$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ab1a140b-878b-41cc-864f-08e0177f7325/41a63799-17b8-37d9-84b8-f3de51331877.roa File: 41a63799-17b8-37d9-84b8-f3de51331877.roa (raw, json) Hash identifier: aSzSdmj0mFCCc1/aalSGuJE8/DVFcTrheJbTRNMoT/g= Subject key identifier: AA:53:13:13:6D:28:F8:00:B5:5D:EA:C1:96:72:5D:F7:89:AF:7A:77 Certificate issuer: /CN=ab1a140b-878b-41cc-864f-08e0177f7325 Certificate serial: 010D0C9F4328584F8F3DB4A46A6C0DFE29E81480 Authority key identifier: 71:2D:7B:15:D7:47:DF:6C:DB:98:B1:DC:CB:ED:1A:2D:28:94:57:7D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ab1a140b-878b-41cc-864f-08e0177f7325.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ab1a140b-878b-41cc-864f-08e0177f7325/41a63799-17b8-37d9-84b8-f3de51331877.roa Signing time: Tue 20 Oct 2026 01:00:12 +0000 ROA not before: Tue 20 Oct 2026 01:00:12 +0000 ROA not after: Mon 18 Jan 2027 02:00:12 +0000 asID: 20473 IP address blocks: 23.150.240.0/24 maxlen: 24 204.238.70.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ab1a140b-878b-41cc-864f-08e0177f7325/ab1a140b-878b-41cc-864f-08e0177f7325.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ab1a140b-878b-41cc-864f-08e0177f7325/ab1a140b-878b-41cc-864f-08e0177f7325.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ab1a140b-878b-41cc-864f-08e0177f7325.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 21 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:8f:3d:b4:a4:6a:6c:0d:fe:29:e8:14:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab1a140b-878b-41cc-864f-08e0177f7325 Validity Not Before: Oct 20 01:00:12 2026 GMT Not After : Jan 18 02:00:12 2027 GMT Subject: CN=57df5264-910f-43f5-955c-c981cd901279 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:69:b0:0e:b7:8c:cb:6b:20:b0:dc:54:50:df: 42:03:44:a0:be:60:b9:e5:f4:91:01:be:ca:a8:b0: f8:c4:b6:cc:b1:c3:b0:77:d3:03:42:d1:71:ae:4d: c9:be:61:d8:0a:bd:b8:a4:38:2f:b1:81:b0:eb:a4: d1:43:b2:12:47:ff:87:d3:d7:26:f2:05:be:fd:bc: a5:6a:63:86:f2:f7:35:c0:71:db:09:9b:c5:d6:42: cd:cf:22:fd:e1:0d:79:3b:48:e5:ed:8f:23:5a:be: 24:30:de:91:19:b5:91:8d:d5:ec:c3:db:8f:0e:04: c9:14:f6:93:70:fa:12:49:c6:5e:55:c5:4e:97:a9: 1d:4b:b7:97:25:44:e1:44:32:0c:94:f6:fc:11:fa: 98:f6:0a:22:21:6a:cc:f4:07:71:c3:c1:ca:44:40: bf:b4:9e:90:e0:cb:cc:87:c1:15:ac:db:1a:ea:27: 1b:d7:8c:6e:6f:a3:e0:bd:49:70:c6:27:e4:f1:14: 40:19:10:cb:0e:e3:9e:a5:82:ca:87:ef:58:7f:c3: 7c:36:80:b6:56:16:89:38:30:2c:42:93:c9:e0:60: d1:b7:40:75:2b:0f:e4:f0:4f:56:5d:cb:97:fa:4e: 33:f9:b5:0d:56:e8:75:c7:2a:dd:38:1c:73:db:11: ca:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:53:13:13:6D:28:F8:00:B5:5D:EA:C1:96:72:5D:F7:89:AF:7A:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ab1a140b-878b-41cc-864f-08e0177f7325/41a63799-17b8-37d9-84b8-f3de51331877.