$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2b5947e4-61e6-4ddf-8c2e-0b848215b251/1af27fcc-c087-3992-bbed-aa65a2857848.roa File: 1af27fcc-c087-3992-bbed-aa65a2857848.roa (raw, json) Hash identifier: Et3VZ4mzhk0iYuwxyL/bEtkLGr+H1SMu39DFbnfENJQ= Subject key identifier: D2:23:E5:4F:1B:47:DA:0C:24:69:7C:6F:F0:F2:31:40:B1:58:35:5D Certificate issuer: /CN=2b5947e4-61e6-4ddf-8c2e-0b848215b251 Certificate serial: 010D0C9F4328584F94D30EB286E1DEAE233C29A0 Authority key identifier: C6:E5:33:9B:6E:DB:0E:5B:59:A9:B6:64:02:6E:8E:18:9A:3C:90:D4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2b5947e4-61e6-4ddf-8c2e-0b848215b251.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2b5947e4-61e6-4ddf-8c2e-0b848215b251/1af27fcc-c087-3992-bbed-aa65a2857848.roa Signing time: Thu 22 Oct 2026 01:00:12 +0000 ROA not before: Thu 22 Oct 2026 01:00:12 +0000 ROA not after: Wed 20 Jan 2027 02:00:12 +0000 asID: 23297 IP address blocks: 23.130.44.0/24 maxlen: 24 2602:f780::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2b5947e4-61e6-4ddf-8c2e-0b848215b251/2b5947e4-61e6-4ddf-8c2e-0b848215b251.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2b5947e4-61e6-4ddf-8c2e-0b848215b251/2b5947e4-61e6-4ddf-8c2e-0b848215b251.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2b5947e4-61e6-4ddf-8c2e-0b848215b251.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 25 Oct 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:94:d3:0e:b2:86:e1:de:ae:23:3c:29:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b5947e4-61e6-4ddf-8c2e-0b848215b251 Validity Not Before: Oct 22 01:00:12 2026 GMT Not After : Jan 20 02:00:12 2027 GMT Subject: CN=ded11785-fda2-4b32-8d14-b9e5e003ae8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:9b:69:f8:71:79:fb:e0:dd:c9:6d:2f:29:db: 5f:a5:86:a1:f8:0c:d4:bc:5d:27:4d:4c:a3:8f:11: 18:aa:15:f2:29:ea:9d:76:19:85:68:ed:a8:b6:1e: f8:f7:db:ac:8f:69:0e:41:27:ef:61:8e:da:62:91: 80:fb:e5:a4:06:0f:43:ac:a1:ac:c5:a8:95:4a:1c: 0c:d0:ac:55:3e:82:5e:5b:48:a7:78:a4:5f:75:62: 15:f0:57:f9:fe:98:88:10:92:6a:d6:8c:10:cf:93: c4:e6:a9:ed:52:f4:91:8f:f2:f9:83:3b:95:54:46: 1f:86:78:1c:00:32:e2:13:26:82:b5:70:e1:3a:eb: 6d:88:ef:64:21:91:ad:2d:ae:0b:3b:e9:88:9d:c2: 45:13:db:7c:e6:9d:ed:6a:32:09:86:6f:eb:c3:6e: 14:01:00:ef:89:89:d8:62:7e:ab:4e:d0:b2:09:c9: d9:55:8a:3d:88:15:e6:e3:ea:33:ca:24:94:a7:92: 13:b2:5c:84:80:df:7a:2f:2c:78:c2:90:df:e9:98: 0e:c5:3e:c6:f7:86:36:68:21:3c:7a:08:fc:6f:23: 37:cb:7b:78:07:b0:18:f3:3d:6d:b2:d1:7b:18:f8: bc:6b:e6:7e:ac:c3:8b:50:dc:62:5f:5d:d6:1f:d8: 59:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:23:E5:4F:1B:47:DA:0C:24:69:7C:6F:F0:F2:31:40:B1:58:35:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2b5947e4-61e6-4ddf-8c2e-0b848215b251/1af27fcc-c087-3992-bbed-aa65a2857848.