$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/00bdc54c-4822-4df3-99e6-85920125a480/58ac913d-1827-32fa-8658-6afe1c53a5e3.roa File: 58ac913d-1827-32fa-8658-6afe1c53a5e3.roa (raw, json) Hash identifier: 14lEk+KBQn7XU5R7A5Fi+noS6YQCtJyhoB/LJ1K+1ss= Subject key identifier: 29:09:7C:1A:B9:40:15:70:C3:92:40:D6:A3:1F:7E:74:F1:78:34:CD Certificate issuer: /CN=00bdc54c-4822-4df3-99e6-85920125a480 Certificate serial: 010D0C9F4328584F4DA28BF8D9BC46C4D5F4BA80 Authority key identifier: 20:2A:BB:48:A9:FF:D2:35:2A:49:42:73:FE:3B:E1:13:4E:BC:BD:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/00bdc54c-4822-4df3-99e6-85920125a480.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/00bdc54c-4822-4df3-99e6-85920125a480/58ac913d-1827-32fa-8658-6afe1c53a5e3.roa Signing time: Sat 26 Sep 2026 13:00:12 +0000 ROA not before: Sat 26 Sep 2026 13:00:12 +0000 ROA not after: Fri 25 Dec 2026 14:00:12 +0000 asID: 402802 IP address blocks: 23.161.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/00bdc54c-4822-4df3-99e6-85920125a480/00bdc54c-4822-4df3-99e6-85920125a480.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/00bdc54c-4822-4df3-99e6-85920125a480/00bdc54c-4822-4df3-99e6-85920125a480.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/00bdc54c-4822-4df3-99e6-85920125a480.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4d:a2:8b:f8:d9:bc:46:c4:d5:f4:ba:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00bdc54c-4822-4df3-99e6-85920125a480 Validity Not Before: Sep 26 13:00:12 2026 GMT Not After : Dec 25 14:00:12 2026 GMT Subject: CN=1f671e97-e111-4aeb-ae88-63b1cda887a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:fc:eb:e2:eb:f6:0f:fc:d2:46:03:8d:28:ea: 8a:d6:be:74:1f:90:74:87:81:2a:a2:95:4c:12:c7: ab:05:71:e4:af:7b:0f:20:40:0e:b5:fb:34:12:69: 44:25:94:4d:20:c1:04:e8:56:fe:16:e9:f3:b9:ba: a2:40:04:27:fe:d5:a9:48:18:45:de:51:1c:27:0b: 26:cb:2d:bc:c7:d3:28:09:dc:e8:13:76:d1:51:b0: b1:31:3b:bb:87:82:47:67:1d:40:e7:1b:73:1e:8d: 5a:a6:83:5e:1a:b1:5d:e0:c6:40:16:36:7b:90:d4: fa:10:8d:89:8c:6d:6c:db:08:e1:fb:3d:51:07:2f: 1f:8a:97:44:0c:45:fd:39:34:d6:aa:74:64:8d:bf: 1f:c2:89:38:8c:28:89:17:b7:06:54:3f:5c:77:c5: a2:58:3c:66:08:15:ec:dc:20:ad:fa:0d:3b:2d:c2: 81:17:df:7b:ae:7d:6f:b2:5c:b7:2c:1e:9c:7f:12: f9:33:8b:10:f6:13:69:6d:16:c2:33:95:1c:5b:b4: 4f:5c:8a:1f:b2:77:af:9e:36:c0:48:69:3e:60:86: a1:29:6e:be:18:e8:16:75:b8:f9:bf:23:e5:2a:42: f4:68:a0:49:69:b3:1c:e3:ae:e2:72:0f:72:1b:87: b2:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:09:7C:1A:B9:40:15:70:C3:92:40:D6:A3:1F:7E:74:F1:78:34:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/00bdc54c-4822-4df3-99e6-85920125a480/58ac913d-1827-32fa-8658-6afe1c53a5e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/00bdc54c-4822-4df3-99e6-85920125a480/00bdc54c-4822-4df3-99e6-85920125a480.crl X509v3 Authority Key Identifier: keyid:20:2A:BB:48:A9:FF:D2:35:2A:49:42:73:FE:3B:E1:13:4E:BC:BD:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/00bdc54c-4822-4df3-99e6-85920125a480.cer sbgp-ipAddrBlock: critical IPv4: 23.161.244.