$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/99b1c149-0ccb-495a-8949-abf6c29a868d/409c1fec-af63-39d9-901a-a5330c354116.roa File: 409c1fec-af63-39d9-901a-a5330c354116.roa (raw, json) Hash identifier: lbLjY5/7q3mCmQvZaZ13LsG7FU6214NCMrKuqxEpi+w= Subject key identifier: 42:CB:FC:DF:60:CC:34:C8:66:09:29:13:54:73:EA:E7:8E:7F:81:2E Certificate issuer: /CN=99b1c149-0ccb-495a-8949-abf6c29a868d Certificate serial: 010D0C9F4328584F0BC1B0D9F3C4F176B7EDBA00 Authority key identifier: C3:A4:AD:A2:DA:E6:FA:5F:6A:16:EA:7B:62:01:3E:C1:FC:31:A3:75 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/99b1c149-0ccb-495a-8949-abf6c29a868d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/99b1c149-0ccb-495a-8949-abf6c29a868d/409c1fec-af63-39d9-901a-a5330c354116.roa Signing time: Wed 02 Sep 2026 22:39:36 +0000 ROA not before: Wed 02 Sep 2026 22:39:36 +0000 ROA not after: Tue 01 Dec 2026 23:39:36 +0000 asID: 398843 IP address blocks: 23.169.8.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/99b1c149-0ccb-495a-8949-abf6c29a868d/99b1c149-0ccb-495a-8949-abf6c29a868d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/99b1c149-0ccb-495a-8949-abf6c29a868d/99b1c149-0ccb-495a-8949-abf6c29a868d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/99b1c149-0ccb-495a-8949-abf6c29a868d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0b:c1:b0:d9:f3:c4:f1:76:b7:ed:ba:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99b1c149-0ccb-495a-8949-abf6c29a868d Validity Not Before: Sep 2 22:39:36 2026 GMT Not After : Dec 1 23:39:36 2026 GMT Subject: CN=e2cab18c-554d-4baa-9e08-ba81086a4432 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:ef:99:04:05:a7:81:30:c9:6d:89:3b:c1:ed: d6:8a:96:35:1a:b6:15:4c:3a:7f:c3:cc:39:1d:8b: fe:ba:c6:64:46:d3:7c:31:ef:c1:57:f3:a4:98:29: 21:1d:93:96:4f:65:f5:5d:79:06:ff:3c:85:56:cd: b8:de:1b:83:12:a0:a0:60:14:a5:35:88:a2:7a:f8: 99:72:14:14:8d:33:f5:d2:d8:51:1d:ae:9f:97:99: 93:78:67:35:35:e3:ec:01:c7:ec:bf:c3:0e:f3:fc: 8b:59:bd:fe:af:9d:fa:71:e8:d1:b1:e5:18:25:c1: 6f:89:00:23:8a:c3:57:7e:98:18:b8:d1:4a:8b:2d: e0:62:b1:61:d9:63:e4:e5:3b:cb:57:59:c5:f8:9e: a8:cd:d2:70:84:c4:32:d7:da:49:b0:26:fa:48:82: f4:ef:22:08:b1:27:0e:0c:b9:c9:6c:17:f0:fa:98: 84:b2:4f:a2:6f:52:95:af:3b:f0:46:f5:9e:62:27: f9:14:88:76:9f:d0:b4:4d:45:b5:45:aa:ba:d6:0b: 44:19:ed:48:83:63:b8:c7:43:b9:01:bb:3a:84:c7: 44:fc:e9:fc:73:12:74:0e:e4:67:8d:81:5c:ae:71: 42:a6:ab:2b:7e:77:ff:ac:80:f6:63:70:73:d0:fa: 42:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:CB:FC:DF:60:CC:34:C8:66:09:29:13:54:73:EA:E7:8E:7F:81:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/99b1c149-0ccb-495a-8949-abf6c29a868d/409c1fec-af63-39d9-901a-a5330c354116.