$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1a4a4def-a575-48e1-87d5-56942434422a/233688fe-a33c-3a81-9597-da16bac00035.roa File: 233688fe-a33c-3a81-9597-da16bac00035.roa (raw, json) Hash identifier: BIGONwS+9WqTwIFOlX1cB+lrI3CI//m6uIykGwi4+Uo= Subject key identifier: 02:22:F0:1F:0E:04:98:B0:3E:55:BE:AA:64:E1:85:89:F1:69:DE:33 Certificate issuer: /CN=1a4a4def-a575-48e1-87d5-56942434422a Certificate serial: 010D0C9F4328584F6292E12626465B4351B54680 Authority key identifier: 05:6E:18:DE:54:9A:DE:FE:A9:3F:7C:8A:E8:72:D2:89:2F:26:2F:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1a4a4def-a575-48e1-87d5-56942434422a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1a4a4def-a575-48e1-87d5-56942434422a/233688fe-a33c-3a81-9597-da16bac00035.roa Signing time: Sun 04 Oct 2026 01:00:13 +0000 ROA not before: Sun 04 Oct 2026 01:00:13 +0000 ROA not after: Sat 02 Jan 2027 02:00:13 +0000 asID: 16509 IP address blocks: 192.41.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1a4a4def-a575-48e1-87d5-56942434422a/1a4a4def-a575-48e1-87d5-56942434422a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1a4a4def-a575-48e1-87d5-56942434422a/1a4a4def-a575-48e1-87d5-56942434422a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1a4a4def-a575-48e1-87d5-56942434422a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:62:92:e1:26:26:46:5b:43:51:b5:46:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a4a4def-a575-48e1-87d5-56942434422a Validity Not Before: Oct 4 01:00:13 2026 GMT Not After : Jan 2 02:00:13 2027 GMT Subject: CN=5c87c8b7-9b1b-40c5-a80d-9dbaa3b80bd0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:67:d2:f4:fa:85:07:00:cd:f9:c1:0d:f0:fa: 85:c6:bf:56:73:59:ee:6c:e4:2d:7d:89:c0:a2:11: 9b:b6:06:8c:8e:41:4e:9a:d0:9f:8c:79:61:99:41: 21:d5:65:d7:6c:f2:41:5c:3a:c1:1f:8b:42:63:87: 6b:d6:b1:ed:17:50:8e:cd:ca:6b:9a:3e:fa:52:6e: a6:31:c8:ae:49:00:dd:9f:bb:e2:3c:7c:f6:5e:ab: 47:b5:bc:9a:18:0a:53:d1:2e:d6:c1:cf:0a:ca:f5: 9b:04:22:31:cc:99:eb:d2:40:4d:db:28:7b:be:00: e0:60:d7:d3:3d:45:38:99:0d:0f:b5:dd:ef:8e:4d: 2f:27:bf:f6:e9:eb:70:c0:9e:86:4d:8e:0d:92:56: 14:e6:0e:07:e8:5a:7f:fe:dd:0b:c3:50:3c:f9:e0: 32:5c:30:fd:f7:83:6e:55:1f:29:4d:c4:f2:4f:4f: a5:3c:2e:fd:b1:94:db:d5:55:0b:fa:d0:e5:26:10: bc:ca:f3:b4:08:99:43:34:dc:fc:45:39:ce:86:11: fa:2c:30:0d:4a:c4:d4:c4:b4:25:f9:3d:e6:46:5c: 92:31:6e:7f:46:eb:07:29:00:bc:2c:cb:eb:00:fc: 0d:1c:f2:7e:24:dd:3b:62:df:b7:14:cc:0b:d9:57: a1:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:22:F0:1F:0E:04:98:B0:3E:55:BE:AA:64:E1:85:89:F1:69:DE:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1a4a4def-a575-48e1-87d5-56942434422a/233688fe-a33c-3a81-9597-da16bac00035.