$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2d64a9b2-da39-490b-a76e-0928cd57270b/567a0c7b-3f86-31ea-8791-f3940e306bd1.roa File: 567a0c7b-3f86-31ea-8791-f3940e306bd1.roa (raw, json) Hash identifier: v/Wd+YrbqcKBJC/5yiyQrImz74IY4a0CPprFFJOtIrQ= Subject key identifier: D4:AA:F7:4A:B0:49:0F:5D:53:54:9E:3B:81:16:7D:64:00:C6:C6:F7 Certificate issuer: /CN=2d64a9b2-da39-490b-a76e-0928cd57270b Certificate serial: 010D0C9F4328584F4973DE686FC26AADE4B1C400 Authority key identifier: C7:69:30:7A:B2:7A:76:4F:23:E1:E7:4E:DB:18:C6:3D:E0:0C:95:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2d64a9b2-da39-490b-a76e-0928cd57270b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2d64a9b2-da39-490b-a76e-0928cd57270b/567a0c7b-3f86-31ea-8791-f3940e306bd1.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 54041 IP address blocks: 23.142.232.0/24 maxlen: 25 2602:faf5::/40 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2d64a9b2-da39-490b-a76e-0928cd57270b/2d64a9b2-da39-490b-a76e-0928cd57270b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2d64a9b2-da39-490b-a76e-0928cd57270b/2d64a9b2-da39-490b-a76e-0928cd57270b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2d64a9b2-da39-490b-a76e-0928cd57270b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:de:68:6f:c2:6a:ad:e4:b1:c4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d64a9b2-da39-490b-a76e-0928cd57270b Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=1aa4e4d7-1b3c-4318-97f2-19c4f0a771a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:d7:cd:cb:ed:f8:7e:57:fb:40:04:b6:a6:ad: 61:8c:de:b8:73:06:b7:40:31:47:cf:a4:8c:93:83: 82:c0:c6:93:96:38:eb:9a:d9:6e:d8:de:02:eb:db: 2c:72:81:ce:fb:a0:e8:4f:e0:46:e1:68:49:bf:c1: aa:54:0d:ec:bf:b5:f2:33:8a:6c:a3:01:38:04:2a: 9f:66:07:c0:5d:83:a8:ae:8f:79:fd:26:70:bf:31: bb:4d:a7:93:3c:a5:ec:ca:3c:11:19:5e:ab:df:af: 3d:dc:c0:65:f6:0f:3e:1f:fe:be:4c:70:1e:d2:69: e2:f1:65:4b:3e:e7:f9:f9:ee:a7:9a:86:57:cb:b0: 01:f9:d6:45:d4:a3:49:57:cb:bf:b7:66:b5:22:d8: 7c:68:4a:07:1d:cd:cf:8f:69:e4:35:d1:3d:7d:dd: 23:62:2f:61:93:62:70:75:de:c2:77:49:a6:94:ae: 80:9a:94:4b:81:88:47:84:62:0c:07:09:db:4c:6c: 43:e6:7f:44:2f:1a:9c:7d:ee:c3:61:8c:5c:ff:b3: 1b:a6:84:0a:3d:70:5f:86:03:89:e0:ec:43:46:25: ad:43:95:7f:24:05:ff:b2:aa:7b:3a:62:63:80:97: ed:b3:29:02:d4:d1:24:d8:2a:c6:1b:ea:73:09:43: 7f:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:AA:F7:4A:B0:49:0F:5D:53:54:9E:3B:81:16:7D:64:00:C6:C6:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2d64a9b2-da39-490b-a76e-0928cd57270b/567a0c7b-3f86-31ea-8791-f3940e306bd1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2d64a9b2-da39-490b-a76e-0928cd57270b/2d64a9b2-da39-490b-a76e-0928cd57270b.crl X509v3 Authority Key Identifier: keyid:C7:69:30:7A:B2:7A:76:4F:23:E1:E7:4E:DB:18:C6:3D:E0:0C:95:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2d64a9b2-da39-490b-a76e-0928cd57270b.cer sbgp-ipAddrBlock: critical IPv4: 23.142.232.0/24 IPv6: 2602:faf5::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:6d:83:50:91:e2:3e:8d:58:0d:3f:37:19:a8:90:8e:70:b5: 83:13:d6:31:88:a4:8a:40:9c:75:10:53:b8:69:10:ae:f8:6a: aa:09:3c:42:0c:64:6e:6d:ed:55:0a:8e:34:26:2f:8c:e5:01: 64:a4:c3:cb:f8:24:dc:5b:95:66:8b:71:bc:9c:c5:12:d7:27: 22:af:ba:56:cd:b0:e3:56:64:cf:4f:b6:58:64:26:e7:e2:c5: a3:7e:3d:3d:f9:08:2b:2e:6d:45:a6:af:84:e5:1e:0a:2c:a7: fb:c3:91:bd:4b:be:5b:27:02:14:7f:bd:7d:13:ff:c0:7f:66: 90:0f:fc:9c:c3:7e:5f:9d:d3:e0:e5:56:8e:57:b5:ae:74:bf: 47:6e:20:b8:b1:ae:3d:6f:1c:02:93:56:08:75:bb:46:53:7e: 49:0b:16:a3:b7:5a:84:01:6f:4b:49:d2:50:d4:71:d3:42:3c: 68:ab:7a:a8:9b:55:7a:e6:43:ee:f2:c8:05:38:08:33:f0:01: 42:5b:45:db:85:fc:11:d6:a9:6b:65:8f:2a:26:29:55:5b:74: d8:23:0d:93:aa:c6:5b:6d:99:c7:ca:8a:02:fe:66:e5:94:8e: 3a:a1:0c:d4:e8:d8:f0:96:d2:42:db:5c:d6:29:37:59:eb:04: 84:3b:dc:17 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE9Jc95ob8JqreSxxAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmQ2NGE5YjItZGEzOS00OTBiLWE3NmUtMDkyOGNkNTcy NzBiMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MWFhNGU0ZDctMWIzYy00MzE4LTk3ZjItMTljNGYwYTc3MWE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0tfNy+34flf7QAS2pq1hjN64cwa3QDFHz6SM k4OCwMaTljjrmtlu2N4C69sscoHO+6DoT+BG4WhJv8GqVA3sv7XyM4psowE4BCqf ZgfAXYOoro95/SZwvzG7TaeTPKXsyjwRGV6r36893MBl9g8+H/6+THAe0mni8WVL Puf5+e6nmoZXy7AB+dZF1KNJV8u/t2a1Ith8aEoHHc3Pj2nkNdE9fd0jYi9hk2Jw dd7Cd0mmlK6AmpRLgYhHhGIMBwnbTGxD5n9ELxqcfe7DYYxc/7MbpoQKPXBfhgOJ 4OxDRiWtQ5V/JAX/sqp7OmJjgJftsykC1NEk2CrGG+pzCUN/VwIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFNSq90qwSQ9dU1SeO4EWfWQAxsb3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yZDY0 YTliMi1kYTM5LTQ5MGItYTc2ZS0wOTI4Y2Q1NzI3MGIvNTY3YTBjN2ItM2Y4Ni0z MWVhLTg3OTEtZjM5NDBlMzA2YmQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMmQ2NGE5YjItZGEzOS00OTBiLWE3 NmUtMDkyOGNkNTcyNzBiLzJkNjRhOWIyLWRhMzktNDkwYi1hNzZlLTA5MjhjZDU3 MjcwYi5jcmwwHwYDVR0jBBgwFoAUx2kwerJ6dk8j4edO2xjGPeAMlXYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8yZDY0YTliMi1kYTM5LTQ5MGItYTc2ZS0wOTI4 Y2Q1NzI3MGIuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF47oMA4E AgACMAgDBgAmAvr1ADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBfbYNQkeI+jVgNPzcZqJCOcLWDE9YxiKSK QJx1EFO4aRCu+GqqCTxCDGRube1VCo40Ji+M5QFkpMPL+CTcW5Vmi3G8nMUS1yci r7pWzbDjVmTPT7ZYZCbn4sWjfj09+QgrLm1Fpq+E5R4KLKf7w5G9S75bJwIUf719 E//Af2aQD/ycw35fndPg5VaOV7WudL9HbiC4sa49bxwCk1YIdbtGU35JCxajt1qE AW9LSdJQ1HHTQjxoq3qom1V65kPu8sgFOAgz8AFCW0XbhfwR1qlrZY8qJilVW3TY Iw2TqsZbbZnHyooC/mbllI46oQzU6NjwltJC21zWKTdZ6wSEO9wX -----END CERTIFICATE-----Generated at Tue Sep 29 12:22:58 2026 by rpki-client