$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/25dab027-caa9-3c2b-b307-d2ebc088ddf4.roa File: 25dab027-caa9-3c2b-b307-d2ebc088ddf4.roa (raw, json) Hash identifier: if54/F2mcrFmdnERMTjkecdQFMwRZbcEP2MbkQ2AEu8= Subject key identifier: 78:01:A1:43:83:60:0B:2B:6E:6F:30:39:FF:8D:D7:65:F5:60:F2:87 Certificate issuer: /CN=98161ef7-249b-450b-ba6a-5819e613ed63 Certificate serial: 010D0C9F4328584F90A30B69AB9C9A0383998A00 Authority key identifier: D4:19:D4:44:4B:11:89:5C:8C:6D:68:65:FD:EB:4B:4F:F2:AC:1A:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/25dab027-caa9-3c2b-b307-d2ebc088ddf4.roa Signing time: Tue 20 Oct 2026 13:00:13 +0000 ROA not before: Tue 20 Oct 2026 13:00:13 +0000 ROA not after: Mon 18 Jan 2027 14:00:13 +0000 asID: 21738 IP address blocks: 23.150.40.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/98161ef7-249b-450b-ba6a-5819e613ed63.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/98161ef7-249b-450b-ba6a-5819e613ed63.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 30 Oct 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:90:a3:0b:69:ab:9c:9a:03:83:99:8a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98161ef7-249b-450b-ba6a-5819e613ed63 Validity Not Before: Oct 20 13:00:13 2026 GMT Not After : Jan 18 14:00:13 2027 GMT Subject: CN=cac456e5-f510-4346-9d1b-d86a0fc94c0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:cf:75:e8:c7:99:4d:10:3c:07:40:97:a6:f6: b7:2e:45:1a:18:ad:94:b0:45:fc:62:dd:61:87:de: 63:a2:ac:b0:86:81:d3:c5:36:34:22:21:dd:b3:5b: 65:9d:17:ae:00:7a:a8:73:ce:ea:0d:59:c4:ea:24: 83:a2:69:32:ea:d0:71:00:7d:8f:38:3c:67:e2:6f: 29:6f:1e:da:57:cb:b7:c3:41:08:62:a7:2b:b4:42: 4b:6b:dd:ae:dd:f5:1e:74:66:47:ed:07:41:b8:c1: 5f:8a:9b:c1:d6:80:d9:b6:fa:1e:f0:41:ac:db:0d: 8b:85:5a:84:15:d1:e2:0f:0b:2f:70:e3:2b:9e:eb: 35:97:15:dd:1d:01:de:a7:22:d9:73:f4:5a:96:7f: 82:a8:6f:24:8a:62:00:04:95:99:a5:66:68:47:65: ed:74:8d:1e:44:fc:96:e3:07:95:d2:c6:87:f3:fe: a3:f1:8c:f9:fd:98:e0:4d:09:72:25:f7:d4:34:db: 8a:ef:6f:22:27:96:08:81:15:a4:a9:13:ad:42:9f: e2:ac:f9:1b:aa:92:0e:ac:56:08:5d:ee:73:f8:58: 19:12:80:86:44:58:a6:d0:1d:67:f1:50:75:f6:03: da:bd:51:6b:ff:c8:82:37:34:60:3c:91:3b:39:e0: a0:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:01:A1:43:83:60:0B:2B:6E:6F:30:39:FF:8D:D7:65:F5:60:F2:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/25dab027-caa9-3c2b-b307-d2ebc088ddf4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63/98161ef7-249b-450b-ba6a-5819e613ed63.crl X509v3 Authority Key Identifier: keyid:D4:19:D4:44:4B:11:89:5C:8C:6D:68:65:FD:EB:4B:4F:F2:AC:1A:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/98161ef7-249b-450b-ba6a-5819e613ed63.cer sbgp-ipAddrBlock: critical IPv4: 23.150.40.