$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ad697a12-b25f-4a7b-8c14-097935c18e5b/246a9945-e728-367d-9f55-59504f6985c6.roa File: 246a9945-e728-367d-9f55-59504f6985c6.roa (raw, json) Hash identifier: a9UQRZBtl6Ahhlpbl2gJOtDZR2qlulDXzNiJnGChfnM= Subject key identifier: 50:BB:5E:78:63:D6:47:DA:F4:C3:FC:E5:4D:A9:F4:3D:D6:E4:67:23 Certificate issuer: /CN=ad697a12-b25f-4a7b-8c14-097935c18e5b Certificate serial: 010D0C9F4328584F7782ED412C762292C7571F80 Authority key identifier: C4:09:D9:07:5A:4B:0E:66:CF:34:3D:CC:88:C3:80:97:80:4C:D5:C1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ad697a12-b25f-4a7b-8c14-097935c18e5b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ad697a12-b25f-4a7b-8c14-097935c18e5b/246a9945-e728-367d-9f55-59504f6985c6.roa Signing time: Sun 11 Oct 2026 13:00:12 +0000 ROA not before: Sun 11 Oct 2026 13:00:12 +0000 ROA not after: Sat 09 Jan 2027 14:00:12 +0000 asID: 7029 IP address blocks: 23.189.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ad697a12-b25f-4a7b-8c14-097935c18e5b/ad697a12-b25f-4a7b-8c14-097935c18e5b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ad697a12-b25f-4a7b-8c14-097935c18e5b/ad697a12-b25f-4a7b-8c14-097935c18e5b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ad697a12-b25f-4a7b-8c14-097935c18e5b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 18 Oct 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:77:82:ed:41:2c:76:22:92:c7:57:1f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ad697a12-b25f-4a7b-8c14-097935c18e5b Validity Not Before: Oct 11 13:00:12 2026 GMT Not After : Jan 9 14:00:12 2027 GMT Subject: CN=febb3e01-57d4-43d5-8fc7-c8f1556c46b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:e2:c1:f1:53:90:9a:34:76:06:c9:12:f3:60: de:7d:28:be:0a:ab:c9:2e:4f:fc:84:aa:70:03:d3: 3a:ee:64:c8:e2:eb:2d:b6:8b:d0:b4:0c:d4:4c:5d: a4:17:a7:8f:76:65:f3:ac:ad:26:9a:3b:e2:cb:76: 9a:8a:0c:e1:7a:e0:66:d2:7e:85:61:08:be:9b:43: 49:71:35:b4:f5:57:bb:76:b1:af:2e:09:8d:a0:78: f0:a2:79:a7:ca:14:1b:d6:b9:d5:5b:59:d5:9c:37: fa:f9:1c:d3:b9:d0:27:b0:b0:ab:e7:a4:a8:ef:ac: 0d:e8:ad:71:09:78:f3:5c:e0:73:17:e9:40:63:dc: e5:8d:bb:34:31:af:23:4f:8e:7e:d6:63:db:3e:e7: d4:40:50:80:0a:3f:f7:5e:85:c9:59:20:1a:e1:9d: 6d:b0:19:3e:e7:65:60:1b:12:67:1d:b0:01:d9:54: 81:85:6b:d3:6e:7d:58:d0:2b:cf:89:23:a4:42:33: 76:7e:bb:f5:b4:04:05:3f:2b:80:14:bf:5a:1b:7f: 3f:4a:78:eb:ef:45:3e:74:89:2a:99:f6:a3:b0:d9: 72:0a:dc:29:83:9d:d8:9f:b8:6e:eb:df:fc:3c:87: 5a:59:3c:49:31:15:04:7b:ab:1b:7b:77:37:6f:f1: 55:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:BB:5E:78:63:D6:47:DA:F4:C3:FC:E5:4D:A9:F4:3D:D6:E4:67:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ad697a12-b25f-4a7b-8c14-097935c18e5b/246a9945-e728-367d-9f55-59504f6985c6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ad697a12-b25f-4a7b-8c14-097935c18e5b/ad697a12-b25f-4a7b-8c14-097935c18e5b.crl X509v3 Authority Key Identifier: keyid:C4:09:D9:07:5A:4B:0E:66:CF:34:3D:CC:88:C3:80:97:80:4C:D5:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ad697a12-b25f-4a7b-8c14-097935c18e5b.cer sbgp-ipAddrBlock: critical IPv4: 23.189.136.