$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/584e7168-9707-48dd-beaf-b7bb4b5e84b8/1c11f8af-631a-3e45-9188-815a9a9c8778.roa File: 1c11f8af-631a-3e45-9188-815a9a9c8778.roa (raw, json) Hash identifier: NR5Dwnp8klvvBXKX7lbhdwOkuZW3bLqmjn/xxlW8/2Q= Subject key identifier: 59:FB:C7:BA:E8:F3:25:B6:3A:2E:7C:49:BA:D8:16:BE:46:25:31:89 Certificate issuer: /CN=584e7168-9707-48dd-beaf-b7bb4b5e84b8 Certificate serial: 010D0C9F4328584F7E7D90AE2979E25BED277780 Authority key identifier: D8:CD:F1:6A:04:F5:E0:44:42:13:25:ED:B1:D6:EB:55:84:E3:18:7A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/584e7168-9707-48dd-beaf-b7bb4b5e84b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/584e7168-9707-48dd-beaf-b7bb4b5e84b8/1c11f8af-631a-3e45-9188-815a9a9c8778.roa Signing time: Wed 14 Oct 2026 01:00:13 +0000 ROA not before: Wed 14 Oct 2026 01:00:13 +0000 ROA not after: Tue 12 Jan 2027 02:00:13 +0000 asID: 398031 IP address blocks: 23.142.146.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/584e7168-9707-48dd-beaf-b7bb4b5e84b8/584e7168-9707-48dd-beaf-b7bb4b5e84b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/584e7168-9707-48dd-beaf-b7bb4b5e84b8/584e7168-9707-48dd-beaf-b7bb4b5e84b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/584e7168-9707-48dd-beaf-b7bb4b5e84b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 23 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7e:7d:90:ae:29:79:e2:5b:ed:27:77:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=584e7168-9707-48dd-beaf-b7bb4b5e84b8 Validity Not Before: Oct 14 01:00:13 2026 GMT Not After : Jan 12 02:00:13 2027 GMT Subject: CN=489d2aa0-aa4a-4ba0-88b7-be853ced075e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:f3:fc:df:2f:b9:31:63:a7:72:5a:88:26:7a: b7:5f:a3:5c:d0:57:25:ca:b7:43:d8:ce:5d:f2:3b: ef:56:18:04:2b:bc:56:a2:75:2c:12:aa:14:93:4f: 50:6b:b8:ba:ea:88:5f:29:58:54:f1:21:36:74:fc: 03:de:0f:36:01:70:a1:e9:e3:d4:ca:44:bc:fb:f7: 98:4d:92:c6:72:35:60:20:fe:d3:f8:19:a8:5a:7a: bc:ed:a3:cd:5c:33:30:bd:2b:cf:2b:b0:d2:cc:6e: da:6d:a0:f5:06:07:62:49:f5:8a:a6:31:dd:98:94: 1d:93:6b:a6:49:54:5a:3c:30:9a:8b:1a:d8:35:65: 9f:77:95:38:43:2d:0e:37:7e:c0:58:77:cd:7b:d8: 0c:de:77:00:33:73:a8:d8:3b:68:ed:80:87:78:82: 88:7e:3b:02:ba:fa:82:b2:a1:c8:a9:e0:c6:3c:2a: 67:b4:bb:f0:a0:86:45:8c:18:31:c8:f3:f2:18:be: af:7c:19:17:55:7e:1c:12:04:db:d5:0f:a8:c3:6f: 95:e1:65:97:1e:2c:82:89:2a:a4:fd:c8:db:63:2b: b3:24:6c:6a:15:73:87:74:82:7f:6c:62:97:5e:92: ce:d1:51:6b:e2:21:7f:20:89:b3:01:9a:68:3b:88: b4:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:FB:C7:BA:E8:F3:25:B6:3A:2E:7C:49:BA:D8:16:BE:46:25:31:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/584e7168-9707-48dd-beaf-b7bb4b5e84b8/1c11f8af-631a-3e45-9188-815a9a9c8778.