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:b1:0c:7f:01:5a:4a:ba:ae:50:03:a8:b5:9b:e9:27:4f:dc: 8b:9e:13:da:f8:0c:db:3e:45:a3:b9:7d:7f:10:65:37:9f:ff: 4f:5c:39:e7:ad:d3:12:c6:9a:b3:5b:a1:7d:7a:0d:a7:6c:20: ce:58:b6:7b:fe:4d:74:b8:f1:54:d3:71:7f:80:47:2f:2e:3d: 81:d2:6d:d0:e9:1f:54:2d:77:a7:7a:c7:b5:07:25:fc:36:b8: 3b:7e:fb:9e:d4:ad:54:f9:fc:f0:a8:6f:0d:f9:ed:e0:4c:95: 89:d5:d4:83:2a:70:a8:91:ca:3d:15:6a:d6:d2:88:f4:49:0a: 6e:da:30:aa:5b:c5:3f:57:0b:e3:62:c4:dd:0b:64:2c:72:55: ec:7d:43:1e:49:97:76:a2:c6:79:63:62:50:bc:a7:8a:e3:aa: d2:e7:9c:53:6d:f7:9a:84:de:e1:8a:2b:14:da:bd:6c:ee:7e: 7b:58:46:e7:d4:76:8f:5e:1c:86:74:41:13:45:26:e2:d7:67: 00:ea:90:ec:07:18:4f:3e:09:7e:76:8d:63:0f:2c:99:5a:ce: a6:7a:a9:f0:86:a8:9e:48:71:ba:c3:d0:30:21:0c:aa:22:5b: f4:cb:71:f1:95:69:0e:19:34:f9:11:70:fc:88:7e:77:99:92: 37:32:80:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+Qowtpq5yaA4OZigAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTgxNjFlZjctMjQ5Yi00NTBiLWJhNmEtNTgxOWU2MTNl ZDYzMB4XDTI2MTAyMDEzMDAxM1oXDTI3MDExODE0MDAxM1owLzEtMCsGA1UEAxMk Y2FjNDU2ZTUtZjUxMC00MzQ2LTlkMWItZDg2YTBmYzk0YzBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk8916MeZTRA8B0CXpva3LkUaGK2UsEX8Yt1h h95joqywhoHTxTY0IiHds1tlnReuAHqoc87qDVnE6iSDomky6tBxAH2PODxn4m8p bx7aV8u3w0EIYqcrtEJLa92u3fUedGZH7QdBuMFfipvB1oDZtvoe8EGs2w2LhVqE FdHiDwsvcOMrnus1lxXdHQHepyLZc/Raln+CqG8kimIABJWZpWZoR2XtdI0eRPyW 4weV0saH8/6j8Yz5/ZjgTQlyJffUNNuK728iJ5YIgRWkqROtQp/irPkbqpIOrFYI Xe5z+FgZEoCGRFim0B1n8VB19gPavVFr/8iCNzRgPJE7OeCgyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHgBoUODYAsrbm8wOf+N12X1YPKHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85ODE2 MWVmNy0yNDliLTQ1MGItYmE2YS01ODE5ZTYxM2VkNjMvMjVkYWIwMjctY2FhOS0z YzJiLWIzMDctZDJlYmMwODhkZGY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOTgxNjFlZjctMjQ5Yi00NTBiLWJh NmEtNTgxOWU2MTNlZDYzLzk4MTYxZWY3LTI0OWItNDUwYi1iYTZhLTU4MTllNjEz ZWQ2My5jcmwwHwYDVR0jBBgwFoAU1BnUREsRiVyMbWhl/etLT/KsGnYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85ODE2MWVmNy0yNDliLTQ1MGItYmE2YS01ODE5 ZTYxM2VkNjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5YoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABSxDH8BWkq6rlADqLWb6SdP3IueE9r4DNs+RaO5fX8QZTef/09cOeet 0xLGmrNboX16DadsIM5Ytnv+TXS48VTTcX+ARy8uPYHSbdDpH1Qtd6d6x7UHJfw2 uDt++57UrVT5/PCobw357eBMlYnV1IMqcKiRyj0VatbSiPRJCm7aMKpbxT9XC+Ni xN0LZCxyVex9Qx5Jl3aixnljYlC8p4rjqtLnnFNt95qE3uGKKxTavWzufntYRufU do9eHIZ0QRNFJuLXZwDqkOwHGE8+CX52jWMPLJlazqZ6qfCGqJ5IcbrD0DAhDKoi W/TLcfGVaQ4ZNPkRcPyIfneZkjcygP0= -----END CERTIFICATE-----Generated at Tue Oct 27 20:35:54 2026 by rpki-client