$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a11e93e6-ff05-4cb5-ad52-34caa087b7b3/86edd263-fed6-3415-a24f-5e67b707402e.roa File: 86edd263-fed6-3415-a24f-5e67b707402e.roa (raw, json) Hash identifier: 0qMUtNm9W8My+gOvjzP+ZTej/u+DPLMgTr2yfMb1Yzk= Subject key identifier: A8:EB:A1:DB:62:43:7C:76:FD:76:EB:0F:35:A7:7E:DF:06:3E:B8:88 Certificate issuer: /CN=a11e93e6-ff05-4cb5-ad52-34caa087b7b3 Certificate serial: 010D0C9F4328584F549DAE7588F06783C1DC9300 Authority key identifier: 08:09:C9:3C:04:70:4F:15:96:45:EE:2F:5D:45:5B:62:14:2C:15:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a11e93e6-ff05-4cb5-ad52-34caa087b7b3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a11e93e6-ff05-4cb5-ad52-34caa087b7b3/86edd263-fed6-3415-a24f-5e67b707402e.roa Signing time: Tue 29 Sep 2026 01:00:12 +0000 ROA not before: Tue 29 Sep 2026 01:00:12 +0000 ROA not after: Mon 28 Dec 2026 02:00:12 +0000 asID: 979 IP address blocks: 23.142.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a11e93e6-ff05-4cb5-ad52-34caa087b7b3/a11e93e6-ff05-4cb5-ad52-34caa087b7b3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a11e93e6-ff05-4cb5-ad52-34caa087b7b3/a11e93e6-ff05-4cb5-ad52-34caa087b7b3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a11e93e6-ff05-4cb5-ad52-34caa087b7b3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Nov 2026 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:54:9d:ae:75:88:f0:67:83:c1:dc:93:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a11e93e6-ff05-4cb5-ad52-34caa087b7b3 Validity Not Before: Sep 29 01:00:12 2026 GMT Not After : Dec 28 02:00:12 2026 GMT Subject: CN=75187f5a-1bd9-4264-ad82-276b4cf4f09e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:85:26:f8:43:a0:ae:dd:31:96:0c:ec:0d:f4: 5a:58:d0:74:8c:88:c7:b3:ce:6b:19:23:aa:b4:76: e5:cd:b9:84:f5:d3:e5:0d:a3:e1:79:d0:09:54:55: 30:a6:ae:f0:c3:c0:80:ba:ff:a2:56:50:e0:6d:05: 3a:e2:f3:3e:69:70:36:cc:9e:98:1d:6f:e7:66:40: b4:b7:83:48:cf:1a:c9:fb:8a:e4:47:64:04:3a:96: 0b:9f:51:56:26:12:dc:e8:ca:e8:a3:81:29:49:58: 01:50:cb:d3:44:16:88:df:33:96:aa:4d:9f:84:ef: 69:50:bb:d1:1e:34:12:0a:a0:3e:25:b3:a0:13:fc: cd:68:27:99:6a:0f:e0:0e:b2:d6:c6:67:89:f7:e4: f9:1f:70:6a:03:85:77:2c:66:4c:e1:62:da:0a:d2: 50:c7:9b:f2:64:30:11:3e:c3:ab:e2:10:ba:28:2b: 3a:d9:60:14:7f:0c:15:68:35:9f:77:8e:c4:eb:9e: 3b:cc:f3:ca:06:60:de:53:a2:34:68:0a:4b:05:1d: db:13:70:80:5e:75:60:48:1a:16:f0:df:60:e0:c6: 6a:38:9e:13:72:c1:0b:31:23:f9:b7:e3:d6:ab:7e: e2:51:a9:cd:f0:39:04:b2:f9:25:31:84:bf:39:55: 0b:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:EB:A1:DB:62:43:7C:76:FD:76:EB:0F:35:A7:7E:DF:06:3E:B8:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a11e93e6-ff05-4cb5-ad52-34caa087b7b3/86edd263-fed6-3415-a24f-5e67b707402e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a11e93e6-ff05-4cb5-ad52-34caa087b7b3/a11e93e6-ff05-4cb5-ad52-34caa087b7b3.crl X509v3 Authority Key Identifier: keyid:08:09:C9:3C:04:70:4F:15:96:45:EE:2F:5D:45:5B:62:14:2C:15:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/a11e93e6-ff05-4cb5-ad52-34caa087b7b3.cer sbgp-ipAddrBlock: critical IPv4: 23.142.4.