$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cfaaed90-ce68-4e22-870b-7b7d86e949e0/eb089fd3-de83-32fc-94eb-491970ba886f.roa File: eb089fd3-de83-32fc-94eb-491970ba886f.roa (raw, json) Hash identifier: cktGx9WPDW4wvJYw2+LWyaV5vWoqvvOQL+hsnD7XyDg= Subject key identifier: E6:07:4F:CB:59:51:25:DA:AA:F8:26:25:99:57:53:56:BA:EF:44:83 Certificate issuer: /CN=cfaaed90-ce68-4e22-870b-7b7d86e949e0 Certificate serial: 010D0C9F4328584F6C581D4055D8B6282622E600 Authority key identifier: 43:57:76:F1:A0:91:41:12:89:EA:7C:30:5A:AD:E0:81:03:40:5E:27 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cfaaed90-ce68-4e22-870b-7b7d86e949e0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cfaaed90-ce68-4e22-870b-7b7d86e949e0/eb089fd3-de83-32fc-94eb-491970ba886f.roa Signing time: Wed 07 Oct 2026 13:00:13 +0000 ROA not before: Wed 07 Oct 2026 13:00:13 +0000 ROA not after: Tue 05 Jan 2027 14:00:13 +0000 asID: 9318 IP address blocks: 23.142.12.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cfaaed90-ce68-4e22-870b-7b7d86e949e0/cfaaed90-ce68-4e22-870b-7b7d86e949e0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cfaaed90-ce68-4e22-870b-7b7d86e949e0/cfaaed90-ce68-4e22-870b-7b7d86e949e0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cfaaed90-ce68-4e22-870b-7b7d86e949e0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Nov 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:6c:58:1d:40:55:d8:b6:28:26:22:e6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cfaaed90-ce68-4e22-870b-7b7d86e949e0 Validity Not Before: Oct 7 13:00:13 2026 GMT Not After : Jan 5 14:00:13 2027 GMT Subject: CN=7206b6a3-1866-4d2f-a64e-32b33822cc91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:bd:be:80:19:ba:df:75:18:ad:ac:6d:12:db: ea:05:9a:27:5d:03:0a:52:08:f5:ed:5e:e1:72:3a: 6f:4d:1a:8b:0a:f0:29:88:9a:c8:53:61:9f:28:36: 0f:ba:98:0b:78:05:c2:51:7d:81:81:e1:a2:7a:ee: b8:64:8b:a8:f1:39:11:5f:b1:af:59:f3:7e:cb:3f: 19:37:fe:7e:ce:0b:62:49:5a:b6:26:79:41:4c:fa: b5:6f:4e:71:33:44:33:ba:36:0b:eb:2d:f8:fc:d4: 4f:81:5a:21:6b:51:cf:c0:ef:d8:10:4f:8c:2c:99: c9:e8:a1:00:f1:56:6c:fa:98:d0:44:fc:54:a4:1d: 56:c2:29:ce:f9:6c:41:7d:b6:ca:1b:df:f7:d9:b5: 4d:dd:4e:f6:8c:3f:2f:85:f9:48:1a:05:96:9d:4e: f8:87:ba:3b:e2:1e:c4:99:f4:8e:1e:2d:cc:10:c9: 60:24:17:97:69:f0:30:32:25:c2:89:73:f6:59:b5: f9:7f:b0:ca:ff:b5:dc:71:b4:cd:a7:0c:96:18:cc: 55:70:90:71:88:30:df:60:85:2b:0c:95:a0:c5:38: 25:96:3f:10:a6:43:e5:df:a9:19:b8:6e:c4:8e:26: 9f:5a:b2:55:d2:c5:15:b3:05:07:82:22:10:f5:22: b4:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:07:4F:CB:59:51:25:DA:AA:F8:26:25:99:57:53:56:BA:EF:44:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cfaaed90-ce68-4e22-870b-7b7d86e949e0/eb089fd3-de83-32fc-94eb-491970ba886f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cfaaed90-ce68-4e22-870b-7b7d86e949e0/cfaaed90-ce68-4e22-870b-7b7d86e949e0.crl X509v3 Authority Key Identifier: keyid:43:57:76:F1:A0:91:41:12:89:EA:7C:30:5A:AD:E0:81:03:40:5E:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cfaaed90-ce68-4e22-870b-7b7d86e949e0.cer sbgp-ipAddrBlock: critical IPv4: 23.142.12.