61:05:e4:39:9e:04:35: 74:26:d9:1c:6a:8b:16:d5:0b:1a:d7:ec:90:47:3e: 0b:d3:de:d7:b0:d1:b0:3d:5c:34:d5:8d:a8:3b:6d: 0c:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:92:AD:61:C4:91:C8:86:67:55:3B:BB:8F:68:63:A2:5B:BA:17:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/cda2dd6b-7ad6-4c49-80a2-5ab58364f431/f9acfb91-84a4-3f30-be71-5feb1d187251.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/cda2dd6b-7ad6-4c49-80a2-5ab58364f431/cda2dd6b-7ad6-4c49-80a2-5ab58364f431.crl X509v3 Authority Key Identifier: keyid:48:4C:07:42:A3:06:64:E2:4A:CA:BF:C1:42:46:3A:CF:54:53:C6:60 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/cda2dd6b-7ad6-4c49-80a2-5ab58364f431.cer sbgp-ipAddrBlock: critical IPv4: 23.153.124.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:ec:c7:85:81:d6:bc:44:32:31:d8:43:08:08:e2:25:8f:3e: 1a:af:38:01:0b:29:7b:8b:d5:ef:e1:6c:b4:19:d5:e0:69:ea: ca:9a:54:2d:7e:33:1b:dc:08:6a:3e:94:0b:22:0b:a7:1d:b3: f8:a3:5f:8c:b6:99:52:c1:09:1f:37:1f:fa:cf:5d:df:66:b9: e4:dc:9d:5e:8b:fb:84:65:59:a4:dd:b7:44:91:fe:69:64:79: 5f:41:8b:62:be:f9:a9:7f:56:d7:db:e2:f8:b4:b5:23:b5:30: be:fe:f3:94:8a:5a:82:44:35:6f:28:54:88:f2:65:b2:ef:7b: 99:4b:c7:76:45:51:2d:ed:56:69:38:51:0f:31:ba:0c:a6:58: 46:07:63:91:de:ee:9f:c3:79:3e:ca:4d:33:e5:1f:92:1f:90: 6d:49:91:c0:41:ac:84:e1:a8:6c:3f:fe:3f:be:00:69:64:9b: 03:4d:9e:1a:eb:02:50:0c:f8:8c:e5:85:20:50:20:05:a1:cd: c4:3f:af:50:53:b1:d9:a9:33:f6:43:f8:1b:00:17:55:58:cf: e6:a9:c4:dc:83:ad:3a:ab:a9:2d:b0:a8:37:54:06:07:71:bf: 79:da:38:a9:9f:f6:2d:e9:1f:89:0b:cb:bf:36:68:71:56:99: d9:2d:e4:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE81580CnIykxUansUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2RhMmRkNmItN2FkNi00YzQ5LTgwYTItNWFiNTgzNjRm NDMxMB4XDTI2MDkxODAxMDAxMloXDTI2MTIxNzAyMDAxMlowLzEtMCsGA1UEAxMk MjI1ZDZhMTEtZDJjNi00N2Q2LTlhYmEtYWU1Yjg5ZWI3OTZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtqnMSA7EIaxn/a6OPPWaIqOzxsH/y5K/478T itS1lWTp8IMLgShJJn1hTWD9pON2bO+LZuYB0KPnvpV+hzFcz+82Rs0wXY5Z8tdU SReV+Lf7OuY1xTDZoyJTtu838zPhXnG7Qg9V5V5ur6RKITrMQJFzU38ND6KuMNNM GRmE66KNsO/Rkky3iAFeyywxX9YJKcpHI82hxd5z9pCZ3s+isuK8gstZSJ2a3m81 e4CWgYEKm7OFnQmr1j7B1mcqQzd0JG7adiS5ihfELGwqze2JRCney/tVQQkew2EF 5DmeBDV0JtkcaosW1Qsa1+yQRz4L097XsNGwPVw01Y2oO20MlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFESSrWHEkciGZ1U7u49oY6JbuhcfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9jZGEy ZGQ2Yi03YWQ2LTRjNDktODBhMi01YWI1ODM2NGY0MzEvZjlhY2ZiOTEtODRhNC0z ZjMwLWJlNzEtNWZlYjFkMTg3MjUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvY2RhMmRkNmItN2FkNi00YzQ5LTgw YTItNWFiNTgzNjRmNDMxL2NkYTJkZDZiLTdhZDYtNGM0OS04MGEyLTVhYjU4MzY0 ZjQzMS5jcmwwHwYDVR0jBBgwFoAUSEwHQqMGZOJKyr/BQkY6z1RTxmAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS9jZGEyZGQ2Yi03YWQ2LTRjNDktODBhMi01YWI1 ODM2NGY0MzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5l8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFbsx4WB1rxEMjHYQwgI4iWPPhqvOAELKXuL1e/hbLQZ1eBp6sqaVC1+ MxvcCGo+lAsiC6cds/ijX4y2mVLBCR83H/rPXd9mueTcnV6L+4RlWaTdt0SR/mlk eV9Bi2K++al/Vtfb4vi0tSO1ML7+85SKWoJENW8oVIjyZbLve5lLx3ZFUS3tVmk4 UQ8xugymWEYHY5He7p/DeT7KTTPlH5IfkG1JkcBBrIThqGw//j++AGlkmwNNnhrr AlAM+IzlhSBQIAWhzcQ/r1BTsdmpM/ZD+BsAF1VYz+apxNyDrTqrqS2wqDdUBgdx v3naOKmf9i3pH4kLy782aHFWmdkt5CA= -----END CERTIFICATE-----Generated at Sat Sep 26 09:10:51 2026 by rpki-client