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:e0:56:4f:e5:55:0b:cd:c8:0e:a0:8a:85:a1:c8:de:13:5c: 86:7d:da:9f:de:76:77:6a:5a:82:fc:7f:2c:69:c1:fc:44:43: b4:82:10:d7:0d:b9:3d:1e:00:69:cf:7d:ab:e4:42:42:8b:fc: 1f:93:15:f1:90:e6:c1:ef:dc:5e:c9:80:d3:48:21:9e:d5:44: 2f:61:32:65:c4:2c:38:45:c6:96:ae:79:da:db:61:a1:c8:72: 5e:ca:74:fc:50:ba:a4:89:88:05:44:36:3b:e0:ca:89:98:a6: 9c:e6:88:f6:46:26:c8:1b:23:4f:7b:02:c7:20:76:37:9f:83: 25:d3:9a:69:43:01:39:ed:1d:2f:8f:18:4a:e1:63:c3:c7:52: b2:7c:b4:6a:d6:ae:f6:3c:6d:d4:2b:3f:cc:42:85:d7:76:37: af:44:e9:17:e3:68:95:99:d3:f0:59:27:64:78:af:e6:58:72: f6:3c:a1:b2:27:6a:f4:19:24:06:31:14:59:4d:68:17:39:85: 14:6d:37:38:67:59:a2:36:6f:9d:80:5b:3e:f6:b9:f9:6c:48: 08:5a:86:56:dc:86:ae:f5:ba:95:5b:57:87:e2:30:2c:4b:d1: 23:42:18:ad:ca:7d:a5:9c:5f:fc:3e:c3:72:f5:3a:c5:b1:00: 9b:ae:fb:75 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE93gu1BLHYiksdXH4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWQ2OTdhMTItYjI1Zi00YTdiLThjMTQtMDk3OTM1YzE4 ZTViMB4XDTI2MTAxMTEzMDAxMloXDTI3MDEwOTE0MDAxMlowLzEtMCsGA1UEAxMk ZmViYjNlMDEtNTdkNC00M2Q1LThmYzctYzhmMTU1NmM0NmI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlOLB8VOQmjR2BskS82DefSi+CqvJLk/8hKpw A9M67mTI4usttovQtAzUTF2kF6ePdmXzrK0mmjviy3aaigzheuBm0n6FYQi+m0NJ cTW09Ve7drGvLgmNoHjwonmnyhQb1rnVW1nVnDf6+RzTudAnsLCr56So76wN6K1x CXjzXOBzF+lAY9zljbs0Ma8jT45+1mPbPufUQFCACj/3XoXJWSAa4Z1tsBk+52Vg GxJnHbAB2VSBhWvTbn1Y0CvPiSOkQjN2frv1tAQFPyuAFL9aG38/Snjr70U+dIkq mfajsNlyCtwpg53Yn7hu69/8PIdaWTxJMRUEe6sbe3c3b/FVhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFC7Xnhj1kfa9MP85U2p9D3W5GcjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9hZDY5 N2ExMi1iMjVmLTRhN2ItOGMxNC0wOTc5MzVjMThlNWIvMjQ2YTk5NDUtZTcyOC0z NjdkLTlmNTUtNTk1MDRmNjk4NWM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYWQ2OTdhMTItYjI1Zi00YTdiLThj MTQtMDk3OTM1YzE4ZTViL2FkNjk3YTEyLWIyNWYtNGE3Yi04YzE0LTA5NzkzNWMx OGU1Yi5jcmwwHwYDVR0jBBgwFoAUxAnZB1pLDmbPND3MiMOAl4BM1cEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9hZDY5N2ExMi1iMjVmLTRhN2ItOGMxNC0wOTc5 MzVjMThlNWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF72IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFrgVk/lVQvNyA6gioWhyN4TXIZ92p/edndqWoL8fyxpwfxEQ7SCENcN uT0eAGnPfavkQkKL/B+TFfGQ5sHv3F7JgNNIIZ7VRC9hMmXELDhFxpauedrbYaHI cl7KdPxQuqSJiAVENjvgyomYppzmiPZGJsgbI097AscgdjefgyXTmmlDATntHS+P GErhY8PHUrJ8tGrWrvY8bdQrP8xChdd2N69E6RfjaJWZ0/BZJ2R4r+ZYcvY8obIn avQZJAYxFFlNaBc5hRRtNzhnWaI2b52AWz72uflsSAhahlbchq71upVbV4fiMCxL 0SNCGK3KfaWcX/w+w3L1OsWxAJuu+3U= -----END CERTIFICATE-----Generated at Sat Oct 17 02:51:12 2026 by rpki-client