$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/6ea12d2f-76d5-4c22-b3d6-9959aaf96b0b/cc90d7a4-eea0-3feb-8b19-3ea171295154.roa File: cc90d7a4-eea0-3feb-8b19-3ea171295154.roa (raw, json) Hash identifier: ntclxnjanmcki5CvaI9XKi9cEfGSfeAS59ROHh1/YR4= Subject key identifier: 97:43:35:42:BB:4E:65:34:1B:75:DA:33:34:AB:41:14:8A:64:E0:F7 Certificate issuer: /CN=6ea12d2f-76d5-4c22-b3d6-9959aaf96b0b Certificate serial: 010D0C9F4328584F5B98039536095438EB548A60 Authority key identifier: F5:0F:40:97:B5:D9:DF:B9:5E:3B:DD:0F:20:81:E7:82:9E:87:63:30 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/6ea12d2f-76d5-4c22-b3d6-9959aaf96b0b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/6ea12d2f-76d5-4c22-b3d6-9959aaf96b0b/cc90d7a4-eea0-3feb-8b19-3ea171295154.roa Signing time: Thu 01 Oct 2026 13:00:12 +0000 ROA not before: Thu 01 Oct 2026 13:00:12 +0000 ROA not after: Wed 30 Dec 2026 14:00:12 +0000 asID: 401857 IP address blocks: 23.142.100.0/24 maxlen: 24 2602:f5c4::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/6ea12d2f-76d5-4c22-b3d6-9959aaf96b0b/6ea12d2f-76d5-4c22-b3d6-9959aaf96b0b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/6ea12d2f-76d5-4c22-b3d6-9959aaf96b0b/6ea12d2f-76d5-4c22-b3d6-9959aaf96b0b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/6ea12d2f-76d5-4c22-b3d6-9959aaf96b0b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Oct 2026 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5b:98:03:95:36:09:54:38:eb:54:8a:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ea12d2f-76d5-4c22-b3d6-9959aaf96b0b Validity Not Before: Oct 1 13:00:12 2026 GMT Not After : Dec 30 14:00:12 2026 GMT Subject: CN=16f454e5-bce7-48c8-8b79-3c9613a3b233 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:20:6b:dd:b6:cd:19:98:b7:0e:ea:22:b6:21: b4:13:7f:66:f2:cc:7b:c0:92:f8:c4:9e:e8:29:6f: 30:05:16:43:a4:99:45:8c:90:b2:d5:82:fe:9a:36: 31:b2:fb:01:13:bd:86:35:fb:6c:6d:18:20:86:e1: c4:7f:95:88:94:a7:9d:be:8d:f9:0b:a4:9c:0b:42: 20:6c:57:8c:80:3a:de:c1:7f:c9:b7:54:68:c1:19: 54:54:10:b9:7c:ea:ee:be:a1:14:52:c8:04:f9:b4: 29:8c:34:e7:df:2c:97:67:76:91:10:96:52:cd:da: 97:2b:28:3d:7d:b7:ef:9e:22:39:9b:7e:0d:be:e4: 18:19:79:e3:f1:5e:d6:79:7e:f2:a4:1a:fa:38:e7: a4:b1:fb:f9:27:b3:4b:91:7d:03:ea:64:a5:f7:10: 06:61:19:54:f4:10:bd:87:60:05:56:d4:8b:8d:02: c7:a1:05:63:54:e2:42:6e:fa:28:6a:e1:26:bc:e3: ca:7c:03:52:ca:89:fb:6f:8c:47:4d:4e:b8:2f:7a: f2:97:c5:d7:76:48:39:94:36:f0:1b:f3:6b:e5:b9: 69:5f:48:2a:5c:e4:94:f0:e2:58:18:79:49:0d:5a: d9:76:95:f6:e7:e0:60:25:72:a4:59:2b:63:92:af: 25:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:43:35:42:BB:4E:65:34:1B:75:DA:33:34:AB:41:14:8A:64:E0:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/6ea12d2f-76d5-4c22-b3d6-9959aaf96b0b/cc90d7a4-eea0-3feb-8b19-3ea171295154.