$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/491d9ae7-4fad-4a49-a9b2-9cf1e4c19169/ce2c9f5a-9a92-3759-8b55-d9edd603a4ad.roa File: ce2c9f5a-9a92-3759-8b55-d9edd603a4ad.roa (raw, json) Hash identifier: UMESHDuq2W9WNyNl/aWklatj5UP5jiW3/2Ks8uhGCXM= Subject key identifier: CA:53:12:F9:0D:24:7C:68:99:B2:9A:D2:17:7F:9B:8B:8B:2E:1A:D2 Certificate issuer: /CN=491d9ae7-4fad-4a49-a9b2-9cf1e4c19169 Certificate serial: 010D0C9F4328584F4975B60A4B16C4F4427FA680 Authority key identifier: D9:0C:76:F7:42:30:BD:E8:BB:E1:74:41:89:F2:FE:7F:E7:18:28:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/491d9ae7-4fad-4a49-a9b2-9cf1e4c19169.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/491d9ae7-4fad-4a49-a9b2-9cf1e4c19169/ce2c9f5a-9a92-3759-8b55-d9edd603a4ad.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 8796 IP address blocks: 23.185.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/491d9ae7-4fad-4a49-a9b2-9cf1e4c19169/491d9ae7-4fad-4a49-a9b2-9cf1e4c19169.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/491d9ae7-4fad-4a49-a9b2-9cf1e4c19169/491d9ae7-4fad-4a49-a9b2-9cf1e4c19169.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/491d9ae7-4fad-4a49-a9b2-9cf1e4c19169.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 22 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:75:b6:0a:4b:16:c4:f4:42:7f:a6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=491d9ae7-4fad-4a49-a9b2-9cf1e4c19169 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=2fab33e9-92e2-481b-a015-ba94d35a9870 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:73:f5:1a:68:c3:ec:00:91:7b:bf:89:3a:e2: 70:34:a9:28:81:1e:2a:b4:12:17:a4:10:3b:5c:32: 04:af:dd:28:62:7b:94:77:08:02:01:e5:c8:dd:16: 81:c4:6e:50:ce:82:21:4d:5f:a1:fb:1e:a0:49:58: b7:71:0a:76:c6:ed:06:6f:0a:1c:ff:d9:9b:4d:64: b3:d0:f9:3f:89:69:65:75:42:06:4b:15:c4:3b:e8: 84:86:75:e0:ac:fd:63:0a:13:0b:9c:2e:f9:67:54: 44:32:d1:a6:c0:a8:55:64:51:e5:ef:7a:ed:81:4b: b7:3b:9c:43:51:e1:86:08:05:fe:38:06:8f:15:9e: 6e:41:b0:a6:e5:30:49:fa:a6:4b:09:11:77:e8:97: de:d1:2a:07:c3:35:db:ee:34:4a:c5:3b:c4:4a:3e: 74:7d:f2:c1:89:58:f2:dc:0c:00:8f:11:3c:f4:fb: 9e:34:82:a5:fe:4a:5b:d9:b0:ef:fc:d6:7f:9e:57: b2:e4:d7:00:a5:ae:9f:e3:c4:c6:d7:4f:67:9d:b0: ab:40:61:9a:21:ee:bc:8e:12:4a:02:39:62:3b:93: eb:5b:1e:e9:55:35:5a:f3:24:b0:e2:75:94:90:84: 44:df:c5:93:43:23:e8:38:97:60:66:95:7f:8b:b4: dc:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:53:12:F9:0D:24:7C:68:99:B2:9A:D2:17:7F:9B:8B:8B:2E:1A:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/491d9ae7-4fad-4a49-a9b2-9cf1e4c19169/ce2c9f5a-9a92-3759-8b55-d9edd603a4ad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/491d9ae7-4fad-4a49-a9b2-9cf1e4c19169/491d9ae7-4fad-4a49-a9b2-9cf1e4c19169.crl X509v3 Authority Key Identifier: keyid:D9:0C:76:F7:42:30:BD:E8:BB:E1:74:41:89:F2:FE:7F:E7:18:28:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/491d9ae7-4fad-4a49-a9b2-9cf1e4c19169.cer sbgp-ipAddrBlock: critical IPv4: 23.185.200.