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ab1a140b-878b-41cc-864f-08e0177f7325/ab1a140b-878b-41cc-864f-08e0177f7325.crl X509v3 Authority Key Identifier: keyid:71:2D:7B:15:D7:47:DF:6C:DB:98:B1:DC:CB:ED:1A:2D:28:94:57:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ab1a140b-878b-41cc-864f-08e0177f7325.cer sbgp-ipAddrBlock: critical IPv4: 23.150.240.0/24 204.238.70.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b9:37:8d:40:61:71:be:c8:e8:e4:73:69:c6:49:d6:3a:dd:4e: 4c:bd:8d:aa:e1:32:17:5f:24:72:22:b0:2e:7c:d0:26:75:58: 70:80:38:cd:ec:90:5a:07:a5:b9:c7:07:8e:30:0a:7e:79:57: b6:a9:54:53:92:70:7a:ea:12:ef:12:ef:2f:aa:c7:4e:29:63: 16:b0:7e:4e:33:92:34:11:0a:cc:4a:4a:36:c0:1b:41:f1:ea: b9:f7:d7:9a:f3:1a:7b:4f:9c:d0:7b:e7:74:bc:4c:84:52:1e: 83:20:4b:b2:97:f2:b6:27:31:d9:99:2c:cb:88:29:7c:bc:86: 59:de:ca:8e:57:19:9d:30:d6:8d:66:24:9f:3d:55:01:c3:05: 62:7f:b4:20:0e:07:35:36:ee:e9:9f:37:07:13:17:f4:76:f8: e7:f7:94:d9:44:2a:a8:6d:e1:d7:bc:f6:e8:68:12:be:24:ac: c0:21:19:0e:95:3f:4c:81:ec:2c:63:cc:4e:8e:ec:68:93:0c: b2:6d:22:8c:48:f5:04:b5:4e:b7:f1:3f:57:89:a8:6c:c6:aa: 93:e5:79:05:0a:03:da:de:68:3a:e3:37:49:41:48:ea:2c:10: f6:8e:35:57:89:4f:7e:91:95:9e:c4:fd:f7:5a:d6:1b:83:e5: 3e:12:9f:e0 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE+PPbSkamwN/inoFIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWIxYTE0MGItODc4Yi00MWNjLTg2NGYtMDhlMDE3N2Y3 MzI1MB4XDTI2MTAyMDAxMDAxMloXDTI3MDExODAyMDAxMlowLzEtMCsGA1UEAxMk NTdkZjUyNjQtOTEwZi00M2Y1LTk1NWMtYzk4MWNkOTAxMjc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjGmwDreMy2sgsNxUUN9CA0SgvmC55fSRAb7K qLD4xLbMscOwd9MDQtFxrk3JvmHYCr24pDgvsYGw66TRQ7ISR/+H09cm8gW+/byl amOG8vc1wHHbCZvF1kLNzyL94Q15O0jl7Y8jWr4kMN6RGbWRjdXsw9uPDgTJFPaT cPoSScZeVcVOl6kdS7eXJUThRDIMlPb8EfqY9goiIWrM9Adxw8HKREC/tJ6Q4MvM h8EVrNsa6icb14xub6PgvUlwxifk8RRAGRDLDuOepYLKh+9Yf8N8NoC2VhaJODAs QpPJ4GDRt0B1Kw/k8E9WXcuX+k4z+bUNVuh1xyrdOBxz2xHKewIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFKpTExNtKPgAtV3qwZZyXfeJr3p3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hYjFh MTQwYi04NzhiLTQxY2MtODY0Zi0wOGUwMTc3ZjczMjUvNDFhNjM3OTktMTdiOC0z N2Q5LTg0YjgtZjNkZTUxMzMxODc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYWIxYTE0MGItODc4Yi00MWNjLTg2 NGYtMDhlMDE3N2Y3MzI1L2FiMWExNDBiLTg3OGItNDFjYy04NjRmLTA4ZTAxNzdm NzMyNS5jcmwwHwYDVR0jBBgwFoAUcS17FddH32zbmLHcy+0aLSiUV30wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hYjFhMTQwYi04NzhiLTQxY2MtODY0Zi0wOGUw MTc3ZjczMjUuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAF5bwAwQA zO5GMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBALk3jUBhcb7I6ORzacZJ1jrdTky9jarhMhdfJHIisC580CZ1 WHCAOM3skFoHpbnHB44wCn55V7apVFOScHrqEu8S7y+qx04pYxawfk4zkjQRCsxK SjbAG0Hx6rn315rzGntPnNB753S8TIRSHoMgS7KX8rYnMdmZLMuIKXy8hlneyo5X GZ0w1o1mJJ89VQHDBWJ/tCAOBzU27umfNwcTF/R2+Of3lNlEKqht4de89uhoEr4k rMAhGQ6VP0yB7CxjzE6O7GiTDLJtIoxI9QS1TrfxP1eJqGzGqpPleQUKA9reaDrj N0lBSOosEPaONVeJT36RlZ7E/fda1huD5T4Sn+A= -----END CERTIFICATE-----Generated at Tue Oct 20 06:53:44 2026 by rpki-client