$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8e562ad4-986c-42b2-bce3-9cc48f5f64de/20e8b079-8dc4-3009-84e4-0ac3a6092578.roa File: 20e8b079-8dc4-3009-84e4-0ac3a6092578.roa (raw, json) Hash identifier: aMJCiFjrEdJcPowvIdyyiy0PYdZ4oGqdNzmLPpKWaq8= Subject key identifier: 08:D1:F1:51:56:A8:A1:C3:1F:54:26:E9:18:16:07:06:B6:0B:B2:06 Certificate issuer: /CN=8e562ad4-986c-42b2-bce3-9cc48f5f64de Certificate serial: 010D0C9F4328584F77835F7310FA22DD51CB7680 Authority key identifier: 98:7C:66:96:69:F8:0F:38:D6:A3:B4:70:DF:0F:0D:51:08:B1:87:2D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8e562ad4-986c-42b2-bce3-9cc48f5f64de.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8e562ad4-986c-42b2-bce3-9cc48f5f64de/20e8b079-8dc4-3009-84e4-0ac3a6092578.roa Signing time: Sun 11 Oct 2026 13:00:12 +0000 ROA not before: Sun 11 Oct 2026 13:00:12 +0000 ROA not after: Sat 09 Jan 2027 14:00:12 +0000 asID: 3144 IP address blocks: 23.130.100.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8e562ad4-986c-42b2-bce3-9cc48f5f64de/8e562ad4-986c-42b2-bce3-9cc48f5f64de.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8e562ad4-986c-42b2-bce3-9cc48f5f64de/8e562ad4-986c-42b2-bce3-9cc48f5f64de.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8e562ad4-986c-42b2-bce3-9cc48f5f64de.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Oct 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:77:83:5f:73:10:fa:22:dd:51:cb:76:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e562ad4-986c-42b2-bce3-9cc48f5f64de Validity Not Before: Oct 11 13:00:12 2026 GMT Not After : Jan 9 14:00:12 2027 GMT Subject: CN=3e22e9bc-4fdd-4e2f-aa87-4f9b79a8c4dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:da:68:0c:e9:42:cf:cd:5b:8b:b9:70:dd:a1: dc:d3:0f:f1:47:3a:4a:a3:ff:2b:4a:fa:90:b5:33: 5c:40:b1:1a:29:10:b7:71:ac:7f:80:f7:00:b0:30: 09:d4:24:09:d2:58:e5:35:97:0b:80:28:cb:15:e8: 2b:dc:bf:8a:dc:a0:91:7b:54:23:d9:a5:44:6c:50: de:6c:a3:ad:46:96:3b:bf:7a:f8:31:1d:15:cb:fb: ab:b0:ee:49:1f:08:00:4e:55:a4:d3:12:00:5c:60: d3:b8:74:08:e5:3b:cc:30:fa:30:23:17:58:46:ab: 7d:42:e6:99:f6:f9:e7:07:19:bb:ad:b7:f1:7b:98: 0e:1d:d7:5c:60:a5:60:72:c6:00:a8:0f:03:13:36: 67:82:00:5e:70:a4:a3:8a:c1:75:d5:de:7c:8b:fb: 63:1e:7f:bc:46:3a:ba:81:d8:38:31:25:bd:7a:66: ca:8f:d6:6e:20:dc:fc:79:be:b2:2b:c3:33:0a:e7: b7:a5:e3:76:4b:96:81:5a:2e:85:67:ad:7f:d3:0d: 52:3e:a3:f8:e4:49:7b:9c:d9:3c:b7:4d:e6:77:d3: d0:95:ae:77:df:d7:e0:d2:f7:b4:03:99:44:c9:f2: bd:49:72:69:e2:92:06:73:05:b4:bc:bf:7d:3c:3f: 11:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:D1:F1:51:56:A8:A1:C3:1F:54:26:E9:18:16:07:06:B6:0B:B2:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8e562ad4-986c-42b2-bce3-9cc48f5f64de/20e8b079-8dc4-3009-84e4-0ac3a6092578.