$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aabbabc3-cafd-46c0-b90e-e44d061ba2a3/870afd69-134e-3a16-b55c-fb7fad5a4868.roa File: 870afd69-134e-3a16-b55c-fb7fad5a4868.roa (raw, json) Hash identifier: pbiUgQZbW8+KhFXrT8sWeKndsmLt0OHbLNpgz92gkOU= Subject key identifier: 36:38:E1:F2:72:F7:77:42:AC:70:73:BA:B1:55:25:79:08:B7:BB:95 Certificate issuer: /CN=aabbabc3-cafd-46c0-b90e-e44d061ba2a3 Certificate serial: 010D0C9F4328584F655D6AE135A014B422ADD100 Authority key identifier: 32:C7:97:1D:40:11:9A:A3:10:7D:7C:66:68:0F:11:BF:70:CC:0F:A7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aabbabc3-cafd-46c0-b90e-e44d061ba2a3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aabbabc3-cafd-46c0-b90e-e44d061ba2a3/870afd69-134e-3a16-b55c-fb7fad5a4868.roa Signing time: Mon 05 Oct 2026 01:00:13 +0000 ROA not before: Mon 05 Oct 2026 01:00:13 +0000 ROA not after: Sun 03 Jan 2027 02:00:13 +0000 asID: 401155 IP address blocks: 23.142.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aabbabc3-cafd-46c0-b90e-e44d061ba2a3/aabbabc3-cafd-46c0-b90e-e44d061ba2a3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aabbabc3-cafd-46c0-b90e-e44d061ba2a3/aabbabc3-cafd-46c0-b90e-e44d061ba2a3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aabbabc3-cafd-46c0-b90e-e44d061ba2a3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 02 Nov 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:65:5d:6a:e1:35:a0:14:b4:22:ad:d1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aabbabc3-cafd-46c0-b90e-e44d061ba2a3 Validity Not Before: Oct 5 01:00:13 2026 GMT Not After : Jan 3 02:00:13 2027 GMT Subject: CN=1b664a3d-a6cb-458b-af9b-2b71ccaffe22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:bd:df:e3:ec:d4:fe:09:46:da:87:77:8e:a0: 00:d4:f2:48:2b:79:23:78:73:ee:36:c4:b6:d2:44: af:43:79:49:b8:ba:52:f2:1b:ad:60:41:4f:35:c3: 08:8a:85:e5:77:a6:24:1b:b0:5f:fd:08:fd:bd:6e: 8b:f4:5e:ec:36:89:a5:e2:cb:79:75:d4:1a:bd:33: 8b:83:98:90:e6:17:ab:47:09:f5:f0:a2:f0:2a:9b: 46:ca:83:c6:93:91:14:44:52:e4:6b:16:46:ed:2f: cb:30:79:33:17:54:4e:41:d7:4e:51:ac:15:4d:77: 59:f4:97:d5:da:18:6c:24:cd:05:76:61:e4:08:f5: 31:fd:cb:e7:df:f1:21:e5:3e:c1:90:1e:3e:6c:74: c9:05:47:6c:b7:be:79:80:88:13:af:78:e7:a0:6d: 72:bf:72:50:9f:4a:27:bb:98:a2:1a:1b:dc:f4:cb: 50:c1:dc:21:4a:f4:10:88:3c:11:63:01:c6:3c:66: 8f:bb:05:12:c0:8c:32:ca:88:8b:49:dc:d4:c7:4a: 70:9b:7a:e5:50:95:c7:b1:e5:99:26:6a:7e:ed:2a: ca:31:b6:5e:01:5f:8a:00:36:4c:1b:69:e7:00:48: 3a:f8:51:2b:8d:a0:18:1e:26:01:1e:7c:38:a9:11: bd:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:38:E1:F2:72:F7:77:42:AC:70:73:BA:B1:55:25:79:08:B7:BB:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aabbabc3-cafd-46c0-b90e-e44d061ba2a3/870afd69-134e-3a16-b55c-fb7fad5a4868.