$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/abaad708-212e-4627-8dbe-416a8512677d/c3cb8684-f47f-3303-a3bd-521051961d0c.roa File: c3cb8684-f47f-3303-a3bd-521051961d0c.roa (raw, json) Hash identifier: OPrNzp/JCDmDPOm+8AfafaEUhT2JghQVFvQOl3AwSCs= Subject key identifier: EA:0D:D5:D1:70:02:C2:3A:76:08:14:DE:4F:95:10:E6:7F:02:ED:02 Certificate issuer: /CN=abaad708-212e-4627-8dbe-416a8512677d Certificate serial: 010D0C9F4328584FB3A66A506D90E9A2F6581B00 Authority key identifier: D5:0A:0A:CC:79:7E:27:4F:46:6A:4D:0E:C3:83:5E:68:E3:D8:1F:39 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/abaad708-212e-4627-8dbe-416a8512677d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/abaad708-212e-4627-8dbe-416a8512677d/c3cb8684-f47f-3303-a3bd-521051961d0c.roa Signing time: Mon 02 Nov 2026 02:00:13 +0000 ROA not before: Mon 02 Nov 2026 02:00:13 +0000 ROA not after: Sun 31 Jan 2027 02:00:13 +0000 asID: 399747 IP address blocks: 23.181.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/abaad708-212e-4627-8dbe-416a8512677d/abaad708-212e-4627-8dbe-416a8512677d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/abaad708-212e-4627-8dbe-416a8512677d/abaad708-212e-4627-8dbe-416a8512677d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/abaad708-212e-4627-8dbe-416a8512677d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Nov 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:b3:a6:6a:50:6d:90:e9:a2:f6:58:1b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abaad708-212e-4627-8dbe-416a8512677d Validity Not Before: Nov 2 02:00:13 2026 GMT Not After : Jan 31 02:00:13 2027 GMT Subject: CN=55c566e5-ea4b-4864-8652-8da204929830 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:af:b1:9a:46:2c:ef:3c:33:a4:1a:6b:76:e4: e6:35:19:83:73:65:79:60:69:68:b3:09:50:07:2a: c9:fb:cf:ce:f2:2c:60:59:83:71:8b:ee:2d:1c:48: 1d:d4:8f:72:da:51:74:19:4e:34:e5:49:1e:f6:58: 70:c4:d0:40:54:d8:b5:ee:9b:ca:7d:a8:0c:0c:0e: 25:12:81:8f:d2:1d:50:eb:80:43:eb:58:84:86:85: dd:2e:d4:34:79:4d:ff:ed:9e:cb:97:5e:06:3d:ad: 17:fe:52:12:77:18:b9:1a:a1:c3:e7:b4:66:b1:f9: 52:bf:16:5f:ca:4d:4b:e2:52:dc:8c:39:9f:01:75: 27:c6:a9:5e:37:dd:f0:d6:83:77:e3:c9:4e:47:26: 77:a4:5d:c8:d9:c1:83:7f:0d:49:78:ff:f9:76:4d: 2b:89:87:26:c6:83:47:b4:29:ab:78:09:1a:52:ef: a2:6d:25:96:aa:0f:45:2b:cf:ad:fc:45:5c:64:6a: 88:72:e9:8e:75:f2:ac:bd:18:cc:95:84:74:ed:c2: 0c:92:ed:f0:aa:80:38:78:4f:4d:51:46:eb:77:21: ee:31:9a:17:c5:71:b4:dd:7f:40:3c:2d:c3:5d:32: 6b:6c:75:c5:12:cd:e7:bf:76:5e:e7:6e:3a:31:b2: 5c:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:0D:D5:D1:70:02:C2:3A:76:08:14:DE:4F:95:10:E6:7F:02:ED:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/abaad708-212e-4627-8dbe-416a8512677d/c3cb8684-f47f-3303-a3bd-521051961d0c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/abaad708-212e-4627-8dbe-416a8512677d/abaad708-212e-4627-8dbe-416a8512677d.crl X509v3 Authority Key Identifier: keyid:D5:0A:0A:CC:79:7E:27:4F:46:6A:4D:0E:C3:83:5E:68:E3:D8:1F:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/abaad708-212e-4627-8dbe-416a8512677d.cer sbgp-ipAddrBlock: critical IPv4: 23.181.144.