$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df/3a26bc16-7afc-3fcb-b8db-830386abf560.roa File: 3a26bc16-7afc-3fcb-b8db-830386abf560.roa (raw, json) Hash identifier: 6pFG/VFWOhNokjLgLMOdy+rS0l97AC/P0dWLQfFmRXo= Subject key identifier: 3A:01:F2:03:08:5D:D8:CE:55:0D:63:26:FD:A0:26:41:92:C5:32:AB Certificate issuer: /CN=8d499d1b-9023-4410-8b4a-909ca6a083df Certificate serial: 010D0C9F4328584F4973A89ABBEE49F94A594D80 Authority key identifier: B1:8D:63:7D:ED:62:E0:A3:E0:64:3A:23:99:64:92:6D:21:B9:3F:D2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df/3a26bc16-7afc-3fcb-b8db-830386abf560.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 397666 IP address blocks: 23.157.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df/8d499d1b-9023-4410-8b4a-909ca6a083df.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df/8d499d1b-9023-4410-8b4a-909ca6a083df.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:a8:9a:bb:ee:49:f9:4a:59:4d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d499d1b-9023-4410-8b4a-909ca6a083df Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=bc13774c-c9cd-4909-bbd0-5c966a89f548 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:f0:1e:f1:d3:12:9a:81:7b:f6:17:0a:cd:4e: cd:ab:44:3b:08:b9:d4:a0:d5:b5:37:ca:41:f4:72: 8e:62:83:75:0b:31:e3:e5:3b:0f:55:6e:cd:7b:d8: 3b:44:0b:41:53:af:f0:4f:f7:67:1e:44:28:85:94: b7:76:f5:88:3e:67:45:51:87:13:99:08:c5:49:2e: eb:3a:a4:58:f4:7c:e9:c2:09:6a:29:60:f1:a7:5f: 91:ee:7c:f5:d6:44:83:e2:b3:a5:f7:71:c2:98:ad: 66:98:a4:54:7f:29:16:d3:ca:54:fa:a1:3a:e2:d6: 1a:4a:f1:71:7e:01:31:1c:d5:a4:2a:db:70:7a:9e: e2:90:9e:96:ab:5a:d2:b6:98:06:5b:b1:05:2b:d6: 4b:d5:b1:b5:1d:c5:ab:31:c6:74:94:96:f3:6b:b9: 57:b4:d4:09:03:e1:ea:b6:2b:54:23:23:b4:e7:a6: ee:86:80:fa:f8:c0:f0:c7:bc:c5:5f:db:8d:78:34: ed:6b:68:ab:a8:d9:0e:7d:17:08:22:aa:1a:83:ed: ba:41:05:b4:63:22:11:1e:0a:6f:4c:8e:fd:70:e3: a8:f3:c8:fd:20:08:71:03:4e:5b:86:ae:c0:89:f4: 58:86:54:8b:c4:3a:ab:cd:b9:b7:de:1b:43:34:e9: ff:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:01:F2:03:08:5D:D8:CE:55:0D:63:26:FD:A0:26:41:92:C5:32:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df/3a26bc16-7afc-3fcb-b8db-830386abf560.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df/8d499d1b-9023-4410-8b4a-909ca6a083df.crl X509v3 Authority Key Identifier: keyid:B1:8D:63:7D:ED:62:E0:A3:E0:64:3A:23:99:64:92:6D:21:B9:3F:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8d499d1b-9023-4410-8b4a-909ca6a083df.cer sbgp-ipAddrBlock: critical IPv4: 23.157.145.