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aabbabc3-cafd-46c0-b90e-e44d061ba2a3/aabbabc3-cafd-46c0-b90e-e44d061ba2a3.crl X509v3 Authority Key Identifier: keyid:32:C7:97:1D:40:11:9A:A3:10:7D:7C:66:68:0F:11:BF:70:CC:0F:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/aabbabc3-cafd-46c0-b90e-e44d061ba2a3.cer sbgp-ipAddrBlock: critical IPv4: 23.142.124.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:19:95:54:d4:c2:54:67:b2:ab:a7:1c:08:3a:0e:95:5f:0b: 1c:fd:70:b2:05:13:f0:f5:1e:8e:b9:53:6e:c6:56:ff:da:a3: 75:24:5c:29:5b:84:96:ae:d1:55:16:86:a5:5d:fb:d9:22:44: ce:c4:fe:55:92:b9:59:db:23:56:78:d6:84:ca:eb:76:e1:58: ae:3d:e7:a7:4b:21:ff:db:d0:88:23:4f:f4:cc:10:ac:ae:ca: 27:46:e9:2c:57:a3:e3:8c:96:7e:89:ff:e9:24:eb:e0:69:57: 88:75:ea:58:a5:84:17:8c:df:e4:82:db:32:40:1f:1d:76:c7: 55:0e:ab:ec:99:eb:4b:57:0a:dd:94:c2:d9:50:72:45:a8:4f: 48:02:91:fc:f1:f2:07:3e:99:1e:71:5d:7f:b6:1a:30:a6:0d: 60:2d:41:6d:a1:64:92:42:21:1e:6e:b5:9a:58:54:ea:66:04: e6:a9:d1:3e:3a:3a:a9:c4:cb:11:86:8f:3e:90:de:ea:33:06: 89:00:32:d1:79:55:ef:c8:56:d6:d3:0c:3c:d8:05:88:d7:b8: 79:0e:43:a2:c0:4a:58:79:2e:d3:34:69:af:56:eb:4b:11:18: 4a:4e:70:11:dd:1b:d0:d2:c8:c1:a2:c4:b5:16:41:d4:5e:1f: 02:5d:ab:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9lXWrhNaAUtCKt0QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWFiYmFiYzMtY2FmZC00NmMwLWI5MGUtZTQ0ZDA2MWJh MmEzMB4XDTI2MTAwNTAxMDAxM1oXDTI3MDEwMzAyMDAxM1owLzEtMCsGA1UEAxMk MWI2NjRhM2QtYTZjYi00NThiLWFmOWItMmI3MWNjYWZmZTIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs73f4+zU/glG2od3jqAA1PJIK3kjeHPuNsS2 0kSvQ3lJuLpS8hutYEFPNcMIioXld6YkG7Bf/Qj9vW6L9F7sNoml4st5ddQavTOL g5iQ5herRwn18KLwKptGyoPGk5EURFLkaxZG7S/LMHkzF1ROQddOUawVTXdZ9JfV 2hhsJM0FdmHkCPUx/cvn3/Eh5T7BkB4+bHTJBUdst755gIgTr3jnoG1yv3JQn0on u5iiGhvc9MtQwdwhSvQQiDwRYwHGPGaPuwUSwIwyyoiLSdzUx0pwm3rlUJXHseWZ Jmp+7SrKMbZeAV+KADZMG2nnAEg6+FErjaAYHiYBHnw4qRG9XwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDY44fJy93dCrHBzurFVJXkIt7uVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9hYWJi YWJjMy1jYWZkLTQ2YzAtYjkwZS1lNDRkMDYxYmEyYTMvODcwYWZkNjktMTM0ZS0z YTE2LWI1NWMtZmI3ZmFkNWE0ODY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYWFiYmFiYzMtY2FmZC00NmMwLWI5 MGUtZTQ0ZDA2MWJhMmEzL2FhYmJhYmMzLWNhZmQtNDZjMC1iOTBlLWU0NGQwNjFi YTJhMy5jcmwwHwYDVR0jBBgwFoAUMseXHUARmqMQfXxmaA8Rv3DMD6cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9hYWJiYWJjMy1jYWZkLTQ2YzAtYjkwZS1lNDRk MDYxYmEyYTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF458MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEMZlVTUwlRnsqunHAg6DpVfCxz9cLIFE/D1Ho65U27GVv/ao3UkXClb hJau0VUWhqVd+9kiRM7E/lWSuVnbI1Z41oTK63bhWK4956dLIf/b0IgjT/TMEKyu yidG6SxXo+OMln6J/+kk6+BpV4h16lilhBeM3+SC2zJAHx12x1UOq+yZ60tXCt2U wtlQckWoT0gCkfzx8gc+mR5xXX+2GjCmDWAtQW2hZJJCIR5utZpYVOpmBOap0T46 OqnEyxGGjz6Q3uozBokAMtF5Ve/IVtbTDDzYBYjXuHkOQ6LASlh5LtM0aa9W60sR GEpOcBHdG9DSyMGixLUWQdReHwJdq6A= -----END CERTIFICATE-----Generated at Sat Oct 31 22:51:51 2026 by rpki-client