$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ca4c7666-c32b-35d7-b3f4-1f0aa8586217.roa File: ca4c7666-c32b-35d7-b3f4-1f0aa8586217.roa (raw, json) Hash identifier: jWSfTl9kcAUPwkFR3BZQ7jUkXflivJEjWIK7gWBYAGo= Subject key identifier: 26:1A:C2:7D:87:B7:90:9D:40:B1:78:3C:0E:BE:E0:2D:DB:E1:56:E4 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F4984F8FACD7585AB91290A80 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ca4c7666-c32b-35d7-b3f4-1f0aa8586217.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 396982 IP address blocks: 23.236.49.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:84:f8:fa:cd:75:85:ab:91:29:0a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=77ee03e8-5dd0-4e3c-9097-8672d408e204 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:f4:ec:a5:01:25:0d:a7:f3:04:34:e1:f4:47: fd:94:19:5e:57:51:54:92:ea:31:2a:76:84:93:45: 8d:54:10:44:97:45:3d:24:07:68:ad:e2:21:26:dd: d9:8b:21:ba:22:ec:11:09:f5:63:9b:ac:94:4f:c2: 90:d7:96:4b:f8:07:cd:cd:73:2f:a9:50:78:88:27: 49:57:50:04:99:d9:99:d3:12:12:6e:74:bf:d3:11: 24:94:bb:63:af:f7:3b:29:08:61:fa:76:f7:a2:bb: db:28:09:74:3b:f2:f6:28:e2:ad:ee:aa:11:22:06: 96:11:a9:85:83:8e:d7:d8:77:e1:d6:cb:a6:39:ba: 98:2c:ed:80:1a:e5:87:98:74:0e:e4:56:56:44:d8: 6e:3a:fb:50:d0:28:aa:4f:41:57:65:9a:5c:a8:67: ab:1c:39:33:7d:1a:b2:0c:34:29:d4:86:65:40:2b: 7e:f4:cb:2e:08:3b:6b:82:82:7a:ef:ce:71:43:cf: ec:0a:c5:68:88:a7:48:68:9b:85:fd:99:9a:d8:45: 88:14:3e:7c:a6:c7:a6:62:78:2d:91:4c:9d:0a:8a: 42:6e:d5:fc:b1:75:30:eb:aa:4e:ba:e7:0b:27:44: 00:88:22:42:ad:7c:b4:11:73:7d:a3:2d:89:fb:48: d7:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:1A:C2:7D:87:B7:90:9D:40:B1:78:3C:0E:BE:E0:2D:DB:E1:56:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ca4c7666-c32b-35d7-b3f4-1f0aa8586217.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 23.236.49.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:88:ac:d5:0a:18:5f:3e:e7:f6:dd:c7:c5:99:cc:af:9b:c5: b2:80:5c:40:1d:ac:fe:9f:5b:1f:b7:ba:97:e1:3e:e0:67:54: 9d:7a:54:88:6a:e4:5d:ef:c8:95:1b:9f:bf:72:5c:99:83:6a: f1:f6:c4:cf:31:51:8f:e7:fb:f6:e1:18:0a:63:52:1a:cd:58: 44:93:7b:83:e0:37:5a:5e:d2:c4:37:de:fb:ec:43:6d:86:77: bb:98:73:fb:dd:a8:bb:cf:fe:9c:37:f1:fc:cc:03:a2:f9:ed: 02:1e:6d:90:4a:aa:90:84:e8:39:45:b0:10:d6:23:c5:33:13: 7d:3e:d5:7d:3f:64:d9:a4:14:52:9c:86:74:88:e6:f2:0e:a5: 68:22:da:37:fe:69:04:2d:19:22:a2:61:d9:d3:6a:d2:db:b9: 48:d2:2e:b7:69:0b:3a:91:88:1c:bf:fe:e2:91:79:eb:ef:74: f1:e2:73:87:1e:c7:1a:30:ef:78:27:86:4b:d7:ff:79:fd:e0: f3:1a:14:77:2c:de:84:b5:71:bc:8d:a0:04:ac:1b:d5:f8:63: 3f:40:db:6f:98:eb:46:1f:c0:0c:42:d9:d1:f3:ad:be:02:54: aa:c4:30:79:74:9c:24:1c:37:30:a4:cd:01:2c:83:77:08:d5: e3:fd:cf:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JhPj6zXWFq5EpCoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NzdlZTAzZTgtNWRkMC00ZTNjLTkwOTctODY3MmQ0MDhlMjA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjvTspQElDafzBDTh9Ef9lBleV1FUkuoxKnaE k0WNVBBEl0U9JAdoreIhJt3ZiyG6IuwRCfVjm6yUT8KQ15ZL+AfNzXMvqVB4iCdJ V1AEmdmZ0xISbnS/0xEklLtjr/c7KQhh+nb3orvbKAl0O/L2KOKt7qoRIgaWEamF g47X2Hfh1sumObqYLO2AGuWHmHQO5FZWRNhuOvtQ0CiqT0FXZZpcqGerHDkzfRqy DDQp1IZlQCt+9MsuCDtrgoJ6785xQ8/sCsVoiKdIaJuF/Zma2EWIFD58psemYngt kUydCopCbtX8sXUw66pOuucLJ0QAiCJCrXy0EXN9oy2J+0jXCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCYawn2Ht5CdQLF4PA6+4C3b4VbkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvY2E0Yzc2NjYtYzMyYi0z NWQ3LWIzZjQtMWYwYWE4NTg2MjE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF+wxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJqIrNUKGF8+5/bdx8WZzK+bxbKAXEAdrP6fWx+3upfhPuBnVJ16VIhq 5F3vyJUbn79yXJmDavH2xM8xUY/n+/bhGApjUhrNWESTe4PgN1pe0sQ33vvsQ22G d7uYc/vdqLvP/pw38fzMA6L57QIebZBKqpCE6DlFsBDWI8UzE30+1X0/ZNmkFFKc hnSI5vIOpWgi2jf+aQQtGSKiYdnTatLbuUjSLrdpCzqRiBy//uKReevvdPHic4ce xxow73gnhkvX/3n94PMaFHcs3oS1cbyNoASsG9X4Yz9A22+Y60YfwAxC2dHzrb4C VKrEMHl0nCQcNzCkzQEsg3cI1eP9z0E= -----END CERTIFICATE-----Generated at Mon Sep 28 08:36:05 2026 by rpki-client