$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/1c893490-b8e0-4924-81b3-82310cb7253f/f7e15033-0f46-3fad-a127-2036255bb1f1.roa File: f7e15033-0f46-3fad-a127-2036255bb1f1.roa (raw, json) Hash identifier: Na1jFe/iyAixwQqVmamX/jlRIC+FxHWHCNBU59VFuMs= Subject key identifier: 0D:EA:39:21:4E:30:76:E9:ED:8E:D5:AB:E9:D9:A7:EB:D4:5B:A8:1C Certificate issuer: /CN=1c893490-b8e0-4924-81b3-82310cb7253f Certificate serial: 010D0C9F4328584F225CFCC464CEFA5691103080 Authority key identifier: 19:2E:47:7E:BB:1E:DC:5D:20:18:26:79:BF:A6:8C:24:35:1F:0F:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/1c893490-b8e0-4924-81b3-82310cb7253f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/1c893490-b8e0-4924-81b3-82310cb7253f/f7e15033-0f46-3fad-a127-2036255bb1f1.roa Signing time: Fri 11 Sep 2026 01:00:12 +0000 ROA not before: Fri 11 Sep 2026 01:00:12 +0000 ROA not after: Thu 10 Dec 2026 02:00:12 +0000 asID: 401077 IP address blocks: 23.186.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/1c893490-b8e0-4924-81b3-82310cb7253f/1c893490-b8e0-4924-81b3-82310cb7253f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/1c893490-b8e0-4924-81b3-82310cb7253f/1c893490-b8e0-4924-81b3-82310cb7253f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/1c893490-b8e0-4924-81b3-82310cb7253f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:22:5c:fc:c4:64:ce:fa:56:91:10:30:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c893490-b8e0-4924-81b3-82310cb7253f Validity Not Before: Sep 11 01:00:12 2026 GMT Not After : Dec 10 02:00:12 2026 GMT Subject: CN=38eb1a95-ff15-4e46-949c-40de5d5f8ec9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:d7:e5:ab:bd:3c:e4:a2:6e:39:0c:32:1d:ec: 22:77:79:aa:26:34:bb:03:c4:9b:e8:49:7f:92:5a: f2:05:bf:c3:8b:80:4f:f5:cf:4c:40:ef:22:57:9d: fb:77:91:47:ca:8d:2b:52:86:c2:a1:8b:75:50:82: ad:da:64:e5:5a:9e:79:70:9b:a0:9f:19:f9:40:6e: 26:6c:58:63:53:86:22:11:a7:95:8a:48:5f:91:e6: 36:e9:09:51:0c:d7:f9:28:df:75:3c:66:9e:17:a3: 1b:43:f9:26:8e:f4:4d:b7:7a:02:11:cb:a7:d8:59: 12:4a:49:ab:73:43:98:b9:c8:03:dd:00:d7:45:5b: d4:b7:29:e8:70:5b:0e:da:66:bc:5c:79:55:b9:b2: 6e:06:e1:15:af:3c:53:ab:88:1c:2c:5a:80:cd:dc: a1:1a:7b:6c:6d:e0:03:5d:6a:88:3d:c5:83:50:1f: d4:17:70:ab:f1:2e:71:96:95:42:c1:2a:6d:9f:5d: 77:8d:14:f7:8a:0d:3d:86:c9:d6:e5:c8:4f:5f:8c: da:41:93:04:7d:39:e0:0d:94:5a:d3:1d:c0:6a:31: 43:34:2c:e2:9b:06:5c:9b:88:59:8c:a0:ed:2f:55: d6:20:63:3c:08:44:f9:94:17:ca:6e:ee:94:7c:5b: 78:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:EA:39:21:4E:30:76:E9:ED:8E:D5:AB:E9:D9:A7:EB:D4:5B:A8:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/1c893490-b8e0-4924-81b3-82310cb7253f/f7e15033-0f46-3fad-a127-2036255bb1f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/1c893490-b8e0-4924-81b3-82310cb7253f/1c893490-b8e0-4924-81b3-82310cb7253f.crl X509v3 Authority Key Identifier: keyid:19:2E:47:7E:BB:1E:DC:5D:20:18:26:79:BF:A6:8C:24:35:1F:0F:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/1c893490-b8e0-4924-81b3-82310cb7253f.cer sbgp-ipAddrBlock: critical IPv4: 23.186.40.