$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/00bdc54c-4822-4df3-99e6-85920125a480/d4de7f8d-d4fb-3c2f-b3e9-955aeb77c13a.roa File: d4de7f8d-d4fb-3c2f-b3e9-955aeb77c13a.roa (raw, json) Hash identifier: Yz2mEBCdzkfrjMeJBCAvhT2CCUcZnWgll+iQL3K9pAw= Subject key identifier: C4:E2:D0:06:9D:C4:A3:A3:47:A4:C0:F4:45:9A:4C:1F:3C:01:7E:D6 Certificate issuer: /CN=00bdc54c-4822-4df3-99e6-85920125a480 Certificate serial: 010D0C9F4328584F4DA28BE5DD568CEAFCAC9F40 Authority key identifier: 20:2A:BB:48:A9:FF:D2:35:2A:49:42:73:FE:3B:E1:13:4E:BC:BD:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/00bdc54c-4822-4df3-99e6-85920125a480.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/00bdc54c-4822-4df3-99e6-85920125a480/d4de7f8d-d4fb-3c2f-b3e9-955aeb77c13a.roa Signing time: Sat 26 Sep 2026 13:00:12 +0000 ROA not before: Sat 26 Sep 2026 13:00:12 +0000 ROA not after: Fri 25 Dec 2026 14:00:12 +0000 asID: 402456 IP address blocks: 23.161.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/00bdc54c-4822-4df3-99e6-85920125a480/00bdc54c-4822-4df3-99e6-85920125a480.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/00bdc54c-4822-4df3-99e6-85920125a480/00bdc54c-4822-4df3-99e6-85920125a480.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/00bdc54c-4822-4df3-99e6-85920125a480.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4d:a2:8b:e5:dd:56:8c:ea:fc:ac:9f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00bdc54c-4822-4df3-99e6-85920125a480 Validity Not Before: Sep 26 13:00:12 2026 GMT Not After : Dec 25 14:00:12 2026 GMT Subject: CN=a31b645b-1101-4e9e-b3ac-d1c58cb96b8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:b4:30:80:fc:76:4c:b2:da:4c:ce:7e:22:dd: 97:f1:8b:6e:d3:4b:ae:be:0d:0f:24:c0:d3:f9:78: 54:be:58:7f:34:ea:a2:af:1b:09:68:79:38:5c:81: 71:51:54:e9:c0:96:da:87:ff:2c:52:7a:1d:a9:f3: 58:8c:fe:f2:4f:c9:06:68:fd:62:11:5b:ee:bf:bb: c0:96:14:75:43:01:ba:f9:93:ff:1f:1f:cd:a0:0d: 85:9e:09:c3:1d:01:57:ac:8b:80:54:4a:c8:15:ba: 66:e7:e2:74:4c:ea:27:9c:ab:88:c6:08:88:51:0f: 77:bb:73:35:99:b5:15:fa:99:80:d2:7b:a5:b5:41: 95:21:a2:d5:99:1f:86:b7:20:9f:05:04:8e:64:8e: 7e:2a:99:3d:2b:78:68:46:51:3b:a1:b1:a0:fa:12: 76:f8:c7:d5:87:5f:fc:3d:b3:71:0e:5b:ad:1b:84: 6d:5a:0c:ca:01:d3:4f:c4:6b:0b:a0:89:51:8a:0f: 6b:4a:2a:b5:ab:c7:d7:bd:71:3e:92:17:dc:06:3f: 32:20:ee:82:17:1f:69:61:db:82:1e:bc:56:46:d0: 01:e7:99:80:76:50:25:80:a2:15:2d:96:17:55:b4: 0f:a2:26:05:da:87:f0:aa:70:85:98:ec:a5:f7:cf: 02:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:E2:D0:06:9D:C4:A3:A3:47:A4:C0:F4:45:9A:4C:1F:3C:01:7E:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/00bdc54c-4822-4df3-99e6-85920125a480/d4de7f8d-d4fb-3c2f-b3e9-955aeb77c13a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/00bdc54c-4822-4df3-99e6-85920125a480/00bdc54c-4822-4df3-99e6-85920125a480.crl X509v3 Authority Key Identifier: keyid:20:2A:BB:48:A9:FF:D2:35:2A:49:42:73:FE:3B:E1:13:4E:BC:BD:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/00bdc54c-4822-4df3-99e6-85920125a480.cer sbgp-ipAddrBlock: critical IPv4: 23.161.244.