$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/af16373c-3287-341a-a7b4-1cec1a5c9f48.roa File: af16373c-3287-341a-a7b4-1cec1a5c9f48.roa (raw, json) Hash identifier: wl61aPjpmuxf8PncW4mzgoEBZatnjCxdFwQsbRS5PAM= Subject key identifier: 1C:3E:6C:FC:0E:0F:0A:36:DD:B7:98:FB:D4:62:36:F0:17:61:04:F4 Certificate issuer: /CN=a340834d-d728-405c-95f1-caa6810aa7d9 Certificate serial: 010D0C9F4328584F9A68687F13DC0A68BA97BFE0 Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/af16373c-3287-341a-a7b4-1cec1a5c9f48.roa Signing time: Sat 24 Oct 2026 01:00:12 +0000 ROA not before: Sat 24 Oct 2026 01:00:12 +0000 ROA not after: Fri 22 Jan 2027 02:00:12 +0000 asID: 19437 IP address blocks: 23.235.224.0/21 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Oct 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:9a:68:68:7f:13:dc:0a:68:ba:97:bf:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9 Validity Not Before: Oct 24 01:00:12 2026 GMT Not After : Jan 22 02:00:12 2027 GMT Subject: CN=953814c6-4f38-403e-b898-384970c4d1d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:bf:98:6e:bd:35:4a:2c:0c:27:30:9a:72:c5: 77:25:89:71:f4:bb:6f:f6:55:fa:55:3e:4d:e2:06: 05:72:47:29:c0:34:46:4e:a0:1d:9f:fa:a5:d5:13: 51:b3:f3:69:4e:69:66:8d:60:67:19:20:a6:af:54: 3f:e4:01:fb:8e:95:04:76:b0:89:53:b6:e4:df:34: f2:86:a5:fb:24:6a:f9:a7:9a:26:b3:8d:b0:a6:d6: 79:36:a9:2c:a8:5f:5d:82:ee:f2:df:3a:82:69:e7: d4:24:af:7d:78:91:d5:9f:e8:4a:04:4f:ba:43:77: 34:0a:07:b1:56:fc:52:0e:23:ee:a6:d0:93:68:97: 49:d5:d1:bd:79:dc:dc:c4:d1:68:fe:a5:26:20:3b: bc:d1:cc:fb:81:4f:e9:d3:55:10:eb:4e:dd:7f:73: fb:76:f4:90:48:00:fa:93:01:91:6d:65:86:0d:6a: 7f:86:51:b8:ef:98:aa:d1:28:64:5b:91:f3:29:dd: d4:01:bb:dc:0b:3f:42:1f:68:f1:49:c5:98:51:ae: a7:fc:75:70:a6:be:d9:af:d7:bd:f9:72:b6:c4:d4: dd:6e:67:14:60:28:6b:d5:b8:58:70:d9:71:f2:8e: e7:ad:52:5f:e1:2b:a0:b4:75:07:cb:e7:41:ef:a2: bc:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:3E:6C:FC:0E:0F:0A:36:DD:B7:98:FB:D4:62:36:F0:17:61:04:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/af16373c-3287-341a-a7b4-1cec1a5c9f48.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl X509v3 Authority Key Identifier: keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer sbgp-ipAddrBlock: critical IPv4: 23.235.224.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:0c:12:fc:d2:28:3e:e0:9d:47:96:0d:29:4a:43:e8:6f:9e: 02:4e:be:64:a6:a0:22:b0:bd:92:61:ae:b1:1e:30:82:54:51: 3b:82:09:80:25:d6:3f:d3:cd:c0:04:1d:de:5b:27:4c:88:d4: 26:48:ec:7f:2b:ad:6d:fe:5d:13:67:10:4f:b9:25:10:f7:66: 13:99:73:7c:e9:bf:38:4d:52:68:9a:27:cf:ca:0f:b0:17:c6: 13:48:bb:cc:9a:35:e3:8d:2c:d5:cb:4e:57:a3:8b:2a:a1:a0: d3:e3:c0:74:c7:4a:72:93:9a:6d:e1:c5:fb:9c:8a:af:a4:4b: 29:a4:3c:15:ab:6f:df:9f:f7:12:8f:b3:64:6f:0b:20:af:17: 63:4d:32:37:74:1e:8a:16:66:d7:fe:e2:50:53:f6:fc:84:bf: b7:2e:27:11:b8:55:8f:78:44:6b:e5:d4:7f:50:e1:bb:9f:1d: 92:bb:ea:ec:33:29:d7:14:80:30:82:3e:89:50:ef:47:af:c2: a9:9c:50:24:d9:47:07:45:88:76:5c:b1:48:aa:a1:de:88:25: 1f:77:3b:51:2b:65:ca:41:0e:ce:90:72:50:ae:9a:0e:11:49: 0f:80:39:0c:e5:3b:29:9d:10:f1:24:ba:50:51:d9:ea:f5:ac: 48:88:f8:eb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+aaGh/E9wKaLqXv+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh N2Q5MB4XDTI2MTAyNDAxMDAxMloXDTI3MDEyMjAyMDAxMlowLzEtMCsGA1UEAxMk OTUzODE0YzYtNGYzOC00MDNlLWI4OTgtMzg0OTcwYzRkMWQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqL+Ybr01SiwMJzCacsV3JYlx9Ltv9lX6VT5N 4gYFckcpwDRGTqAdn/ql1RNRs/NpTmlmjWBnGSCmr1Q/5AH7jpUEdrCJU7bk3zTy hqX7JGr5p5oms42wptZ5NqksqF9dgu7y3zqCaefUJK99eJHVn+hKBE+6Q3c0Cgex VvxSDiPuptCTaJdJ1dG9edzcxNFo/qUmIDu80cz7gU/p01UQ607df3P7dvSQSAD6 kwGRbWWGDWp/hlG475iq0ShkW5HzKd3UAbvcCz9CH2jxScWYUa6n/HVwpr7Zr9e9 +XK2xNTdbmcUYChr1bhYcNlx8o7nrVJf4SugtHUHy+dB76K8JQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBw+bPwODwo23beY+9RiNvAXYQT0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvYWYxNjM3M2MtMzI4Ny0z NDFhLWE3YjQtMWNlYzFhNWM5ZjQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1 ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2 ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDF+vgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAwMEvzSKD7gnUeWDSlKQ+hvngJOvmSmoCKwvZJhrrEeMIJUUTuCCYAl 1j/TzcAEHd5bJ0yI1CZI7H8rrW3+XRNnEE+5JRD3ZhOZc3zpvzhNUmiaJ8/KD7AX xhNIu8yaNeONLNXLTlejiyqhoNPjwHTHSnKTmm3hxfuciq+kSymkPBWrb9+f9xKP s2RvCyCvF2NNMjd0HooWZtf+4lBT9vyEv7cuJxG4VY94RGvl1H9Q4bufHZK76uwz KdcUgDCCPolQ70evwqmcUCTZRwdFiHZcsUiqod6IJR93O1ErZcpBDs6QclCumg4R SQ+AOQzlOymdEPEkulBR2er1rEiI+Os= -----END CERTIFICATE-----Generated at Mon Oct 26 06:14:16 2026 by rpki-client