$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/68e8d38b-0b87-495a-96cc-346ddf0d5802/dfdbfc18-aa98-3225-abfe-7e62127b7000.roa File: dfdbfc18-aa98-3225-abfe-7e62127b7000.roa (raw, json) Hash identifier: Y8puqpfsSrzPUyQuLpiQRqRqMsche6uW8TLqGauTN8w= Subject key identifier: 19:A6:6E:30:1F:F5:E6:23:03:28:84:FC:70:2D:CA:8C:C5:1A:5B:B6 Certificate issuer: /CN=68e8d38b-0b87-495a-96cc-346ddf0d5802 Certificate serial: 010D0C9F4328584F49731AB966022D7B6BB597DA Authority key identifier: BD:81:2C:A3:4E:92:55:96:CD:13:B5:D9:5C:AE:92:E0:4D:19:67:04 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/68e8d38b-0b87-495a-96cc-346ddf0d5802.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/68e8d38b-0b87-495a-96cc-346ddf0d5802/dfdbfc18-aa98-3225-abfe-7e62127b7000.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 401990 IP address blocks: 23.145.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/68e8d38b-0b87-495a-96cc-346ddf0d5802/68e8d38b-0b87-495a-96cc-346ddf0d5802.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/68e8d38b-0b87-495a-96cc-346ddf0d5802/68e8d38b-0b87-495a-96cc-346ddf0d5802.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/68e8d38b-0b87-495a-96cc-346ddf0d5802.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 16 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:1a:b9:66:02:2d:7b:6b:b5:97:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68e8d38b-0b87-495a-96cc-346ddf0d5802 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=83bec81b-12a5-46ca-8a6c-39dbcacd808b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:64:42:25:b5:9e:8b:b7:c8:8f:d8:5f:53:b1: 0f:14:94:90:97:b3:97:3f:1d:6d:f8:14:3d:d8:e2: 71:f1:b2:87:d3:7b:ae:84:67:4e:81:6b:46:33:17: 5b:50:ac:2b:58:dc:68:44:13:b3:32:c7:15:61:50: 31:09:fd:09:bc:4c:ae:5e:a6:c3:40:fe:2d:bb:00: 5d:35:28:07:fc:65:57:78:4b:01:3a:2d:71:9b:f4: 8c:5a:0a:ee:76:3a:cb:51:52:d8:44:78:d1:44:e8: 60:75:ec:d5:ae:47:d9:4c:e7:73:21:ee:ab:d6:dc: 12:7b:2b:ed:f9:ac:85:b0:80:54:98:f8:59:53:f4: 1f:2f:b5:05:a2:e9:c4:50:dc:4d:da:da:51:42:ca: 0f:f6:28:e3:28:0e:6a:e7:ab:c3:61:56:1f:dc:17: 85:81:10:d8:4c:d4:e5:59:8e:01:f5:7f:74:14:b9: d8:42:fe:15:1c:79:78:7d:41:ae:b9:d9:29:2b:7f: dd:9f:9c:27:6d:af:a1:fb:0f:df:5c:b5:d8:ea:86: 22:ce:30:bb:fa:cc:6c:13:17:7f:d2:a3:dd:a1:09: d6:e2:52:86:ee:86:6a:10:6e:ce:fe:a2:09:e6:70: 8d:c3:c5:59:87:f4:ee:87:9b:7a:b0:ff:f1:96:24: 11:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:A6:6E:30:1F:F5:E6:23:03:28:84:FC:70:2D:CA:8C:C5:1A:5B:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/68e8d38b-0b87-495a-96cc-346ddf0d5802/dfdbfc18-aa98-3225-abfe-7e62127b7000.