$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/ff30b46f-3164-454e-9713-96a04c0b8647/a2bc224f-54d5-3eae-8835-47a93792a80d.roa File: a2bc224f-54d5-3eae-8835-47a93792a80d.roa (raw, json) Hash identifier: JFfXWemEYM2Zj2JitF2UgUegoBBF03ob6AcHc029I30= Subject key identifier: F7:31:9E:BC:03:7F:91:8D:97:85:14:A0:D5:24:58:C0:51:67:90:D7 Certificate issuer: /CN=ff30b46f-3164-454e-9713-96a04c0b8647 Certificate serial: 010D0C9F4328584F9014546AB937754E65801440 Authority key identifier: D7:64:AF:95:64:E9:57:D3:27:51:ED:3B:61:EA:F2:B7:E4:8A:6D:DA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/ff30b46f-3164-454e-9713-96a04c0b8647.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/ff30b46f-3164-454e-9713-96a04c0b8647/a2bc224f-54d5-3eae-8835-47a93792a80d.roa Signing time: Tue 20 Oct 2026 08:12:49 +0000 ROA not before: Tue 20 Oct 2026 08:12:49 +0000 ROA not after: Mon 18 Jan 2027 09:12:49 +0000 asID: 197752 IP address blocks: 23.154.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/ff30b46f-3164-454e-9713-96a04c0b8647/ff30b46f-3164-454e-9713-96a04c0b8647.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/ff30b46f-3164-454e-9713-96a04c0b8647/ff30b46f-3164-454e-9713-96a04c0b8647.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/ff30b46f-3164-454e-9713-96a04c0b8647.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 29 Oct 2026 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:90:14:54:6a:b9:37:75:4e:65:80:14:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff30b46f-3164-454e-9713-96a04c0b8647 Validity Not Before: Oct 20 08:12:49 2026 GMT Not After : Jan 18 09:12:49 2027 GMT Subject: CN=123a33c2-ce99-4567-81d9-099c10f59eb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:75:03:cd:37:16:2b:35:f0:8f:78:8b:f7:36: df:8a:ed:f5:f1:7e:69:46:14:dd:03:6c:84:e7:57: 77:7e:9a:07:97:2d:a5:e5:ed:7e:ab:c2:2b:a9:f6: 3c:07:76:a3:be:3a:50:44:cf:7b:48:68:13:c4:20: df:ae:e9:de:1b:f1:32:1f:04:47:37:d7:51:c4:28: 20:91:93:e8:aa:60:21:17:c7:07:58:9b:d9:cb:bd: fd:22:51:bc:a9:51:2b:3d:9b:47:c1:ae:07:66:4f: a1:6b:da:8f:fa:c9:28:cf:42:05:01:2f:27:99:6b: fa:b2:e3:6a:d9:b8:04:e6:af:26:b4:ea:30:4f:17: 38:ef:b0:86:9a:b2:84:17:c5:a4:5b:fd:e6:56:f5: c0:d1:b9:51:e9:ed:de:ed:a2:9f:6f:d1:9e:8b:50: a3:d1:8a:44:ca:49:ea:23:3f:8b:bd:db:95:34:5e: 52:ff:ee:1f:66:41:42:03:df:e9:a6:38:88:da:5a: 12:a0:e0:df:ef:2f:ba:ec:42:93:e9:ab:69:bc:e3: f9:26:c9:38:54:14:f7:aa:48:8a:bf:a9:41:cc:73: 29:23:64:1b:17:59:03:09:24:ea:7b:19:d9:3a:0c: be:6e:3b:b2:ee:08:0e:c1:e2:b4:f8:a8:3e:70:20: bd:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:31:9E:BC:03:7F:91:8D:97:85:14:A0:D5:24:58:C0:51:67:90:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/ff30b46f-3164-454e-9713-96a04c0b8647/a2bc224f-54d5-3eae-8835-47a93792a80d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/ff30b46f-3164-454e-9713-96a04c0b8647/ff30b46f-3164-454e-9713-96a04c0b8647.crl X509v3 Authority Key Identifier: keyid:D7:64:AF:95:64:E9:57:D3:27:51:ED:3B:61:EA:F2:B7:E4:8A:6D:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/ff30b46f-3164-454e-9713-96a04c0b8647.cer sbgp-ipAddrBlock: critical IPv4: 23.154.104.