$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/1ad907e9-86e9-3dd3-94ff-8503718ccd36.roa File: 1ad907e9-86e9-3dd3-94ff-8503718ccd36.roa (raw, json) Hash identifier: qLO/aEBoHHGlYJOMPHU8I3L17TldJ1XaITSTfV1niSs= Subject key identifier: 19:98:8C:90:65:11:66:32:79:67:CF:13:54:DC:F4:47:2C:B5:59:84 Certificate issuer: /CN=b02dc6e7-fa1a-4acf-a036-5b4487100de9 Certificate serial: 010D0C9F4328584F53BB813147323C2D4A72F576 Authority key identifier: CD:A8:CE:37:4F:36:4A:E1:38:F6:F0:7E:CF:6D:76:B1:CA:C4:E8:3E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/1ad907e9-86e9-3dd3-94ff-8503718ccd36.roa Signing time: Mon 28 Sep 2026 17:25:20 +0000 ROA not before: Mon 28 Sep 2026 17:25:20 +0000 ROA not after: Sun 27 Dec 2026 18:25:20 +0000 asID: 834 IP address blocks: 43.245.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/b02dc6e7-fa1a-4acf-a036-5b4487100de9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/b02dc6e7-fa1a-4acf-a036-5b4487100de9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 Oct 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:53:bb:81:31:47:32:3c:2d:4a:72:f5:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b02dc6e7-fa1a-4acf-a036-5b4487100de9 Validity Not Before: Sep 28 17:25:20 2026 GMT Not After : Dec 27 18:25:20 2026 GMT Subject: CN=34604867-0f4b-42a0-8722-6e7baf13b55f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:2f:7f:f7:37:88:9d:6e:cb:65:6a:a8:f8:0f: c2:8e:36:65:f6:fe:4d:a8:92:f1:c5:a7:48:ab:9d: 6f:07:7d:71:fa:c9:8e:c3:ef:bc:8b:51:4f:80:7b: 2b:73:ec:f3:6b:a9:50:79:14:ae:9c:f2:6c:99:84: 21:be:64:fc:d3:52:20:f0:cf:78:49:c0:79:66:64: 6a:3e:03:59:69:e3:64:55:17:88:13:88:02:eb:ee: b9:1d:9b:66:06:fb:bd:28:d3:67:90:a3:af:27:65: bf:d8:2d:d2:4f:88:7d:46:98:e8:4b:54:86:a6:d5: 7b:d5:e0:2f:98:5b:63:00:13:9f:39:4f:01:38:93: f3:f4:38:aa:bd:70:39:e1:32:42:ca:96:4f:91:3b: b6:9e:e5:1b:bd:d2:c4:04:c7:d2:ec:03:f8:25:e2: 60:b3:c6:df:01:d2:cc:cc:49:59:53:41:66:05:bb: 2a:33:4c:48:56:6c:12:b4:32:5d:19:93:34:b6:43: ac:2d:56:eb:fb:b9:c5:f0:75:a6:b5:6d:16:c7:e3: 1a:f7:fc:a4:37:9f:98:2a:4c:90:90:3e:50:df:c5: 41:5f:2c:c9:37:55:e3:ad:48:a8:53:5e:2e:79:9d: a3:71:ff:c0:0e:14:4a:b7:e5:67:0e:71:3d:0d:8e: 4b:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:98:8C:90:65:11:66:32:79:67:CF:13:54:DC:F4:47:2C:B5:59:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/1ad907e9-86e9-3dd3-94ff-8503718ccd36.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/b02dc6e7-fa1a-4acf-a036-5b4487100de9.crl X509v3 Authority Key Identifier: keyid:CD:A8:CE:37:4F:36:4A:E1:38:F6:F0:7E:CF:6D:76:B1:CA:C4:E8:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9.cer sbgp-ipAddrBlock: critical IPv4: 43.245.236.