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:b2:e8:09:ba:2f:ba:f1:20:70:43:0b:4e:f7:16:92:ad:38: 39:80:91:d0:72:11:fd:ec:67:56:00:cf:62:f6:12:a3:48:5b: e2:77:de:3b:81:ba:f9:14:36:2b:88:cc:e1:bd:d4:1b:d4:c8: 0c:9b:83:6e:2b:a0:ab:fe:a4:6e:8b:68:ae:84:c7:af:9e:8b: da:ea:09:df:15:67:8e:28:cc:85:28:38:a7:2b:61:d3:29:15: 8e:f4:8c:cf:f5:32:5a:ce:e5:4e:27:de:6a:ec:9a:db:c1:6c: 67:96:de:50:87:cf:fb:2f:c0:38:93:16:58:80:ad:78:21:42: fd:e4:6e:22:75:fc:ff:15:e2:e0:bd:97:ea:cb:b0:2a:f7:49: 93:8a:10:1a:17:2d:c5:0b:05:d0:c2:93:a2:3f:08:ec:fc:11: 2a:13:37:e2:2f:47:ce:58:22:97:a3:51:49:f2:63:2c:89:42: 6e:76:2e:a2:dc:0b:43:96:11:31:d5:a7:91:3d:09:3b:80:bd: 3a:e2:49:92:29:4c:6d:5b:c9:c8:6c:5b:0d:90:a2:31:65:16: ea:49:b5:ec:9c:67:54:b4:82:d6:4f:fa:aa:ea:10:8d:c7:e1: dc:49:77:17:7f:72:a0:62:47:16:3a:08:1d:34:11:54:73:56: 59:71:97:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9sWB1AVdi2KCYi5gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2ZhYWVkOTAtY2U2OC00ZTIyLTg3MGItN2I3ZDg2ZTk0 OWUwMB4XDTI2MTAwNzEzMDAxM1oXDTI3MDEwNTE0MDAxM1owLzEtMCsGA1UEAxMk NzIwNmI2YTMtMTg2Ni00ZDJmLWE2NGUtMzJiMzM4MjJjYzkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy72+gBm633UYraxtEtvqBZonXQMKUgj17V7h cjpvTRqLCvApiJrIU2GfKDYPupgLeAXCUX2BgeGieu64ZIuo8TkRX7GvWfN+yz8Z N/5+zgtiSVq2JnlBTPq1b05xM0QzujYL6y34/NRPgVoha1HPwO/YEE+MLJnJ6KEA 8VZs+pjQRPxUpB1WwinO+WxBfbbKG9/32bVN3U72jD8vhflIGgWWnU74h7o74h7E mfSOHi3MEMlgJBeXafAwMiXCiXP2WbX5f7DK/7XccbTNpwyWGMxVcJBxiDDfYIUr DJWgxTgllj8QpkPl36kZuG7EjiafWrJV0sUVswUHgiIQ9SK0DwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOYHT8tZUSXaqvgmJZlXU1a670SDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jZmFh ZWQ5MC1jZTY4LTRlMjItODcwYi03YjdkODZlOTQ5ZTAvZWIwODlmZDMtZGU4My0z MmZjLTk0ZWItNDkxOTcwYmE4ODZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvY2ZhYWVkOTAtY2U2OC00ZTIyLTg3 MGItN2I3ZDg2ZTk0OWUwL2NmYWFlZDkwLWNlNjgtNGUyMi04NzBiLTdiN2Q4NmU5 NDllMC5jcmwwHwYDVR0jBBgwFoAUQ1d28aCRQRKJ6nwwWq3ggQNAXicwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jZmFhZWQ5MC1jZTY4LTRlMjItODcwYi03Yjdk ODZlOTQ5ZTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF44MMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKiy6Am6L7rxIHBDC073FpKtODmAkdByEf3sZ1YAz2L2EqNIW+J33juB uvkUNiuIzOG91BvUyAybg24roKv+pG6LaK6Ex6+ei9rqCd8VZ44ozIUoOKcrYdMp FY70jM/1MlrO5U4n3mrsmtvBbGeW3lCHz/svwDiTFliArXghQv3kbiJ1/P8V4uC9 l+rLsCr3SZOKEBoXLcULBdDCk6I/COz8ESoTN+IvR85YIpejUUnyYyyJQm52LqLc C0OWETHVp5E9CTuAvTriSZIpTG1bychsWw2QojFlFupJteycZ1S0gtZP+qrqEI3H 4dxJdxd/cqBiRxY6CB00EVRzVllxl+c= -----END CERTIFICATE-----Generated at Tue Nov 3 22:54:48 2026 by rpki-client