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:65:73:2a:92:92:0b:04:ec:d5:ba:86:e6:6a:1d:66:58:eb: 5e:fd:98:a3:69:6d:3d:b2:30:ff:d9:0d:e9:50:98:b1:9a:58: 38:1c:60:08:6f:e5:0f:18:5f:82:48:b8:ef:f4:41:3f:9a:32: 84:79:da:4e:6b:f4:01:c9:f2:68:85:6c:e9:02:dd:ca:cc:3c: 0d:76:fd:65:eb:ef:86:7e:c0:69:47:dc:50:9b:22:d3:c7:2d: 48:27:62:ee:99:4f:cc:5e:2b:e6:9a:4c:3a:7a:86:b3:07:78: 20:cf:98:0d:a8:26:99:c4:6c:0b:a3:02:2f:4b:eb:5f:d9:01: 2e:f1:d0:00:f3:c2:8f:7a:5e:43:3b:a8:6c:d5:7d:dc:25:cd: a0:c9:3d:71:95:71:50:33:1c:9d:bc:1c:4c:9b:27:e0:8f:76: 0f:35:76:cd:1a:5a:bd:48:7e:d7:00:88:0f:ad:1d:35:25:f4: 75:12:2e:2b:5d:6a:59:09:08:79:85:d0:09:e0:09:cd:a9:51: 33:f5:88:68:ab:96:ca:07:44:ff:93:e6:38:bc:51:43:87:d5: b9:25:50:81:a7:d7:18:3f:ee:0e:9e:86:a9:80:d2:ff:f5:3c: 89:e7:1b:ad:af:7d:82:91:fc:e2:ba:c3:d8:6b:05:ac:a0:70: ba:66:3f:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+zpmpQbZDpovZYGwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWJhYWQ3MDgtMjEyZS00NjI3LThkYmUtNDE2YTg1MTI2 NzdkMB4XDTI2MTEwMjAyMDAxM1oXDTI3MDEzMTAyMDAxM1owLzEtMCsGA1UEAxMk NTVjNTY2ZTUtZWE0Yi00ODY0LTg2NTItOGRhMjA0OTI5ODMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwa+xmkYs7zwzpBprduTmNRmDc2V5YGloswlQ ByrJ+8/O8ixgWYNxi+4tHEgd1I9y2lF0GU405Uke9lhwxNBAVNi17pvKfagMDA4l EoGP0h1Q64BD61iEhoXdLtQ0eU3/7Z7Ll14GPa0X/lISdxi5GqHD57RmsflSvxZf yk1L4lLcjDmfAXUnxqleN93w1oN348lORyZ3pF3I2cGDfw1JeP/5dk0riYcmxoNH tCmreAkaUu+ibSWWqg9FK8+t/EVcZGqIcumOdfKsvRjMlYR07cIMku3wqoA4eE9N UUbrdyHuMZoXxXG03X9APC3DXTJrbHXFEs3nv3Ze5246MbJcJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOoN1dFwAsI6dggU3k+VEOZ/Au0CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hYmFh ZDcwOC0yMTJlLTQ2MjctOGRiZS00MTZhODUxMjY3N2QvYzNjYjg2ODQtZjQ3Zi0z MzAzLWEzYmQtNTIxMDUxOTYxZDBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYWJhYWQ3MDgtMjEyZS00NjI3LThk YmUtNDE2YTg1MTI2NzdkL2FiYWFkNzA4LTIxMmUtNDYyNy04ZGJlLTQxNmE4NTEy Njc3ZC5jcmwwHwYDVR0jBBgwFoAU1QoKzHl+J09Gak0Ow4NeaOPYHzkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hYmFhZDcwOC0yMTJlLTQ2MjctOGRiZS00MTZh ODUxMjY3N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF7WQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIplcyqSkgsE7NW6huZqHWZY6179mKNpbT2yMP/ZDelQmLGaWDgcYAhv 5Q8YX4JIuO/0QT+aMoR52k5r9AHJ8miFbOkC3crMPA12/WXr74Z+wGlH3FCbItPH LUgnYu6ZT8xeK+aaTDp6hrMHeCDPmA2oJpnEbAujAi9L61/ZAS7x0ADzwo96XkM7 qGzVfdwlzaDJPXGVcVAzHJ28HEybJ+CPdg81ds0aWr1IftcAiA+tHTUl9HUSLitd alkJCHmF0AngCc2pUTP1iGirlsoHRP+T5ji8UUOH1bklUIGn1xg/7g6ehqmA0v/1 PInnG62vfYKR/OK6w9hrBaygcLpmPwo= -----END CERTIFICATE-----Generated at Mon Nov 2 21:58:32 2026 by rpki-client