$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/affa716b-9631-4506-aee5-dc69f79f9fca/8d313b49-992b-30bb-94f7-a6d8d635fc8b.roa File: 8d313b49-992b-30bb-94f7-a6d8d635fc8b.roa (raw, json) Hash identifier: zlq7k2/P45deRt+MZdOaVJCvWtWaaMT1kqet/4kpg/Q= Subject key identifier: DF:40:D0:FA:B3:03:D5:1F:66:47:ED:4A:0D:66:78:C1:CD:17:AF:DA Certificate issuer: /CN=affa716b-9631-4506-aee5-dc69f79f9fca Certificate serial: 010D0C9F4328584F549D4E015D53FDFF28D6F480 Authority key identifier: 29:19:82:08:B8:76:5D:5B:AE:B9:2E:10:DA:8C:CB:F2:93:7F:A2:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/affa716b-9631-4506-aee5-dc69f79f9fca.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/affa716b-9631-4506-aee5-dc69f79f9fca/8d313b49-992b-30bb-94f7-a6d8d635fc8b.roa Signing time: Tue 29 Sep 2026 01:00:12 +0000 ROA not before: Tue 29 Sep 2026 01:00:12 +0000 ROA not after: Mon 28 Dec 2026 02:00:12 +0000 asID: 174 IP address blocks: 23.141.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/affa716b-9631-4506-aee5-dc69f79f9fca/affa716b-9631-4506-aee5-dc69f79f9fca.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/affa716b-9631-4506-aee5-dc69f79f9fca/affa716b-9631-4506-aee5-dc69f79f9fca.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/affa716b-9631-4506-aee5-dc69f79f9fca.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Nov 2026 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:54:9d:4e:01:5d:53:fd:ff:28:d6:f4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=affa716b-9631-4506-aee5-dc69f79f9fca Validity Not Before: Sep 29 01:00:12 2026 GMT Not After : Dec 28 02:00:12 2026 GMT Subject: CN=521fd692-8b96-42c5-9b64-99a9094da40e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:64:5f:6d:d5:aa:66:21:24:b9:92:10:c2:31: 94:05:17:57:09:44:80:9d:32:59:1d:4c:68:78:54: fa:8a:9f:57:44:2e:15:7d:0b:c3:55:f9:1c:9f:a0: 49:ca:e3:46:77:ea:fe:74:23:bd:47:02:59:44:13: e3:e5:a7:e7:52:b4:31:ee:2a:65:17:85:2b:cc:09: 04:cd:df:23:50:b3:52:e9:c8:92:5c:92:a4:64:89: d0:15:84:18:1f:6d:d2:a3:f1:3d:04:1a:7b:97:d1: 19:a8:1d:6e:c0:1b:61:dd:86:9e:a7:d7:dd:d2:80: 00:3c:31:ca:5b:06:79:ac:d9:24:9d:e7:37:64:70: 69:45:3c:bf:39:e3:5d:ec:a4:03:2d:b0:26:67:e5: 6f:82:93:dd:be:52:83:2a:43:4d:cd:42:3b:67:2b: 5c:82:ee:39:82:5e:50:9f:e9:08:d3:91:df:36:12: 01:18:d9:9a:ce:ae:c8:3c:53:cc:d2:32:4f:c6:04: d1:7b:21:e4:d8:e8:54:f1:8a:77:da:ab:5a:cf:fb: 5d:6e:93:af:01:c4:ac:14:20:b9:f3:7a:bc:5b:12: 74:c7:27:50:5c:d9:b5:23:34:5b:38:5f:4c:db:4d: 28:d9:ae:45:3b:37:d5:f9:f2:5a:37:6b:3c:5f:7f: 09:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:40:D0:FA:B3:03:D5:1F:66:47:ED:4A:0D:66:78:C1:CD:17:AF:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/affa716b-9631-4506-aee5-dc69f79f9fca/8d313b49-992b-30bb-94f7-a6d8d635fc8b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/affa716b-9631-4506-aee5-dc69f79f9fca/affa716b-9631-4506-aee5-dc69f79f9fca.crl X509v3 Authority Key Identifier: keyid:29:19:82:08:B8:76:5D:5B:AE:B9:2E:10:DA:8C:CB:F2:93:7F:A2:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/affa716b-9631-4506-aee5-dc69f79f9fca.cer sbgp-ipAddrBlock: critical IPv4: 23.141.212.