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/584e7168-9707-48dd-beaf-b7bb4b5e84b8/584e7168-9707-48dd-beaf-b7bb4b5e84b8.crl X509v3 Authority Key Identifier: keyid:D8:CD:F1:6A:04:F5:E0:44:42:13:25:ED:B1:D6:EB:55:84:E3:18:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/584e7168-9707-48dd-beaf-b7bb4b5e84b8.cer sbgp-ipAddrBlock: critical IPv4: 23.142.146.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:19:1f:2b:34:00:37:cf:c3:af:3a:5a:ad:24:77:02:cc:d9: d3:d7:0a:f3:85:cf:f3:f1:5a:27:f2:55:57:a3:ce:46:78:7e: 72:1c:85:0a:ec:fc:49:e1:5c:92:21:2f:eb:fc:85:ec:c6:3b: d0:7f:19:6f:81:a8:c2:08:00:25:46:99:a7:f1:61:fc:b0:d0: 91:b4:5b:cc:07:9d:fd:25:21:fe:e2:fb:a1:15:84:bc:e4:8c: e4:cf:6e:e7:e1:00:48:2d:4d:58:41:cc:cd:e0:4b:a4:10:47: 53:10:d3:8f:9d:99:63:b4:8a:5c:f2:44:43:e2:e0:20:fc:c8: 83:5a:06:d0:ea:f7:29:66:4d:4a:dc:b4:8b:69:72:92:7d:d5: 36:fb:7b:d3:48:2b:67:4b:03:8f:66:de:5a:36:4d:d5:27:52: 23:56:b8:18:0c:0c:f5:be:25:dc:7a:60:57:91:a1:cc:fe:14: 90:97:eb:3b:e0:cd:09:9e:5d:54:e9:88:c0:ac:ca:bd:16:d2: 26:cd:87:10:f8:f6:81:4b:4e:40:ef:ac:5e:95:af:73:f8:bb: 97:5b:70:52:2e:23:fa:74:c8:03:85:c3:ab:37:9a:dc:63:08: d2:b8:a7:a4:05:5f:16:60:23:54:f7:3d:1b:a0:e6:ad:f1:6b: cb:60:1c:4d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9+fZCuKXniW+0nd4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTg0ZTcxNjgtOTcwNy00OGRkLWJlYWYtYjdiYjRiNWU4 NGI4MB4XDTI2MTAxNDAxMDAxM1oXDTI3MDExMjAyMDAxM1owLzEtMCsGA1UEAxMk NDg5ZDJhYTAtYWE0YS00YmEwLTg4YjctYmU4NTNjZWQwNzVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl/P83y+5MWOnclqIJnq3X6Nc0FclyrdD2M5d 8jvvVhgEK7xWonUsEqoUk09Qa7i66ohfKVhU8SE2dPwD3g82AXCh6ePUykS8+/eY TZLGcjVgIP7T+BmoWnq87aPNXDMwvSvPK7DSzG7abaD1BgdiSfWKpjHdmJQdk2um SVRaPDCaixrYNWWfd5U4Qy0ON37AWHfNe9gM3ncAM3Oo2Dto7YCHeIKIfjsCuvqC sqHIqeDGPCpntLvwoIZFjBgxyPPyGL6vfBkXVX4cEgTb1Q+ow2+V4WWXHiyCiSqk /cjbYyuzJGxqFXOHdIJ/bGKXXpLO0VFr4iF/IImzAZpoO4i0OwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFn7x7ro8yW2Oi58SbrYFr5GJTGJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi81ODRl NzE2OC05NzA3LTQ4ZGQtYmVhZi1iN2JiNGI1ZTg0YjgvMWMxMWY4YWYtNjMxYS0z ZTQ1LTkxODgtODE1YTlhOWM4Nzc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvNTg0ZTcxNjgtOTcwNy00OGRkLWJl YWYtYjdiYjRiNWU4NGI4LzU4NGU3MTY4LTk3MDctNDhkZC1iZWFmLWI3YmI0YjVl ODRiOC5jcmwwHwYDVR0jBBgwFoAU2M3xagT14ERCEyXtsdbrVYTjGHowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi81ODRlNzE2OC05NzA3LTQ4ZGQtYmVhZi1iN2Ji NGI1ZTg0YjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF46SMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ8ZHys0ADfPw686Wq0kdwLM2dPXCvOFz/PxWifyVVejzkZ4fnIchQrs /EnhXJIhL+v8hezGO9B/GW+BqMIIACVGmafxYfyw0JG0W8wHnf0lIf7i+6EVhLzk jOTPbufhAEgtTVhBzM3gS6QQR1MQ04+dmWO0ilzyREPi4CD8yINaBtDq9ylmTUrc tItpcpJ91Tb7e9NIK2dLA49m3lo2TdUnUiNWuBgMDPW+Jdx6YFeRocz+FJCX6zvg zQmeXVTpiMCsyr0W0ibNhxD49oFLTkDvrF6Vr3P4u5dbcFIuI/p0yAOFw6s3mtxj CNK4p6QFXxZgI1T3PRug5q3xa8tgHE0= -----END CERTIFICATE-----Generated at Thu Oct 22 11:40:45 2026 by rpki-client