$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1/13072588-b7e6-3051-b847-ffe2d33c2302.roa File: 13072588-b7e6-3051-b847-ffe2d33c2302.roa (raw, json) Hash identifier: ELgtiuEh3igI/wbP4Jas/6iJPUwv9yIntjBIg0XMwVk= Subject key identifier: A5:5A:AE:EA:A4:CA:86:FB:23:D7:DC:10:DF:61:C6:06:F2:56:B7:02 Certificate issuer: /CN=974309dc-20f5-4894-9707-f2e446573ea1 Certificate serial: 010D0C9F4328584F4974D0B0F2991ED3C9EBC400 Authority key identifier: F3:0A:72:2B:C9:79:15:ED:6B:77:2F:DF:BE:AC:07:8E:2E:A5:D5:E1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1/13072588-b7e6-3051-b847-ffe2d33c2302.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 14618 IP address blocks: 23.131.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1/974309dc-20f5-4894-9707-f2e446573ea1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1/974309dc-20f5-4894-9707-f2e446573ea1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:d0:b0:f2:99:1e:d3:c9:eb:c4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=974309dc-20f5-4894-9707-f2e446573ea1 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=154f316a-68dc-4824-8898-d82d945d5fd0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:b8:b2:c5:08:8a:5f:66:22:15:8b:c3:79:77: 5b:1e:33:d0:af:18:7f:c7:99:38:3b:43:6d:d6:40: 22:de:67:2e:74:ce:73:3b:57:7f:c4:ec:d9:88:70: c5:85:e4:27:4d:35:ba:ee:bc:83:97:4f:7b:4d:93: cb:8e:32:c5:d8:51:5c:31:60:bf:c4:07:6e:89:ab: dc:13:a1:fd:02:86:fb:44:40:55:01:06:ac:c9:f3: 0a:6d:c7:35:75:00:95:e1:06:fd:81:7b:d7:bc:3c: f6:3b:e9:8f:b1:cd:82:6b:7c:ac:f3:30:b5:80:8c: 53:b2:06:7c:3d:34:b7:e5:ae:13:f1:79:bd:9e:cd: 51:bf:32:94:9f:4f:2f:f1:03:06:dc:d2:b2:6d:dc: 10:28:8f:58:db:da:88:56:2b:89:02:26:c5:0f:a7: 86:27:b5:8b:b6:63:53:b7:b9:f5:ed:8f:0f:fa:62: ea:62:12:8f:39:7f:6a:96:07:ea:d2:f0:dd:89:5d: e8:26:bd:a4:74:65:b8:47:70:31:b5:f9:c1:e1:7f: 2c:11:2f:43:4f:19:5a:8a:16:a7:38:29:5c:02:17: ed:f0:59:29:5c:bd:1c:8b:ac:84:1f:cf:7f:a5:89: 55:89:5e:f3:10:76:6b:30:bc:52:73:9b:f1:78:75: 64:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:5A:AE:EA:A4:CA:86:FB:23:D7:DC:10:DF:61:C6:06:F2:56:B7:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1/13072588-b7e6-3051-b847-ffe2d33c2302.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1/974309dc-20f5-4894-9707-f2e446573ea1.crl X509v3 Authority Key Identifier: keyid:F3:0A:72:2B:C9:79:15:ED:6B:77:2F:DF:BE:AC:07:8E:2E:A5:D5:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/974309dc-20f5-4894-9707-f2e446573ea1.cer sbgp-ipAddrBlock: critical IPv4: 23.131.68.