$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/00bdc54c-4822-4df3-99e6-85920125a480/1209bd1b-5508-3661-bcbe-cb670d8fd182.roa File: 1209bd1b-5508-3661-bcbe-cb670d8fd182.roa (raw, json) Hash identifier: V/+R0DRANMFJ97+5v2WzL5yULdeg7+xHRj3ZE3cp00Y= Subject key identifier: 7F:8F:6A:D7:71:50:3C:88:0B:6D:BF:21:99:47:10:A1:16:47:A8:4D Certificate issuer: /CN=00bdc54c-4822-4df3-99e6-85920125a480 Certificate serial: 010D0C9F4328584F4C3D6533E55954146CBD76CC Authority key identifier: 20:2A:BB:48:A9:FF:D2:35:2A:49:42:73:FE:3B:E1:13:4E:BC:BD:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/00bdc54c-4822-4df3-99e6-85920125a480.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/00bdc54c-4822-4df3-99e6-85920125a480/1209bd1b-5508-3661-bcbe-cb670d8fd182.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 14618 IP address blocks: 23.161.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/00bdc54c-4822-4df3-99e6-85920125a480/00bdc54c-4822-4df3-99e6-85920125a480.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/00bdc54c-4822-4df3-99e6-85920125a480/00bdc54c-4822-4df3-99e6-85920125a480.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/00bdc54c-4822-4df3-99e6-85920125a480.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:65:33:e5:59:54:14:6c:bd:76:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00bdc54c-4822-4df3-99e6-85920125a480 Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=98bbf9f9-7220-4b24-963d-b0db9da3ef92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:7c:0a:c2:6e:73:c7:1b:29:99:db:d8:e9:c8: 84:70:1b:45:84:23:a3:f6:52:8a:2a:a3:a3:bc:21: 48:6c:19:e8:09:b5:93:e6:89:ee:e3:c6:69:50:56: f8:f6:5a:0d:f6:37:4b:82:c5:95:fa:0d:78:5a:09: a5:96:05:4d:48:a3:ad:8d:ab:55:9e:84:04:5e:3f: 15:40:17:21:cf:80:15:c1:a9:4b:27:0f:fd:82:62: 37:86:81:cd:a9:d9:a0:d1:a0:8f:7f:dd:4c:85:c8: 6e:b6:36:ab:2c:eb:fe:8d:e0:b5:0a:00:e6:dd:dc: 7b:96:9c:8b:02:12:4d:33:a6:9b:82:49:64:68:38: 78:65:19:76:ae:de:af:28:00:ab:76:ba:dd:13:65: ce:96:05:98:8e:87:d9:aa:d9:c5:77:47:bc:ea:4e: 73:92:cf:af:eb:81:93:54:51:71:45:98:2b:f5:c3: 0d:4d:54:1a:01:1c:c1:4a:5b:53:20:02:8a:03:b1: 73:92:8c:b5:40:4c:5b:89:c3:b3:38:6f:c9:ae:87: 69:c6:80:96:f6:0d:f5:46:a9:70:25:c8:3b:25:e9: 8d:cc:8a:73:e6:a8:8e:81:f7:97:6b:f5:96:89:3b: 76:52:f6:5b:d3:03:23:c9:d2:92:d5:3a:c4:78:14: 86:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:8F:6A:D7:71:50:3C:88:0B:6D:BF:21:99:47:10:A1:16:47:A8:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/00bdc54c-4822-4df3-99e6-85920125a480/1209bd1b-5508-3661-bcbe-cb670d8fd182.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/00bdc54c-4822-4df3-99e6-85920125a480/00bdc54c-4822-4df3-99e6-85920125a480.crl X509v3 Authority Key Identifier: keyid:20:2A:BB:48:A9:FF:D2:35:2A:49:42:73:FE:3B:E1:13:4E:BC:BD:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/00bdc54c-4822-4df3-99e6-85920125a480.cer sbgp-ipAddrBlock: critical IPv4: 23.161.244.