$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d80dfbd4-0944-4c24-a645-a238d9949fb7/21f780e4-8804-3c3f-a32f-c3c18ce5fa8b.roa File: 21f780e4-8804-3c3f-a32f-c3c18ce5fa8b.roa (raw, json) Hash identifier: K4iiaku3B/jbQbvCE/nQlYDWCUUWuZZRaYIyejhA6P8= Subject key identifier: A3:A3:F9:BD:0D:64:56:89:6F:97:1A:5F:5B:FA:DA:FA:B5:B0:8F:A3 Certificate issuer: /CN=d80dfbd4-0944-4c24-a645-a238d9949fb7 Certificate serial: 010D0C9F4328584F612D59EEB0884576EC293C00 Authority key identifier: A3:DF:7B:5C:56:46:49:A1:EF:89:9D:6D:09:9F:7A:21:5E:25:8E:D4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d80dfbd4-0944-4c24-a645-a238d9949fb7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d80dfbd4-0944-4c24-a645-a238d9949fb7/21f780e4-8804-3c3f-a32f-c3c18ce5fa8b.roa Signing time: Sat 03 Oct 2026 13:00:13 +0000 ROA not before: Sat 03 Oct 2026 13:00:13 +0000 ROA not after: Fri 01 Jan 2027 14:00:13 +0000 asID: 152918 IP address blocks: 23.141.52.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d80dfbd4-0944-4c24-a645-a238d9949fb7/d80dfbd4-0944-4c24-a645-a238d9949fb7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d80dfbd4-0944-4c24-a645-a238d9949fb7/d80dfbd4-0944-4c24-a645-a238d9949fb7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d80dfbd4-0944-4c24-a645-a238d9949fb7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 22 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:61:2d:59:ee:b0:88:45:76:ec:29:3c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d80dfbd4-0944-4c24-a645-a238d9949fb7 Validity Not Before: Oct 3 13:00:13 2026 GMT Not After : Jan 1 14:00:13 2027 GMT Subject: CN=2c0cd3e0-5c74-42bf-a61e-db14a4552d44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:25:94:fd:2b:19:29:02:68:ef:7d:cd:37:1a: 75:5a:1c:2d:3c:e7:aa:db:ec:a2:f2:c3:1e:4c:d6: 41:e9:64:7a:c3:2a:88:f6:c6:8e:47:8a:f5:78:24: 1a:25:d1:2e:65:3c:d5:cb:70:2d:80:d5:8b:1f:e6: bb:d8:6f:81:20:b3:f6:83:fb:f5:0e:6f:77:f4:b4: a0:7c:97:e3:bd:c0:23:34:53:28:a4:8f:b1:21:50: 67:b8:f4:3d:e9:02:29:a4:2d:a2:39:46:2f:2c:68: 79:4b:37:23:34:3c:0f:06:08:67:34:2e:44:c0:63: df:42:9d:f3:72:a2:b0:1d:c6:10:d9:d0:cd:32:9d: d5:e2:f3:a5:99:de:4a:de:bb:15:00:89:4f:6a:16: 24:db:40:1a:9f:83:be:ce:fd:e9:75:02:53:a9:7f: 4f:16:0d:fd:34:61:35:82:34:57:3e:c6:17:c9:0d: b0:94:55:f3:c2:93:ba:35:8b:ba:c1:01:b1:4b:79: 15:71:a1:9d:71:4c:72:f6:f0:50:83:87:33:3f:07: b3:8e:b8:3c:b2:ad:03:2c:14:12:c7:f5:f4:3d:53: 7a:3a:8f:c3:82:29:aa:94:9d:f8:7c:53:b7:f8:8c: 4d:9d:e3:bb:95:d1:0c:8e:05:70:ca:b7:64:9a:b9: 2d:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:A3:F9:BD:0D:64:56:89:6F:97:1A:5F:5B:FA:DA:FA:B5:B0:8F:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d80dfbd4-0944-4c24-a645-a238d9949fb7/21f780e4-8804-3c3f-a32f-c3c18ce5fa8b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d80dfbd4-0944-4c24-a645-a238d9949fb7/d80dfbd4-0944-4c24-a645-a238d9949fb7.crl X509v3 Authority Key Identifier: keyid:A3:DF:7B:5C:56:46:49:A1:EF:89:9D:6D:09:9F:7A:21:5E:25:8E:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d80dfbd4-0944-4c24-a645-a238d9949fb7.cer sbgp-ipAddrBlock: critical IPv4: 23.141.52.