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/6ea12d2f-76d5-4c22-b3d6-9959aaf96b0b/6ea12d2f-76d5-4c22-b3d6-9959aaf96b0b.crl X509v3 Authority Key Identifier: keyid:F5:0F:40:97:B5:D9:DF:B9:5E:3B:DD:0F:20:81:E7:82:9E:87:63:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/6ea12d2f-76d5-4c22-b3d6-9959aaf96b0b.cer sbgp-ipAddrBlock: critical IPv4: 23.142.100.0/24 IPv6: 2602:f5c4::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:61:ff:8f:06:7c:f3:c3:b0:e1:c8:1b:02:40:82:11:cd:a7: 88:0a:a6:16:09:8c:b5:cc:b7:f9:90:65:cc:f8:da:a4:53:60: e6:ef:86:de:e2:c7:1d:cd:2b:4b:c0:13:09:a5:bc:ce:09:5d: 15:e2:6d:5a:18:ea:1c:79:0a:91:7c:7b:17:3e:3e:3b:ae:cd: 09:e5:80:21:f2:5d:10:d4:c1:51:f9:63:6d:ea:60:da:a4:d1: 7f:90:8f:af:91:c4:ba:94:0c:3c:97:6f:04:49:d1:b3:80:a4: be:70:24:dd:a2:d2:0c:02:09:66:67:9b:ce:a9:04:e0:e4:ca: 43:a6:44:b7:61:a1:cf:2e:b5:ef:d2:2c:e8:7c:be:52:41:e0: f8:d4:7a:a3:64:ed:06:a5:2e:86:d7:4f:1e:c0:91:17:ed:21: 5c:40:05:4a:63:b1:f5:29:47:a6:96:db:1c:22:07:fd:7d:d5: c9:5b:3c:eb:fa:cb:8e:1b:50:29:75:59:e0:4e:6c:55:52:7e: 7b:26:13:19:03:d9:57:c9:8f:d9:21:fc:d2:93:73:1b:f5:a5: 1b:6d:16:0f:25:ff:a0:56:8c:1d:c2:f1:0f:3a:93:07:24:4a: 51:c2:f8:09:82:6d:67:66:4f:db:39:f4:78:15:9e:51:85:b6: 7b:4f:b7:37 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE9bmAOVNglUOOtUimAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmVhMTJkMmYtNzZkNS00YzIyLWIzZDYtOTk1OWFhZjk2 YjBiMB4XDTI2MTAwMTEzMDAxMloXDTI2MTIzMDE0MDAxMlowLzEtMCsGA1UEAxMk MTZmNDU0ZTUtYmNlNy00OGM4LThiNzktM2M5NjEzYTNiMjMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiSBr3bbNGZi3DuoitiG0E39m8sx7wJL4xJ7o KW8wBRZDpJlFjJCy1YL+mjYxsvsBE72GNftsbRgghuHEf5WIlKedvo35C6ScC0Ig bFeMgDrewX/Jt1RowRlUVBC5fOruvqEUUsgE+bQpjDTn3yyXZ3aREJZSzdqXKyg9 fbfvniI5m34NvuQYGXnj8V7WeX7ypBr6OOeksfv5J7NLkX0D6mSl9xAGYRlU9BC9 h2AFVtSLjQLHoQVjVOJCbvooauEmvOPKfANSyon7b4xHTU64L3ryl8XXdkg5lDbw G/Nr5blpX0gqXOSU8OJYGHlJDVrZdpX25+BgJXKkWStjkq8lgQIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFJdDNUK7TmU0G3XaMzSrQRSKZOD3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC82ZWEx MmQyZi03NmQ1LTRjMjItYjNkNi05OTU5YWFmOTZiMGIvY2M5MGQ3YTQtZWVhMC0z ZmViLThiMTktM2VhMTcxMjk1MTU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNmVhMTJkMmYtNzZkNS00YzIyLWIz ZDYtOTk1OWFhZjk2YjBiLzZlYTEyZDJmLTc2ZDUtNGMyMi1iM2Q2LTk5NTlhYWY5 NmIwYi5jcmwwHwYDVR0jBBgwFoAU9Q9Al7XZ37leO90PIIHngp6HYzAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC82ZWExMmQyZi03NmQ1LTRjMjItYjNkNi05OTU5 YWFmOTZiMGIuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF45kMA4E AgACMAgDBgAmAvXEADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBWYf+PBnzzw7DhyBsCQIIRzaeICqYWCYy1 zLf5kGXM+NqkU2Dm74be4scdzStLwBMJpbzOCV0V4m1aGOoceQqRfHsXPj47rs0J 5YAh8l0Q1MFR+WNt6mDapNF/kI+vkcS6lAw8l28ESdGzgKS+cCTdotIMAglmZ5vO qQTg5MpDpkS3YaHPLrXv0izofL5SQeD41HqjZO0GpS6G108ewJEX7SFcQAVKY7H1 KUemltscIgf9fdXJWzzr+suOG1ApdVngTmxVUn57JhMZA9lXyY/ZIfzSk3Mb9aUb bRYPJf+gVowdwvEPOpMHJEpRwvgJgm1nZk/bOfR4FZ5RhbZ7T7c3 -----END CERTIFICATE-----Generated at Sat Oct 10 10:15:13 2026 by rpki-client