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:3f:6e:30:b3:d7:b5:dc:3f:90:97:66:e5:74:fb:e3:99:55: f3:56:38:a0:92:c9:9e:74:31:0c:8a:f0:70:c5:e7:25:82:3f: 36:b8:fa:ef:15:e5:7e:f2:90:bb:a0:e5:c6:f8:cb:26:7b:ea: 2e:38:37:7a:1f:00:30:c4:8b:e0:81:54:93:66:33:5b:14:7a: bf:30:cd:74:00:39:e2:af:67:09:1f:ed:7f:a3:e4:9b:12:40: a5:32:e3:b2:03:c8:bc:89:2c:42:06:86:19:76:eb:1d:46:9c: c3:8d:3a:1e:d8:ff:58:f2:99:45:23:96:e5:cc:2a:b0:28:60: 2e:1d:cf:1d:1d:28:3f:c8:80:4e:b9:26:29:01:14:74:7a:fc: 11:84:03:74:1a:23:39:79:8a:d6:7a:a2:f6:c0:07:95:0f:5a: cb:c6:3f:89:23:d6:38:19:c0:43:ad:d0:46:1b:f8:ff:7e:8c: 69:c0:37:f9:66:87:97:9b:49:62:62:01:67:43:b9:48:7f:16: 74:f5:53:f4:7d:94:ba:fb:00:03:73:6e:35:f3:8d:f7:de:c1: e7:3c:3e:15:42:f9:a5:ab:ab:1b:c7:30:0c:23:89:d6:2e:f1: e1:93:f3:4e:e2:99:1c:17:d5:ce:7f:7f:24:6c:de:7c:c7:f8: 5a:24:42:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdNCw8pke08nrxAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTc0MzA5ZGMtMjBmNS00ODk0LTk3MDctZjJlNDQ2NTcz ZWExMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MTU0ZjMxNmEtNjhkYy00ODI0LTg4OTgtZDgyZDk0NWQ1ZmQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlLiyxQiKX2YiFYvDeXdbHjPQrxh/x5k4O0Nt 1kAi3mcudM5zO1d/xOzZiHDFheQnTTW67ryDl097TZPLjjLF2FFcMWC/xAduiavc E6H9Aob7REBVAQasyfMKbcc1dQCV4Qb9gXvXvDz2O+mPsc2Ca3ys8zC1gIxTsgZ8 PTS35a4T8Xm9ns1RvzKUn08v8QMG3NKybdwQKI9Y29qIViuJAibFD6eGJ7WLtmNT t7n17Y8P+mLqYhKPOX9qlgfq0vDdiV3oJr2kdGW4R3AxtfnB4X8sES9DTxlaihan OClcAhft8FkpXL0ci6yEH89/pYlViV7zEHZrMLxSc5vxeHVkmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKVaruqkyob7I9fcEN9hxgbyVrcCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85NzQz MDlkYy0yMGY1LTQ4OTQtOTcwNy1mMmU0NDY1NzNlYTEvMTMwNzI1ODgtYjdlNi0z MDUxLWI4NDctZmZlMmQzM2MyMzAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTc0MzA5ZGMtMjBmNS00ODk0LTk3 MDctZjJlNDQ2NTczZWExLzk3NDMwOWRjLTIwZjUtNDg5NC05NzA3LWYyZTQ0NjU3 M2VhMS5jcmwwHwYDVR0jBBgwFoAU8wpyK8l5Fe1rdy/fvqwHji6l1eEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC85NzQzMDlkYy0yMGY1LTQ4OTQtOTcwNy1mMmU0 NDY1NzNlYTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4NEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABU/bjCz17XcP5CXZuV0++OZVfNWOKCSyZ50MQyK8HDF5yWCPza4+u8V 5X7ykLug5cb4yyZ76i44N3ofADDEi+CBVJNmM1sUer8wzXQAOeKvZwkf7X+j5JsS QKUy47IDyLyJLEIGhhl26x1GnMONOh7Y/1jymUUjluXMKrAoYC4dzx0dKD/IgE65 JikBFHR6/BGEA3QaIzl5itZ6ovbAB5UPWsvGP4kj1jgZwEOt0EYb+P9+jGnAN/lm h5ebSWJiAWdDuUh/FnT1U/R9lLr7AANzbjXzjffewec8PhVC+aWrqxvHMAwjidYu 8eGT807imRwX1c5/fyRs3nzH+FokQvQ= -----END CERTIFICATE-----Generated at Sun Oct 11 09:01:01 2026 by rpki-client