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:38:26:45:4b:e3:98:43:e6:ef:b2:b5:54:c7:3f:7f:aa:16: 56:63:f6:dd:6b:31:c8:e6:58:e7:f5:b9:4f:90:cf:a8:1b:66: ea:0d:f0:88:4e:03:59:6f:38:6c:07:45:87:c9:7c:90:64:c6: 38:dd:e7:8f:6c:53:39:b3:99:3f:66:96:b0:8a:b8:b1:ee:81: 4e:7a:44:a3:7c:d1:ab:cf:56:d9:06:5c:9e:92:03:b5:33:84: ec:73:a2:9d:c3:bb:e3:6e:36:42:5c:4f:37:34:34:1e:76:a4: dd:c9:7a:5f:53:8a:3e:f9:b4:37:25:46:fb:5f:56:34:20:69: a1:44:72:64:dc:a4:02:60:e5:85:4e:a6:82:10:46:27:35:c9: 8c:83:18:7c:9a:b4:c8:12:07:e1:c7:bc:b1:80:83:6b:99:14: 4b:50:33:a7:a6:7a:48:b9:8f:69:ea:a1:89:fe:e9:44:11:3c: 9a:c6:68:ea:02:c7:ed:d8:8a:e4:5c:38:ac:c3:c9:ca:20:a3: 30:ae:64:9c:f4:cc:1e:4d:4f:2a:a7:e0:97:20:81:69:1e:99: 9a:ba:da:28:8b:08:8a:1f:d1:f8:13:bf:fa:3a:52:aa:f9:bf: 9e:b4:39:04:89:48:11:88:f1:01:8b:0b:b7:24:69:dc:0b:d8: 4d:dd:02:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9UnU4BXVP9/yjW9IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWZmYTcxNmItOTYzMS00NTA2LWFlZTUtZGM2OWY3OWY5 ZmNhMB4XDTI2MDkyOTAxMDAxMloXDTI2MTIyODAyMDAxMlowLzEtMCsGA1UEAxMk NTIxZmQ2OTItOGI5Ni00MmM1LTliNjQtOTlhOTA5NGRhNDBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnmRfbdWqZiEkuZIQwjGUBRdXCUSAnTJZHUxo eFT6ip9XRC4VfQvDVfkcn6BJyuNGd+r+dCO9RwJZRBPj5afnUrQx7iplF4UrzAkE zd8jULNS6ciSXJKkZInQFYQYH23So/E9BBp7l9EZqB1uwBth3Yaep9fd0oAAPDHK WwZ5rNkknec3ZHBpRTy/OeNd7KQDLbAmZ+VvgpPdvlKDKkNNzUI7Zytcgu45gl5Q n+kI05HfNhIBGNmazq7IPFPM0jJPxgTReyHk2OhU8Yp32qtaz/tdbpOvAcSsFCC5 83q8WxJ0xydQXNm1IzRbOF9M200o2a5FOzfV+fJaN2s8X38JtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN9A0PqzA9UfZkftSg1meMHNF6/aMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9hZmZh NzE2Yi05NjMxLTQ1MDYtYWVlNS1kYzY5Zjc5ZjlmY2EvOGQzMTNiNDktOTkyYi0z MGJiLTk0ZjctYTZkOGQ2MzVmYzhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYWZmYTcxNmItOTYzMS00NTA2LWFl ZTUtZGM2OWY3OWY5ZmNhL2FmZmE3MTZiLTk2MzEtNDUwNi1hZWU1LWRjNjlmNzlm OWZjYS5jcmwwHwYDVR0jBBgwFoAUKRmCCLh2XVuuuS4Q2ozL8pN/oskwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9hZmZhNzE2Yi05NjMxLTQ1MDYtYWVlNS1kYzY5 Zjc5ZjlmY2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF43UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAs4JkVL45hD5u+ytVTHP3+qFlZj9t1rMcjmWOf1uU+Qz6gbZuoN8IhO A1lvOGwHRYfJfJBkxjjd549sUzmzmT9mlrCKuLHugU56RKN80avPVtkGXJ6SA7Uz hOxzop3Du+NuNkJcTzc0NB52pN3Jel9Tij75tDclRvtfVjQgaaFEcmTcpAJg5YVO poIQRic1yYyDGHyatMgSB+HHvLGAg2uZFEtQM6emeki5j2nqoYn+6UQRPJrGaOoC x+3YiuRcOKzDycogozCuZJz0zB5NTyqn4JcggWkemZq62iiLCIof0fgTv/o6Uqr5 v560OQSJSBGI8QGLC7ckadwL2E3dAg0= -----END CERTIFICATE-----Generated at Wed Nov 4 22:18:37 2026 by rpki-client