$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f/ccd02240-883d-3917-98d0-34169ad58bff.roa File: ccd02240-883d-3917-98d0-34169ad58bff.roa (raw, json) Hash identifier: Go83Ry0WhpeEGwAwQMvbVemGJHoKOCNWxJTC6Y8Bf1c= Subject key identifier: 45:2D:B5:77:86:EC:F0:4C:2A:E0:42:34:8A:6C:DB:CC:10:B7:5D:D6 Certificate issuer: /CN=1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f Certificate serial: 010D0C9F4328584F7783605EDBB9B72D15DC9B80 Authority key identifier: 3C:C3:16:47:8C:B1:26:ED:0F:A9:63:29:A2:01:6E:85:BA:90:9A:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f/ccd02240-883d-3917-98d0-34169ad58bff.roa Signing time: Sun 11 Oct 2026 13:00:12 +0000 ROA not before: Sun 11 Oct 2026 13:00:12 +0000 ROA not after: Sat 09 Jan 2027 14:00:12 +0000 asID: 401160 IP address blocks: 23.145.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 01 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:77:83:60:5e:db:b9:b7:2d:15:dc:9b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f Validity Not Before: Oct 11 13:00:12 2026 GMT Not After : Jan 9 14:00:12 2027 GMT Subject: CN=265d8d91-9e74-4cce-aa32-e28f0acedb91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:17:3c:55:50:4c:72:c1:03:3e:a3:89:4a:03: d5:c2:18:a9:ec:92:53:f4:82:39:be:ef:e8:08:27: 90:46:a8:1c:ae:ca:98:1b:4c:51:52:47:90:fd:6a: 0d:1e:da:46:cf:62:d1:12:23:97:c8:23:ae:5b:b8: c8:be:13:53:cb:45:57:b4:df:9a:91:02:e8:65:7a: 61:4f:60:34:42:5e:ee:00:74:14:a9:37:52:18:fa: e3:cc:53:e2:90:3f:60:96:76:7b:1e:77:04:5c:02: 41:9d:f3:09:68:48:ba:b9:d8:e4:f2:9a:3f:31:11: f1:21:06:56:ed:a7:c5:f3:6c:f7:59:0a:6d:71:88: 7e:3b:d8:bf:43:98:5d:55:19:ee:f7:b3:9a:22:d7: c8:11:55:49:bc:62:13:9f:a2:06:63:55:36:7b:75: 15:8d:78:58:55:a5:f6:91:ab:e1:02:b4:72:4b:16: 53:0b:1f:b4:29:4a:d6:1a:1b:71:47:71:3c:d4:fd: dc:41:e0:2b:b3:62:06:1a:dd:73:1e:3b:5a:b2:dc: 71:00:22:1c:ab:b3:9b:15:6c:6c:bf:07:39:c4:99: 29:f4:4e:d8:d0:f8:bf:ae:ed:88:33:ea:c6:52:14: 57:ef:e7:d6:f4:b9:d7:58:f9:e3:f3:69:41:6c:39: a6:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:2D:B5:77:86:EC:F0:4C:2A:E0:42:34:8A:6C:DB:CC:10:B7:5D:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f/ccd02240-883d-3917-98d0-34169ad58bff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f.crl X509v3 Authority Key Identifier: keyid:3C:C3:16:47:8C:B1:26:ED:0F:A9:63:29:A2:01:6E:85:BA:90:9A:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1b9bf2f4-c831-4f1e-a2d5-d7fc40535c8f.cer sbgp-ipAddrBlock: critical IPv4: 23.145.136.