$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/994eeb97-12ef-4721-824f-9ba41ba67983/f0621ac2-276f-3c57-aad1-63daa946e435.roa File: f0621ac2-276f-3c57-aad1-63daa946e435.roa (raw, json) Hash identifier: IFx0hlRKTb4imTS0VxuAen0mR8gxca8194QAVQoihV8= Subject key identifier: B5:B1:EF:75:83:8B:F9:1F:82:B5:2C:D5:F8:7F:17:3A:E5:CB:9E:47 Certificate issuer: /CN=994eeb97-12ef-4721-824f-9ba41ba67983 Certificate serial: 010D0C9F4328584F497604FDFE7C99B221221600 Authority key identifier: 1C:76:C4:7F:C2:CB:FA:8C:42:60:13:13:77:DE:35:41:9A:D4:E4:44 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/994eeb97-12ef-4721-824f-9ba41ba67983.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/994eeb97-12ef-4721-824f-9ba41ba67983/f0621ac2-276f-3c57-aad1-63daa946e435.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 23539 IP address blocks: 23.138.176.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/994eeb97-12ef-4721-824f-9ba41ba67983/994eeb97-12ef-4721-824f-9ba41ba67983.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/994eeb97-12ef-4721-824f-9ba41ba67983/994eeb97-12ef-4721-824f-9ba41ba67983.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/994eeb97-12ef-4721-824f-9ba41ba67983.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:76:04:fd:fe:7c:99:b2:21:22:16:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=994eeb97-12ef-4721-824f-9ba41ba67983 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=13f15bb7-7e04-4674-b186-664fac5c485b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:36:e9:91:51:9f:4c:45:d3:d8:b4:57:0e:35: 23:74:e8:3e:08:86:ce:2d:60:0a:01:9b:64:40:20: fd:9d:56:bb:a7:24:ce:a9:17:58:83:25:1f:5a:6a: 8f:fb:5a:d9:18:9b:93:3d:f2:e8:e7:be:e5:d5:a9: 39:01:88:0b:d0:59:51:53:23:59:8a:99:1a:c4:85: 1c:c9:3c:41:96:b6:34:7e:1e:51:bb:7f:73:fd:de: 00:39:e9:32:be:e6:f2:0c:d8:da:d5:d4:20:b2:d1: 8f:95:66:21:ee:99:6a:df:f9:c2:8b:a3:0c:01:ca: fd:7d:8b:6b:d2:a9:9d:51:63:e1:3f:cf:e2:68:61: 94:ee:09:25:ac:c0:20:e4:d1:7e:64:4e:bb:32:e3: c9:6a:73:13:94:95:3a:66:19:92:2b:43:07:3e:e0: 46:65:bd:36:01:43:86:d3:ed:16:40:04:75:ed:7e: 90:a6:ca:ca:18:37:55:6d:09:08:a6:86:49:a1:0c: d8:b7:b5:60:77:ac:74:e7:39:f8:95:9c:3f:1d:d7: b7:e9:19:c8:93:9f:21:28:08:fb:3a:52:48:24:b8: 4c:17:88:fe:9a:3c:0e:1d:ce:75:aa:7a:fe:54:44: 69:52:db:24:ed:f7:9e:41:a0:3b:67:6a:1e:53:54: 4a:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:B1:EF:75:83:8B:F9:1F:82:B5:2C:D5:F8:7F:17:3A:E5:CB:9E:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/994eeb97-12ef-4721-824f-9ba41ba67983/f0621ac2-276f-3c57-aad1-63daa946e435.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/994eeb97-12ef-4721-824f-9ba41ba67983/994eeb97-12ef-4721-824f-9ba41ba67983.crl X509v3 Authority Key Identifier: keyid:1C:76:C4:7F:C2:CB:FA:8C:42:60:13:13:77:DE:35:41:9A:D4:E4:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/994eeb97-12ef-4721-824f-9ba41ba67983.cer sbgp-ipAddrBlock: critical IPv4: 23.138.176.