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:04:5c:87:fd:3f:13:c5:bd:c4:82:8e:8f:f6:08:e1:e3:b8: 7d:8d:f0:b6:fb:f1:e4:d9:a9:45:60:56:1d:e5:7b:0a:fb:eb: e4:78:d0:90:24:b9:e0:cf:89:a1:ac:3f:74:aa:98:dd:66:97: 95:f2:cd:96:26:63:1f:e4:1f:20:10:88:38:6e:fd:73:6a:11: a4:24:b4:63:9f:4d:22:4e:e4:53:bd:8c:9a:31:3b:c9:af:6b: 8d:23:53:b4:b4:01:e0:5a:89:ec:f9:a3:c7:0d:86:a1:39:0e: b1:12:cf:47:56:15:65:02:5d:4e:37:bc:c0:f7:b7:7b:70:71: 79:d2:2f:30:61:9e:d1:3c:cd:ea:ec:e7:81:84:11:45:61:0c: c0:47:91:0b:c8:d6:36:a8:84:8f:78:cb:7f:a4:17:8c:b9:ba: f3:a5:e6:5a:07:b2:13:0b:2d:f5:78:7d:db:5d:72:27:4d:59: 2e:b3:ef:6c:28:ae:a2:fc:74:e7:d7:ad:1a:00:e0:79:91:a6: db:d9:f1:ec:1e:25:58:41:f8:d8:99:9d:fd:f5:39:e6:fc:ab: da:69:fa:12:b7:eb:ee:0d:2b:02:3e:5d:3e:b9:12:a2:85:96: 90:56:7c:77:dc:b1:ac:26:7a:f2:3c:bb:15:29:cd:aa:bf:9b: 24:f7:06:2d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+QFFRquTd1TmWAFEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmYzMGI0NmYtMzE2NC00NTRlLTk3MTMtOTZhMDRjMGI4 NjQ3MB4XDTI2MTAyMDA4MTI0OVoXDTI3MDExODA5MTI0OVowLzEtMCsGA1UEAxMk MTIzYTMzYzItY2U5OS00NTY3LTgxZDktMDk5YzEwZjU5ZWIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApHUDzTcWKzXwj3iL9zbfiu318X5pRhTdA2yE 51d3fpoHly2l5e1+q8IrqfY8B3ajvjpQRM97SGgTxCDfruneG/EyHwRHN9dRxCgg kZPoqmAhF8cHWJvZy739IlG8qVErPZtHwa4HZk+ha9qP+skoz0IFAS8nmWv6suNq 2bgE5q8mtOowTxc477CGmrKEF8WkW/3mVvXA0blR6e3e7aKfb9Gei1Cj0YpEyknq Iz+LvduVNF5S/+4fZkFCA9/ppjiI2loSoODf7y+67EKT6atpvOP5Jsk4VBT3qkiK v6lBzHMpI2QbF1kDCSTqexnZOgy+bjuy7ggOweK0+Kg+cCC90wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPcxnrwDf5GNl4UUoNUkWMBRZ5DXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS9mZjMw YjQ2Zi0zMTY0LTQ1NGUtOTcxMy05NmEwNGMwYjg2NDcvYTJiYzIyNGYtNTRkNS0z ZWFlLTg4MzUtNDdhOTM3OTJhODBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wZGZlNThmMi1l ZGZlLTQ2MTktODZiZC1kZWYyY2EzYWQ5MTkvZmYzMGI0NmYtMzE2NC00NTRlLTk3 MTMtOTZhMDRjMGI4NjQ3L2ZmMzBiNDZmLTMxNjQtNDU0ZS05NzEzLTk2YTA0YzBi ODY0Ny5jcmwwHwYDVR0jBBgwFoAU12SvlWTpV9MnUe07Yeryt+SKbdowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYx OS04NmJkLWRlZjJjYTNhZDkxOS9mZjMwYjQ2Zi0zMTY0LTQ1NGUtOTcxMy05NmEw NGMwYjg2NDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5poMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABUEXIf9PxPFvcSCjo/2COHjuH2N8Lb78eTZqUVgVh3lewr76+R40JAk ueDPiaGsP3SqmN1ml5XyzZYmYx/kHyAQiDhu/XNqEaQktGOfTSJO5FO9jJoxO8mv a40jU7S0AeBaiez5o8cNhqE5DrESz0dWFWUCXU43vMD3t3twcXnSLzBhntE8zers 54GEEUVhDMBHkQvI1jaohI94y3+kF4y5uvOl5loHshMLLfV4fdtdcidNWS6z72wo rqL8dOfXrRoA4HmRptvZ8eweJVhB+NiZnf31Oeb8q9pp+hK36+4NKwI+XT65EqKF lpBWfHfcsawmevI8uxUpzaq/myT3Bi0= -----END CERTIFICATE-----Generated at Tue Oct 27 22:36:35 2026 by rpki-client