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:74:89:48:55:84:00:59:16:62:c7:fb:47:bb:92:8a:c6:3b: 44:47:e8:23:a3:f4:bc:1e:90:93:76:c3:ea:9f:14:c7:5d:69: 16:2f:f1:89:21:f8:6a:7f:6d:05:a2:50:e0:c2:2f:cd:72:92: dc:01:8f:0a:d1:b1:59:7a:26:4a:21:a6:5c:5b:31:93:73:36: 67:3d:2a:a8:87:ce:75:6f:07:1d:03:03:85:ba:7d:95:f8:45: 0c:ca:7d:1d:9a:05:21:ec:22:f3:17:91:e9:61:26:33:f9:33: c3:fe:51:e4:f6:29:20:16:11:ba:ac:6b:9b:ed:b0:d6:97:42: 9e:65:7f:22:44:e2:c1:1e:40:16:46:71:e6:d6:b9:e0:b8:a3: 1f:12:d3:e0:f6:0d:1c:ec:41:df:fd:9a:19:d2:b9:29:91:d1: 1b:58:7f:2e:bd:6f:58:77:f8:f5:86:29:92:67:16:da:4a:4a: 9b:5b:06:c4:5e:2d:21:71:0f:b3:fd:04:7c:2d:f7:3d:d9:11: 8b:53:a3:c4:2e:ff:72:e0:1a:64:8e:e9:8b:90:27:9e:a7:9b: ef:65:fd:3f:40:a2:d6:63:15:a5:af:58:c4:4d:0c:d9:dc:4b: c4:93:d7:63:5a:46:b8:11:27:93:6a:5a:4b:c0:95:55:47:35: 3b:15:f2:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE93g2Be27m3LRXcm4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWI5YmYyZjQtYzgzMS00ZjFlLWEyZDUtZDdmYzQwNTM1 YzhmMB4XDTI2MTAxMTEzMDAxMloXDTI3MDEwOTE0MDAxMlowLzEtMCsGA1UEAxMk MjY1ZDhkOTEtOWU3NC00Y2NlLWFhMzItZTI4ZjBhY2VkYjkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiBc8VVBMcsEDPqOJSgPVwhip7JJT9II5vu/o CCeQRqgcrsqYG0xRUkeQ/WoNHtpGz2LREiOXyCOuW7jIvhNTy0VXtN+akQLoZXph T2A0Ql7uAHQUqTdSGPrjzFPikD9glnZ7HncEXAJBnfMJaEi6udjk8po/MRHxIQZW 7afF82z3WQptcYh+O9i/Q5hdVRnu97OaItfIEVVJvGITn6IGY1U2e3UVjXhYVaX2 kavhArRySxZTCx+0KUrWGhtxR3E81P3cQeArs2IGGt1zHjtastxxACIcq7ObFWxs vwc5xJkp9E7Y0Pi/ru2IM+rGUhRX7+fW9LnXWPnj82lBbDmmoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEUttXeG7PBMKuBCNIps28wQt13WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8xYjli ZjJmNC1jODMxLTRmMWUtYTJkNS1kN2ZjNDA1MzVjOGYvY2NkMDIyNDAtODgzZC0z OTE3LTk4ZDAtMzQxNjlhZDU4YmZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMWI5YmYyZjQtYzgzMS00ZjFlLWEy ZDUtZDdmYzQwNTM1YzhmLzFiOWJmMmY0LWM4MzEtNGYxZS1hMmQ1LWQ3ZmM0MDUz NWM4Zi5jcmwwHwYDVR0jBBgwFoAUPMMWR4yxJu0PqWMpogFuhbqQmokwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8xYjliZjJmNC1jODMxLTRmMWUtYTJkNS1kN2Zj NDA1MzVjOGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5GIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF50iUhVhABZFmLH+0e7korGO0RH6COj9LwekJN2w+qfFMddaRYv8Ykh +Gp/bQWiUODCL81yktwBjwrRsVl6JkohplxbMZNzNmc9KqiHznVvBx0DA4W6fZX4 RQzKfR2aBSHsIvMXkelhJjP5M8P+UeT2KSAWEbqsa5vtsNaXQp5lfyJE4sEeQBZG cebWueC4ox8S0+D2DRzsQd/9mhnSuSmR0RtYfy69b1h3+PWGKZJnFtpKSptbBsRe LSFxD7P9BHwt9z3ZEYtTo8Qu/3LgGmSO6YuQJ56nm+9l/T9AotZjFaWvWMRNDNnc S8ST12NaRrgRJ5NqWkvAlVVHNTsV8os= -----END CERTIFICATE-----Generated at Sat Oct 31 11:48:50 2026 by rpki-client