$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/300a18ca-a9e5-430d-b5c4-d15e88ea79a3/989473aa-70cf-3ca6-8bd9-4796efd0763e.roa File: 989473aa-70cf-3ca6-8bd9-4796efd0763e.roa (raw, json) Hash identifier: b50+RCwcQ4ZM/7lENhbOIpQIZmBmEG3KQbdap7SV0pk= Subject key identifier: 85:32:43:83:D4:29:8D:E8:3A:D5:DE:D3:04:26:3A:41:39:B8:84:EE Certificate issuer: /CN=300a18ca-a9e5-430d-b5c4-d15e88ea79a3 Certificate serial: 010D0C9F4328584F4974AAEBFFF211CD04A12B88 Authority key identifier: 72:9F:74:7B:47:04:82:DA:57:8A:25:AE:F0:CF:9C:EF:98:1F:06:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/300a18ca-a9e5-430d-b5c4-d15e88ea79a3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/300a18ca-a9e5-430d-b5c4-d15e88ea79a3/989473aa-70cf-3ca6-8bd9-4796efd0763e.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 399861 IP address blocks: 23.131.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/300a18ca-a9e5-430d-b5c4-d15e88ea79a3/300a18ca-a9e5-430d-b5c4-d15e88ea79a3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/300a18ca-a9e5-430d-b5c4-d15e88ea79a3/300a18ca-a9e5-430d-b5c4-d15e88ea79a3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/300a18ca-a9e5-430d-b5c4-d15e88ea79a3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Nov 2026 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:aa:eb:ff:f2:11:cd:04:a1:2b:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=300a18ca-a9e5-430d-b5c4-d15e88ea79a3 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=30fc3b6c-b187-438b-9323-4532b44831bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:35:5b:22:12:09:db:87:f6:db:0e:5b:97:4b: f2:0b:1f:59:97:04:d6:a9:9a:b6:4b:8e:5f:f0:5d: 3c:fc:62:03:dc:26:59:e6:a4:01:e4:7d:63:1f:6d: 42:27:c0:7e:d7:c3:f0:6b:ec:60:a4:a3:4b:dd:24: 76:2a:43:3e:30:d4:8b:84:cf:ea:2b:19:d4:8b:c6: 16:f7:1f:55:74:0a:48:0f:76:84:43:61:85:ef:8b: 17:c8:16:bd:71:27:49:25:72:b7:01:d2:09:a0:f6: 67:55:57:ba:51:78:91:19:2c:42:01:f7:9e:72:fc: 02:e3:ca:c0:4a:00:20:14:97:25:1e:75:6b:98:e8: 57:5c:a8:97:12:f9:65:57:e6:ca:5f:69:87:df:76: 24:e5:e9:dc:15:fb:1a:9c:93:60:e5:45:55:64:22: 4b:95:24:07:02:a5:8d:7d:39:6e:5a:b3:28:e3:6e: f1:10:53:53:d1:f1:5d:c3:12:bf:91:4a:27:82:c9: df:e6:d9:98:d0:15:a1:9a:20:74:98:bc:53:36:13: 6b:a9:74:d2:05:c0:3b:14:3e:98:db:93:9f:41:44: 46:81:c7:f0:c7:77:76:76:de:5e:9a:6e:6e:2a:30: 66:13:96:0e:85:7d:69:c8:30:d9:d6:9c:dd:e5:09: 46:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:32:43:83:D4:29:8D:E8:3A:D5:DE:D3:04:26:3A:41:39:B8:84:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/300a18ca-a9e5-430d-b5c4-d15e88ea79a3/989473aa-70cf-3ca6-8bd9-4796efd0763e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/300a18ca-a9e5-430d-b5c4-d15e88ea79a3/300a18ca-a9e5-430d-b5c4-d15e88ea79a3.crl X509v3 Authority Key Identifier: keyid:72:9F:74:7B:47:04:82:DA:57:8A:25:AE:F0:CF:9C:EF:98:1F:06:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/300a18ca-a9e5-430d-b5c4-d15e88ea79a3.cer sbgp-ipAddrBlock: critical IPv4: 23.131.124.