$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/589a433f-d0bb-4ea9-85da-52c4d90317c6/d78e784b-8c0d-3569-95c4-94dd80ba0a0d.roa File: d78e784b-8c0d-3569-95c4-94dd80ba0a0d.roa (raw, json) Hash identifier: jKA/ay5SZJR8qp6tE6skb0GBiE3uLsX482T7rJmBizY= Subject key identifier: B0:09:D2:D9:54:2C:E4:86:4A:3F:32:C3:F0:58:22:81:5A:6E:CD:1D Certificate issuer: /CN=589a433f-d0bb-4ea9-85da-52c4d90317c6 Certificate serial: 010D0C9F4328584F17324F19B109FC5C52FF7A6C Authority key identifier: 79:60:22:BE:33:4D:1A:6C:DB:E7:AD:84:0F:70:4A:B7:E9:87:6B:F3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/589a433f-d0bb-4ea9-85da-52c4d90317c6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/589a433f-d0bb-4ea9-85da-52c4d90317c6/d78e784b-8c0d-3569-95c4-94dd80ba0a0d.roa Signing time: Mon 07 Sep 2026 01:00:11 +0000 ROA not before: Mon 07 Sep 2026 01:00:11 +0000 ROA not after: Sun 06 Dec 2026 02:00:11 +0000 asID: 401454 IP address blocks: 23.147.116.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/589a433f-d0bb-4ea9-85da-52c4d90317c6/589a433f-d0bb-4ea9-85da-52c4d90317c6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/589a433f-d0bb-4ea9-85da-52c4d90317c6/589a433f-d0bb-4ea9-85da-52c4d90317c6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/589a433f-d0bb-4ea9-85da-52c4d90317c6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:17:32:4f:19:b1:09:fc:5c:52:ff:7a:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=589a433f-d0bb-4ea9-85da-52c4d90317c6 Validity Not Before: Sep 7 01:00:11 2026 GMT Not After : Dec 6 02:00:11 2026 GMT Subject: CN=6a326350-742b-48a5-ba6e-579a42cc377d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:42:58:61:0a:10:0b:f7:6c:03:3b:91:3b:60: b0:4e:bf:46:a4:cd:24:cc:16:6b:54:26:26:12:69: 59:aa:93:f1:84:6c:95:d5:9e:9c:80:ed:69:f2:24: 81:ed:4e:3e:ad:31:e4:26:ad:ef:c4:7d:d8:9b:56: dd:79:7f:4d:c4:2c:93:1f:de:3f:b7:07:a9:87:98: 32:f7:cb:34:52:47:ce:c0:53:49:d8:94:ff:19:96: 6c:16:4f:8b:4c:da:6a:71:50:36:07:09:9b:66:4e: be:97:ee:ad:36:6c:c8:2e:c2:57:ae:59:4f:ad:31: 22:07:d9:f2:46:fd:de:74:a7:25:43:41:82:4a:8d: cf:c4:c0:ab:b4:1d:e1:64:c9:1e:09:8d:63:5f:a9: 00:5f:9c:56:3c:89:3f:d3:97:52:7e:51:27:12:dc: da:89:49:ed:3c:53:9f:c0:c5:09:91:30:5b:e0:52: 56:d9:51:5b:1c:a4:54:0e:9e:8b:3e:85:09:18:ce: 45:66:c6:78:cc:af:c3:7e:68:6f:07:49:eb:3f:1f: 26:35:d2:71:9a:97:cd:94:59:e7:42:75:de:69:0f: fe:77:bc:f9:30:2d:58:84:17:ce:6b:d1:1a:1a:df: f2:e7:95:c8:2d:9f:e7:71:a4:c1:02:6b:7f:81:ff: cc:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:09:D2:D9:54:2C:E4:86:4A:3F:32:C3:F0:58:22:81:5A:6E:CD:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/589a433f-d0bb-4ea9-85da-52c4d90317c6/d78e784b-8c0d-3569-95c4-94dd80ba0a0d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/589a433f-d0bb-4ea9-85da-52c4d90317c6/589a433f-d0bb-4ea9-85da-52c4d90317c6.crl X509v3 Authority Key Identifier: keyid:79:60:22:BE:33:4D:1A:6C:DB:E7:AD:84:0F:70:4A:B7:E9:87:6B:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/589a433f-d0bb-4ea9-85da-52c4d90317c6.cer sbgp-ipAddrBlock: critical IPv4: 23.147.116.