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:86:37:25:98:fb:ba:6c:ac:2c:5b:e7:0c:5f:8c:1f:df:9e: 7f:3f:1c:43:1a:38:12:a5:90:a7:91:80:a5:6c:98:7d:fc:fa: 94:bd:5d:5e:96:fc:60:83:ed:8b:f6:5f:b7:dd:e4:c6:30:4b: 3f:7f:81:79:5b:49:26:79:52:3d:e5:b7:73:fc:14:f1:66:9b: fa:86:bd:c0:2a:bb:a9:bc:cb:dc:eb:b5:50:87:53:39:0b:9a: f7:b7:9a:f9:9b:6b:89:89:97:d0:19:99:0c:5b:4f:b9:d6:d0: 54:08:67:89:d0:65:1e:3b:69:ea:d6:32:f5:7e:eb:67:37:cf: 84:f8:40:6f:02:75:bf:38:7b:14:2a:91:aa:36:de:1f:e2:bc: fa:fe:e1:12:75:63:02:de:a8:37:6e:5d:69:16:64:56:0a:85: ea:a0:36:f5:bc:79:21:2d:bd:b5:fe:b9:eb:b9:5f:68:94:a0: 6e:13:f7:bd:99:41:14:cd:09:95:c2:ea:e7:09:16:44:43:0b: a5:c6:6f:bc:b5:6f:b6:a0:40:1b:67:63:ab:80:85:63:2e:ca: 3f:9d:48:23:be:db:87:a6:80:eb:bf:63:c9:b9:94:90:b8:43: bc:e9:d8:57:1f:3e:b1:47:a1:c9:8b:a7:e7:e2:8b:55:54:0b: 24:df:00:9b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Noovl3VaM6vysn0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDBiZGM1NGMtNDgyMi00ZGYzLTk5ZTYtODU5MjAxMjVh NDgwMB4XDTI2MDkyNjEzMDAxMloXDTI2MTIyNTE0MDAxMlowLzEtMCsGA1UEAxMk YTMxYjY0NWItMTEwMS00ZTllLWIzYWMtZDFjNThjYjk2YjhmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtrQwgPx2TLLaTM5+It2X8Ytu00uuvg0PJMDT +XhUvlh/NOqirxsJaHk4XIFxUVTpwJbah/8sUnodqfNYjP7yT8kGaP1iEVvuv7vA lhR1QwG6+ZP/Hx/NoA2FngnDHQFXrIuAVErIFbpm5+J0TOonnKuIxgiIUQ93u3M1 mbUV+pmA0nultUGVIaLVmR+GtyCfBQSOZI5+Kpk9K3hoRlE7obGg+hJ2+MfVh1/8 PbNxDlutG4RtWgzKAdNPxGsLoIlRig9rSiq1q8fXvXE+khfcBj8yIO6CFx9pYduC HrxWRtAB55mAdlAlgKIVLZYXVbQPoiYF2ofwqnCFmOyl988C+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMTi0AadxKOjR6TA9EWaTB88AX7WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8wMGJk YzU0Yy00ODIyLTRkZjMtOTllNi04NTkyMDEyNWE0ODAvZDRkZTdmOGQtZDRmYi0z YzJmLWIzZTktOTU1YWViNzdjMTNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMDBiZGM1NGMtNDgyMi00ZGYzLTk5 ZTYtODU5MjAxMjVhNDgwLzAwYmRjNTRjLTQ4MjItNGRmMy05OWU2LTg1OTIwMTI1 YTQ4MC5jcmwwHwYDVR0jBBgwFoAUICq7SKn/0jUqSUJz/jvhE068vWswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8wMGJkYzU0Yy00ODIyLTRkZjMtOTllNi04NTky MDEyNWE0ODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6H0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFeGNyWY+7psrCxb5wxfjB/fnn8/HEMaOBKlkKeRgKVsmH38+pS9XV6W /GCD7Yv2X7fd5MYwSz9/gXlbSSZ5Uj3lt3P8FPFmm/qGvcAqu6m8y9zrtVCHUzkL mve3mvmba4mJl9AZmQxbT7nW0FQIZ4nQZR47aerWMvV+62c3z4T4QG8Cdb84exQq kao23h/ivPr+4RJ1YwLeqDduXWkWZFYKheqgNvW8eSEtvbX+ueu5X2iUoG4T972Z QRTNCZXC6ucJFkRDC6XGb7y1b7agQBtnY6uAhWMuyj+dSCO+24emgOu/Y8m5lJC4 Q7zp2FcfPrFHocmLp+fii1VUCyTfAJs= -----END CERTIFICATE-----Generated at Sun Sep 27 00:27:19 2026 by rpki-client