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:33:e3:b1:8e:db:c4:05:88:93:ba:5c:4a:a3:c3:9c:48:c4: 1d:10:ed:55:8b:91:44:a9:91:f9:16:c6:6a:1c:db:9b:24:e5: ca:c8:8c:34:ac:a9:8c:56:45:ee:c2:a2:88:2d:06:03:d6:ac: 4a:ef:9f:66:fc:a4:17:66:9a:19:7a:1f:33:f2:d0:48:35:2f: 73:77:1c:85:69:87:09:3b:9a:c1:e8:93:d0:84:9a:b4:b4:5b: a3:35:df:f3:ee:93:58:c0:39:f6:e7:de:1e:ac:9f:a0:0a:49: 25:0c:af:da:37:d8:ab:1d:a0:cf:df:c8:d8:ae:2f:4c:76:49: 47:26:e2:95:39:65:2e:88:13:d6:ae:29:3f:66:45:e7:f8:0d: 4d:0f:85:07:ae:34:98:74:4b:7c:f7:d8:0e:dc:0f:de:b9:d3: 96:15:12:20:a7:21:35:20:06:4b:17:dd:24:aa:df:a2:83:55: 5f:b3:63:22:68:07:c7:56:d9:c7:db:34:04:1b:36:46:cc:e7: 41:e1:2b:bd:7a:83:b0:b0:e9:c8:9b:ab:e6:d9:ee:fd:54:aa: a9:0f:48:fb:b1:92:fe:f2:fe:a4:ff:9b:72:39:29:bd:ef:f9: 0f:c8:45:1f:12:ab:a1:fd:9b:dd:5a:76:70:2b:55:90:4e:b9: 73:56:11:4c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Una51iPBng8HckwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTExZTkzZTYtZmYwNS00Y2I1LWFkNTItMzRjYWEwODdi N2IzMB4XDTI2MDkyOTAxMDAxMloXDTI2MTIyODAyMDAxMlowLzEtMCsGA1UEAxMk NzUxODdmNWEtMWJkOS00MjY0LWFkODItMjc2YjRjZjRmMDllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl4Um+EOgrt0xlgzsDfRaWNB0jIjHs85rGSOq tHblzbmE9dPlDaPhedAJVFUwpq7ww8CAuv+iVlDgbQU64vM+aXA2zJ6YHW/nZkC0 t4NIzxrJ+4rkR2QEOpYLn1FWJhLc6Mroo4EpSVgBUMvTRBaI3zOWqk2fhO9pULvR HjQSCqA+JbOgE/zNaCeZag/gDrLWxmeJ9+T5H3BqA4V3LGZM4WLaCtJQx5vyZDAR PsOr4hC6KCs62WAUfwwVaDWfd47E6547zPPKBmDeU6I0aApLBR3bE3CAXnVgSBoW 8N9g4MZqOJ4TcsELMSP5t+PWq37iUanN8DkEsvklMYS/OVULwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKjrodtiQ3x2/XbrDzWnft8GPriIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9hMTFl OTNlNi1mZjA1LTRjYjUtYWQ1Mi0zNGNhYTA4N2I3YjMvODZlZGQyNjMtZmVkNi0z NDE1LWEyNGYtNWU2N2I3MDc0MDJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYTExZTkzZTYtZmYwNS00Y2I1LWFk NTItMzRjYWEwODdiN2IzL2ExMWU5M2U2LWZmMDUtNGNiNS1hZDUyLTM0Y2FhMDg3 YjdiMy5jcmwwHwYDVR0jBBgwFoAUCAnJPARwTxWWRe4vXUVbYhQsFY0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9hMTFlOTNlNi1mZjA1LTRjYjUtYWQ1Mi0zNGNh YTA4N2I3YjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF44EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGUz47GO28QFiJO6XEqjw5xIxB0Q7VWLkUSpkfkWxmoc25sk5crIjDSs qYxWRe7CoogtBgPWrErvn2b8pBdmmhl6HzPy0Eg1L3N3HIVphwk7msHok9CEmrS0 W6M13/Puk1jAOfbn3h6sn6AKSSUMr9o32KsdoM/fyNiuL0x2SUcm4pU5ZS6IE9au KT9mRef4DU0PhQeuNJh0S3z32A7cD96505YVEiCnITUgBksX3SSq36KDVV+zYyJo B8dW2cfbNAQbNkbM50HhK716g7Cw6cibq+bZ7v1UqqkPSPuxkv7y/qT/m3I5Kb3v +Q/IRR8Sq6H9m91adnArVZBOuXNWEUw= -----END CERTIFICATE-----Generated at Thu Nov 5 04:54:22 2026 by rpki-client