$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d1a3d4ce-a7f8-4ec9-8a3b-e4378c59b591/41a4494e-4fe2-3f0f-97f8-46f7bf8b25c2.roa File: 41a4494e-4fe2-3f0f-97f8-46f7bf8b25c2.roa (raw, json) Hash identifier: pFxmgIjw+rj+DJLIQj5pbRvsUqAf8U7p8vw/LVTe38M= Subject key identifier: 15:14:78:22:97:CE:9D:16:5F:F3:57:4D:D1:51:47:00:CC:65:14:72 Certificate issuer: /CN=d1a3d4ce-a7f8-4ec9-8a3b-e4378c59b591 Certificate serial: 010D0C9F4328584F4F08043BF7C206C317AEAC80 Authority key identifier: 20:34:56:18:D9:06:3E:0B:F7:97:4E:BF:B2:11:01:8E:9A:6C:59:F3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d1a3d4ce-a7f8-4ec9-8a3b-e4378c59b591.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d1a3d4ce-a7f8-4ec9-8a3b-e4378c59b591/41a4494e-4fe2-3f0f-97f8-46f7bf8b25c2.roa Signing time: Sun 27 Sep 2026 01:00:12 +0000 ROA not before: Sun 27 Sep 2026 01:00:12 +0000 ROA not after: Sat 26 Dec 2026 02:00:12 +0000 asID: 979 IP address blocks: 23.144.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d1a3d4ce-a7f8-4ec9-8a3b-e4378c59b591/d1a3d4ce-a7f8-4ec9-8a3b-e4378c59b591.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d1a3d4ce-a7f8-4ec9-8a3b-e4378c59b591/d1a3d4ce-a7f8-4ec9-8a3b-e4378c59b591.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d1a3d4ce-a7f8-4ec9-8a3b-e4378c59b591.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4f:08:04:3b:f7:c2:06:c3:17:ae:ac:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1a3d4ce-a7f8-4ec9-8a3b-e4378c59b591 Validity Not Before: Sep 27 01:00:12 2026 GMT Not After : Dec 26 02:00:12 2026 GMT Subject: CN=f6b00ee1-7aa2-4d40-a022-b3daf219a27d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:39:e3:6f:71:3e:f9:88:11:48:cc:6e:c4:11: a8:51:b1:67:46:5d:1e:41:7b:fa:35:e9:4c:0e:e6: e1:25:18:08:ad:00:76:f0:8b:24:ff:28:35:5d:cd: 6f:df:27:3d:dc:18:8b:b3:fa:ae:3a:50:b9:23:74: 1e:7e:bd:f7:1b:24:fb:bd:96:fe:d7:db:f4:cf:22: 49:c0:72:c8:d2:3b:62:c7:99:26:ba:bc:b4:04:d7: f9:08:36:14:d0:c3:84:65:4e:a1:ca:49:66:4e:8d: 31:c5:d5:5a:fa:c0:40:f2:5d:79:9d:e3:2a:41:fe: ba:5b:dc:2b:e3:60:84:6b:96:cf:49:f7:81:ef:3d: c6:4d:d3:84:fb:43:2d:b7:05:79:1e:3f:89:f0:09: e8:14:e7:1a:df:8f:9c:53:e6:48:7d:51:ce:0a:68: 6d:6f:2e:e2:6c:ed:26:9f:97:52:d9:e6:56:ee:23: 08:82:80:2c:48:36:f3:2d:6d:f6:d4:0c:c6:ac:87: 22:8c:82:4c:e6:4e:05:97:62:5a:58:f6:c9:8d:7d: 9a:76:47:f5:57:22:34:6d:8b:2a:ff:f1:06:c6:87: 8f:bc:fb:93:02:84:1e:da:b3:8d:79:ff:41:bc:7d: f0:82:df:bb:e0:df:6f:c9:a3:33:d7:cd:7d:65:b1: 2e:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:14:78:22:97:CE:9D:16:5F:F3:57:4D:D1:51:47:00:CC:65:14:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d1a3d4ce-a7f8-4ec9-8a3b-e4378c59b591/41a4494e-4fe2-3f0f-97f8-46f7bf8b25c2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d1a3d4ce-a7f8-4ec9-8a3b-e4378c59b591/d1a3d4ce-a7f8-4ec9-8a3b-e4378c59b591.crl X509v3 Authority Key Identifier: keyid:20:34:56:18:D9:06:3E:0B:F7:97:4E:BF:B2:11:01:8E:9A:6C:59:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d1a3d4ce-a7f8-4ec9-8a3b-e4378c59b591.cer sbgp-ipAddrBlock: critical IPv4: 23.144.132.