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:cd:33:84:e7:41:30:2b:bd:05:08:29:51:b4:7f:6a:ee:fc: c9:d1:aa:61:5f:5d:1b:88:51:8a:1d:3d:1c:3c:55:9e:c0:bd: b5:4f:41:20:17:26:55:ee:58:f7:a9:8c:4a:18:62:d3:dc:d0: 0e:e3:4c:27:1e:52:83:85:6a:b4:65:1a:09:2c:9c:4c:f0:46: 8f:e0:e4:8f:1e:81:41:c9:53:18:8b:0a:8b:ef:7a:a8:14:90: 6f:cc:92:0b:bb:91:a2:69:07:5b:6d:91:4b:87:73:f3:d8:96: d9:c2:d5:d5:75:08:68:c9:b4:ea:32:bd:5b:dd:2b:dc:53:97: 8d:33:4c:35:77:77:08:41:ff:e5:07:4b:e0:fe:5e:1e:89:26: ec:0d:e2:bc:4f:7a:5d:e8:e0:b5:9b:73:cc:2a:8b:f5:7e:1f: a8:53:13:ae:56:f0:1c:1f:0d:08:1e:1e:74:8b:1f:ba:c5:4f: e0:4a:14:6f:98:82:3c:8a:a5:ac:c1:9a:09:53:0d:79:96:a5: 39:17:de:0e:5b:05:c5:1b:15:44:b9:af:fd:70:c6:46:b4:b7: 51:33:79:d2:00:f7:41:08:48:10:70:41:cd:a1:2f:a4:a8:0f: 83:05:eb:f2:97:35:ae:ed:c7:3a:ac:f3:40:7c:1e:4d:81:e8: c9:d1:37:fc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdKrr//IRzQShK4gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzAwYTE4Y2EtYTllNS00MzBkLWI1YzQtZDE1ZTg4ZWE3 OWEzMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MzBmYzNiNmMtYjE4Ny00MzhiLTkzMjMtNDUzMmI0NDgzMWJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkzVbIhIJ24f22w5bl0vyCx9ZlwTWqZq2S45f 8F08/GID3CZZ5qQB5H1jH21CJ8B+18Pwa+xgpKNL3SR2KkM+MNSLhM/qKxnUi8YW 9x9VdApID3aEQ2GF74sXyBa9cSdJJXK3AdIJoPZnVVe6UXiRGSxCAfeecvwC48rA SgAgFJclHnVrmOhXXKiXEvllV+bKX2mH33Yk5encFfsanJNg5UVVZCJLlSQHAqWN fTluWrMo427xEFNT0fFdwxK/kUongsnf5tmY0BWhmiB0mLxTNhNrqXTSBcA7FD6Y 25OfQURGgcfwx3d2dt5emm5uKjBmE5YOhX1pyDDZ1pzd5QlGIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIUyQ4PUKY3oOtXe0wQmOkE5uITuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8zMDBh MThjYS1hOWU1LTQzMGQtYjVjNC1kMTVlODhlYTc5YTMvOTg5NDczYWEtNzBjZi0z Y2E2LThiZDktNDc5NmVmZDA3NjNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMzAwYTE4Y2EtYTllNS00MzBkLWI1 YzQtZDE1ZTg4ZWE3OWEzLzMwMGExOGNhLWE5ZTUtNDMwZC1iNWM0LWQxNWU4OGVh NzlhMy5jcmwwHwYDVR0jBBgwFoAUcp90e0cEgtpXiiWu8M+c75gfBrowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8zMDBhMThjYS1hOWU1LTQzMGQtYjVjNC1kMTVl ODhlYTc5YTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4N8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAInNM4TnQTArvQUIKVG0f2ru/MnRqmFfXRuIUYodPRw8VZ7AvbVPQSAX JlXuWPepjEoYYtPc0A7jTCceUoOFarRlGgksnEzwRo/g5I8egUHJUxiLCovveqgU kG/Mkgu7kaJpB1ttkUuHc/PYltnC1dV1CGjJtOoyvVvdK9xTl40zTDV3dwhB/+UH S+D+Xh6JJuwN4rxPel3o4LWbc8wqi/V+H6hTE65W8BwfDQgeHnSLH7rFT+BKFG+Y gjyKpazBmglTDXmWpTkX3g5bBcUbFUS5r/1wxka0t1EzedIA90EISBBwQc2hL6So D4MF6/KXNa7txzqs80B8Hk2B6MnRN/w= -----END CERTIFICATE-----Generated at Wed Nov 4 00:44:33 2026 by rpki-client