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/68e8d38b-0b87-495a-96cc-346ddf0d5802/68e8d38b-0b87-495a-96cc-346ddf0d5802.crl X509v3 Authority Key Identifier: keyid:BD:81:2C:A3:4E:92:55:96:CD:13:B5:D9:5C:AE:92:E0:4D:19:67:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/68e8d38b-0b87-495a-96cc-346ddf0d5802.cer sbgp-ipAddrBlock: critical IPv4: 23.145.196.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:6a:cb:91:83:f5:7e:1b:2d:03:b7:ac:50:85:02:d0:c3:51: 23:85:05:1f:66:45:32:2e:41:ba:c1:f8:e5:c5:8d:a5:99:02: 79:54:6b:53:2b:8b:72:8b:db:d6:48:9a:13:a6:ee:9f:aa:cf: 2a:cf:8c:e6:26:fd:64:9b:46:75:29:fb:d2:94:dc:84:04:13: cf:1e:ac:ac:6c:4d:c5:90:b5:65:27:51:9e:eb:f8:17:2a:99: cb:df:5a:1c:ac:31:31:e0:b2:fc:c2:d9:84:88:72:12:38:a0: 0e:65:56:b8:70:68:de:28:3e:d5:b7:2a:f8:38:f0:b6:3a:66: 90:03:ef:e7:0d:d6:6d:7e:b3:03:7a:9b:dd:3c:54:78:70:bd: 2a:1e:8c:57:80:95:ac:f7:1f:55:d9:ed:d2:49:33:4f:4b:c0: 65:2f:ce:55:d2:1c:7f:bd:c4:23:f7:6b:1c:bb:6d:a3:72:20: 46:58:20:4d:e1:47:d5:ad:94:6d:f7:6b:df:9d:df:25:1c:b9: 63:fa:c0:fd:52:68:09:83:c5:84:e4:9e:b2:a8:19:05:63:76: 24:e7:a7:a7:47:ed:9d:2c:41:13:74:b6:c2:22:a1:c7:5d:ca: 1b:ef:2b:2f:88:b7:47:80:f3:85:c5:e8:39:aa:10:ed:09:54: 21:29:1d:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jcxq5ZgIte2u1l9owDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhlOGQzOGItMGI4Ny00OTVhLTk2Y2MtMzQ2ZGRmMGQ1 ODAyMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ODNiZWM4MWItMTJhNS00NmNhLThhNmMtMzlkYmNhY2Q4MDhiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoWRCJbWei7fIj9hfU7EPFJSQl7OXPx1t+BQ9 2OJx8bKH03uuhGdOgWtGMxdbUKwrWNxoRBOzMscVYVAxCf0JvEyuXqbDQP4tuwBd NSgH/GVXeEsBOi1xm/SMWgrudjrLUVLYRHjRROhgdezVrkfZTOdzIe6r1twSeyvt +ayFsIBUmPhZU/QfL7UFounEUNxN2tpRQsoP9ijjKA5q56vDYVYf3BeFgRDYTNTl WY4B9X90FLnYQv4VHHl4fUGuudkpK3/dn5wnba+h+w/fXLXY6oYizjC7+sxsExd/ 0qPdoQnW4lKG7oZqEG7O/qIJ5nCNw8VZh/Tuh5t6sP/xliQRWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBmmbjAf9eYjAyiE/HAtyozFGlu2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC82OGU4 ZDM4Yi0wYjg3LTQ5NWEtOTZjYy0zNDZkZGYwZDU4MDIvZGZkYmZjMTgtYWE5OC0z MjI1LWFiZmUtN2U2MjEyN2I3MDAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNjhlOGQzOGItMGI4Ny00OTVhLTk2 Y2MtMzQ2ZGRmMGQ1ODAyLzY4ZThkMzhiLTBiODctNDk1YS05NmNjLTM0NmRkZjBk NTgwMi5jcmwwHwYDVR0jBBgwFoAUvYEso06SVZbNE7XZXK6S4E0ZZwQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC82OGU4ZDM4Yi0wYjg3LTQ5NWEtOTZjYy0zNDZk ZGYwZDU4MDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5HEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADZqy5GD9X4bLQO3rFCFAtDDUSOFBR9mRTIuQbrB+OXFjaWZAnlUa1Mr i3KL29ZImhOm7p+qzyrPjOYm/WSbRnUp+9KU3IQEE88erKxsTcWQtWUnUZ7r+Bcq mcvfWhysMTHgsvzC2YSIchI4oA5lVrhwaN4oPtW3Kvg48LY6ZpAD7+cN1m1+swN6 m908VHhwvSoejFeAlaz3H1XZ7dJJM09LwGUvzlXSHH+9xCP3axy7baNyIEZYIE3h R9WtlG33a9+d3yUcuWP6wP1SaAmDxYTknrKoGQVjdiTnp6dH7Z0sQRN0tsIiocdd yhvvKy+It0eA84XF6DmqEO0JVCEpHQE= -----END CERTIFICATE-----Generated at Thu Oct 15 02:21:58 2026 by rpki-client