$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/30d3faac-4e2c-477c-b176-5a187cfab492/5d22b1ed-c101-3a2c-82b4-40f390797ebb.roa File: 5d22b1ed-c101-3a2c-82b4-40f390797ebb.roa (raw, json) Hash identifier: rmVcXgt5JZ4bB32a/0X5jC02Ryvh3lXtpMMrKLQU6aI= Subject key identifier: C0:A9:8D:34:BA:7E:1D:37:24:AC:B4:5B:35:25:2E:A0:50:57:91:B4 Certificate issuer: /CN=30d3faac-4e2c-477c-b176-5a187cfab492 Certificate serial: 010D0C9F4328584F024220FFD29B297327C7D680 Authority key identifier: A2:E7:EA:FF:3C:40:44:9D:4A:89:7C:D1:8E:36:C3:7F:9B:3D:28:18 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/30d3faac-4e2c-477c-b176-5a187cfab492.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/30d3faac-4e2c-477c-b176-5a187cfab492/5d22b1ed-c101-3a2c-82b4-40f390797ebb.roa Signing time: Sun 30 Aug 2026 13:00:11 +0000 ROA not before: Sun 30 Aug 2026 13:00:11 +0000 ROA not after: Sat 28 Nov 2026 14:00:11 +0000 asID: 15005 IP address blocks: 23.152.204.0/24 maxlen: 24 2604:73c0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/30d3faac-4e2c-477c-b176-5a187cfab492/30d3faac-4e2c-477c-b176-5a187cfab492.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/30d3faac-4e2c-477c-b176-5a187cfab492/30d3faac-4e2c-477c-b176-5a187cfab492.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/30d3faac-4e2c-477c-b176-5a187cfab492.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:02:42:20:ff:d2:9b:29:73:27:c7:d6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30d3faac-4e2c-477c-b176-5a187cfab492 Validity Not Before: Aug 30 13:00:11 2026 GMT Not After : Nov 28 14:00:11 2026 GMT Subject: CN=afe4f1db-9a49-443b-81fd-e1109f1f3f1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:b0:51:57:32:c6:52:c4:25:bb:b4:7f:7a:f7: ea:24:35:fd:1d:5b:85:e5:67:9a:2e:db:3c:ab:5c: 3f:57:2c:80:66:2a:36:99:4d:08:13:db:9d:08:93: 9e:5b:b6:db:3e:8b:85:a0:97:5b:6e:57:5b:01:45: fd:a8:74:c5:95:02:9f:c8:10:b8:89:7f:c6:e2:7b: 71:7f:92:5c:2d:ee:e9:5a:5e:17:bc:28:b7:83:7b: 17:77:e9:66:d5:f9:70:eb:5d:ca:d1:a3:0f:7f:10: df:13:6d:a9:50:dc:67:75:17:a6:b6:59:8b:0a:eb: a6:d1:df:63:09:f8:69:cc:3d:b6:6c:cc:a5:78:ee: 78:68:74:cc:7b:e1:d4:f8:49:08:6d:c0:fc:a5:b9: 88:66:4b:a8:14:16:00:9f:b1:d1:bf:08:e2:53:9b: af:3d:32:c9:10:6b:b3:29:0a:4c:8d:c5:e1:57:a4: 45:ee:db:82:41:d6:d4:fb:ce:3b:3f:6b:a1:0f:5e: 88:1a:2a:a5:cc:94:31:44:d7:4b:86:1f:ea:62:23: 9d:cc:a1:cc:c3:17:66:e4:f1:2b:ee:d8:0d:dd:73: 9a:b2:b1:fa:72:3a:4f:6a:8f:26:f3:3f:42:9f:99: 14:c6:6f:20:14:e3:75:56:ac:63:2c:a9:8d:ab:80: 77:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:A9:8D:34:BA:7E:1D:37:24:AC:B4:5B:35:25:2E:A0:50:57:91:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/30d3faac-4e2c-477c-b176-5a187cfab492/5d22b1ed-c101-3a2c-82b4-40f390797ebb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/30d3faac-4e2c-477c-b176-5a187cfab492/30d3faac-4e2c-477c-b176-5a187cfab492.crl X509v3 Authority Key Identifier: keyid:A2:E7:EA:FF:3C:40:44:9D:4A:89:7C:D1:8E:36:C3:7F:9B:3D:28:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/30d3faac-4e2c-477c-b176-5a187cfab492.cer sbgp-ipAddrBlock: critical IPv4: 23.152.204.0/24 IPv6: 2604:73c0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:cd:42:69:fe:5e:bb:c9:f3:ec:89:1b:66:f9:ae:2d:8f:75: 03:b2:24:4d:10:1c:52:0b:63:e1:c4:ac:c3:96:e6:3f:b1:fa: 88:68:5b:b9:ab:32:f8:be:09:40:26:0f:0a:22:c8:53:03:12: 97:b7:f2:02:e2:c6:6d:25:75:de:c1:01:ca:40:64:41:33:98: 48:c2:b9:84:a1:08:b7:af:60:97:d3:77:3d:b9:4a:ad:6b:d5: 72:c1:88:1c:0f:73:b0:81:37:78:ae:26:8c:9b:86:c4:cb:37: 5b:f3:4e:71:73:38:5d:6f:ca:23:e1:86:3a:10:73:c1:f9:6f: 96:53:78:2c:a4:c2:b6:db:10:cb:5c:d4:93:c7:09:4a:3a:2b: 88:4e:d0:ce:7c:78:96:7a:8b:3e:6f:cb:00:6a:3b:94:20:ce: ec:25:3f:ff:e6:43:e1:5a:4a:53:13:40:1d:04:20:16:d0:e8: 69:01:fd:63:ad:27:47:ce:ee:d8:6e:8b:34:2c:91:1e:1d:6d: f2:e1:13:a9:8b:e1:36:4f:a8:8b:3f:6e:5f:d9:56:42:46:af: 3d:4c:4e:6b:6a:9e:47:41:98:ae:4d:f7:58:39:89:c7:ef:e8: 87:7d:91:01:bd:c7:db:f9:aa:8c:ba:08:20:a0:72:06:5a:dc: 3a:3b:3c:0f -----BEGIN CERTIFICATE----- MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWE8CQiD/0pspcyfH1oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzBkM2ZhYWMtNGUyYy00NzdjLWIxNzYtNWExODdjZmFi NDkyMB4XDTI2MDgzMDEzMDAxMVoXDTI2MTEyODE0MDAxMVowLzEtMCsGA1UEAxMk YWZlNGYxZGItOWE0OS00NDNiLTgxZmQtZTExMDlmMWYzZjFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiLBRVzLGUsQlu7R/evfqJDX9HVuF5WeaLts8 q1w/VyyAZio2mU0IE9udCJOeW7bbPouFoJdbbldbAUX9qHTFlQKfyBC4iX/G4ntx f5JcLe7pWl4XvCi3g3sXd+lm1flw613K0aMPfxDfE22pUNxndRemtlmLCuum0d9j CfhpzD22bMyleO54aHTMe+HU+EkIbcD8pbmIZkuoFBYAn7HRvwjiU5uvPTLJEGuz KQpMjcXhV6RF7tuCQdbU+847P2uhD16IGiqlzJQxRNdLhh/qYiOdzKHMwxdm5PEr 7tgN3XOasrH6cjpPao8m8z9Cn5kUxm8gFON1VqxjLKmNq4B3/wIDAQABo4IDZDCC A2AwHQYDVR0OBBYEFMCpjTS6fh03JKy0WzUlLqBQV5G0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8zMGQz ZmFhYy00ZTJjLTQ3N2MtYjE3Ni01YTE4N2NmYWI0OTIvNWQyMmIxZWQtYzEwMS0z YTJjLTgyYjQtNDBmMzkwNzk3ZWJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMzBkM2ZhYWMtNGUyYy00NzdjLWIx NzYtNWExODdjZmFiNDkyLzMwZDNmYWFjLTRlMmMtNDc3Yy1iMTc2LTVhMTg3Y2Zh YjQ5Mi5jcmwwHwYDVR0jBBgwFoAUoufq/zxARJ1KiXzRjjbDf5s9KBgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8zMGQzZmFhYy00ZTJjLTQ3N2MtYjE3Ni01YTE4 N2NmYWI0OTIuY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAF5jMMA0E AgACMAcDBQAmBHPAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0 bWwwDQYJKoZIhvcNAQELBQADggEBAAjNQmn+XrvJ8+yJG2b5ri2PdQOyJE0QHFIL Y+HErMOW5j+x+ohoW7mrMvi+CUAmDwoiyFMDEpe38gLixm0ldd7BAcpAZEEzmEjC uYShCLevYJfTdz25Sq1r1XLBiBwPc7CBN3iuJoybhsTLN1vzTnFzOF1vyiPhhjoQ c8H5b5ZTeCykwrbbEMtc1JPHCUo6K4hO0M58eJZ6iz5vywBqO5QgzuwlP//mQ+Fa SlMTQB0EIBbQ6GkB/WOtJ0fO7thuizQskR4dbfLhE6mL4TZPqIs/bl/ZVkJGrz1M TmtqnkdBmK5N91g5icfv6Id9kQG9x9v5qoy6CCCgcgZa3Do7PA8= -----END CERTIFICATE-----Generated at Mon Sep 21 19:57:28 2026 by rpki-client