$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e2412a1b-c175-49e5-b00c-7922b466de47/ea1ead04-e318-3952-a9f3-48a4fb68bb9d.roa File: ea1ead04-e318-3952-a9f3-48a4fb68bb9d.roa (raw, json) Hash identifier: I6OlFQX1I5huv4/B8TP7lphD6+Dfyu6RfQG7qH+ee1s= Subject key identifier: 95:20:AD:FB:BD:20:FF:0E:CA:E4:3A:08:C2:C8:0E:E6:70:FD:F4:00 Certificate issuer: /CN=e2412a1b-c175-49e5-b00c-7922b466de47 Certificate serial: 010D0C9F4328584EF44CADCDB0C8030BAAAFA340 Authority key identifier: A9:A3:AD:B5:B5:67:BB:30:40:F9:86:9F:CD:B6:52:77:43:31:59:BC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e2412a1b-c175-49e5-b00c-7922b466de47.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e2412a1b-c175-49e5-b00c-7922b466de47/ea1ead04-e318-3952-a9f3-48a4fb68bb9d.roa Signing time: Tue 25 Aug 2026 13:00:12 +0000 ROA not before: Tue 25 Aug 2026 13:00:12 +0000 ROA not after: Mon 23 Nov 2026 14:00:12 +0000 asID: 979 IP address blocks: 23.141.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e2412a1b-c175-49e5-b00c-7922b466de47/e2412a1b-c175-49e5-b00c-7922b466de47.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e2412a1b-c175-49e5-b00c-7922b466de47/e2412a1b-c175-49e5-b00c-7922b466de47.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e2412a1b-c175-49e5-b00c-7922b466de47.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 20 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f4:4c:ad:cd:b0:c8:03:0b:aa:af:a3:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2412a1b-c175-49e5-b00c-7922b466de47 Validity Not Before: Aug 25 13:00:12 2026 GMT Not After : Nov 23 14:00:12 2026 GMT Subject: CN=b450b735-54b9-424f-8094-d1050d18b35b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:e7:4a:10:51:da:55:9a:4b:44:48:3a:9f:39: 8e:f9:07:a8:9d:78:cb:d2:54:aa:c5:1e:3d:d9:0f: b9:c1:b4:8e:8e:1e:ad:e2:79:97:c8:cb:c5:72:dc: 37:af:7a:17:df:14:ef:2a:12:70:99:9d:d9:4a:07: f9:ce:1d:8e:8f:ca:c6:e2:b5:b3:24:04:7e:10:a1: 0f:57:90:2a:ed:a9:76:fc:a7:a2:93:1e:ce:58:f7: 66:57:db:96:43:c0:67:fd:d1:5d:a1:73:89:85:75: 94:01:9c:f5:15:84:04:0f:b7:f0:1d:12:f8:1f:7a: d2:39:e5:fa:1a:e9:ff:c8:9e:b9:53:2a:48:0f:ec: c6:84:03:12:05:07:61:fb:df:ed:d6:48:4a:b7:a5: f2:ac:a8:d8:13:e5:32:2f:60:bc:f9:bc:06:3a:6f: 12:9a:66:08:52:ac:6c:7b:86:91:34:6d:03:31:31: e8:81:eb:d0:d5:43:5f:23:18:2e:80:72:d7:3c:ca: b9:3d:8f:a7:41:5d:c7:a3:ed:57:75:b3:db:7c:8f: 29:60:c7:c0:73:ff:83:f7:3e:0c:8c:08:11:d0:ee: 09:53:c7:8b:f7:2a:e5:4d:a8:8e:ea:69:83:95:10: 60:7d:d8:71:44:45:06:84:a8:97:94:19:cc:ab:9a: 8f:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:20:AD:FB:BD:20:FF:0E:CA:E4:3A:08:C2:C8:0E:E6:70:FD:F4:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e2412a1b-c175-49e5-b00c-7922b466de47/ea1ead04-e318-3952-a9f3-48a4fb68bb9d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e2412a1b-c175-49e5-b00c-7922b466de47/e2412a1b-c175-49e5-b00c-7922b466de47.crl X509v3 Authority Key Identifier: keyid:A9:A3:AD:B5:B5:67:BB:30:40:F9:86:9F:CD:B6:52:77:43:31:59:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e2412a1b-c175-49e5-b00c-7922b466de47.cer sbgp-ipAddrBlock: critical IPv4: 23.141.