$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0adb4d9a-9fc4-43f7-8cfb-95119c1dddf0/7dcaa39c-7090-3cb6-9901-2a900809a80e.roa File: 7dcaa39c-7090-3cb6-9901-2a900809a80e.roa (raw, json) Hash identifier: V0oo1r22vJ74kYyapiPi3CrINfXrSoaWime+LJfOp2o= Subject key identifier: 33:03:85:D5:1D:B2:DD:B3:42:AE:21:6B:6D:EC:F9:2B:1D:80:85:8D Certificate issuer: /CN=0adb4d9a-9fc4-43f7-8cfb-95119c1dddf0 Certificate serial: 010D0C9F4328584F963864A238E5BC341CCF5700 Authority key identifier: 11:79:D4:A6:A6:31:48:56:5D:61:E7:8D:06:1F:79:A2:6D:0A:FF:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0adb4d9a-9fc4-43f7-8cfb-95119c1dddf0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0adb4d9a-9fc4-43f7-8cfb-95119c1dddf0/7dcaa39c-7090-3cb6-9901-2a900809a80e.roa Signing time: Thu 22 Oct 2026 13:00:13 +0000 ROA not before: Thu 22 Oct 2026 13:00:13 +0000 ROA not after: Wed 20 Jan 2027 14:00:13 +0000 asID: 979 IP address blocks: 23.141.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0adb4d9a-9fc4-43f7-8cfb-95119c1dddf0/0adb4d9a-9fc4-43f7-8cfb-95119c1dddf0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0adb4d9a-9fc4-43f7-8cfb-95119c1dddf0/0adb4d9a-9fc4-43f7-8cfb-95119c1dddf0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0adb4d9a-9fc4-43f7-8cfb-95119c1dddf0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Nov 2026 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:96:38:64:a2:38:e5:bc:34:1c:cf:57:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0adb4d9a-9fc4-43f7-8cfb-95119c1dddf0 Validity Not Before: Oct 22 13:00:13 2026 GMT Not After : Jan 20 14:00:13 2027 GMT Subject: CN=3ef5e770-d310-4511-8c49-35ac13208f64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:68:4a:45:87:90:5c:95:8d:5b:89:5b:f2:a6: ee:7b:0f:fe:cf:64:21:c9:94:9f:5d:18:a2:4b:9d: be:a4:02:e7:1a:ca:e1:c2:8a:6d:b1:53:fa:94:86: 4d:97:96:fd:a6:a7:43:eb:b1:53:05:ee:b8:bd:09: 10:9d:a9:8d:41:43:e5:9c:d8:ba:55:9d:25:00:58: 3a:c5:25:9e:0c:d4:0a:e1:e8:44:d6:49:86:09:14: 2c:3e:20:30:d1:c4:bb:20:93:fc:d2:f3:ad:02:6f: 63:f4:c1:f9:18:b7:ef:96:35:6f:e1:60:80:dc:2f: 5b:c7:9b:24:d1:96:3d:85:e9:7f:ad:16:a2:b6:f1: e1:fc:da:07:7a:25:1c:d1:fc:fb:6b:16:2e:2f:c1: 08:80:32:74:d9:fa:2e:cb:c7:ac:a9:12:58:94:d6: 76:c5:c3:b3:01:a1:c0:ed:7b:21:44:15:d2:66:9e: 3f:10:22:0c:25:dc:ff:4c:f4:21:33:6d:45:86:bd: d4:c2:28:40:6c:f4:13:0e:55:77:8b:b2:74:73:33: 68:28:6b:84:ec:c1:c1:20:db:47:ce:49:f7:b8:fe: 1d:83:11:95:9b:4b:f1:8d:af:1c:9a:b8:d6:d7:32: ae:e6:53:67:f1:dd:a8:8e:57:39:86:11:b3:c0:ab: 86:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:03:85:D5:1D:B2:DD:B3:42:AE:21:6B:6D:EC:F9:2B:1D:80:85:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0adb4d9a-9fc4-43f7-8cfb-95119c1dddf0/7dcaa39c-7090-3cb6-9901-2a900809a80e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0adb4d9a-9fc4-43f7-8cfb-95119c1dddf0/0adb4d9a-9fc4-43f7-8cfb-95119c1dddf0.crl X509v3 Authority Key Identifier: keyid:11:79:D4:A6:A6:31:48:56:5D:61:E7:8D:06:1F:79:A2:6D:0A:FF:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0adb4d9a-9fc4-43f7-8cfb-95119c1dddf0.cer sbgp-ipAddrBlock: critical IPv4: 23.141.204.