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:ff:82:81:ab:46:41:3c:bb:bc:21:57:8f:ee:60:3f:0b:13: 64:ce:b3:78:8e:f1:be:ce:a1:f1:7c:1f:a0:54:ed:f5:6c:b1: 1c:4d:ff:15:be:69:e6:63:83:5c:d0:f5:27:36:14:83:f0:3d: 89:ae:9b:c6:e1:2b:1c:38:ae:66:ab:f9:af:55:b3:1a:0a:0f: d9:a6:6c:82:dc:50:44:42:2e:42:54:2b:7e:ef:1e:6d:46:8d: 87:ab:fc:51:64:02:27:e1:10:64:c9:71:a3:44:b8:f7:3c:ce: 68:32:a8:fe:23:3c:f4:8a:db:7d:8e:64:fa:49:37:e1:c2:eb: d9:3d:2b:6b:68:a5:1c:fc:70:57:8b:4a:9e:7b:62:50:e0:c9: 6b:36:1d:65:10:ef:01:54:c9:3d:a6:41:19:cf:db:46:a5:1e: ad:88:b6:bc:2a:44:20:cd:78:d0:df:88:6e:10:f5:ed:d5:3e: 67:fd:16:dd:3a:43:4f:df:a4:90:e0:14:e4:31:07:ec:09:40: 7a:47:c8:4b:27:c7:94:14:be:3e:ee:ad:d9:99:b9:8e:6b:b1: 01:8d:ed:52:2d:dc:eb:fe:24:88:d9:be:af:14:e1:d7:9f:7b: 74:bb:bd:aa:1b:df:94:65:54:2e:5c:5e:b5:18:4e:75:d0:e7: cf:79:63:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Noov42bxGxNX0uoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDBiZGM1NGMtNDgyMi00ZGYzLTk5ZTYtODU5MjAxMjVh NDgwMB4XDTI2MDkyNjEzMDAxMloXDTI2MTIyNTE0MDAxMlowLzEtMCsGA1UEAxMk MWY2NzFlOTctZTExMS00YWViLWFlODgtNjNiMWNkYTg4N2EyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Pzr4uv2D/zSRgONKOqK1r50H5B0h4EqopVM EserBXHkr3sPIEAOtfs0EmlEJZRNIMEE6Fb+FunzubqiQAQn/tWpSBhF3lEcJwsm yy28x9MoCdzoE3bRUbCxMTu7h4JHZx1A5xtzHo1apoNeGrFd4MZAFjZ7kNT6EI2J jG1s2wjh+z1RBy8fipdEDEX9OTTWqnRkjb8fwok4jCiJF7cGVD9cd8WiWDxmCBXs 3CCt+g07LcKBF997rn1vsly3LB6cfxL5M4sQ9hNpbRbCM5UcW7RPXIofsnevnjbA SGk+YIahKW6+GOgWdbj5vyPlKkL0aKBJabMc467icg9yG4eyOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCkJfBq5QBVww5JA1qMffnTxeDTNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8wMGJk YzU0Yy00ODIyLTRkZjMtOTllNi04NTkyMDEyNWE0ODAvNThhYzkxM2QtMTgyNy0z MmZhLTg2NTgtNmFmZTFjNTNhNWUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMDBiZGM1NGMtNDgyMi00ZGYzLTk5 ZTYtODU5MjAxMjVhNDgwLzAwYmRjNTRjLTQ4MjItNGRmMy05OWU2LTg1OTIwMTI1 YTQ4MC5jcmwwHwYDVR0jBBgwFoAUICq7SKn/0jUqSUJz/jvhE068vWswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8wMGJkYzU0Yy00ODIyLTRkZjMtOTllNi04NTky MDEyNWE0ODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6H0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJD/goGrRkE8u7whV4/uYD8LE2TOs3iO8b7OofF8H6BU7fVssRxN/xW+ aeZjg1zQ9Sc2FIPwPYmum8bhKxw4rmar+a9VsxoKD9mmbILcUERCLkJUK37vHm1G jYer/FFkAifhEGTJcaNEuPc8zmgyqP4jPPSK232OZPpJN+HC69k9K2topRz8cFeL Sp57YlDgyWs2HWUQ7wFUyT2mQRnP20alHq2ItrwqRCDNeNDfiG4Q9e3VPmf9Ft06 Q0/fpJDgFOQxB+wJQHpHyEsnx5QUvj7urdmZuY5rsQGN7VIt3Ov+JIjZvq8U4def e3S7vaob35RlVC5cXrUYTnXQ5895Y+k= -----END CERTIFICATE-----Generated at Thu Oct 8 13:52:55 2026 by rpki-client