$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3c5f9827-df17-4814-bfc5-cfd8a8c35557/7ddbdffd-d197-3798-a746-168001e610c2.roa File: 7ddbdffd-d197-3798-a746-168001e610c2.roa (raw, json) Hash identifier: 65EC+2dPsErFol2qVKX0ZW9bssXbGqqX3ehlzpe5eow= Subject key identifier: E3:9E:2E:0C:93:3C:C8:F9:3F:C0:87:2F:B9:33:6F:CC:2E:17:93:23 Certificate issuer: /CN=3c5f9827-df17-4814-bfc5-cfd8a8c35557 Certificate serial: 010D0C9F4328584F4F083478837543EE758B8C80 Authority key identifier: 8D:0B:95:C0:49:C5:67:C2:23:E1:DA:C2:C2:41:76:34:D5:08:71:B9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3c5f9827-df17-4814-bfc5-cfd8a8c35557.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3c5f9827-df17-4814-bfc5-cfd8a8c35557/7ddbdffd-d197-3798-a746-168001e610c2.roa Signing time: Sun 27 Sep 2026 01:00:12 +0000 ROA not before: Sun 27 Sep 2026 01:00:12 +0000 ROA not after: Sat 26 Dec 2026 02:00:12 +0000 asID: 5650 IP address blocks: 23.141.76.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3c5f9827-df17-4814-bfc5-cfd8a8c35557/3c5f9827-df17-4814-bfc5-cfd8a8c35557.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3c5f9827-df17-4814-bfc5-cfd8a8c35557/3c5f9827-df17-4814-bfc5-cfd8a8c35557.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3c5f9827-df17-4814-bfc5-cfd8a8c35557.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4f:08:34:78:83:75:43:ee:75:8b:8c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c5f9827-df17-4814-bfc5-cfd8a8c35557 Validity Not Before: Sep 27 01:00:12 2026 GMT Not After : Dec 26 02:00:12 2026 GMT Subject: CN=13b8db8b-2beb-4515-9eff-743f0b63dc99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:73:63:21:1a:26:8f:ed:7b:12:d3:8e:63:84: 36:4b:1d:57:79:5b:1a:87:d6:99:5a:1d:e4:60:23: ca:91:d7:57:11:48:cd:f7:7f:43:43:8a:50:6b:c5: 4d:b3:a8:39:d3:ed:2b:9b:08:71:aa:c4:fe:5c:de: 61:2f:a1:5d:1a:77:5b:2c:93:85:d0:fa:67:71:6e: 7f:fa:73:b0:13:00:79:32:50:d8:3e:ed:09:76:1c: fc:c4:f8:a1:39:57:5e:b9:52:58:37:08:7d:29:44: 9f:a9:90:94:d0:70:94:48:55:46:70:35:d7:6b:17: 88:63:22:bc:50:63:8a:58:49:8d:8c:5c:ef:9d:b4: b2:2f:e7:4b:57:3e:a7:7b:42:62:7d:4e:75:83:f7: f6:72:a6:cd:27:b7:9a:4d:ad:fa:01:fd:40:11:17: 5e:22:83:e7:8f:2f:bb:f6:ac:74:39:58:8f:85:d0: 87:83:88:ca:d8:5b:c0:7e:c6:2e:8f:1f:fb:ef:50: 0f:22:13:4c:52:33:a5:0a:80:3f:3e:2a:53:a6:41: 44:c2:2a:c1:38:17:8b:e3:bf:16:f7:74:d9:8b:d9: 92:b6:ce:6a:6c:63:7a:cf:13:d3:78:84:dc:97:10: 10:7d:85:50:bc:52:4e:1a:01:94:fc:c9:fa:f4:d8: 17:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:9E:2E:0C:93:3C:C8:F9:3F:C0:87:2F:B9:33:6F:CC:2E:17:93:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3c5f9827-df17-4814-bfc5-cfd8a8c35557/7ddbdffd-d197-3798-a746-168001e610c2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3c5f9827-df17-4814-bfc5-cfd8a8c35557/3c5f9827-df17-4814-bfc5-cfd8a8c35557.crl X509v3 Authority Key Identifier: keyid:8D:0B:95:C0:49:C5:67:C2:23:E1:DA:C2:C2:41:76:34:D5:08:71:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3c5f9827-df17-4814-bfc5-cfd8a8c35557.cer sbgp-ipAddrBlock: critical IPv4: 23.141.76.