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1a4a4def-a575-48e1-87d5-56942434422a/1a4a4def-a575-48e1-87d5-56942434422a.crl X509v3 Authority Key Identifier: keyid:05:6E:18:DE:54:9A:DE:FE:A9:3F:7C:8A:E8:72:D2:89:2F:26:2F:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1a4a4def-a575-48e1-87d5-56942434422a.cer sbgp-ipAddrBlock: critical IPv4: 192.41.223.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:af:52:31:61:d8:b8:83:86:3c:97:a8:8c:d2:96:f7:91:f4: 13:2c:3a:42:47:ab:5f:03:72:50:17:3f:c4:7a:fe:70:bd:e3: 78:01:ee:09:d2:b8:9a:27:5d:ff:fc:e0:f1:e7:7b:c9:af:89: 69:4a:08:63:e2:33:70:ce:72:ca:4d:40:99:af:30:a6:18:41: e5:3d:99:45:ca:1e:89:59:bc:bb:e1:40:09:cc:6f:45:71:57: ba:d5:75:f4:a2:a2:80:8b:b0:8b:29:c9:5e:37:64:96:11:1c: a0:e2:97:37:4d:03:af:ff:f8:4c:35:c7:98:3c:26:6a:0d:0c: 55:97:4b:20:bc:52:a8:d7:47:61:f8:70:cd:9f:2b:4f:2d:06: a0:e0:0f:27:e7:31:d9:47:b3:b2:53:60:c8:a3:18:92:a1:91: 73:85:83:80:c1:3a:19:63:74:5f:8e:64:6c:d0:28:92:45:b1: 54:05:78:38:3e:d3:00:99:06:52:9b:73:c5:cb:7e:8d:02:3f: 1f:f8:29:1f:38:67:e4:84:da:9a:4e:54:26:7c:8a:20:88:93: 2a:29:a5:a8:f3:7a:c9:06:c4:74:89:cb:db:9f:d8:ab:0b:c2: d6:cc:0a:36:d1:13:0d:9b:5a:fb:58:2f:11:87:c9:33:5b:b4: 42:86:fd:8d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9ikuEmJkZbQ1G1RoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWE0YTRkZWYtYTU3NS00OGUxLTg3ZDUtNTY5NDI0MzQ0 MjJhMB4XDTI2MTAwNDAxMDAxM1oXDTI3MDEwMjAyMDAxM1owLzEtMCsGA1UEAxMk NWM4N2M4YjctOWIxYi00MGM1LWE4MGQtOWRiYWEzYjgwYmQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp2fS9PqFBwDN+cEN8PqFxr9Wc1nubOQtfYnA ohGbtgaMjkFOmtCfjHlhmUEh1WXXbPJBXDrBH4tCY4dr1rHtF1COzcprmj76Um6m MciuSQDdn7viPHz2XqtHtbyaGApT0S7Wwc8KyvWbBCIxzJnr0kBN2yh7vgDgYNfT PUU4mQ0Ptd3vjk0vJ7/26etwwJ6GTY4NklYU5g4H6Fp//t0Lw1A8+eAyXDD994Nu VR8pTcTyT0+lPC79sZTb1VUL+tDlJhC8yvO0CJlDNNz8RTnOhhH6LDANSsTUxLQl +T3mRlySMW5/RusHKQC8LMvrAPwNHPJ+JN07Yt+3FMwL2VehOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAIi8B8OBJiwPlW+qmThhYnxad4zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8xYTRh NGRlZi1hNTc1LTQ4ZTEtODdkNS01Njk0MjQzNDQyMmEvMjMzNjg4ZmUtYTMzYy0z YTgxLTk1OTctZGExNmJhYzAwMDM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMWE0YTRkZWYtYTU3NS00OGUxLTg3 ZDUtNTY5NDI0MzQ0MjJhLzFhNGE0ZGVmLWE1NzUtNDhlMS04N2Q1LTU2OTQyNDM0 NDIyYS5jcmwwHwYDVR0jBBgwFoAUBW4Y3lSa3v6pP3yK6HLSiS8mL0kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8xYTRhNGRlZi1hNTc1LTQ4ZTEtODdkNS01Njk0 MjQzNDQyMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCnfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADivUjFh2LiDhjyXqIzSlveR9BMsOkJHq18DclAXP8R6/nC943gB7gnS uJonXf/84PHne8mviWlKCGPiM3DOcspNQJmvMKYYQeU9mUXKHolZvLvhQAnMb0Vx V7rVdfSiooCLsIspyV43ZJYRHKDilzdNA6//+Ew1x5g8JmoNDFWXSyC8UqjXR2H4 cM2fK08tBqDgDyfnMdlHs7JTYMijGJKhkXOFg4DBOhljdF+OZGzQKJJFsVQFeDg+ 0wCZBlKbc8XLfo0CPx/4KR84Z+SE2ppOVCZ8iiCIkyoppajzeskGxHSJy9uf2KsL wtbMCjbREw2bWvtYLxGHyTNbtEKG/Y0= -----END CERTIFICATE-----Generated at Sat Oct 10 18:03:34 2026 by rpki-client