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:3c:4d:bc:d4:b7:aa:65:b2:98:e2:c0:00:c6:47:0e:ae:4a: 17:e6:1f:8a:dc:5c:cd:e1:ea:fe:2d:df:3a:25:fd:74:d1:45: 87:8d:63:71:a1:79:1a:4e:c5:64:e6:80:4e:bb:b7:41:08:5d: ff:0c:03:c4:0b:ac:c8:96:b4:80:3a:30:11:e3:50:0b:7d:72: f1:d5:8a:de:8d:d2:11:ba:41:f3:98:f5:17:01:42:36:12:37: 22:c3:e2:3f:6a:40:f1:e6:a0:1a:4f:2f:33:96:fd:ec:36:ae: a1:f9:67:60:9f:ee:5b:6a:29:4c:7d:db:68:5d:8b:60:4d:63: c1:0f:99:98:f3:b8:53:b7:a8:f7:b1:59:00:9b:3b:22:6f:02: 25:f6:29:79:93:20:14:99:26:eb:19:1b:1b:52:d7:95:b0:20: ed:b0:63:dc:9a:9c:31:38:8f:a3:e9:3d:2b:cc:23:ee:98:54: 44:a6:95:3a:34:a2:64:49:1f:c6:16:22:b2:12:4e:af:c0:88: ae:dd:cf:9f:bd:47:dc:20:c8:3c:41:40:7c:e2:a7:f4:e8:70: b2:0f:c2:67:8a:34:a2:66:a1:8d:9a:3b:da:57:be:e6:23:5f: 71:51:03:75:cf:3c:e6:83:4c:b2:18:be:c4:d9:4b:1b:37:a5: 04:6f:f9:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jc6iau+5J+UpZTYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGQ0OTlkMWItOTAyMy00NDEwLThiNGEtOTA5Y2E2YTA4 M2RmMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YmMxMzc3NGMtYzljZC00OTA5LWJiZDAtNWM5NjZhODlmNTQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuvAe8dMSmoF79hcKzU7Nq0Q7CLnUoNW1N8pB 9HKOYoN1CzHj5TsPVW7Ne9g7RAtBU6/wT/dnHkQohZS3dvWIPmdFUYcTmQjFSS7r OqRY9HzpwglqKWDxp1+R7nz11kSD4rOl93HCmK1mmKRUfykW08pU+qE64tYaSvFx fgExHNWkKttwep7ikJ6Wq1rStpgGW7EFK9ZL1bG1HcWrMcZ0lJbza7lXtNQJA+Hq titUIyO056buhoD6+MDwx7zFX9uNeDTta2irqNkOfRcIIqoag+26QQW0YyIRHgpv TI79cOOo88j9IAhxA05bhq7AifRYhlSLxDqrzbm33htDNOn/MQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDoB8gMIXdjOVQ1jJv2gJkGSxTKrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy84ZDQ5 OWQxYi05MDIzLTQ0MTAtOGI0YS05MDljYTZhMDgzZGYvM2EyNmJjMTYtN2FmYy0z ZmNiLWI4ZGItODMwMzg2YWJmNTYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOGQ0OTlkMWItOTAyMy00NDEwLThi NGEtOTA5Y2E2YTA4M2RmLzhkNDk5ZDFiLTkwMjMtNDQxMC04YjRhLTkwOWNhNmEw ODNkZi5jcmwwHwYDVR0jBBgwFoAUsY1jfe1i4KPgZDojmWSSbSG5P9IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy84ZDQ5OWQxYi05MDIzLTQ0MTAtOGI0YS05MDlj YTZhMDgzZGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF52RMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH08TbzUt6plspjiwADGRw6uShfmH4rcXM3h6v4t3zol/XTRRYeNY3Gh eRpOxWTmgE67t0EIXf8MA8QLrMiWtIA6MBHjUAt9cvHVit6N0hG6QfOY9RcBQjYS NyLD4j9qQPHmoBpPLzOW/ew2rqH5Z2Cf7ltqKUx922hdi2BNY8EPmZjzuFO3qPex WQCbOyJvAiX2KXmTIBSZJusZGxtS15WwIO2wY9yanDE4j6PpPSvMI+6YVESmlTo0 omRJH8YWIrISTq/AiK7dz5+9R9wgyDxBQHzip/TocLIPwmeKNKJmoY2aO9pXvuYj X3FRA3XPPOaDTLIYvsTZSxs3pQRv+d8= -----END CERTIFICATE-----Generated at Sun Oct 11 15:24:13 2026 by rpki-client