$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4d43adfd-f6e4-4504-86f0-2efadf9d4d21/46773a05-ae39-36bd-a950-0d64b5b7e334.roa File: 46773a05-ae39-36bd-a950-0d64b5b7e334.roa (raw, json) Hash identifier: U7CsEdgxqNGoSz8gBMy+psuwZTGdjju//do6Ky6KFvs= Subject key identifier: 43:42:E4:93:6C:0E:AA:F2:C4:24:FE:1F:C7:F1:10:CB:55:98:E2:44 Certificate issuer: /CN=4d43adfd-f6e4-4504-86f0-2efadf9d4d21 Certificate serial: 010D0C9F4328584F119CEF84AFA326131F1BC540 Authority key identifier: 1C:B3:CA:54:75:F6:00:9C:AB:A9:BF:E4:15:40:09:40:A1:EF:39:9D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4d43adfd-f6e4-4504-86f0-2efadf9d4d21.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4d43adfd-f6e4-4504-86f0-2efadf9d4d21/46773a05-ae39-36bd-a950-0d64b5b7e334.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 17017 IP address blocks: 23.247.236.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4d43adfd-f6e4-4504-86f0-2efadf9d4d21/4d43adfd-f6e4-4504-86f0-2efadf9d4d21.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4d43adfd-f6e4-4504-86f0-2efadf9d4d21/4d43adfd-f6e4-4504-86f0-2efadf9d4d21.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4d43adfd-f6e4-4504-86f0-2efadf9d4d21.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:9c:ef:84:af:a3:26:13:1f:1b:c5:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4d43adfd-f6e4-4504-86f0-2efadf9d4d21 Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=9abfd51d-d395-4647-bf77-151f495064f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:64:8a:5e:da:f9:d3:db:a1:56:f0:1a:98:ae: d1:55:8c:ea:bc:30:c5:23:d8:58:1b:d4:3a:27:77: b6:e8:39:35:d7:b2:b4:61:b9:97:4a:c1:53:66:71: 84:33:a0:82:c8:53:28:80:52:8b:6a:66:6f:48:05: fe:68:ab:4f:69:f4:53:aa:86:03:55:cc:8b:2a:08: a3:55:1b:0c:5b:8f:2d:d9:7a:8a:38:7e:66:d7:49: fe:0b:b0:f3:9b:6b:d0:d3:87:d7:5c:3e:cd:96:3e: 67:e8:29:03:a8:80:12:24:f5:5a:8e:3f:a7:d7:16: 80:6e:8b:ba:1c:d3:11:c8:9e:b6:e7:d8:68:7a:0e: 58:00:c5:a0:39:6e:5c:56:69:b4:89:ee:98:2a:ba: dc:7e:b0:59:66:51:be:6d:b9:27:da:6d:e7:06:8e: 2b:5f:95:32:7a:dc:3e:0e:07:73:cd:47:e4:ee:08: 4c:95:bb:ed:79:ff:d7:f4:6f:f7:d6:95:63:74:02: a2:94:0b:be:50:f2:a1:34:ca:42:89:81:e5:41:10: e8:3f:ee:ff:b0:93:c4:ea:36:28:1a:27:72:1f:65: 70:09:76:d0:43:8f:0f:63:b8:f3:85:3c:ff:dc:05: cb:d1:e2:3b:88:cb:d1:32:aa:1f:1b:38:84:60:3e: fd:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:42:E4:93:6C:0E:AA:F2:C4:24:FE:1F:C7:F1:10:CB:55:98:E2:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4d43adfd-f6e4-4504-86f0-2efadf9d4d21/46773a05-ae39-36bd-a950-0d64b5b7e334.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4d43adfd-f6e4-4504-86f0-2efadf9d4d21/4d43adfd-f6e4-4504-86f0-2efadf9d4d21.crl X509v3 Authority Key Identifier: keyid:1C:B3:CA:54:75:F6:00:9C:AB:A9:BF:E4:15:40:09:40:A1:EF:39:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4d43adfd-f6e4-4504-86f0-2efadf9d4d21.cer sbgp-ipAddrBlock: critical IPv4: 23.247.236.