$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1b4d994c-196b-4b4a-a2c0-0f2e4b4acf54/5c61e36a-6107-3475-8f1b-e616b1350dbe.roa File: 5c61e36a-6107-3475-8f1b-e616b1350dbe.roa (raw, json) Hash identifier: 7+GdJN6fzz+fY+lwyhC5IQcM8RDo3NIm5AzkOjKKrQs= Subject key identifier: F0:36:A5:A6:2C:C6:74:4F:DA:1F:40:C3:12:0B:99:A4:79:64:D0:0E Certificate issuer: /CN=1b4d994c-196b-4b4a-a2c0-0f2e4b4acf54 Certificate serial: 010D0C9F4328584F6F2317C89146E31A2E924480 Authority key identifier: 19:4D:D7:A3:3B:2F:D0:73:DF:27:D6:16:E3:E3:20:63:70:25:C7:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1b4d994c-196b-4b4a-a2c0-0f2e4b4acf54.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1b4d994c-196b-4b4a-a2c0-0f2e4b4acf54/5c61e36a-6107-3475-8f1b-e616b1350dbe.roa Signing time: Thu 08 Oct 2026 13:00:12 +0000 ROA not before: Thu 08 Oct 2026 13:00:12 +0000 ROA not after: Wed 06 Jan 2027 14:00:12 +0000 asID: 401879 IP address blocks: 23.142.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1b4d994c-196b-4b4a-a2c0-0f2e4b4acf54/1b4d994c-196b-4b4a-a2c0-0f2e4b4acf54.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1b4d994c-196b-4b4a-a2c0-0f2e4b4acf54/1b4d994c-196b-4b4a-a2c0-0f2e4b4acf54.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1b4d994c-196b-4b4a-a2c0-0f2e4b4acf54.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:6f:23:17:c8:91:46:e3:1a:2e:92:44:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b4d994c-196b-4b4a-a2c0-0f2e4b4acf54 Validity Not Before: Oct 8 13:00:12 2026 GMT Not After : Jan 6 14:00:12 2027 GMT Subject: CN=84801abc-73a7-4d32-9163-1a43c4a53555 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:45:cb:93:4f:f2:f0:f5:a5:1c:78:b7:14:b3: 55:11:3a:41:1a:b4:b8:c1:ad:83:4c:d8:aa:de:82: 74:05:cb:85:94:22:bc:f8:59:66:52:89:ce:0f:8e: b4:9e:f7:f1:e3:19:71:db:c3:ab:e4:ac:bc:8a:77: 8d:64:4e:3c:b2:9f:be:ef:5b:50:15:59:45:1b:00: 30:6f:b8:23:92:e3:cc:7c:39:d3:97:84:0d:19:be: 88:25:fe:85:b6:56:b7:89:a3:40:14:ab:cf:c5:d8: 4a:b5:da:e5:b3:8c:d4:f2:2d:1f:b8:0b:16:14:be: c5:ca:a9:48:ba:80:2c:3c:be:a6:84:f9:64:30:a5: 14:14:27:50:ba:72:23:f0:c1:35:8a:b5:96:50:9f: 90:c1:eb:6d:e4:5a:9b:1d:b0:8c:8a:c3:20:00:f0: 9f:8f:b1:98:ea:73:58:65:83:9b:4f:f4:14:de:df: c3:e9:b9:b5:8b:24:fc:6e:78:ad:43:93:e3:4c:82: 4d:5f:68:32:b1:38:ac:ec:6e:e1:95:6f:5b:8e:a9: a2:21:04:fa:50:65:c8:3f:87:b6:f7:fc:f2:89:4b: ea:7a:d9:9e:bf:bf:c8:97:12:4e:f5:66:15:32:db: 66:a9:1d:ab:dc:d1:da:87:b9:90:96:ec:15:5b:2a: e3:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:36:A5:A6:2C:C6:74:4F:DA:1F:40:C3:12:0B:99:A4:79:64:D0:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1b4d994c-196b-4b4a-a2c0-0f2e4b4acf54/5c61e36a-6107-3475-8f1b-e616b1350dbe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1b4d994c-196b-4b4a-a2c0-0f2e4b4acf54/1b4d994c-196b-4b4a-a2c0-0f2e4b4acf54.crl X509v3 Authority Key Identifier: keyid:19:4D:D7:A3:3B:2F:D0:73:DF:27:D6:16:E3:E3:20:63:70:25:C7:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1b4d994c-196b-4b4a-a2c0-0f2e4b4acf54.cer sbgp-ipAddrBlock: critical IPv4: 23.142.244.