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:3c:ba:66:0f:d0:49:13:1a:1f:b3:0b:b5:f1:70:de:1c:12: db:b7:d7:7e:df:d6:c3:89:f2:19:37:15:3c:84:2c:42:5c:14: 70:3a:92:b4:e7:81:cd:58:0f:2f:92:28:93:03:61:a6:09:a9: 56:90:ab:67:c5:6c:1a:52:67:34:d3:43:e3:d8:50:d7:8c:4d: ef:fa:15:60:83:aa:74:3a:5b:94:62:41:cc:f4:ab:b9:d8:7f: e8:6b:96:7d:be:40:5c:3a:8a:5a:f0:a5:78:15:27:ed:58:80: 89:18:cc:bd:ae:df:66:6a:91:31:c4:60:28:fc:f6:8b:1d:b3: e8:eb:96:fe:2f:9e:bc:52:0f:3c:a0:99:69:ee:35:d4:16:95: 58:1e:9d:a7:08:14:78:9e:7b:c0:20:8b:04:64:c4:da:66:d4: 6e:d6:59:dc:28:31:bc:a3:ca:64:ca:09:aa:5a:d0:9c:87:34: 70:98:32:9c:cf:d1:fd:e3:98:fd:f7:ac:90:8b:bc:de:9f:53: 5b:26:a8:d2:e8:02:16:c2:6a:a5:c0:56:e0:60:9e:6e:f9:d7: be:61:07:08:b5:72:3f:c0:65:80:80:da:70:e7:74:d4:60:eb: 3f:04:a7:04:1c:d4:3e:8f:ad:32:bc:2d:0d:48:28:b6:0c:d3: bb:34:b4:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE70TK3NsMgDC6qvo0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTI0MTJhMWItYzE3NS00OWU1LWIwMGMtNzkyMmI0NjZk ZTQ3MB4XDTI2MDgyNTEzMDAxMloXDTI2MTEyMzE0MDAxMlowLzEtMCsGA1UEAxMk YjQ1MGI3MzUtNTRiOS00MjRmLTgwOTQtZDEwNTBkMThiMzViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg+dKEFHaVZpLREg6nzmO+QeonXjL0lSqxR49 2Q+5wbSOjh6t4nmXyMvFctw3r3oX3xTvKhJwmZ3ZSgf5zh2Oj8rG4rWzJAR+EKEP V5Aq7al2/Keikx7OWPdmV9uWQ8Bn/dFdoXOJhXWUAZz1FYQED7fwHRL4H3rSOeX6 Gun/yJ65UypID+zGhAMSBQdh+9/t1khKt6XyrKjYE+UyL2C8+bwGOm8SmmYIUqxs e4aRNG0DMTHogevQ1UNfIxgugHLXPMq5PY+nQV3Ho+1XdbPbfI8pYMfAc/+D9z4M jAgR0O4JU8eL9yrlTaiO6mmDlRBgfdhxREUGhKiXlBnMq5qPhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJUgrfu9IP8OyuQ6CMLIDuZw/fQAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9lMjQx MmExYi1jMTc1LTQ5ZTUtYjAwYy03OTIyYjQ2NmRlNDcvZWExZWFkMDQtZTMxOC0z OTUyLWE5ZjMtNDhhNGZiNjhiYjlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvZTI0MTJhMWItYzE3NS00OWU1LWIw MGMtNzkyMmI0NjZkZTQ3L2UyNDEyYTFiLWMxNzUtNDllNS1iMDBjLTc5MjJiNDY2 ZGU0Ny5jcmwwHwYDVR0jBBgwFoAUqaOttbVnuzBA+YafzbZSd0MxWbwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9lMjQxMmExYi1jMTc1LTQ5ZTUtYjAwYy03OTIy YjQ2NmRlNDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF43kMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGc8umYP0EkTGh+zC7XxcN4cEtu3137f1sOJ8hk3FTyELEJcFHA6krTn gc1YDy+SKJMDYaYJqVaQq2fFbBpSZzTTQ+PYUNeMTe/6FWCDqnQ6W5RiQcz0q7nY f+hrln2+QFw6ilrwpXgVJ+1YgIkYzL2u32ZqkTHEYCj89osds+jrlv4vnrxSDzyg mWnuNdQWlVgenacIFHiee8AgiwRkxNpm1G7WWdwoMbyjymTKCapa0JyHNHCYMpzP 0f3jmP33rJCLvN6fU1smqNLoAhbCaqXAVuBgnm75175hBwi1cj/AZYCA2nDndNRg 6z8EpwQc1D6PrTK8LQ1IKLYM07s0tFM= -----END CERTIFICATE-----Generated at Sat Sep 19 10:04:41 2026 by rpki-client