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:73:a7:7e:6b:07:66:7b:11:01:3f:18:35:81:f8:5c:c1:18: 1d:c5:e3:a1:7e:1b:30:50:1e:6a:45:8a:e7:8c:23:bf:92:ab: 78:da:25:f7:7f:0d:2e:17:45:88:22:4a:ca:b2:35:71:1d:09: 89:70:08:3c:77:09:26:90:e5:c1:c5:04:b8:34:a6:be:a5:40: ed:08:15:80:5b:3b:1c:88:4f:a8:8f:fe:dd:7c:fe:7e:24:63: c2:3d:b2:96:5a:62:ac:c3:52:fb:30:d4:21:73:d8:f1:a5:f7: e8:86:97:3d:0e:0e:26:87:4d:11:45:eb:0e:50:bb:14:84:0a: cb:59:0c:86:1a:45:27:1f:2c:84:82:49:08:84:b5:9c:f8:0d: b7:ad:78:60:84:e1:59:63:87:e2:96:83:20:14:0b:a6:61:20: fb:64:eb:fe:11:a3:56:48:29:a7:12:e4:f6:ea:80:28:29:e9: cc:9b:de:38:2a:d7:24:ad:b3:fd:de:3d:74:14:e6:08:97:f4: ea:fd:05:b5:93:81:16:78:d5:53:7e:7e:52:6b:a7:25:b2:d9: cb:29:34:7d:48:f1:46:3e:f0:0e:02:9a:5e:8c:a1:f6:58:65: f0:5e:07:9c:67:56:f3:48:e3:a1:1b:95:00:85:a1:b1:92:57: e5:b2:95:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdgT9/nyZsiEiFgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTk0ZWViOTctMTJlZi00NzIxLTgyNGYtOWJhNDFiYTY3 OTgzMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MTNmMTViYjctN2UwNC00Njc0LWIxODYtNjY0ZmFjNWM0ODViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAizbpkVGfTEXT2LRXDjUjdOg+CIbOLWAKAZtk QCD9nVa7pyTOqRdYgyUfWmqP+1rZGJuTPfLo577l1ak5AYgL0FlRUyNZipkaxIUc yTxBlrY0fh5Ru39z/d4AOekyvubyDNja1dQgstGPlWYh7plq3/nCi6MMAcr9fYtr 0qmdUWPhP8/iaGGU7gklrMAg5NF+ZE67MuPJanMTlJU6ZhmSK0MHPuBGZb02AUOG 0+0WQAR17X6QpsrKGDdVbQkIpoZJoQzYt7Vgd6x05zn4lZw/Hde36RnIk58hKAj7 OlJIJLhMF4j+mjwOHc51qnr+VERpUtsk7feeQaA7Z2oeU1RK4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLWx73WDi/kfgrUs1fh/Fzrly55HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy85OTRl ZWI5Ny0xMmVmLTQ3MjEtODI0Zi05YmE0MWJhNjc5ODMvZjA2MjFhYzItMjc2Zi0z YzU3LWFhZDEtNjNkYWE5NDZlNDM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvOTk0ZWViOTctMTJlZi00NzIxLTgy NGYtOWJhNDFiYTY3OTgzLzk5NGVlYjk3LTEyZWYtNDcyMS04MjRmLTliYTQxYmE2 Nzk4My5jcmwwHwYDVR0jBBgwFoAUHHbEf8LL+oxCYBMTd941QZrU5EQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy85OTRlZWI5Ny0xMmVmLTQ3MjEtODI0Zi05YmE0 MWJhNjc5ODMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4qwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABlzp35rB2Z7EQE/GDWB+FzBGB3F46F+GzBQHmpFiueMI7+Sq3jaJfd/ DS4XRYgiSsqyNXEdCYlwCDx3CSaQ5cHFBLg0pr6lQO0IFYBbOxyIT6iP/t18/n4k Y8I9spZaYqzDUvsw1CFz2PGl9+iGlz0ODiaHTRFF6w5QuxSECstZDIYaRScfLISC SQiEtZz4DbeteGCE4Vljh+KWgyAUC6ZhIPtk6/4Ro1ZIKacS5PbqgCgp6cyb3jgq 1ySts/3ePXQU5giX9Or9BbWTgRZ41VN+flJrpyWy2cspNH1I8UY+8A4Cml6MofZY ZfBeB5xnVvNI46EblQCFobGSV+WylSg= -----END CERTIFICATE-----Generated at Sat Oct 10 10:01:16 2026 by rpki-client