$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/3db7604b-9a94-3986-aed5-7f5d5a808145.roa File: 3db7604b-9a94-3986-aed5-7f5d5a808145.roa (raw, json) Hash identifier: q3KmbmphdTBjrYdhuIv+e9QLJp/+BhIrWFnaJJ7wBME= Subject key identifier: 35:94:6A:E9:F5:21:4E:A7:AD:E1:CC:04:3E:E8:13:B8:2C:6F:BD:86 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584F497334CF07D4F2BAB416E980 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/3db7604b-9a94-3986-aed5-7f5d5a808145.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 44559 IP address blocks: 23.230.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:34:cf:07:d4:f2:ba:b4:16:e9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=b5b9fc3b-f809-4071-859a-9a99255c1fe9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:21:4b:fb:41:ae:91:6f:1f:e2:e5:03:6d:a3: b2:d8:9a:82:03:c6:fa:ab:76:6b:13:b4:9a:80:03: 66:c6:00:37:e6:27:75:1d:c6:70:09:21:bd:33:a6: da:f7:37:87:cb:86:50:a0:cc:61:0e:c4:2e:fb:d0: 6c:bf:8f:81:02:d1:66:1a:b8:4e:09:56:c7:d9:f1: 75:fd:06:ce:67:ea:8f:e7:3d:38:e8:15:17:e5:50: 90:79:ee:10:20:4d:68:d6:16:74:88:6b:d7:18:2e: 55:9f:38:1d:d4:1e:94:35:dc:64:4f:34:d8:5d:0f: 6f:1d:f2:18:76:3e:1f:1e:1d:1f:59:fb:78:4e:39: d0:f0:b1:18:50:0b:ed:f4:73:aa:3b:13:b2:04:2a: c7:8b:64:ee:63:1d:05:a9:f1:45:25:f0:4b:22:4f: cd:76:f6:58:2d:ed:84:bf:97:eb:07:f5:08:c1:13: ea:b2:94:07:1a:27:94:e3:1b:88:2e:d7:f5:7a:12: b4:7d:55:e0:43:3a:94:e6:fc:d5:09:90:27:4b:de: 8b:9c:0a:ae:f6:28:2b:f5:2d:a6:f9:bc:d7:28:b1: 47:83:96:4b:09:2d:c8:38:01:00:d0:ef:a0:19:5b: 16:1a:ae:44:24:62:1d:9a:32:37:be:58:b5:de:2e: cc:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:94:6A:E9:F5:21:4E:A7:AD:E1:CC:04:3E:E8:13:B8:2C:6F:BD:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/3db7604b-9a94-3986-aed5-7f5d5a808145.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 23.230.33.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:97:d7:aa:6d:0f:7d:98:dc:3e:eb:54:cc:df:b3:7d:20:58: af:c4:ad:19:93:fd:45:5b:45:ae:4d:13:d9:cc:8b:b7:b3:a6: 64:17:9e:43:b3:7a:8c:3a:53:36:7d:60:33:d8:fa:c0:f4:9e: 75:46:13:06:fe:30:27:11:41:7e:7b:85:f0:54:3f:26:68:b9: 2c:78:26:82:39:8d:2a:d3:aa:f7:9f:19:5b:f0:bd:d4:fd:21: 37:e2:34:51:e9:48:c0:c7:b6:e0:a1:6c:c3:40:60:ed:aa:34: 5c:4b:04:03:12:3d:13:9f:2c:e6:40:a2:4f:d5:01:23:8a:b0: 75:70:6b:de:e3:38:5c:64:ec:99:be:ac:08:44:65:1a:d3:c3: 41:b2:58:6d:ae:d9:c1:10:cd:ff:7c:8b:e5:7d:2b:9e:0d:64: 90:ba:87:25:fc:7f:a5:20:db:76:be:31:1f:36:67:ef:ba:c7: 44:57:cb:c3:81:d5:14:79:3d:ab:b6:8f:ac:72:c6:9b:81:c2: 97:b6:be:c2:a0:58:ff:aa:33:ed:d1:12:3b:5f:31:b3:d0:f7: a6:8a:5b:ab:0b:a5:74:45:95:3e:af:ee:57:28:d9:42:26:77: 8d:4b:b4:10:47:31:2a:41:9c:b1:29:56:2e:99:7a:64:3c:dd: 19:fc:27:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JczTPB9TyurQW6YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YjViOWZjM2ItZjgwOS00MDcxLTg1OWEtOWE5OTI1NWMxZmU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkyFL+0GukW8f4uUDbaOy2JqCA8b6q3ZrE7Sa gANmxgA35id1HcZwCSG9M6ba9zeHy4ZQoMxhDsQu+9Bsv4+BAtFmGrhOCVbH2fF1 /QbOZ+qP5z046BUX5VCQee4QIE1o1hZ0iGvXGC5Vnzgd1B6UNdxkTzTYXQ9vHfIY dj4fHh0fWft4TjnQ8LEYUAvt9HOqOxOyBCrHi2TuYx0FqfFFJfBLIk/NdvZYLe2E v5frB/UIwRPqspQHGieU4xuILtf1ehK0fVXgQzqU5vzVCZAnS96LnAqu9igr9S2m +bzXKLFHg5ZLCS3IOAEA0O+gGVsWGq5EJGIdmjI3vli13i7MswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDWUaun1IU6nreHMBD7oE7gsb72GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvM2RiNzYwNGItOWE5NC0z OTg2LWFlZDUtN2Y1ZDVhODA4MTQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF+YhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA+X16ptD32Y3D7rVMzfs30gWK/ErRmT/UVbRa5NE9nMi7ezpmQXnkOz eow6UzZ9YDPY+sD0nnVGEwb+MCcRQX57hfBUPyZouSx4JoI5jSrTqvefGVvwvdT9 ITfiNFHpSMDHtuChbMNAYO2qNFxLBAMSPROfLOZAok/VASOKsHVwa97jOFxk7Jm+ rAhEZRrTw0GyWG2u2cEQzf98i+V9K54NZJC6hyX8f6Ug23a+MR82Z++6x0RXy8OB 1RR5Pau2j6xyxpuBwpe2vsKgWP+qM+3REjtfMbPQ96aKW6sLpXRFlT6v7lco2UIm d41LtBBHMSpBnLEpVi6ZemQ83Rn8J5w= -----END CERTIFICATE-----Generated at Sun Oct 11 09:25:36 2026 by rpki-client