$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/342900a2-b5ea-4a40-a31f-ef2cb2552fc6/3e7e0924-b347-3a4e-bd77-291a31a0cb7a.roa File: 3e7e0924-b347-3a4e-bd77-291a31a0cb7a.roa (raw, json) Hash identifier: 959clcPHoPHaaSkzPDnFjxJPkHG5FQU9u5+s52ar+OM= Subject key identifier: 06:57:5C:21:35:B3:BC:85:F7:83:23:B1:6E:37:6A:47:2E:0E:4E:14 Certificate issuer: /CN=342900a2-b5ea-4a40-a31f-ef2cb2552fc6 Certificate serial: 010D0C9F4328584F74B82D0EBEAE96F3B3D75A00 Authority key identifier: 29:0E:5B:DA:D5:2D:43:C6:8E:82:A2:F2:52:51:8D:17:9F:BC:41:A3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/342900a2-b5ea-4a40-a31f-ef2cb2552fc6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/342900a2-b5ea-4a40-a31f-ef2cb2552fc6/3e7e0924-b347-3a4e-bd77-291a31a0cb7a.roa Signing time: Sat 10 Oct 2026 13:00:13 +0000 ROA not before: Sat 10 Oct 2026 13:00:13 +0000 ROA not after: Fri 08 Jan 2027 14:00:13 +0000 asID: 40065 IP address blocks: 23.159.76.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/342900a2-b5ea-4a40-a31f-ef2cb2552fc6/342900a2-b5ea-4a40-a31f-ef2cb2552fc6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/342900a2-b5ea-4a40-a31f-ef2cb2552fc6/342900a2-b5ea-4a40-a31f-ef2cb2552fc6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/342900a2-b5ea-4a40-a31f-ef2cb2552fc6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 23 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:74:b8:2d:0e:be:ae:96:f3:b3:d7:5a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=342900a2-b5ea-4a40-a31f-ef2cb2552fc6 Validity Not Before: Oct 10 13:00:13 2026 GMT Not After : Jan 8 14:00:13 2027 GMT Subject: CN=1de9ddc9-6a6d-49d9-abf8-f7d9be98bef3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:a5:ab:95:b3:e8:93:95:ef:57:18:ff:29:e3: 1a:ee:34:c0:1a:cc:c1:4f:85:2d:c8:9f:d4:ad:f6: 89:95:57:f3:65:b5:5a:05:68:0f:46:7b:fe:d0:f6: ab:21:ac:f8:2b:85:6d:b0:8b:0a:48:d6:3d:0c:e9: 5f:9e:2d:ed:0e:2d:75:2c:15:50:b4:f7:1d:0b:a2: e9:ce:0e:d0:7c:7e:bd:db:fd:a3:8b:ad:47:57:a1: 70:92:76:b7:c8:e8:d1:1c:46:2f:30:02:99:92:75: d5:7d:4f:9b:89:84:c1:69:46:fd:fa:51:56:fa:3c: 17:6b:4e:ed:0f:64:11:c5:ca:32:a5:a6:a7:e7:6d: 25:00:da:51:a4:30:a2:a6:7a:72:8e:0d:8f:21:47: 7d:72:23:3d:35:97:43:d7:a0:58:d9:c4:00:21:d4: e1:9d:b6:4f:5d:c4:f3:12:86:54:ee:86:de:3e:97: a6:32:8d:3f:f9:13:be:51:44:8e:ee:e7:5f:78:b1: ad:e9:b6:f6:d2:a7:74:b0:14:0d:b7:81:80:a1:56: 1b:5b:c7:e0:b5:b6:cc:44:1d:c9:2e:56:42:c5:6d: f7:26:4d:61:5e:dc:ff:48:32:34:5f:0a:ca:c6:92: c9:d0:e1:a9:ae:13:c1:a8:41:52:62:5b:ec:28:1f: ea:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:57:5C:21:35:B3:BC:85:F7:83:23:B1:6E:37:6A:47:2E:0E:4E:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/342900a2-b5ea-4a40-a31f-ef2cb2552fc6/3e7e0924-b347-3a4e-bd77-291a31a0cb7a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/342900a2-b5ea-4a40-a31f-ef2cb2552fc6/342900a2-b5ea-4a40-a31f-ef2cb2552fc6.crl X509v3 Authority Key Identifier: keyid:29:0E:5B:DA:D5:2D:43:C6:8E:82:A2:F2:52:51:8D:17:9F:BC:41:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/342900a2-b5ea-4a40-a31f-ef2cb2552fc6.cer sbgp-ipAddrBlock: critical IPv4: 23.159.76.