$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2d0063f8-538a-4717-85ee-7ef9ee52bde3/ce99c46c-fd46-386f-a921-40b8d93d366b.roa File: ce99c46c-fd46-386f-a921-40b8d93d366b.roa (raw, json) Hash identifier: vmEYK8pV5+BHGAJZ9xA2PdC6Rw4hKcOSLD1j6nuqCGc= Subject key identifier: B9:95:09:6E:0E:3C:55:DE:2D:52:24:05:26:D4:C4:C9:86:41:09:8B Certificate issuer: /CN=2d0063f8-538a-4717-85ee-7ef9ee52bde3 Certificate serial: 010D0C9F4328584F78E82D1A306C02397F612680 Authority key identifier: 35:F9:B9:DB:1F:CC:09:4C:6F:E6:82:C3:4A:83:20:2A:F7:84:27:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2d0063f8-538a-4717-85ee-7ef9ee52bde3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2d0063f8-538a-4717-85ee-7ef9ee52bde3/ce99c46c-fd46-386f-a921-40b8d93d366b.roa Signing time: Mon 12 Oct 2026 01:00:13 +0000 ROA not before: Mon 12 Oct 2026 01:00:13 +0000 ROA not after: Sun 10 Jan 2027 02:00:13 +0000 asID: 3507 IP address blocks: 23.128.48.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2d0063f8-538a-4717-85ee-7ef9ee52bde3/2d0063f8-538a-4717-85ee-7ef9ee52bde3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2d0063f8-538a-4717-85ee-7ef9ee52bde3/2d0063f8-538a-4717-85ee-7ef9ee52bde3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2d0063f8-538a-4717-85ee-7ef9ee52bde3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 19 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:78:e8:2d:1a:30:6c:02:39:7f:61:26:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d0063f8-538a-4717-85ee-7ef9ee52bde3 Validity Not Before: Oct 12 01:00:13 2026 GMT Not After : Jan 10 02:00:13 2027 GMT Subject: CN=6f3c40bd-ed7d-4a0d-a78a-18fd106b1e7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:37:0b:de:7f:51:cb:f4:75:e1:81:8d:63:d0: 4c:54:65:45:a3:6c:51:84:fc:71:84:82:2f:5b:82: f4:17:94:39:f8:4e:b4:9b:83:2a:4c:1f:02:71:ec: 4e:74:99:52:b6:03:61:7b:31:76:7f:bc:99:cf:47: 01:19:8a:22:7e:68:d2:98:07:cf:6c:60:55:51:a6: fa:c9:bf:72:a9:83:44:1e:3a:d9:cc:43:18:9e:ed: 76:3f:f0:ab:69:e1:f1:a0:c5:3b:f4:25:ed:86:9d: 6f:ca:30:58:61:60:a8:0b:d3:12:30:04:88:74:e0: ac:38:22:be:70:d6:d0:df:62:8e:41:63:9e:28:08: 94:51:f7:09:b7:67:56:b4:3a:e0:5a:d4:13:0e:de: 60:81:e6:60:f0:df:88:58:c1:42:bf:e0:4c:dd:91: 64:cb:9b:fc:f1:78:ed:46:b7:f7:2e:c2:cc:11:e1: f9:9f:b6:ab:a7:78:a2:61:b6:db:f7:12:cd:76:ce: 17:2f:2c:57:f4:42:9b:64:dc:f3:8f:c5:c8:70:07: 96:03:0a:26:db:6f:ad:a2:7a:4f:3f:17:8a:b7:8e: 60:66:1f:cb:a9:71:6b:42:f4:22:3a:96:f7:8c:b8: 3f:a7:08:f8:db:63:8b:8c:9d:82:0a:cd:da:7a:9e: 56:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:95:09:6E:0E:3C:55:DE:2D:52:24:05:26:D4:C4:C9:86:41:09:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2d0063f8-538a-4717-85ee-7ef9ee52bde3/ce99c46c-fd46-386f-a921-40b8d93d366b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2d0063f8-538a-4717-85ee-7ef9ee52bde3/2d0063f8-538a-4717-85ee-7ef9ee52bde3.crl X509v3 Authority Key Identifier: keyid:35:F9:B9:DB:1F:CC:09:4C:6F:E6:82:C3:4A:83:20:2A:F7:84:27:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2d0063f8-538a-4717-85ee-7ef9ee52bde3.cer sbgp-ipAddrBlock: critical IPv4: 23.128.48.