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/99b1c149-0ccb-495a-8949-abf6c29a868d/99b1c149-0ccb-495a-8949-abf6c29a868d.crl X509v3 Authority Key Identifier: keyid:C3:A4:AD:A2:DA:E6:FA:5F:6A:16:EA:7B:62:01:3E:C1:FC:31:A3:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/99b1c149-0ccb-495a-8949-abf6c29a868d.cer sbgp-ipAddrBlock: critical IPv4: 23.169.8.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:3c:a4:8c:60:70:60:ee:fb:73:e7:88:cc:e3:7c:9a:52:ed: b8:f2:72:2d:2e:5c:e2:37:d5:5f:13:7f:f2:67:06:30:62:c2: fb:2a:06:5f:a9:fd:a8:a3:9e:93:fb:40:ee:78:16:19:2e:ab: d3:20:db:76:81:42:77:24:c8:d5:b7:87:f0:1c:bd:f4:b2:68: 89:32:f4:48:48:ae:b8:b5:b8:e1:14:9a:2e:1f:f3:3a:da:26: db:80:2c:21:9d:f8:4d:d9:b1:dc:dd:f4:ec:a4:94:4b:2b:c0: b3:49:6e:f5:b5:66:f1:62:bd:1a:10:c2:03:ce:a6:1f:26:65: 2f:44:a3:7e:c4:1c:cb:b7:0f:cf:fb:25:93:86:fc:3b:61:9e: 25:30:3e:2b:1e:a7:33:cd:74:9c:a8:93:e9:43:a6:13:a8:ab: 6d:96:45:33:bd:cb:e8:f8:ec:42:6d:6a:e8:22:f2:b1:a0:3a: 95:e9:91:aa:19:5d:9b:bf:f6:86:38:49:f0:3e:00:b1:e3:3f: c7:4c:20:f2:3d:e4:bc:7f:ed:62:aa:a3:ec:4b:f4:66:69:d8: fe:5b:16:6e:72:5a:57:cf:69:91:de:0e:2d:20:f7:bf:16:0c: 22:b4:4c:9d:9f:7d:0c:e7:c4:ef:f3:01:2e:c9:e0:e1:c5:16: 89:f0:32:8d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8LwbDZ88TxdrftugAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTliMWMxNDktMGNjYi00OTVhLTg5NDktYWJmNmMyOWE4 NjhkMB4XDTI2MDkwMjIyMzkzNloXDTI2MTIwMTIzMzkzNlowLzEtMCsGA1UEAxMk ZTJjYWIxOGMtNTU0ZC00YmFhLTllMDgtYmE4MTA4NmE0NDMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgu+ZBAWngTDJbYk7we3WipY1GrYVTDp/w8w5 HYv+usZkRtN8Me/BV/OkmCkhHZOWT2X1XXkG/zyFVs243huDEqCgYBSlNYiieviZ chQUjTP10thRHa6fl5mTeGc1NePsAcfsv8MO8/yLWb3+r536cejRseUYJcFviQAj isNXfpgYuNFKiy3gYrFh2WPk5TvLV1nF+J6ozdJwhMQy19pJsCb6SIL07yIIsScO DLnJbBfw+piEsk+ib1KVrzvwRvWeYif5FIh2n9C0TUW1Raq61gtEGe1Ig2O4x0O5 Abs6hMdE/On8cxJ0DuRnjYFcrnFCpqsrfnf/rID2Y3Bz0PpCWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFELL/N9gzDTIZgkpE1Rz6ueOf4EuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS85OWIx YzE0OS0wY2NiLTQ5NWEtODk0OS1hYmY2YzI5YTg2OGQvNDA5YzFmZWMtYWY2My0z OWQ5LTkwMWEtYTUzMzBjMzU0MTE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvOTliMWMxNDktMGNjYi00OTVhLTg5 NDktYWJmNmMyOWE4NjhkLzk5YjFjMTQ5LTBjY2ItNDk1YS04OTQ5LWFiZjZjMjlh ODY4ZC5jcmwwHwYDVR0jBBgwFoAUw6Stotrm+l9qFup7YgE+wfwxo3UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS85OWIxYzE0OS0wY2NiLTQ5NWEtODk0OS1hYmY2 YzI5YTg2OGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6kIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFc8pIxgcGDu+3PniMzjfJpS7bjyci0uXOI31V8Tf/JnBjBiwvsqBl+p /aijnpP7QO54Fhkuq9Mg23aBQnckyNW3h/AcvfSyaIky9EhIrri1uOEUmi4f8zra JtuALCGd+E3Zsdzd9OyklEsrwLNJbvW1ZvFivRoQwgPOph8mZS9Eo37EHMu3D8/7 JZOG/DthniUwPisepzPNdJyok+lDphOoq22WRTO9y+j47EJtaugi8rGgOpXpkaoZ XZu/9oY4SfA+ALHjP8dMIPI95Lx/7WKqo+xL9GZp2P5bFm5yWlfPaZHeDi0g978W DCK0TJ2ffQznxO/zAS7J4OHFFonwMo0= -----END CERTIFICATE-----Generated at Sat Sep 5 08:29:39 2026 by rpki-client