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a9:d6:06:38:f0:6c:1d:44:51:ac:03:45:e8:d9:47:bb:3b:c3: 45:80:b1:77:2e:16:5e:40:c2:e6:07:2f:fd:fd:f2:ee:e7:b9: a5:da:e8:ed:79:ca:3d:36:2f:26:a5:b3:9b:66:27:84:22:84: db:81:3d:59:0c:fd:4f:77:cc:75:1c:88:dd:14:88:99:c2:8f: 59:87:42:df:f6:cf:b3:23:f8:a7:25:7e:15:21:58:48:3a:19: dc:b7:96:88:97:f4:39:4d:81:0f:c5:ea:2f:e6:00:9e:1b:9e: 6a:47:2a:d3:ad:96:c7:cc:a3:99:75:1a:d6:03:57:b4:4f:45: da:28:d6:f9:a7:1a:d5:d9:b3:58:a5:5e:e8:10:01:ae:51:20: a1:9a:74:00:18:af:56:56:6a:75:46:9b:bb:87:13:15:28:c6: ec:17:01:9a:92:9b:65:79:22:eb:87:9b:c4:51:a6:59:2d:8f: 97:b8:00:b1:48:b2:14:61:c7:4c:31:2f:7a:ec:96:db:a1:01: f8:d8:8c:96:82:46:18:21:8c:90:3c:35:5f:c6:81:3b:6b:5d: 94:95:54:7f:da:0f:56:35:65:61:b7:c1:c4:12:a3:fc:38:e5: 8b:5e:3d:b1:b9:bc:9c:ca:2c:74:bd:48:08:62:1b:a5:cb:93: cc:d4:7d:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPWUz5VlUFGy9dswwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDBiZGM1NGMtNDgyMi00ZGYzLTk5ZTYtODU5MjAxMjVh NDgwMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk OThiYmY5ZjktNzIyMC00YjI0LTk2M2QtYjBkYjlkYTNlZjkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAinwKwm5zxxspmdvY6ciEcBtFhCOj9lKKKqOj vCFIbBnoCbWT5onu48ZpUFb49loN9jdLgsWV+g14WgmllgVNSKOtjatVnoQEXj8V QBchz4AVwalLJw/9gmI3hoHNqdmg0aCPf91MhchutjarLOv+jeC1CgDm3dx7lpyL AhJNM6abgklkaDh4ZRl2rt6vKACrdrrdE2XOlgWYjofZqtnFd0e86k5zks+v64GT VFFxRZgr9cMNTVQaARzBSltTIAKKA7Fzkoy1QExbicOzOG/JrodpxoCW9g31Rqlw Jcg7JemNzIpz5qiOgfeXa/WWiTt2UvZb0wMjydKS1TrEeBSGDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH+PatdxUDyIC22/IZlHEKEWR6hNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8wMGJk YzU0Yy00ODIyLTRkZjMtOTllNi04NTkyMDEyNWE0ODAvMTIwOWJkMWItNTUwOC0z NjYxLWJjYmUtY2I2NzBkOGZkMTgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMDBiZGM1NGMtNDgyMi00ZGYzLTk5 ZTYtODU5MjAxMjVhNDgwLzAwYmRjNTRjLTQ4MjItNGRmMy05OWU2LTg1OTIwMTI1 YTQ4MC5jcmwwHwYDVR0jBBgwFoAUICq7SKn/0jUqSUJz/jvhE068vWswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8wMGJkYzU0Yy00ODIyLTRkZjMtOTllNi04NTky MDEyNWE0ODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6H0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKnWBjjwbB1EUawDRejZR7s7w0WAsXcuFl5AwuYHL/398u7nuaXa6O15 yj02Lyals5tmJ4QihNuBPVkM/U93zHUciN0UiJnCj1mHQt/2z7Mj+KclfhUhWEg6 Gdy3loiX9DlNgQ/F6i/mAJ4bnmpHKtOtlsfMo5l1GtYDV7RPRdoo1vmnGtXZs1il XugQAa5RIKGadAAYr1ZWanVGm7uHExUoxuwXAZqSm2V5IuuHm8RRplktj5e4ALFI shRhx0wxL3rsltuhAfjYjJaCRhghjJA8NV/GgTtrXZSVVH/aD1Y1ZWG3wcQSo/w4 5YtePbG5vJzKLHS9SAhiG6XLk8zUfSk= -----END CERTIFICATE-----Generated at Sat Sep 26 14:40:41 2026 by rpki-client