$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/18f4eabf-2388-491f-922c-4973961dfd2e/aff7f59a-de88-3f24-af6f-6932047f3217.roa File: aff7f59a-de88-3f24-af6f-6932047f3217.roa (raw, json) Hash identifier: XMEx+lJK1DBWL8liGRm8lhLI6ASTS5oBym4IhQHUZu0= Subject key identifier: 7F:63:02:38:EB:19:66:19:2C:E7:81:F6:92:DE:9E:62:E3:87:A0:E0 Certificate issuer: /CN=18f4eabf-2388-491f-922c-4973961dfd2e Certificate serial: 010D0C9F4328584F49751CA021D1BF0B23A2F000 Authority key identifier: 8B:8D:19:D1:85:FA:D9:E9:5B:06:4E:69:0A:0C:34:7B:6B:68:73:FC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/18f4eabf-2388-491f-922c-4973961dfd2e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/18f4eabf-2388-491f-922c-4973961dfd2e/aff7f59a-de88-3f24-af6f-6932047f3217.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 33099 IP address blocks: 23.157.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/18f4eabf-2388-491f-922c-4973961dfd2e/18f4eabf-2388-491f-922c-4973961dfd2e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/18f4eabf-2388-491f-922c-4973961dfd2e/18f4eabf-2388-491f-922c-4973961dfd2e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/18f4eabf-2388-491f-922c-4973961dfd2e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 Oct 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:75:1c:a0:21:d1:bf:0b:23:a2:f0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18f4eabf-2388-491f-922c-4973961dfd2e Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=7270b178-0803-4d1c-bac9-3ba8854e1c5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:c7:d4:c7:6b:6d:e6:46:53:99:bb:d5:26:f6: 3b:5e:6a:4e:9d:1c:16:c3:c9:ee:3f:52:48:38:b4: 83:9a:38:75:1d:93:b4:39:b9:e2:37:b2:34:76:ab: ed:73:40:c9:46:27:db:6d:42:15:f7:46:8c:45:08: 42:4c:c5:9b:ff:25:51:3c:8d:a2:41:8b:09:f6:d1: 73:8d:8f:7a:74:d0:e6:6d:a1:de:c3:e6:01:4a:8a: d5:51:3e:1d:f6:8a:a7:9e:8f:f3:d9:23:dc:10:1a: 44:81:c3:81:11:8e:fe:4c:59:58:f3:9d:a2:de:95: 69:d4:0d:e1:f5:3e:78:fc:de:4e:9f:d3:b8:e3:67: d5:79:2f:ce:42:3b:6d:83:29:ff:52:73:84:d8:14: 67:51:3d:bd:51:e9:a3:06:62:9e:e9:9d:35:fc:28: 8f:42:2c:63:ee:f1:d3:37:e3:32:98:8b:6f:7d:13: 49:b9:df:76:b1:1e:17:5f:cd:e1:61:45:57:6e:a7: b3:14:2c:15:62:fa:50:04:29:8d:62:c3:14:8e:de: af:80:30:ab:d6:8e:08:e6:b4:55:54:e4:d0:a9:ac: f1:62:b3:66:48:56:66:cf:ea:40:28:ea:a8:bb:5a: 24:21:9f:09:39:1f:f4:c5:85:2d:4f:31:21:2c:ef: 19:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:63:02:38:EB:19:66:19:2C:E7:81:F6:92:DE:9E:62:E3:87:A0:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/18f4eabf-2388-491f-922c-4973961dfd2e/aff7f59a-de88-3f24-af6f-6932047f3217.