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b0:4f:22:97:7e:96:12:06:7e:fc:c7:2d:69:7d:e0:75:84:ea: c9:1d:d8:83:4a:71:c6:a2:ac:70:8d:5d:41:5f:e9:ba:96:08: 30:91:f8:cf:b2:20:9c:9c:21:2e:a0:8d:04:8f:7a:7a:c7:e4: 63:89:18:60:ae:d4:cd:93:65:fa:d1:1a:a1:e9:a5:4a:34:b6: b7:14:70:d9:42:77:42:61:91:b4:76:db:2a:7e:13:30:5d:3b: 95:f0:2e:98:8b:55:f6:be:e2:12:d3:38:68:bb:a6:0f:b6:a3: 84:5e:a0:9e:05:08:5b:85:f9:4c:2f:d4:7b:a1:6a:e6:0f:b4: 1d:68:46:0a:41:92:31:ea:08:eb:19:a8:d2:a0:00:bf:5f:1b: 92:f4:80:43:8a:6e:13:c1:73:49:f0:c0:74:78:1d:6c:38:86: ed:b1:72:b3:fc:60:0b:a7:39:b8:9a:d4:a2:4e:c7:c1:19:17: b9:0c:2d:2f:6c:db:93:46:4b:9b:59:2d:f1:22:2a:8e:c6:b0: 11:50:f5:3d:f2:c0:e4:9b:0c:5f:6d:32:8b:aa:0b:b2:b5:11: c6:66:ba:19:2f:3b:a3:29:87:9b:0f:96:71:a0:17:aa:63:ed: 10:bf:96:6f:22:92:65:f3:31:f9:be:32:d6:0e:ff:6f:d7:cf: 97:47:e4:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdbYKSxbE9EJ/poAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDkxZDlhZTctNGZhZC00YTQ5LWE5YjItOWNmMWU0YzE5 MTY5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MmZhYjMzZTktOTJlMi00ODFiLWEwMTUtYmE5NGQzNWE5ODcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgnP1GmjD7ACRe7+JOuJwNKkogR4qtBIXpBA7 XDIEr90oYnuUdwgCAeXI3RaBxG5QzoIhTV+h+x6gSVi3cQp2xu0Gbwoc/9mbTWSz 0Pk/iWlldUIGSxXEO+iEhnXgrP1jChMLnC75Z1REMtGmwKhVZFHl73rtgUu3O5xD UeGGCAX+OAaPFZ5uQbCm5TBJ+qZLCRF36Jfe0SoHwzXb7jRKxTvESj50ffLBiVjy 3AwAjxE89PueNIKl/kpb2bDv/NZ/nley5NcApa6f48TG109nnbCrQGGaIe68jhJK AjliO5PrWx7pVTVa8ySw4nWUkIRE38WTQyPoOJdgZpV/i7TclQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMpTEvkNJHxombKa0hd/m4uLLhrSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS80OTFk OWFlNy00ZmFkLTRhNDktYTliMi05Y2YxZTRjMTkxNjkvY2UyYzlmNWEtOWE5Mi0z NzU5LThiNTUtZDllZGQ2MDNhNGFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNDkxZDlhZTctNGZhZC00YTQ5LWE5 YjItOWNmMWU0YzE5MTY5LzQ5MWQ5YWU3LTRmYWQtNGE0OS1hOWIyLTljZjFlNGMx OTE2OS5jcmwwHwYDVR0jBBgwFoAU2Qx290Iwvei74XRBifL+f+cYKMMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS80OTFkOWFlNy00ZmFkLTRhNDktYTliMi05Y2Yx ZTRjMTkxNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF7nIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALBPIpd+lhIGfvzHLWl94HWE6skd2INKccairHCNXUFf6bqWCDCR+M+y IJycIS6gjQSPenrH5GOJGGCu1M2TZfrRGqHppUo0trcUcNlCd0JhkbR22yp+EzBd O5XwLpiLVfa+4hLTOGi7pg+2o4ReoJ4FCFuF+Uwv1HuhauYPtB1oRgpBkjHqCOsZ qNKgAL9fG5L0gEOKbhPBc0nwwHR4HWw4hu2xcrP8YAunObia1KJOx8EZF7kMLS9s 25NGS5tZLfEiKo7GsBFQ9T3ywOSbDF9tMouqC7K1EcZmuhkvO6Mph5sPlnGgF6pj 7RC/lm8ikmXzMfm+MtYO/2/Xz5dH5A8= -----END CERTIFICATE-----Generated at Wed Oct 21 06:59:50 2026 by rpki-client