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:0b:b1:b7:6c:f2:cc:49:81:39:2f:2f:68:8d:94:c5:72:ce: e0:7e:30:b2:3f:64:d8:c9:cd:ef:df:18:5e:bd:32:81:0a:89: 3d:44:c4:e6:ce:04:a2:81:37:6a:b3:cd:f6:ce:cd:7d:9f:7b: 03:7c:f7:6b:5a:f6:6e:6a:d0:23:a7:a5:f6:c0:66:1b:3b:5e: 11:30:31:22:6d:d2:25:42:f5:74:02:d9:6a:48:36:3d:bc:72: e9:dc:71:14:36:f3:6e:f6:c0:5a:47:b3:6e:e5:c3:8f:e7:67: 3d:1a:27:2e:65:d3:a6:88:64:75:25:2b:95:38:fa:ac:59:66: 35:7e:81:1d:fa:cc:dd:c3:a2:00:e8:99:a6:28:f2:e9:fd:03: 86:2b:b1:44:00:0d:13:16:cf:4b:89:e3:7e:f5:34:93:20:29: 13:09:1e:85:a8:c7:e2:7b:71:b7:0d:1a:44:fa:87:b6:57:bb: 73:78:24:9d:a9:ea:9b:0c:75:7f:1b:6e:9f:aa:47:1d:26:07: 30:c8:e7:ce:22:9e:51:a2:02:f1:f8:41:29:18:78:e2:62:41: c9:d1:de:de:9f:05:66:93:b4:d2:f7:ac:de:76:f9:8e:cc:06: 43:ed:39:43:ab:a9:da:77:51:46:15:ca:f0:44:5d:9a:cd:85: 07:4a:65:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9PCAQ798IGwxeurIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDFhM2Q0Y2UtYTdmOC00ZWM5LThhM2ItZTQzNzhjNTli NTkxMB4XDTI2MDkyNzAxMDAxMloXDTI2MTIyNjAyMDAxMlowLzEtMCsGA1UEAxMk ZjZiMDBlZTEtN2FhMi00ZDQwLWEwMjItYjNkYWYyMTlhMjdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqDnjb3E++YgRSMxuxBGoUbFnRl0eQXv6NelM DubhJRgIrQB28Isk/yg1Xc1v3yc93BiLs/quOlC5I3Qefr33GyT7vZb+19v0zyJJ wHLI0jtix5kmury0BNf5CDYU0MOEZU6hyklmTo0xxdVa+sBA8l15neMqQf66W9wr 42CEa5bPSfeB7z3GTdOE+0MttwV5Hj+J8AnoFOca34+cU+ZIfVHOCmhtby7ibO0m n5dS2eZW7iMIgoAsSDbzLW321AzGrIcijIJM5k4Fl2JaWPbJjX2adkf1VyI0bYsq //EGxoePvPuTAoQe2rONef9BvH3wgt+74N9vyaMz1819ZbEu1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBUUeCKXzp0WX/NXTdFRRwDMZRRyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9kMWEz ZDRjZS1hN2Y4LTRlYzktOGEzYi1lNDM3OGM1OWI1OTEvNDFhNDQ5NGUtNGZlMi0z ZjBmLTk3ZjgtNDZmN2JmOGIyNWMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvZDFhM2Q0Y2UtYTdmOC00ZWM5LThh M2ItZTQzNzhjNTliNTkxL2QxYTNkNGNlLWE3ZjgtNGVjOS04YTNiLWU0Mzc4YzU5 YjU5MS5jcmwwHwYDVR0jBBgwFoAUIDRWGNkGPgv3l06/shEBjppsWfMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9kMWEzZDRjZS1hN2Y4LTRlYzktOGEzYi1lNDM3 OGM1OWI1OTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5CEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIALsbds8sxJgTkvL2iNlMVyzuB+MLI/ZNjJze/fGF69MoEKiT1ExObO BKKBN2qzzfbOzX2fewN892ta9m5q0COnpfbAZhs7XhEwMSJt0iVC9XQC2WpINj28 cunccRQ28272wFpHs27lw4/nZz0aJy5l06aIZHUlK5U4+qxZZjV+gR36zN3DogDo maYo8un9A4YrsUQADRMWz0uJ4371NJMgKRMJHoWox+J7cbcNGkT6h7ZXu3N4JJ2p 6psMdX8bbp+qRx0mBzDI584inlGiAvH4QSkYeOJiQcnR3t6fBWaTtNL3rN52+Y7M BkPtOUOrqdp3UUYVyvBEXZrNhQdKZVg= -----END CERTIFICATE-----Generated at Thu Oct 8 10:58:39 2026 by rpki-client