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:69:4a:27:06:e1:e9:ab:17:6e:dc:d0:ff:30:68:6e:e0:cf: cb:9d:37:72:3e:c0:da:92:bb:c4:07:9c:c7:6e:00:68:68:cb: c1:1d:6b:99:dd:53:a9:e9:6c:bf:ee:52:08:e2:95:f7:15:bc: 2d:92:ee:35:56:f3:9b:b7:6e:89:c8:87:ee:c8:f4:7b:f8:36: 7b:10:dc:f5:e2:a4:77:51:62:8d:6e:a5:cc:58:bc:f4:ea:61: fc:de:5f:e3:2e:7b:e1:b7:6d:94:8f:1d:61:00:74:f0:e3:8b: a6:56:cc:98:d4:4e:65:5e:b2:ae:34:10:60:54:80:06:e8:20: 26:13:05:de:80:2e:da:c5:6b:08:e9:7f:cd:eb:37:22:c9:08: 2e:57:ac:0d:d2:10:cc:ea:17:f7:18:d1:54:d1:02:11:7d:aa: 18:65:77:ba:ea:20:f1:82:1f:e4:02:77:ea:c6:d2:06:3f:7d: 15:5f:ae:bc:ff:71:b3:a0:97:57:7b:fd:d8:01:29:d3:7d:8d: fb:60:e8:a1:ce:8b:ba:35:c1:b5:dc:41:c9:a7:34:9d:37:78: 04:f9:b2:d4:a9:39:46:32:48:43:32:00:36:2a:c8:02:0d:9c: e2:38:e7:67:38:2e:97:db:9d:e3:e8:de:27:b6:d0:6e:81:92: ba:6f:2f:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE90uC0Ovq6W87PXWgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzQyOTAwYTItYjVlYS00YTQwLWEzMWYtZWYyY2IyNTUy ZmM2MB4XDTI2MTAxMDEzMDAxM1oXDTI3MDEwODE0MDAxM1owLzEtMCsGA1UEAxMk MWRlOWRkYzktNmE2ZC00OWQ5LWFiZjgtZjdkOWJlOThiZWYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0qWrlbPok5XvVxj/KeMa7jTAGszBT4UtyJ/U rfaJlVfzZbVaBWgPRnv+0ParIaz4K4VtsIsKSNY9DOlfni3tDi11LBVQtPcdC6Lp zg7QfH692/2ji61HV6Fwkna3yOjRHEYvMAKZknXVfU+biYTBaUb9+lFW+jwXa07t D2QRxcoypaan520lANpRpDCipnpyjg2PIUd9ciM9NZdD16BY2cQAIdThnbZPXcTz EoZU7obePpemMo0/+RO+UUSO7udfeLGt6bb20qd0sBQNt4GAoVYbW8fgtbbMRB3J LlZCxW33Jk1hXtz/SDI0XwrKxpLJ0OGprhPBqEFSYlvsKB/qdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAZXXCE1s7yF94MjsW43akcuDk4UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8zNDI5 MDBhMi1iNWVhLTRhNDAtYTMxZi1lZjJjYjI1NTJmYzYvM2U3ZTA5MjQtYjM0Ny0z YTRlLWJkNzctMjkxYTMxYTBjYjdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMzQyOTAwYTItYjVlYS00YTQwLWEz MWYtZWYyY2IyNTUyZmM2LzM0MjkwMGEyLWI1ZWEtNGE0MC1hMzFmLWVmMmNiMjU1 MmZjNi5jcmwwHwYDVR0jBBgwFoAUKQ5b2tUtQ8aOgqLyUlGNF5+8QaMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8zNDI5MDBhMi1iNWVhLTRhNDAtYTMxZi1lZjJj YjI1NTJmYzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF59MMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE9pSicG4emrF27c0P8waG7gz8udN3I+wNqSu8QHnMduAGhoy8Eda5nd U6npbL/uUgjilfcVvC2S7jVW85u3bonIh+7I9Hv4NnsQ3PXipHdRYo1upcxYvPTq YfzeX+Mue+G3bZSPHWEAdPDji6ZWzJjUTmVesq40EGBUgAboICYTBd6ALtrFawjp f83rNyLJCC5XrA3SEMzqF/cY0VTRAhF9qhhld7rqIPGCH+QCd+rG0gY/fRVfrrz/ cbOgl1d7/dgBKdN9jftg6KHOi7o1wbXcQcmnNJ03eAT5stSpOUYySEMyADYqyAIN nOI452c4LpfbnePo3ie20G6BkrpvLyE= -----END CERTIFICATE-----Generated at Thu Oct 22 10:36:25 2026 by rpki-client