$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7a81e391-2f9f-43ac-a73e-e018e279c2d4/401985a3-82fb-38a4-a3a9-2b894ca2670e.roa File: 401985a3-82fb-38a4-a3a9-2b894ca2670e.roa (raw, json) Hash identifier: M1jJrsb7MdWs/iPL7lISl4mwTay7dYoEW6UqfEYOxzk= Subject key identifier: 77:20:BB:5A:0C:C9:09:A4:08:C0:9C:34:AD:30:F6:30:DE:39:EE:94 Certificate issuer: /CN=7a81e391-2f9f-43ac-a73e-e018e279c2d4 Certificate serial: 010D0C9F4328584F77835E21DDDA48D68F1C22C0 Authority key identifier: B3:B4:1C:AF:03:8E:97:E9:4E:5B:2F:D5:D1:EF:58:9C:29:ED:0F:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7a81e391-2f9f-43ac-a73e-e018e279c2d4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7a81e391-2f9f-43ac-a73e-e018e279c2d4/401985a3-82fb-38a4-a3a9-2b894ca2670e.roa Signing time: Sun 11 Oct 2026 13:00:12 +0000 ROA not before: Sun 11 Oct 2026 13:00:12 +0000 ROA not after: Sat 09 Jan 2027 14:00:12 +0000 asID: 401833 IP address blocks: 23.141.188.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7a81e391-2f9f-43ac-a73e-e018e279c2d4/7a81e391-2f9f-43ac-a73e-e018e279c2d4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7a81e391-2f9f-43ac-a73e-e018e279c2d4/7a81e391-2f9f-43ac-a73e-e018e279c2d4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7a81e391-2f9f-43ac-a73e-e018e279c2d4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Oct 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:77:83:5e:21:dd:da:48:d6:8f:1c:22:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7a81e391-2f9f-43ac-a73e-e018e279c2d4 Validity Not Before: Oct 11 13:00:12 2026 GMT Not After : Jan 9 14:00:12 2027 GMT Subject: CN=3ef4d2e8-5aa9-4fc8-9e4a-6b4f6383751a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:b9:72:d5:25:ad:f4:e5:94:d4:bc:80:02:d9: d7:eb:28:fb:7a:13:f6:ae:eb:4f:fa:75:82:fb:80: 41:b1:f0:15:40:45:52:ca:37:47:52:e5:41:95:fc: 3c:b1:6d:76:3a:46:0f:e6:76:e7:de:80:b6:f7:e6: 3f:84:f6:e7:08:44:60:3d:d8:ca:ba:aa:90:0d:9b: b3:25:b0:2e:f7:99:e1:f2:02:8e:e7:e4:6a:39:e1: 6b:45:a1:aa:89:f8:e9:7b:29:df:0f:88:7a:a3:b2: 88:83:4f:0b:c5:f8:bc:70:a2:42:f3:e4:7a:3c:15: e0:f6:41:3a:1d:d2:a6:1b:b6:6b:ef:49:a3:77:63: cb:0e:f6:2f:94:4a:2d:ef:f2:ae:bd:2b:c8:8d:cb: 28:d0:a3:e0:b6:f9:fb:d9:87:c1:95:af:34:8d:b5: 38:92:a6:81:ff:ea:e2:5b:86:52:49:b7:4b:51:3b: 17:96:19:c8:25:a1:8d:24:85:92:1d:ff:21:1e:1e: a7:69:81:6d:41:9d:f8:fd:38:4e:b4:ab:f1:f1:96: 16:a8:40:3f:5e:51:8d:b9:77:f9:8b:49:47:8a:df: ec:fd:8e:34:c8:c7:cd:47:83:be:f5:df:5d:1a:e5: fa:d0:f2:b8:80:ec:7a:46:1a:d4:e6:24:83:5d:57: e9:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:20:BB:5A:0C:C9:09:A4:08:C0:9C:34:AD:30:F6:30:DE:39:EE:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7a81e391-2f9f-43ac-a73e-e018e279c2d4/401985a3-82fb-38a4-a3a9-2b894ca2670e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7a81e391-2f9f-43ac-a73e-e018e279c2d4/7a81e391-2f9f-43ac-a73e-e018e279c2d4.crl X509v3 Authority Key Identifier: keyid:B3:B4:1C:AF:03:8E:97:E9:4E:5B:2F:D5:D1:EF:58:9C:29:ED:0F:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7a81e391-2f9f-43ac-a73e-e018e279c2d4.cer sbgp-ipAddrBlock: critical IPv4: 23.141.188.