$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3f8a97fa-fb6e-46d4-9e8e-efdd4358a740/4e7e49f7-35d4-301b-8ed8-7280ddab54e2.roa File: 4e7e49f7-35d4-301b-8ed8-7280ddab54e2.roa (raw, json) Hash identifier: 81tXOrC7O6lyFjRDZz3g0/aDTTVmoslREkuhKt/RsWM= Subject key identifier: E7:97:8B:1E:0E:F1:5F:47:9A:55:45:53:59:C7:97:A7:76:8F:CB:64 Certificate issuer: /CN=3f8a97fa-fb6e-46d4-9e8e-efdd4358a740 Certificate serial: 010D0C9F4328584F4F08303B3379F43986C705C0 Authority key identifier: 61:16:93:5F:0E:1E:26:10:92:FB:12:B4:54:95:80:91:16:F4:B0:38 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3f8a97fa-fb6e-46d4-9e8e-efdd4358a740.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3f8a97fa-fb6e-46d4-9e8e-efdd4358a740/4e7e49f7-35d4-301b-8ed8-7280ddab54e2.roa Signing time: Sun 27 Sep 2026 01:00:12 +0000 ROA not before: Sun 27 Sep 2026 01:00:12 +0000 ROA not after: Sat 26 Dec 2026 02:00:12 +0000 asID: 13356 IP address blocks: 23.161.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3f8a97fa-fb6e-46d4-9e8e-efdd4358a740/3f8a97fa-fb6e-46d4-9e8e-efdd4358a740.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3f8a97fa-fb6e-46d4-9e8e-efdd4358a740/3f8a97fa-fb6e-46d4-9e8e-efdd4358a740.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3f8a97fa-fb6e-46d4-9e8e-efdd4358a740.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4f:08:30:3b:33:79:f4:39:86:c7:05:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8a97fa-fb6e-46d4-9e8e-efdd4358a740 Validity Not Before: Sep 27 01:00:12 2026 GMT Not After : Dec 26 02:00:12 2026 GMT Subject: CN=36c6660f-bcbb-47ca-8692-e8b2fc86e190 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:5f:4c:4d:f4:ef:24:31:46:a2:5c:66:21:48: 04:3b:5e:c6:69:be:c3:ef:d6:11:50:42:95:df:ce: b3:26:c4:fa:7f:17:d8:4f:d6:74:4a:e0:23:7a:dd: 6b:d8:7b:92:12:56:d1:f8:b7:2d:6f:bc:96:9c:6c: d3:ff:28:b8:40:5b:7c:bd:39:eb:bc:f0:45:19:9b: 8f:b3:42:b5:94:c7:98:5f:fb:d6:2a:3d:2b:5a:10: 6e:c0:8a:00:1e:ea:50:c3:f1:01:06:61:4d:eb:a5: cb:86:aa:27:50:aa:e8:9e:c0:a9:ac:a7:29:60:2f: d6:b4:fe:f2:e1:17:25:1c:f7:14:52:10:52:87:34: 72:4c:fd:71:0f:b0:8c:18:b7:7d:69:e4:4f:6b:31: 69:07:f4:df:60:79:b9:b9:00:63:3c:92:f6:f3:32: b3:c3:34:54:f1:73:e2:79:f2:11:cc:00:73:06:ee: a2:4a:87:72:87:66:0c:57:99:1f:fd:74:c1:3e:a2: 60:b2:32:20:7e:be:24:41:ac:3b:4b:c8:e3:03:85: 99:88:55:d8:2a:8e:eb:48:9f:b3:04:6d:9b:55:be: 05:25:6a:9f:4a:c1:22:0e:42:3f:b0:2c:80:30:3c: bd:97:31:ea:bb:93:ea:61:db:1f:de:8f:74:cc:7a: 7a:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:97:8B:1E:0E:F1:5F:47:9A:55:45:53:59:C7:97:A7:76:8F:CB:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3f8a97fa-fb6e-46d4-9e8e-efdd4358a740/4e7e49f7-35d4-301b-8ed8-7280ddab54e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3f8a97fa-fb6e-46d4-9e8e-efdd4358a740/3f8a97fa-fb6e-46d4-9e8e-efdd4358a740.crl X509v3 Authority Key Identifier: keyid:61:16:93:5F:0E:1E:26:10:92:FB:12:B4:54:95:80:91:16:F4:B0:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3f8a97fa-fb6e-46d4-9e8e-efdd4358a740.cer sbgp-ipAddrBlock: critical IPv4: 23.161.200.