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:dd:f3:4e:7a:aa:2d:e9:37:9e:11:2e:d4:f4:d1:33:bf:06: 63:2b:cb:35:f1:72:46:00:89:d6:66:e9:fb:a5:7e:59:b6:75: 28:ec:24:29:c0:75:c2:45:cb:10:5a:61:90:1b:5c:af:42:c7: bc:c9:22:5a:15:9f:9d:0c:18:4e:63:9d:d1:64:50:25:a8:29: db:61:bc:98:13:79:4d:51:68:25:8a:91:ee:9a:bb:b8:90:93: 8a:db:c7:45:49:bd:fc:86:01:36:3c:1b:9e:52:da:d2:ed:31: c1:18:ce:7f:3e:0a:a5:ca:c9:7c:ca:e5:67:29:dc:80:80:2f: ef:fe:c4:55:55:0c:a2:f4:79:85:f0:76:e5:27:76:c8:af:7c: 12:2f:88:f4:46:19:e5:d4:a9:38:5e:6e:c1:8c:b4:16:25:f6: ed:4e:87:a2:76:f4:b3:86:21:da:3d:e1:29:8f:7e:3e:8f:ea: c1:99:09:37:13:7d:8b:5c:3a:b9:6c:e8:85:c2:43:3b:a9:50: 0f:fd:38:65:1c:2e:2b:79:b7:f5:0e:f5:c1:01:7b:11:8c:56: f4:f3:c7:16:44:00:10:52:c7:82:0a:80:c5:11:4c:66:7c:f9: 2c:07:bc:6d:1f:04:46:e4:1f:9e:ef:bd:19:a3:80:7a:1d:d2: 3f:d5:21:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8RnO+Er6MmEx8bxUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGQ0M2FkZmQtZjZlNC00NTA0LTg2ZjAtMmVmYWRmOWQ0 ZDIxMB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk OWFiZmQ1MWQtZDM5NS00NjQ3LWJmNzctMTUxZjQ5NTA2NGYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhWSKXtr509uhVvAamK7RVYzqvDDFI9hYG9Q6 J3e26Dk117K0YbmXSsFTZnGEM6CCyFMogFKLamZvSAX+aKtPafRTqoYDVcyLKgij VRsMW48t2XqKOH5m10n+C7Dzm2vQ04fXXD7Nlj5n6CkDqIASJPVajj+n1xaAbou6 HNMRyJ6259hoeg5YAMWgOW5cVmm0ie6YKrrcfrBZZlG+bbkn2m3nBo4rX5Uyetw+ DgdzzUfk7ghMlbvtef/X9G/31pVjdAKilAu+UPKhNMpCiYHlQRDoP+7/sJPE6jYo GidyH2VwCXbQQ48PY7jzhTz/3AXL0eI7iMvRMqofGziEYD79qQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFENC5JNsDqryxCT+H8fxEMtVmOJEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80ZDQz YWRmZC1mNmU0LTQ1MDQtODZmMC0yZWZhZGY5ZDRkMjEvNDY3NzNhMDUtYWUzOS0z NmJkLWE5NTAtMGQ2NGI1YjdlMzM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNGQ0M2FkZmQtZjZlNC00NTA0LTg2 ZjAtMmVmYWRmOWQ0ZDIxLzRkNDNhZGZkLWY2ZTQtNDUwNC04NmYwLTJlZmFkZjlk NGQyMS5jcmwwHwYDVR0jBBgwFoAUHLPKVHX2AJyrqb/kFUAJQKHvOZ0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS80ZDQzYWRmZC1mNmU0LTQ1MDQtODZmMC0yZWZh ZGY5ZDRkMjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF/fsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHTd8056qi3pN54RLtT00TO/BmMryzXxckYAidZm6fulflm2dSjsJCnA dcJFyxBaYZAbXK9Cx7zJIloVn50MGE5jndFkUCWoKdthvJgTeU1RaCWKke6au7iQ k4rbx0VJvfyGATY8G55S2tLtMcEYzn8+CqXKyXzK5Wcp3ICAL+/+xFVVDKL0eYXw duUndsivfBIviPRGGeXUqThebsGMtBYl9u1Oh6J29LOGIdo94SmPfj6P6sGZCTcT fYtcOrls6IXCQzupUA/9OGUcLit5t/UO9cEBexGMVvTzxxZEABBSx4IKgMURTGZ8 +SwHvG0fBEbkH57vvRmjgHod0j/VIWQ= -----END CERTIFICATE-----Generated at Sun Sep 13 10:59:31 2026 by rpki-client