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/18f4eabf-2388-491f-922c-4973961dfd2e/18f4eabf-2388-491f-922c-4973961dfd2e.crl X509v3 Authority Key Identifier: keyid:8B:8D:19:D1:85:FA:D9:E9:5B:06:4E:69:0A:0C:34:7B:6B:68:73:FC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/18f4eabf-2388-491f-922c-4973961dfd2e.cer sbgp-ipAddrBlock: critical IPv4: 23.157.232.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:81:92:97:04:e1:d7:fd:a5:e3:60:2f:ff:a3:17:6f:56:ef: 1c:36:64:5e:6c:26:91:ba:54:de:60:d1:85:2b:b1:46:8a:4d: 03:de:e8:5f:67:53:51:f3:b3:1d:96:3d:49:31:17:9c:3e:56: dc:3d:b2:ab:d8:6f:68:f4:a2:41:d3:6a:7f:97:cb:dc:ae:4f: e6:f1:7a:b5:bf:2c:b6:c2:67:1b:b6:75:cb:4b:60:29:cf:12: 53:9a:91:7c:ce:63:20:bb:a5:8b:23:60:94:2f:ed:17:4f:5c: f7:15:9d:c0:9c:c4:78:90:9d:02:5b:4f:e2:5d:85:05:23:bb: 65:6b:4b:eb:e3:dc:52:83:5c:0d:e4:82:3a:c8:48:4e:96:cd: 92:7b:7a:80:c7:0c:aa:f7:cb:09:35:19:f1:1f:36:c8:0a:c1: d2:10:e8:20:ab:58:27:21:af:82:47:60:d3:0f:bd:e6:4a:10: 10:b9:06:a5:cc:d7:43:31:cb:d2:d9:2b:93:4e:8a:1f:25:ea: ce:b2:67:3b:fc:66:1c:df:fa:af:a7:0e:da:fa:20:b1:f9:65: c6:71:07:15:ef:97:6e:37:55:67:f8:c3:14:b4:1c:f7:af:69: a9:9b:68:1b:54:de:73:e6:4f:24:78:e4:6c:c9:5e:1d:ed:8b: b7:46:b4:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdRygIdG/CyOi8AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMThmNGVhYmYtMjM4OC00OTFmLTkyMmMtNDk3Mzk2MWRm ZDJlMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NzI3MGIxNzgtMDgwMy00ZDFjLWJhYzktM2JhODg1NGUxYzVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq8fUx2tt5kZTmbvVJvY7XmpOnRwWw8nuP1JI OLSDmjh1HZO0ObniN7I0dqvtc0DJRifbbUIV90aMRQhCTMWb/yVRPI2iQYsJ9tFz jY96dNDmbaHew+YBSorVUT4d9oqnno/z2SPcEBpEgcOBEY7+TFlY852i3pVp1A3h 9T54/N5On9O442fVeS/OQjttgyn/UnOE2BRnUT29UemjBmKe6Z01/CiPQixj7vHT N+MymItvfRNJud92sR4XX83hYUVXbqezFCwVYvpQBCmNYsMUjt6vgDCr1o4I5rRV VOTQqazxYrNmSFZmz+pAKOqou1okIZ8JOR/0xYUtTzEhLO8ZcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH9jAjjrGWYZLOeB9pLenmLjh6DgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xOGY0 ZWFiZi0yMzg4LTQ5MWYtOTIyYy00OTczOTYxZGZkMmUvYWZmN2Y1OWEtZGU4OC0z ZjI0LWFmNmYtNjkzMjA0N2YzMjE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMThmNGVhYmYtMjM4OC00OTFmLTky MmMtNDk3Mzk2MWRmZDJlLzE4ZjRlYWJmLTIzODgtNDkxZi05MjJjLTQ5NzM5NjFk ZmQyZS5jcmwwHwYDVR0jBBgwFoAUi40Z0YX62elbBk5pCgw0e2toc/wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8xOGY0ZWFiZi0yMzg4LTQ5MWYtOTIyYy00OTcz OTYxZGZkMmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF53oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACiBkpcE4df9peNgL/+jF29W7xw2ZF5sJpG6VN5g0YUrsUaKTQPe6F9n U1Hzsx2WPUkxF5w+Vtw9sqvYb2j0okHTan+Xy9yuT+bxerW/LLbCZxu2dctLYCnP ElOakXzOYyC7pYsjYJQv7RdPXPcVncCcxHiQnQJbT+JdhQUju2VrS+vj3FKDXA3k gjrISE6WzZJ7eoDHDKr3ywk1GfEfNsgKwdIQ6CCrWCchr4JHYNMPveZKEBC5BqXM 10Mxy9LZK5NOih8l6s6yZzv8Zhzf+q+nDtr6ILH5ZcZxBxXvl243VWf4wxS0HPev aambaBtU3nPmTyR45GzJXh3ti7dGtNA= -----END CERTIFICATE-----Generated at Tue Sep 29 17:58:29 2026 by rpki-client