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:c6:65:07:57:de:3e:c2:b1:71:32:a3:55:c8:2d:fe:1f:c0: 07:bf:6b:8e:10:c7:9d:4f:7f:c1:1e:9e:da:ee:87:51:91:95: 02:84:84:01:08:19:a0:29:f7:b6:37:c2:25:c7:54:2b:d5:ba: 7c:d3:42:87:f1:ff:f2:58:04:a7:ef:74:ef:e7:93:2d:40:5b: 96:30:c2:bd:19:f6:0d:4a:62:02:02:e9:ef:56:ba:33:01:d3: df:bc:72:10:fe:05:21:b5:e5:44:a5:02:b5:0a:e5:7c:da:1a: bc:e3:52:a3:33:56:5e:cd:44:4a:25:09:f6:24:44:a8:49:01: ea:c1:f6:88:ee:f5:c2:2b:5a:f5:de:db:d5:15:56:0c:36:6d: ee:a4:07:71:d6:0c:2d:ae:08:e0:e6:f9:89:96:35:b8:06:bc: d3:71:a5:53:fd:03:a2:ca:ba:b8:5d:9f:d9:a0:48:c8:ff:e7: 38:8c:8f:87:f7:6f:a8:9b:d2:0c:bb:9d:06:22:f1:74:0b:f0: 32:1f:ed:bd:0d:33:95:cf:fb:cf:33:18:63:6e:0c:79:d7:06: 0c:56:71:82:aa:a7:5d:3a:22:0c:00:3b:e3:f4:94:2d:0a:d7: ac:45:a9:d3:d6:25:a4:5d:b0:7e:a0:fc:25:ec:7f:c7:84:f6: 4e:20:fb:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9PCDA7M3n0OYbHBcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4YTk3ZmEtZmI2ZS00NmQ0LTllOGUtZWZkZDQzNThh NzQwMB4XDTI2MDkyNzAxMDAxMloXDTI2MTIyNjAyMDAxMlowLzEtMCsGA1UEAxMk MzZjNjY2MGYtYmNiYi00N2NhLTg2OTItZThiMmZjODZlMTkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4l9MTfTvJDFGolxmIUgEO17Gab7D79YRUEKV 386zJsT6fxfYT9Z0SuAjet1r2HuSElbR+Lctb7yWnGzT/yi4QFt8vTnrvPBFGZuP s0K1lMeYX/vWKj0rWhBuwIoAHupQw/EBBmFN66XLhqonUKronsCprKcpYC/WtP7y 4RclHPcUUhBShzRyTP1xD7CMGLd9aeRPazFpB/TfYHm5uQBjPJL28zKzwzRU8XPi efIRzABzBu6iSodyh2YMV5kf/XTBPqJgsjIgfr4kQaw7S8jjA4WZiFXYKo7rSJ+z BG2bVb4FJWqfSsEiDkI/sCyAMDy9lzHqu5PqYdsf3o90zHp6ywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOeXix4O8V9HmlVFU1nHl6d2j8tkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8zZjhh OTdmYS1mYjZlLTQ2ZDQtOWU4ZS1lZmRkNDM1OGE3NDAvNGU3ZTQ5ZjctMzVkNC0z MDFiLThlZDgtNzI4MGRkYWI1NGUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvM2Y4YTk3ZmEtZmI2ZS00NmQ0LTll OGUtZWZkZDQzNThhNzQwLzNmOGE5N2ZhLWZiNmUtNDZkNC05ZThlLWVmZGQ0MzU4 YTc0MC5jcmwwHwYDVR0jBBgwFoAUYRaTXw4eJhCS+xK0VJWAkRb0sDgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8zZjhhOTdmYS1mYjZlLTQ2ZDQtOWU4ZS1lZmRk NDM1OGE3NDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6HIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEzGZQdX3j7CsXEyo1XILf4fwAe/a44Qx51Pf8Eentruh1GRlQKEhAEI GaAp97Y3wiXHVCvVunzTQofx//JYBKfvdO/nky1AW5Ywwr0Z9g1KYgIC6e9WujMB 09+8chD+BSG15USlArUK5XzaGrzjUqMzVl7NREolCfYkRKhJAerB9oju9cIrWvXe 29UVVgw2be6kB3HWDC2uCODm+YmWNbgGvNNxpVP9A6LKurhdn9mgSMj/5ziMj4f3 b6ib0gy7nQYi8XQL8DIf7b0NM5XP+88zGGNuDHnXBgxWcYKqp106IgwAO+P0lC0K 16xFqdPWJaRdsH6g/CXsf8eE9k4g+yQ= -----END CERTIFICATE-----Generated at Thu Oct 8 13:38:12 2026 by rpki-client