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:ce:f4:f2:c1:20:f9:f8:c7:06:d3:2d:b9:5c:a7:42:6d:8b: 2f:11:70:0c:e3:77:12:63:86:b3:df:bf:b0:26:95:44:ee:7b: dc:de:6c:15:fc:35:6c:d4:78:53:46:d5:ae:69:6c:6a:06:56: 83:f7:aa:45:3e:96:66:5a:17:71:e6:3f:86:bf:47:b7:79:4e: ce:d8:f7:06:aa:47:ec:62:a3:48:e6:25:4a:ef:b1:e8:3b:a6: da:6b:25:b8:2a:24:00:80:b8:81:6e:db:6e:6b:7e:82:44:86: 4f:08:83:01:5c:0b:fa:f8:7a:b3:71:68:63:05:1a:f2:7c:b5: 0d:97:7d:02:aa:ec:f2:92:60:32:ec:34:e5:9b:b4:f1:c7:f2: 61:93:7e:79:2f:a2:94:91:76:fd:97:a9:9f:4b:c1:2c:33:4b: 4d:5b:92:f9:91:08:1a:b6:ee:e6:20:48:2a:ec:e2:95:b0:8a: 56:8d:af:25:32:28:9d:f6:06:be:d9:64:58:9a:35:27:13:66: a0:f5:ef:60:1b:53:ea:42:67:f6:83:eb:e7:62:91:e9:3e:d2: 57:ff:04:f7:39:32:b1:2a:8c:b6:e1:ea:7e:8a:63:2d:39:8f: 6b:71:84:75:3f:c1:04:f5:9c:e7:34:92:3a:d1:0c:92:3e:87: 2c:75:77:fe -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8XMk8ZsQn8XFL/emwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTg5YTQzM2YtZDBiYi00ZWE5LTg1ZGEtNTJjNGQ5MDMx N2M2MB4XDTI2MDkwNzAxMDAxMVoXDTI2MTIwNjAyMDAxMVowLzEtMCsGA1UEAxMk NmEzMjYzNTAtNzQyYi00OGE1LWJhNmUtNTc5YTQyY2MzNzdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiEJYYQoQC/dsAzuRO2CwTr9GpM0kzBZrVCYm EmlZqpPxhGyV1Z6cgO1p8iSB7U4+rTHkJq3vxH3Ym1bdeX9NxCyTH94/tweph5gy 98s0UkfOwFNJ2JT/GZZsFk+LTNpqcVA2BwmbZk6+l+6tNmzILsJXrllPrTEiB9ny Rv3edKclQ0GCSo3PxMCrtB3hZMkeCY1jX6kAX5xWPIk/05dSflEnEtzaiUntPFOf wMUJkTBb4FJW2VFbHKRUDp6LPoUJGM5FZsZ4zK/DfmhvB0nrPx8mNdJxmpfNlFnn QnXeaQ/+d7z5MC1YhBfOa9EaGt/y55XILZ/ncaTBAmt/gf/MiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLAJ0tlULOSGSj8yw/BYIoFabs0dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81ODlh NDMzZi1kMGJiLTRlYTktODVkYS01MmM0ZDkwMzE3YzYvZDc4ZTc4NGItOGMwZC0z NTY5LTk1YzQtOTRkZDgwYmEwYTBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNTg5YTQzM2YtZDBiYi00ZWE5LTg1 ZGEtNTJjNGQ5MDMxN2M2LzU4OWE0MzNmLWQwYmItNGVhOS04NWRhLTUyYzRkOTAz MTdjNi5jcmwwHwYDVR0jBBgwFoAUeWAivjNNGmzb562ED3BKt+mHa/MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC81ODlhNDMzZi1kMGJiLTRlYTktODVkYS01MmM0 ZDkwMzE3YzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5N0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB7O9PLBIPn4xwbTLblcp0Jtiy8RcAzjdxJjhrPfv7AmlUTue9zebBX8 NWzUeFNG1a5pbGoGVoP3qkU+lmZaF3HmP4a/R7d5Ts7Y9waqR+xio0jmJUrvseg7 ptprJbgqJACAuIFu225rfoJEhk8IgwFcC/r4erNxaGMFGvJ8tQ2XfQKq7PKSYDLs NOWbtPHH8mGTfnkvopSRdv2XqZ9LwSwzS01bkvmRCBq27uYgSCrs4pWwilaNryUy KJ32Br7ZZFiaNScTZqD172AbU+pCZ/aD6+dikek+0lf/BPc5MrEqjLbh6n6KYy05 j2txhHU/wQT1nOc0kjrRDJI+hyx1d/4= -----END CERTIFICATE-----Generated at Tue Sep 29 01:17:50 2026 by rpki-client