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:08:70:9d:6a:07:ba:bf:a7:8f:be:3f:f8:9f:47:16:96:94: 6d:7b:20:fe:e9:67:77:ed:ed:cf:10:fe:c0:c0:49:0f:85:f1: 7d:22:e5:68:1a:d2:b5:57:6f:8c:29:8d:8f:83:d0:eb:7c:c0: 23:55:fc:03:04:3a:eb:cd:38:69:00:15:f8:41:f5:cb:b6:0d: f7:b6:bc:7c:10:2b:20:a5:1d:3e:20:c7:ff:fd:2c:c9:a4:bf: 1a:80:12:f9:f9:af:fa:76:d3:d7:50:7e:5b:68:99:db:dc:f5: 26:f0:b2:5b:fb:62:19:a4:e5:b1:96:26:94:e7:11:b3:42:95: 12:62:de:01:59:1a:15:54:bb:5f:06:43:0a:a2:5a:a4:40:51: 0b:a4:b8:1b:d2:fe:f1:92:75:9f:10:64:8a:15:e4:25:38:07: 1d:14:be:a1:f3:86:7d:6b:5f:11:68:df:58:dc:14:03:a0:59: a4:7c:c7:da:19:d6:cc:55:df:43:3f:ca:8c:ec:3a:34:f4:b2: 2d:d8:60:52:a1:d6:85:27:55:c2:e0:aa:fc:d9:03:c9:5f:59: 5f:ee:2f:a7:d7:2e:43:28:88:e9:6a:ed:11:36:07:ea:a4:55: a3:e8:45:85:14:07:83:2a:1f:46:d1:b3:f8:ed:2d:35:51:aa: dd:0a:10:82 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9vIxfIkUbjGi6SRIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWI0ZDk5NGMtMTk2Yi00YjRhLWEyYzAtMGYyZTRiNGFj ZjU0MB4XDTI2MTAwODEzMDAxMloXDTI3MDEwNjE0MDAxMlowLzEtMCsGA1UEAxMk ODQ4MDFhYmMtNzNhNy00ZDMyLTkxNjMtMWE0M2M0YTUzNTU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgEXLk0/y8PWlHHi3FLNVETpBGrS4wa2DTNiq 3oJ0BcuFlCK8+FlmUonOD460nvfx4xlx28Or5Ky8ineNZE48sp++71tQFVlFGwAw b7gjkuPMfDnTl4QNGb6IJf6Ftla3iaNAFKvPxdhKtdrls4zU8i0fuAsWFL7FyqlI uoAsPL6mhPlkMKUUFCdQunIj8ME1irWWUJ+Qwett5FqbHbCMisMgAPCfj7GY6nNY ZYObT/QU3t/D6bm1iyT8bnitQ5PjTIJNX2gysTis7G7hlW9bjqmiIQT6UGXIP4e2 9/zyiUvqetmev7/IlxJO9WYVMttmqR2r3NHah7mQluwVWyrjgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPA2paYsxnRP2h9AwxILmaR5ZNAOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8xYjRk OTk0Yy0xOTZiLTRiNGEtYTJjMC0wZjJlNGI0YWNmNTQvNWM2MWUzNmEtNjEwNy0z NDc1LThmMWItZTYxNmIxMzUwZGJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMWI0ZDk5NGMtMTk2Yi00YjRhLWEy YzAtMGYyZTRiNGFjZjU0LzFiNGQ5OTRjLTE5NmItNGI0YS1hMmMwLTBmMmU0YjRh Y2Y1NC5jcmwwHwYDVR0jBBgwFoAUGU3Xozsv0HPfJ9YW4+MgY3AlxyEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8xYjRkOTk0Yy0xOTZiLTRiNGEtYTJjMC0wZjJl NGI0YWNmNTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF470MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGgIcJ1qB7q/p4++P/ifRxaWlG17IP7pZ3ft7c8Q/sDASQ+F8X0i5Wga 0rVXb4wpjY+D0Ot8wCNV/AMEOuvNOGkAFfhB9cu2Dfe2vHwQKyClHT4gx//9LMmk vxqAEvn5r/p209dQfltomdvc9Sbwslv7Yhmk5bGWJpTnEbNClRJi3gFZGhVUu18G QwqiWqRAUQukuBvS/vGSdZ8QZIoV5CU4Bx0UvqHzhn1rXxFo31jcFAOgWaR8x9oZ 1sxV30M/yozsOjT0si3YYFKh1oUnVcLgqvzZA8lfWV/uL6fXLkMoiOlq7RE2B+qk VaPoRYUUB4MqH0bRs/jtLTVRqt0KEII= -----END CERTIFICATE-----Generated at Fri Oct 9 21:12:26 2026 by rpki-client