$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/4f5cb1d8-e7a7-3f26-818f-54483041c50e.roa File: 4f5cb1d8-e7a7-3f26-818f-54483041c50e.roa (raw, json) Hash identifier: anm0Qd913pPng+wCMu3IZpGReVCQLII7I+U2ZoXHxRA= Subject key identifier: F7:A0:9D:E5:D8:27:AF:E3:C0:C1:3A:93:C3:D4:43:F2:32:9E:8F:2C Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F4328584F612D5C7823B64B99E855C900 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/4f5cb1d8-e7a7-3f26-818f-54483041c50e.roa Signing time: Sat 03 Oct 2026 13:00:13 +0000 ROA not before: Sat 03 Oct 2026 13:00:13 +0000 ROA not after: Fri 01 Jan 2027 14:00:13 +0000 asID: 14105 IP address blocks: 174.46.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 16 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:61:2d:5c:78:23:b6:4b:99:e8:55:c9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: Oct 3 13:00:13 2026 GMT Not After : Jan 1 14:00:13 2027 GMT Subject: CN=48c6e9a8-6df5-478b-8015-89df8e946f4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:4f:a9:83:35:e9:88:b9:54:5d:2d:f5:12:6f: 3a:f6:96:7d:fc:f3:e4:8a:f3:84:0b:40:82:b1:84: f1:fc:54:f4:91:15:a7:57:5d:af:4e:3f:69:e5:d3: 09:6d:07:0e:2e:8e:c7:d4:cb:14:98:74:9e:02:81: b3:2f:51:1b:87:1e:16:04:87:55:e5:1d:21:18:6a: f0:48:a5:bb:22:e4:3f:95:d1:a0:9c:7c:de:26:78: 7b:2e:eb:5d:c2:27:91:48:22:47:13:a3:79:70:82: 7a:72:0c:85:9c:e0:32:0a:46:c9:8d:9a:30:34:a0: 8a:2e:26:04:fe:c4:54:cd:40:ac:a7:0b:9b:05:4c: 3b:92:28:88:7a:57:e5:6e:52:02:e2:1d:1e:f7:ca: c9:9b:ec:de:21:ad:7e:ab:25:43:be:76:ee:61:f6: 33:26:89:03:33:8d:f6:89:05:17:48:53:2e:be:67: be:60:e0:89:82:08:0d:0c:57:2b:7a:12:7a:24:11: 95:06:08:20:14:83:19:df:91:15:05:c9:3c:9e:1c: 0b:a0:97:82:ed:63:f1:29:7c:61:b2:f5:d6:6c:cf: 0e:6e:ce:7f:97:11:48:a3:36:76:59:22:b2:f6:0a: 72:92:84:3c:2d:e6:48:29:81:79:cd:23:88:e2:d1: 39:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:A0:9D:E5:D8:27:AF:E3:C0:C1:3A:93:C3:D4:43:F2:32:9E:8F:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/4f5cb1d8-e7a7-3f26-818f-54483041c50e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 174.46.255.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:d3:4f:86:16:6a:43:3b:51:70:69:c5:c5:22:8a:1b:c9:72: 75:07:37:24:ca:cc:38:81:e5:0c:7b:dc:c8:b6:72:31:4d:47: af:02:f0:53:f0:af:a6:af:d9:09:10:e1:42:31:b1:81:02:69: 28:65:91:f4:01:2f:e3:61:cf:a8:f9:8e:97:7d:83:7e:19:fe: 2e:51:b7:2a:ad:ed:63:c8:43:f9:d3:25:a1:52:27:c6:12:02: 11:b3:ba:a3:03:67:f3:70:0e:8e:78:b5:66:86:ff:f2:6b:cd: bf:ee:61:58:30:93:14:e6:cf:5a:29:c6:d1:6a:15:f0:9b:a6: 0b:43:f6:0b:5b:0f:f7:ed:51:cd:2b:84:cf:bc:ae:68:5a:92: 8e:d1:90:11:aa:b7:47:c0:23:7f:47:96:86:18:5e:b5:49:c0: f7:c1:8c:9f:20:cd:ab:16:8b:9b:0f:52:e7:99:f8:5b:bb:6e: 9a:24:0a:94:e6:05:14:24:11:8f:8b:4c:5e:79:fa:e0:52:3c: 96:d1:39:74:25:d3:f3:01:7d:0b:02:b3:84:52:88:f9:79:02: 00:f8:cc:a1:5a:11:8d:db:70:70:32:73:67:65:f2:fb:2d:0c: 08:0c:1e:35:5f:53:2a:ea:cf:97:be:24:e9:70:19:a2:04:7e: 5a:59:a8:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9hLVx4I7ZLmehVyQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI2MTAwMzEzMDAxM1oXDTI3MDEwMTE0MDAxM1owLzEtMCsGA1UEAxMk NDhjNmU5YTgtNmRmNS00NzhiLTgwMTUtODlkZjhlOTQ2ZjRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuU+pgzXpiLlUXS31Em869pZ9/PPkivOEC0CC sYTx/FT0kRWnV12vTj9p5dMJbQcOLo7H1MsUmHSeAoGzL1Ebhx4WBIdV5R0hGGrw SKW7IuQ/ldGgnHzeJnh7LutdwieRSCJHE6N5cIJ6cgyFnOAyCkbJjZowNKCKLiYE /sRUzUCspwubBUw7kiiIelflblIC4h0e98rJm+zeIa1+qyVDvnbuYfYzJokDM432 iQUXSFMuvme+YOCJgggNDFcrehJ6JBGVBgggFIMZ35EVBck8nhwLoJeC7WPxKXxh svXWbM8Obs5/lxFIozZ2WSKy9gpykoQ8LeZIKYF5zSOI4tE5kQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPegneXYJ6/jwME6k8PUQ/Iyno8sMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvNGY1Y2IxZDgtZTdhNy0z ZjI2LTgxOGYtNTQ0ODMwNDFjNTBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAri7/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA3TT4YWakM7UXBpxcUiihvJcnUHNyTKzDiB5Qx73Mi2cjFNR68C8FPw r6av2QkQ4UIxsYECaShlkfQBL+Nhz6j5jpd9g34Z/i5Rtyqt7WPIQ/nTJaFSJ8YS AhGzuqMDZ/NwDo54tWaG//Jrzb/uYVgwkxTmz1opxtFqFfCbpgtD9gtbD/ftUc0r hM+8rmhako7RkBGqt0fAI39HloYYXrVJwPfBjJ8gzasWi5sPUueZ+Fu7bpokCpTm BRQkEY+LTF55+uBSPJbROXQl0/MBfQsCs4RSiPl5AgD4zKFaEY3bcHAyc2dl8vst DAgMHjVfUyrqz5e+JOlwGaIEflpZqPQ= -----END CERTIFICATE-----Generated at Tue Oct 13 22:53:15 2026 by rpki-client