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:2e:78:20:fe:a4:bb:c7:9c:55:32:b0:67:b5:09:d8:05:35: 40:d0:57:d2:50:65:c9:37:a9:b9:ab:41:de:ed:b7:9c:3d:52: 20:20:79:81:2b:d3:b7:da:ee:f1:2a:eb:c7:12:14:4e:9c:34: 2b:80:c9:d0:89:74:90:14:8b:2a:a5:84:25:23:a9:4a:10:9d: b7:2d:05:2e:1c:00:b3:6a:75:e3:3c:17:61:7f:21:e3:15:60: 45:94:85:94:be:0c:20:8f:e5:7a:96:4e:6b:7d:5d:e3:0b:39: 2a:b0:22:86:aa:20:17:1d:8d:04:74:e7:12:a2:34:b1:b2:ce: 8e:51:6a:88:d5:da:f2:ac:b0:9a:6a:a1:5f:84:9c:0f:f8:88: 2d:c1:86:49:a9:f7:5a:66:20:5f:19:ba:3f:75:03:48:1c:3e: 73:45:b0:38:02:6c:fc:9a:9f:0e:9a:66:1e:91:b1:96:53:c0: 08:1c:07:ff:47:2a:9b:fb:00:8a:50:30:b8:4c:62:37:e2:7c: 7d:c2:9e:a3:9d:b9:a8:f0:22:c1:3b:46:9c:bc:5e:da:71:25: dd:7f:06:b0:e9:68:a4:bf:54:36:c3:c4:5f:58:25:4d:f7:91: 57:61:f0:dc:fa:24:c9:2d:b8:da:1a:15:7a:60:3c:96:1a:38: bf:7e:70:4c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9PCDR4g3VD7nWLjIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M1Zjk4MjctZGYxNy00ODE0LWJmYzUtY2ZkOGE4YzM1 NTU3MB4XDTI2MDkyNzAxMDAxMloXDTI2MTIyNjAyMDAxMlowLzEtMCsGA1UEAxMk MTNiOGRiOGItMmJlYi00NTE1LTllZmYtNzQzZjBiNjNkYzk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmnNjIRomj+17EtOOY4Q2Sx1XeVsah9aZWh3k YCPKkddXEUjN939DQ4pQa8VNs6g50+0rmwhxqsT+XN5hL6FdGndbLJOF0PpncW5/ +nOwEwB5MlDYPu0Jdhz8xPihOVdeuVJYNwh9KUSfqZCU0HCUSFVGcDXXaxeIYyK8 UGOKWEmNjFzvnbSyL+dLVz6ne0JifU51g/f2cqbNJ7eaTa36Af1AERdeIoPnjy+7 9qx0OViPhdCHg4jK2FvAfsYujx/771APIhNMUjOlCoA/PipTpkFEwirBOBeL478W 93TZi9mSts5qbGN6zxPTeITclxAQfYVQvFJOGgGU/Mn69NgX4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOOeLgyTPMj5P8CHL7kzb8wuF5MjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8zYzVm OTgyNy1kZjE3LTQ4MTQtYmZjNS1jZmQ4YThjMzU1NTcvN2RkYmRmZmQtZDE5Ny0z Nzk4LWE3NDYtMTY4MDAxZTYxMGMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvM2M1Zjk4MjctZGYxNy00ODE0LWJm YzUtY2ZkOGE4YzM1NTU3LzNjNWY5ODI3LWRmMTctNDgxNC1iZmM1LWNmZDhhOGMz NTU1Ny5jcmwwHwYDVR0jBBgwFoAUjQuVwEnFZ8Ij4drCwkF2NNUIcbkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8zYzVmOTgyNy1kZjE3LTQ4MTQtYmZjNS1jZmQ4 YThjMzU1NTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF41MMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADkueCD+pLvHnFUysGe1CdgFNUDQV9JQZck3qbmrQd7tt5w9UiAgeYEr 07fa7vEq68cSFE6cNCuAydCJdJAUiyqlhCUjqUoQnbctBS4cALNqdeM8F2F/IeMV YEWUhZS+DCCP5XqWTmt9XeMLOSqwIoaqIBcdjQR05xKiNLGyzo5RaojV2vKssJpq oV+EnA/4iC3Bhkmp91pmIF8Zuj91A0gcPnNFsDgCbPyanw6aZh6RsZZTwAgcB/9H Kpv7AIpQMLhMYjfifH3CnqOduajwIsE7Rpy8XtpxJd1/BrDpaKS/VDbDxF9YJU33 kVdh8Nz6JMktuNoaFXpgPJYaOL9+cEw= -----END CERTIFICATE-----Generated at Wed Oct 14 11:55:25 2026 by rpki-client