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:38:a3:e2:dd:1c:1e:0d:c1:56:47:62:59:5c:29:d8:b5:93: f7:c7:78:74:ef:d7:fd:41:15:a8:8c:55:05:63:f3:24:f7:eb: fa:d1:d3:e7:db:75:90:33:26:e3:dc:01:42:21:18:61:7a:91: 4d:7a:a9:71:a1:d0:48:1b:75:6f:ee:9e:4c:3d:33:d4:03:31: f1:d8:7e:db:c0:d3:74:3d:22:0c:ea:2e:7c:bd:8a:57:01:0e: 7f:b1:db:12:a9:88:a0:07:fa:07:b2:4b:b2:13:0a:e4:1d:c5: 95:38:85:c9:2d:97:d4:ab:65:6b:cd:cb:c9:4c:31:a7:89:c1: 90:d0:26:06:06:27:01:b4:c3:44:70:dc:b1:74:af:69:d9:e5: 85:44:a5:5c:30:7f:2d:7c:c8:cb:7e:2d:49:9b:9e:07:4f:a4: 09:9e:d0:fd:55:a5:6a:41:8f:e3:ff:b4:3c:90:08:88:bd:25: 76:53:3d:ff:87:16:5a:9a:9a:02:a2:7c:61:a6:43:6a:ed:1c: 71:cf:16:74:81:3a:d9:64:e6:cc:23:71:38:02:10:e5:b5:f3: 5e:90:09:da:01:03:74:f6:41:0f:07:49:2e:ae:0c:11:e9:6b: 72:89:8e:5f:a1:10:aa:0a:9d:1f:bf:9b:02:83:8e:e1:ad:c9: 16:4d:6b:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Tu4ExRzI8LUpy9XYwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjAyZGM2ZTctZmExYS00YWNmLWEwMzYtNWI0NDg3MTAw ZGU5MB4XDTI2MDkyODE3MjUyMFoXDTI2MTIyNzE4MjUyMFowLzEtMCsGA1UEAxMk MzQ2MDQ4NjctMGY0Yi00MmEwLTg3MjItNmU3YmFmMTNiNTVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlS9/9zeInW7LZWqo+A/CjjZl9v5NqJLxxadI q51vB31x+smOw++8i1FPgHsrc+zza6lQeRSunPJsmYQhvmT801Ig8M94ScB5ZmRq PgNZaeNkVReIE4gC6+65HZtmBvu9KNNnkKOvJ2W/2C3ST4h9RpjoS1SGptV71eAv mFtjABOfOU8BOJPz9DiqvXA54TJCypZPkTu2nuUbvdLEBMfS7AP4JeJgs8bfAdLM zElZU0FmBbsqM0xIVmwStDJdGZM0tkOsLVbr+7nF8HWmtW0Wx+Ma9/ykN5+YKkyQ kD5Q38VBXyzJN1XjrUioU14ueZ2jcf/ADhRKt+VnDnE9DY5LLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBmYjJBlEWYyeWfPE1Tc9EcstVmEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9iMDJk YzZlNy1mYTFhLTRhY2YtYTAzNi01YjQ0ODcxMDBkZTkvMWFkOTA3ZTktODZlOS0z ZGQzLTk0ZmYtODUwMzcxOGNjZDM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYjAyZGM2ZTctZmExYS00YWNmLWEw MzYtNWI0NDg3MTAwZGU5L2IwMmRjNmU3LWZhMWEtNGFjZi1hMDM2LTViNDQ4NzEw MGRlOS5jcmwwHwYDVR0jBBgwFoAUzajON082SuE49vB+z212scrE6D4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9iMDJkYzZlNy1mYTFhLTRhY2YtYTAzNi01YjQ0 ODcxMDBkZTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAK/XsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG44o+LdHB4NwVZHYllcKdi1k/fHeHTv1/1BFaiMVQVj8yT36/rR0+fb dZAzJuPcAUIhGGF6kU16qXGh0EgbdW/unkw9M9QDMfHYftvA03Q9IgzqLny9ilcB Dn+x2xKpiKAH+geyS7ITCuQdxZU4hcktl9SrZWvNy8lMMaeJwZDQJgYGJwG0w0Rw 3LF0r2nZ5YVEpVwwfy18yMt+LUmbngdPpAme0P1VpWpBj+P/tDyQCIi9JXZTPf+H FlqamgKifGGmQ2rtHHHPFnSBOtlk5swjcTgCEOW1816QCdoBA3T2QQ8HSS6uDBHp a3KJjl+hEKoKnR+/mwKDjuGtyRZNa2k= -----END CERTIFICATE-----Generated at Sun Oct 4 13:09:17 2026 by rpki-client