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8e562ad4-986c-42b2-bce3-9cc48f5f64de/8e562ad4-986c-42b2-bce3-9cc48f5f64de.crl X509v3 Authority Key Identifier: keyid:98:7C:66:96:69:F8:0F:38:D6:A3:B4:70:DF:0F:0D:51:08:B1:87:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8e562ad4-986c-42b2-bce3-9cc48f5f64de.cer sbgp-ipAddrBlock: critical IPv4: 23.130.100.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:17:a2:72:b0:4f:fd:e5:38:a0:1f:c3:9a:e2:ab:30:ca:6a: 5d:25:d4:b3:72:70:5b:d0:00:3b:1e:ef:22:c4:49:30:45:27: 42:eb:a9:2e:eb:16:59:fd:71:4b:76:b0:7b:fe:65:74:f8:a6: 9a:cf:0e:25:90:da:91:0d:14:2f:06:10:0a:c0:c3:7a:d6:2b: 5a:10:3a:0b:ef:95:dc:09:c9:f7:03:28:71:57:43:79:ec:6a: b8:37:c0:85:7b:27:11:6e:80:80:2a:7e:bd:8b:73:5f:29:5f: 77:5f:06:ec:e3:f0:9d:93:11:ef:1a:dc:dd:20:2d:62:c9:72: 81:f8:fa:78:ed:5c:7e:e4:ca:b1:6e:ab:f5:75:87:da:1c:49: f3:85:bb:df:d5:a9:c9:92:7c:91:f9:47:90:41:3f:39:41:70: 41:33:e7:d9:6f:3b:97:cc:5e:6b:a7:5e:6b:f2:b5:cf:fd:5d: 2a:b2:84:5d:43:dc:1f:37:78:e1:41:1e:5a:dd:7a:e6:b4:bb: fb:99:0b:09:76:f7:75:72:fc:22:a3:f4:ea:13:fe:02:5a:04: 44:1c:11:ee:2f:da:b0:75:b9:ce:d8:86:20:e0:c6:c3:ca:59: af:2d:a8:49:e4:89:d1:2c:5b:99:bd:71:28:b8:9c:97:25:cb: a1:16:ae:fa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE93g19zEPoi3VHLdoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGU1NjJhZDQtOTg2Yy00MmIyLWJjZTMtOWNjNDhmNWY2 NGRlMB4XDTI2MTAxMTEzMDAxMloXDTI3MDEwOTE0MDAxMlowLzEtMCsGA1UEAxMk M2UyMmU5YmMtNGZkZC00ZTJmLWFhODctNGY5Yjc5YThjNGRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkNpoDOlCz81bi7lw3aHc0w/xRzpKo/8rSvqQ tTNcQLEaKRC3cax/gPcAsDAJ1CQJ0ljlNZcLgCjLFegr3L+K3KCRe1Qj2aVEbFDe bKOtRpY7v3r4MR0Vy/ursO5JHwgATlWk0xIAXGDTuHQI5TvMMPowIxdYRqt9QuaZ 9vnnBxm7rbfxe5gOHddcYKVgcsYAqA8DEzZnggBecKSjisF11d58i/tjHn+8Rjq6 gdg4MSW9embKj9ZuINz8eb6yK8MzCue3peN2S5aBWi6FZ61/0w1SPqP45El7nNk8 t03md9PQla5339fg0ve0A5lEyfK9SXJp4pIGcwW0vL99PD8RWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAjR8VFWqKHDH1Qm6RgWBwa2C7IGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi84ZTU2 MmFkNC05ODZjLTQyYjItYmNlMy05Y2M0OGY1ZjY0ZGUvMjBlOGIwNzktOGRjNC0z MDA5LTg0ZTQtMGFjM2E2MDkyNTc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvOGU1NjJhZDQtOTg2Yy00MmIyLWJj ZTMtOWNjNDhmNWY2NGRlLzhlNTYyYWQ0LTk4NmMtNDJiMi1iY2UzLTljYzQ4ZjVm NjRkZS5jcmwwHwYDVR0jBBgwFoAUmHxmlmn4DzjWo7Rw3w8NUQixhy0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi84ZTU2MmFkNC05ODZjLTQyYjItYmNlMy05Y2M0 OGY1ZjY0ZGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4JkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHIXonKwT/3lOKAfw5riqzDKal0l1LNycFvQADse7yLESTBFJ0LrqS7r Fln9cUt2sHv+ZXT4pprPDiWQ2pENFC8GEArAw3rWK1oQOgvvldwJyfcDKHFXQ3ns arg3wIV7JxFugIAqfr2Lc18pX3dfBuzj8J2TEe8a3N0gLWLJcoH4+njtXH7kyrFu q/V1h9ocSfOFu9/VqcmSfJH5R5BBPzlBcEEz59lvO5fMXmunXmvytc/9XSqyhF1D 3B83eOFBHlrdeua0u/uZCwl293Vy/CKj9OoT/gJaBEQcEe4v2rB1uc7YhiDgxsPK Wa8tqEnkidEsW5m9cSi4nJcly6EWrvo= -----END CERTIFICATE-----Generated at Sat Oct 24 20:47:40 2026 by rpki-client