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:47:3b:d8:10:96:e8:be:5f:d7:ad:e0:a0:06:3e:f9:6c:60: 24:0c:cb:24:d1:4e:38:96:e6:77:03:12:0c:dc:92:a4:57:1c: e8:c1:e1:64:6a:06:cf:f9:e1:59:86:35:30:2c:42:a3:a5:63: 7a:7b:f1:63:01:5c:42:ac:b1:ef:98:52:88:72:8a:ed:b3:1b: c0:92:0b:83:c8:d4:e3:44:55:dd:2c:66:69:e5:75:cd:a9:22: 70:b1:e3:aa:11:26:28:2e:0f:b9:9c:d5:9f:6a:56:ca:2b:a1: ea:89:e8:09:42:a1:1c:22:5f:d0:03:ba:6b:b1:ab:69:4c:8a: 36:25:5a:d5:06:a3:cb:5e:aa:14:2d:7a:2c:ef:d7:17:66:f4: 89:ed:8e:82:97:b6:3f:8b:bb:d2:b7:dd:8c:48:ad:1c:53:66: 7e:f3:66:0b:2b:6f:8a:34:bc:4d:a9:fe:3d:46:19:d3:5e:22: 5e:d4:9e:02:83:79:47:d6:1f:01:54:25:2f:07:3c:b5:e6:f3: b0:82:76:7f:ae:e3:b5:51:38:75:19:bc:2d:88:77:2a:61:76: 37:8f:48:a3:52:7f:4e:71:b8:a0:8e:11:52:8e:e3:c0:b6:95: 18:cc:2f:fc:a9:ca:a0:7d:63:16:06:67:d1:20:eb:48:36:09: 1a:1f:17:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9hLVnusIhFduwpPAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDgwZGZiZDQtMDk0NC00YzI0LWE2NDUtYTIzOGQ5OTQ5 ZmI3MB4XDTI2MTAwMzEzMDAxM1oXDTI3MDEwMTE0MDAxM1owLzEtMCsGA1UEAxMk MmMwY2QzZTAtNWM3NC00MmJmLWE2MWUtZGIxNGE0NTUyZDQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqSWU/SsZKQJo733NNxp1WhwtPOeq2+yi8sMe TNZB6WR6wyqI9saOR4r1eCQaJdEuZTzVy3AtgNWLH+a72G+BILP2g/v1Dm939LSg fJfjvcAjNFMopI+xIVBnuPQ96QIppC2iOUYvLGh5SzcjNDwPBghnNC5EwGPfQp3z cqKwHcYQ2dDNMp3V4vOlmd5K3rsVAIlPahYk20Aan4O+zv3pdQJTqX9PFg39NGE1 gjRXPsYXyQ2wlFXzwpO6NYu6wQGxS3kVcaGdcUxy9vBQg4czPwezjrg8sq0DLBQS x/X0PVN6Oo/DgimqlJ34fFO3+IxNneO7ldEMjgVwyrdkmrkt6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKOj+b0NZFaJb5caX1v62vq1sI+jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9kODBk ZmJkNC0wOTQ0LTRjMjQtYTY0NS1hMjM4ZDk5NDlmYjcvMjFmNzgwZTQtODgwNC0z YzNmLWEzMmYtYzNjMThjZTVmYThiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvZDgwZGZiZDQtMDk0NC00YzI0LWE2 NDUtYTIzOGQ5OTQ5ZmI3L2Q4MGRmYmQ0LTA5NDQtNGMyNC1hNjQ1LWEyMzhkOTk0 OWZiNy5jcmwwHwYDVR0jBBgwFoAUo997XFZGSaHviZ1tCZ96IV4ljtQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9kODBkZmJkNC0wOTQ0LTRjMjQtYTY0NS1hMjM4 ZDk5NDlmYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF400MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHJHO9gQlui+X9et4KAGPvlsYCQMyyTRTjiW5ncDEgzckqRXHOjB4WRq Bs/54VmGNTAsQqOlY3p78WMBXEKsse+YUohyiu2zG8CSC4PI1ONEVd0sZmnldc2p InCx46oRJiguD7mc1Z9qVsoroeqJ6AlCoRwiX9ADumuxq2lMijYlWtUGo8teqhQt eizv1xdm9IntjoKXtj+Lu9K33YxIrRxTZn7zZgsrb4o0vE2p/j1GGdNeIl7UngKD eUfWHwFUJS8HPLXm87CCdn+u47VROHUZvC2IdyphdjePSKNSf05xuKCOEVKO48C2 lRjML/ypyqB9YxYGZ9Eg60g2CRofF0k= -----END CERTIFICATE-----Generated at Wed Oct 21 14:08:11 2026 by rpki-client