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:a4:2b:b9:d0:4e:84:d1:0a:dc:04:95:56:98:0f:66:6f:80: c9:8c:0a:b5:03:91:d4:a4:19:fe:eb:75:b8:cc:2c:ff:f8:94: 7d:64:d5:3e:9a:fa:5f:c0:29:85:c3:6d:89:12:17:a1:fb:fb: 21:e0:db:4f:9f:4a:21:db:ca:32:57:ad:f6:4a:a9:f6:ba:b1: 5e:3a:ed:9b:76:70:bd:1f:ec:d6:3a:1c:9f:ec:e7:a0:3c:a2: a7:de:a5:99:25:96:b2:86:88:2c:59:10:2b:0e:2a:e2:e2:09: 19:9f:16:14:10:d5:92:4c:32:bd:41:b9:5c:d9:a2:81:27:65: d3:42:37:5c:b1:a7:0b:68:f0:41:00:11:41:3e:59:a7:a7:95: a8:dc:7b:61:13:35:6e:b6:cf:8c:d2:eb:e2:63:87:22:e5:15: 42:9c:b4:c2:3f:e5:cf:3d:b6:1e:38:df:36:48:52:66:b3:90: 43:6b:2a:7c:9b:cf:4d:35:a6:64:c3:12:b6:23:3d:0f:01:00: 02:50:e3:db:49:aa:79:a7:1c:af:c4:48:87:e2:26:99:6d:8c: 35:b7:2f:07:9d:e4:c9:32:0d:48:0a:5b:7e:ee:07:f9:5f:01: 91:63:af:72:88:81:09:bd:45:4e:c2:07:6d:2b:90:bc:09:28: 5c:08:37:2a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE946C0aMGwCOX9hJoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmQwMDYzZjgtNTM4YS00NzE3LTg1ZWUtN2VmOWVlNTJi ZGUzMB4XDTI2MTAxMjAxMDAxM1oXDTI3MDExMDAyMDAxM1owLzEtMCsGA1UEAxMk NmYzYzQwYmQtZWQ3ZC00YTBkLWE3OGEtMThmZDEwNmIxZTdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhzcL3n9Ry/R14YGNY9BMVGVFo2xRhPxxhIIv W4L0F5Q5+E60m4MqTB8CcexOdJlStgNhezF2f7yZz0cBGYoifmjSmAfPbGBVUab6 yb9yqYNEHjrZzEMYnu12P/CraeHxoMU79CXthp1vyjBYYWCoC9MSMASIdOCsOCK+ cNbQ32KOQWOeKAiUUfcJt2dWtDrgWtQTDt5ggeZg8N+IWMFCv+BM3ZFky5v88Xjt Rrf3LsLMEeH5n7arp3iiYbbb9xLNds4XLyxX9EKbZNzzj8XIcAeWAwom22+tonpP PxeKt45gZh/LqXFrQvQiOpb3jLg/pwj422OLjJ2CCs3aep5WdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLmVCW4OPFXeLVIkBSbUxMmGQQmLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yZDAw NjNmOC01MzhhLTQ3MTctODVlZS03ZWY5ZWU1MmJkZTMvY2U5OWM0NmMtZmQ0Ni0z ODZmLWE5MjEtNDBiOGQ5M2QzNjZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMmQwMDYzZjgtNTM4YS00NzE3LTg1 ZWUtN2VmOWVlNTJiZGUzLzJkMDA2M2Y4LTUzOGEtNDcxNy04NWVlLTdlZjllZTUy YmRlMy5jcmwwHwYDVR0jBBgwFoAUNfm52x/MCUxv5oLDSoMgKveEJ80wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yZDAwNjNmOC01MzhhLTQ3MTctODVlZS03ZWY5 ZWU1MmJkZTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4AwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHGkK7nQToTRCtwElVaYD2ZvgMmMCrUDkdSkGf7rdbjMLP/4lH1k1T6a +l/AKYXDbYkSF6H7+yHg20+fSiHbyjJXrfZKqfa6sV467Zt2cL0f7NY6HJ/s56A8 oqfepZkllrKGiCxZECsOKuLiCRmfFhQQ1ZJMMr1BuVzZooEnZdNCN1yxpwto8EEA EUE+Waenlajce2ETNW62z4zS6+JjhyLlFUKctMI/5c89th443zZIUmazkENrKnyb z001pmTDErYjPQ8BAAJQ49tJqnmnHK/ESIfiJpltjDW3Lwed5MkyDUgKW37uB/lf AZFjr3KIgQm9RU7CB20rkLwJKFwINyo= -----END CERTIFICATE-----Generated at Sun Oct 18 09:17:46 2026 by rpki-client