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:7b:09:e9:4f:c5:08:82:9e:1b:52:ba:54:b1:94:05:90:fc: af:94:b6:24:0b:c6:94:e8:bf:06:91:03:7d:b8:18:c8:a6:e3: c0:4e:9b:d7:b0:a4:b1:76:94:d7:ef:67:30:c6:63:d3:d5:ff: c8:57:a7:cd:81:a8:60:ec:ca:80:64:2d:0a:bd:14:d9:19:a8: 5f:19:97:97:bc:8f:3d:b0:e1:c3:d2:74:8a:77:19:5b:c9:a0: 24:09:81:95:ee:0f:57:b3:86:20:4c:3e:e8:bc:95:cb:b0:cd: 38:b6:6b:0a:76:dd:ca:29:05:d0:5c:63:f6:e8:28:3b:91:b8: 1a:eb:26:90:53:a2:9f:33:73:14:c3:eb:41:6d:cf:65:a6:bb: 20:40:4c:01:17:95:f8:9c:98:20:de:3d:de:01:73:6b:57:e0: 8a:fb:a6:cd:46:08:1d:12:36:d2:1d:a3:b8:4e:48:0e:11:21: 15:65:47:56:94:7c:16:74:e6:a8:4a:c2:11:d2:43:dc:9c:83: d1:8b:ce:06:ff:7d:16:5c:65:3f:55:a7:21:8f:ec:66:52:18: 52:83:35:bb:74:54:c2:8d:14:11:57:04:b8:dc:99:ab:ea:ee: 34:27:e0:40:bd:3e:6e:d2:c5:1e:83:94:2a:7c:1b:e9:9e:24: d3:79:be:1d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+WOGSiOOW8NBzPVwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGFkYjRkOWEtOWZjNC00M2Y3LThjZmItOTUxMTljMWRk ZGYwMB4XDTI2MTAyMjEzMDAxM1oXDTI3MDEyMDE0MDAxM1owLzEtMCsGA1UEAxMk M2VmNWU3NzAtZDMxMC00NTExLThjNDktMzVhYzEzMjA4ZjY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvGhKRYeQXJWNW4lb8qbuew/+z2QhyZSfXRii S52+pALnGsrhwoptsVP6lIZNl5b9pqdD67FTBe64vQkQnamNQUPlnNi6VZ0lAFg6 xSWeDNQK4ehE1kmGCRQsPiAw0cS7IJP80vOtAm9j9MH5GLfvljVv4WCA3C9bx5sk 0ZY9hel/rRaitvHh/NoHeiUc0fz7axYuL8EIgDJ02fouy8esqRJYlNZ2xcOzAaHA 7XshRBXSZp4/ECIMJdz/TPQhM21Fhr3UwihAbPQTDlV3i7J0czNoKGuE7MHBINtH zkn3uP4dgxGVm0vxja8cmrjW1zKu5lNn8d2ojlc5hhGzwKuGzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDMDhdUdst2zQq4ha23s+SsdgIWNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8wYWRi NGQ5YS05ZmM0LTQzZjctOGNmYi05NTExOWMxZGRkZjAvN2RjYWEzOWMtNzA5MC0z Y2I2LTk5MDEtMmE5MDA4MDlhODBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMGFkYjRkOWEtOWZjNC00M2Y3LThj ZmItOTUxMTljMWRkZGYwLzBhZGI0ZDlhLTlmYzQtNDNmNy04Y2ZiLTk1MTE5YzFk ZGRmMC5jcmwwHwYDVR0jBBgwFoAUEXnUpqYxSFZdYeeNBh95om0K/4kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8wYWRiNGQ5YS05ZmM0LTQzZjctOGNmYi05NTEx OWMxZGRkZjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF43MMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABt7CelPxQiCnhtSulSxlAWQ/K+UtiQLxpTovwaRA324GMim48BOm9ew pLF2lNfvZzDGY9PV/8hXp82BqGDsyoBkLQq9FNkZqF8Zl5e8jz2w4cPSdIp3GVvJ oCQJgZXuD1ezhiBMPui8lcuwzTi2awp23copBdBcY/boKDuRuBrrJpBTop8zcxTD 60Ftz2WmuyBATAEXlficmCDePd4Bc2tX4Ir7ps1GCB0SNtIdo7hOSA4RIRVlR1aU fBZ05qhKwhHSQ9ycg9GLzgb/fRZcZT9VpyGP7GZSGFKDNbt0VMKNFBFXBLjcmavq 7jQn4EC9Pm7SxR6DlCp8G+meJNN5vh0= -----END CERTIFICATE-----Generated at Thu Nov 5 07:21:53 2026 by rpki-client