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:23:28:c7:28:f1:19:c3:dd:5d:21:1e:fe:f3:26:b3:02:a6: 0f:dc:61:53:82:44:89:96:ff:44:da:29:1a:35:2e:21:e5:80: db:bc:17:05:94:dc:8d:f2:dc:91:a0:46:09:af:29:41:1d:63: 83:c2:e9:d4:59:50:93:f6:31:eb:98:10:8b:4d:2f:08:f2:fc: 50:da:38:68:9d:af:e6:e2:fd:ab:d1:36:e7:08:98:cc:dc:d1: 6e:0a:22:3b:4a:93:28:2b:e0:78:79:cc:da:3f:b5:63:a8:c4: 41:87:8f:69:be:94:f9:b7:80:67:d9:2d:6c:32:42:55:af:90: 08:00:86:f1:ea:68:f1:84:1e:74:26:a4:1a:43:1a:90:60:72: 5c:2b:61:ef:36:23:91:e3:3b:30:42:60:c0:4e:c8:10:71:cd: 79:3d:c4:58:7e:88:59:f6:cc:d0:04:43:e9:b1:67:65:45:d1: 31:3a:b2:a5:58:c4:9e:64:1a:84:dd:b9:71:fd:9a:1e:44:0a: 8c:91:9b:c1:04:76:7e:b7:2e:4d:26:b0:36:61:a7:8d:83:e6: 1f:34:f1:f8:52:5d:a8:70:4f:bd:72:e5:c8:73:a2:8e:88:ba: 33:99:ad:f7:b1:74:d2:a8:16:cb:64:90:06:41:8f:a2:84:88: 50:5d:7b:55 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE93g14h3dpI1o8cIsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2E4MWUzOTEtMmY5Zi00M2FjLWE3M2UtZTAxOGUyNzlj MmQ0MB4XDTI2MTAxMTEzMDAxMloXDTI3MDEwOTE0MDAxMlowLzEtMCsGA1UEAxMk M2VmNGQyZTgtNWFhOS00ZmM4LTllNGEtNmI0ZjYzODM3NTFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzrly1SWt9OWU1LyAAtnX6yj7ehP2rutP+nWC +4BBsfAVQEVSyjdHUuVBlfw8sW12OkYP5nbn3oC29+Y/hPbnCERgPdjKuqqQDZuz JbAu95nh8gKO5+RqOeFrRaGqifjpeynfD4h6o7KIg08Lxfi8cKJC8+R6PBXg9kE6 HdKmG7Zr70mjd2PLDvYvlEot7/KuvSvIjcso0KPgtvn72YfBla80jbU4kqaB/+ri W4ZSSbdLUTsXlhnIJaGNJIWSHf8hHh6naYFtQZ34/ThOtKvx8ZYWqEA/XlGNuXf5 i0lHit/s/Y40yMfNR4O+9d9dGuX60PK4gOx6RhrU5iSDXVfp9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHcgu1oMyQmkCMCcNK0w9jDeOe6UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC83YTgx ZTM5MS0yZjlmLTQzYWMtYTczZS1lMDE4ZTI3OWMyZDQvNDAxOTg1YTMtODJmYi0z OGE0LWEzYTktMmI4OTRjYTI2NzBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvN2E4MWUzOTEtMmY5Zi00M2FjLWE3 M2UtZTAxOGUyNzljMmQ0LzdhODFlMzkxLTJmOWYtNDNhYy1hNzNlLWUwMThlMjc5 YzJkNC5jcmwwHwYDVR0jBBgwFoAUs7QcrwOOl+lOWy/V0e9YnCntD0wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC83YTgxZTM5MS0yZjlmLTQzYWMtYTczZS1lMDE4 ZTI3OWMyZDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF428MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD4jKMco8RnD3V0hHv7zJrMCpg/cYVOCRImW/0TaKRo1LiHlgNu8FwWU 3I3y3JGgRgmvKUEdY4PC6dRZUJP2MeuYEItNLwjy/FDaOGidr+bi/avRNucImMzc 0W4KIjtKkygr4Hh5zNo/tWOoxEGHj2m+lPm3gGfZLWwyQlWvkAgAhvHqaPGEHnQm pBpDGpBgclwrYe82I5HjOzBCYMBOyBBxzXk9xFh+iFn2zNAEQ+mxZ2VF0TE6sqVY xJ5kGoTduXH9mh5ECoyRm8EEdn63Lk0msDZhp42D5h808fhSXahwT71y5chzoo6I ujOZrfexdNKoFstkkAZBj6KEiFBde1U= -----END CERTIFICATE-----Generated at Mon Oct 26 10:57:46 2026 by rpki-client