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2b5947e4-61e6-4ddf-8c2e-0b848215b251/2b5947e4-61e6-4ddf-8c2e-0b848215b251.crl X509v3 Authority Key Identifier: keyid:C6:E5:33:9B:6E:DB:0E:5B:59:A9:B6:64:02:6E:8E:18:9A:3C:90:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2b5947e4-61e6-4ddf-8c2e-0b848215b251.cer sbgp-ipAddrBlock: critical IPv4: 23.130.44.0/24 IPv6: 2602:f780::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:c0:9e:3d:b9:d7:ee:0f:45:89:21:38:ca:c4:ca:d0:cd:68: 1d:0f:e6:46:e0:f0:58:b8:3f:dd:f4:9e:8f:ec:85:d0:67:ac: 15:34:4c:5b:a8:82:a0:31:7b:47:92:e0:a8:37:17:a0:ee:ef: 28:23:a0:34:12:0b:7c:0a:e4:43:1f:e9:1a:6b:61:75:1f:e3: ec:21:c3:ac:13:3d:e7:98:69:b6:a5:12:da:4a:ab:70:5d:eb: 73:12:17:52:d4:88:41:15:7b:b9:62:e7:67:40:21:ca:8c:55: 72:14:cb:1b:aa:0d:d7:3c:86:0d:40:54:35:61:94:92:ac:31: b1:a5:4d:c6:19:55:7d:6c:6f:5a:4c:02:16:1e:68:d9:f5:f1: a6:67:09:b0:23:63:8c:98:ba:99:d9:95:1b:ba:e2:9c:aa:48: c7:ad:32:28:2e:7d:3b:40:b3:ef:00:df:d4:7d:47:7d:78:3f: 86:13:70:1d:cc:9f:7f:f3:d5:01:b5:b7:63:4e:42:a0:86:72: 43:e4:98:3f:49:80:ac:0b:4a:de:29:79:8a:f0:6d:bd:1c:2b: 82:aa:ea:df:58:88:c5:94:c8:92:d9:fb:9c:c0:51:87:eb:25: 1a:31:46:62:2e:47:25:95:44:1b:6d:af:4e:d2:4c:d6:b2:41: 8e:5e:ce:77 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE+U0w6yhuHeriM8KaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmI1OTQ3ZTQtNjFlNi00ZGRmLThjMmUtMGI4NDgyMTVi MjUxMB4XDTI2MTAyMjAxMDAxMloXDTI3MDEyMDAyMDAxMlowLzEtMCsGA1UEAxMk ZGVkMTE3ODUtZmRhMi00YjMyLThkMTQtYjllNWUwMDNhZThjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoZtp+HF5++DdyW0vKdtfpYah+AzUvF0nTUyj jxEYqhXyKeqddhmFaO2oth7499usj2kOQSfvYY7aYpGA++WkBg9DrKGsxaiVShwM 0KxVPoJeW0ineKRfdWIV8Ff5/piIEJJq1owQz5PE5qntUvSRj/L5gzuVVEYfhngc ADLiEyaCtXDhOuttiO9kIZGtLa4LO+mIncJFE9t85p3tajIJhm/rw24UAQDviYnY Yn6rTtCyCcnZVYo9iBXm4+ozyiSUp5ITslyEgN96Lyx4wpDf6ZgOxT7G94Y2aCE8 egj8byM3y3t4B7AY8z1tstF7GPi8a+Z+rMOLUNxiX13WH9hZwwIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFNIj5U8bR9oMJGl8b/DyMUCxWDVdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yYjU5 NDdlNC02MWU2LTRkZGYtOGMyZS0wYjg0ODIxNWIyNTEvMWFmMjdmY2MtYzA4Ny0z OTkyLWJiZWQtYWE2NWEyODU3ODQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMmI1OTQ3ZTQtNjFlNi00ZGRmLThj MmUtMGI4NDgyMTViMjUxLzJiNTk0N2U0LTYxZTYtNGRkZi04YzJlLTBiODQ4MjE1 YjI1MS5jcmwwHwYDVR0jBBgwFoAUxuUzm27bDltZqbZkAm6OGJo8kNQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8yYjU5NDdlNC02MWU2LTRkZGYtOGMyZS0wYjg0 ODIxNWIyNTEuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF4IsMA4E AgACMAgDBgQmAveAADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCKwJ49udfuD0WJITjKxMrQzWgdD+ZG4PBY uD/d9J6P7IXQZ6wVNExbqIKgMXtHkuCoNxeg7u8oI6A0Egt8CuRDH+kaa2F1H+Ps IcOsEz3nmGm2pRLaSqtwXetzEhdS1IhBFXu5YudnQCHKjFVyFMsbqg3XPIYNQFQ1 YZSSrDGxpU3GGVV9bG9aTAIWHmjZ9fGmZwmwI2OMmLqZ2ZUbuuKcqkjHrTIoLn07 QLPvAN/UfUd9eD+GE3AdzJ9/89UBtbdjTkKghnJD5Jg/SYCsC0reKXmK8G29HCuC qurfWIjFlMiS2fucwFGH6yUaMUZiLkcllUQbba9O0kzWskGOXs53 -----END CERTIFICATE-----Generated at Sat Oct 24 12:33:30 2026 by rpki-client