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b9:9b:9e:c4:b8:c9:79:dd:69:bb:90:43:3a:01:5f:c8:65:c4: f6:ff:53:ae:a4:c5:e4:c0:1a:3c:13:bd:47:cc:ba:82:5a:5e: 4a:6a:d2:44:b4:a8:57:e2:c4:9c:97:b3:3b:f5:27:1a:bf:e0: cf:14:91:1a:b4:06:65:05:f5:a5:2c:c7:23:3e:6f:55:42:6a: aa:d0:01:a4:3d:a4:fb:d1:43:fe:20:ce:1d:6b:b2:4a:6d:e4: f6:6a:2e:b5:b6:66:41:fb:a8:a6:8e:9c:08:27:cd:69:fa:7a: c3:fa:04:65:2c:74:a1:21:df:c7:8f:e4:b8:92:64:f7:f9:5a: 8a:0d:ef:bb:25:7a:fa:b1:86:ed:3e:7d:ea:b6:15:a2:a8:e5: a6:34:93:7e:b5:79:70:48:56:ee:eb:57:58:01:ac:2f:42:0a: 42:a7:13:2d:b9:8f:c1:2a:47:72:c7:97:11:ec:66:ec:0f:4d: e8:42:9c:35:20:b9:82:72:23:a7:bf:ec:5a:74:d1:86:bb:6d: 1d:1c:4b:20:48:94:00:79:b4:44:f1:05:5b:89:a9:95:45:c4: f9:4b:7f:f0:2e:ad:45:74:c3:14:94:d5:42:fd:a3:5b:12:00: ae:38:a0:e5:79:d0:b7:0f:13:5b:e5:bd:40:ac:d3:e4:11:b4: a1:bb:a2:62 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8iXPzEZM76VpEQMIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWM4OTM0OTAtYjhlMC00OTI0LTgxYjMtODIzMTBjYjcy NTNmMB4XDTI2MDkxMTAxMDAxMloXDTI2MTIxMDAyMDAxMlowLzEtMCsGA1UEAxMk MzhlYjFhOTUtZmYxNS00ZTQ2LTk0OWMtNDBkZTVkNWY4ZWM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwdflq7085KJuOQwyHewid3mqJjS7A8Sb6El/ klryBb/Di4BP9c9MQO8iV537d5FHyo0rUobCoYt1UIKt2mTlWp55cJugnxn5QG4m bFhjU4YiEaeVikhfkeY26QlRDNf5KN91PGaeF6MbQ/kmjvRNt3oCEcun2FkSSkmr c0OYucgD3QDXRVvUtynocFsO2ma8XHlVubJuBuEVrzxTq4gcLFqAzdyhGntsbeAD XWqIPcWDUB/UF3Cr8S5xlpVCwSptn113jRT3ig09hsnW5chPX4zaQZMEfTngDZRa 0x3AajFDNCzimwZcm4hZjKDtL1XWIGM8CET5lBfKbu6UfFt4+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA3qOSFOMHbp7Y7Vq+nZp+vUW6gcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8xYzg5 MzQ5MC1iOGUwLTQ5MjQtODFiMy04MjMxMGNiNzI1M2YvZjdlMTUwMzMtMGY0Ni0z ZmFkLWExMjctMjAzNjI1NWJiMWYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMWM4OTM0OTAtYjhlMC00OTI0LTgx YjMtODIzMTBjYjcyNTNmLzFjODkzNDkwLWI4ZTAtNDkyNC04MWIzLTgyMzEwY2I3 MjUzZi5jcmwwHwYDVR0jBBgwFoAUGS5Hfrse3F0gGCZ5v6aMJDUfD7IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8xYzg5MzQ5MC1iOGUwLTQ5MjQtODFiMy04MjMx MGNiNzI1M2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF7ooMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALmbnsS4yXndabuQQzoBX8hlxPb/U66kxeTAGjwTvUfMuoJaXkpq0kS0 qFfixJyXszv1Jxq/4M8UkRq0BmUF9aUsxyM+b1VCaqrQAaQ9pPvRQ/4gzh1rskpt 5PZqLrW2ZkH7qKaOnAgnzWn6esP6BGUsdKEh38eP5LiSZPf5WooN77slevqxhu0+ feq2FaKo5aY0k361eXBIVu7rV1gBrC9CCkKnEy25j8EqR3LHlxHsZuwPTehCnDUg uYJyI6e/7Fp00Ya7bR0cSyBIlAB5tETxBVuJqZVFxPlLf/AurUV0wxSU1UL9o1sS AK44oOV50LcPE1vlvUCs0+QRtKG7omI= -----END CERTIFICATE-----Generated at Sun Oct 4 03:12:47 2026 by rpki-client