$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/23b9386a-5c2a-4a69-bd44-c9076f51301f/a2d4ccb5-c80f-3b52-abf3-c5cf32deb612.roa File: a2d4ccb5-c80f-3b52-abf3-c5cf32deb612.roa (raw, json) Hash identifier: nB6ghBi6w3qHzhRafsKHERP91UCKWISMAFFh27HBL/c= Subject key identifier: 35:40:DF:71:8C:FB:66:C7:B4:80:1F:3E:CA:01:FE:6E:F6:D6:A1:AE Certificate issuer: /CN=23b9386a-5c2a-4a69-bd44-c9076f51301f Certificate serial: 010D0C9F4328584F4C3D690BDB7682B64485A480 Authority key identifier: A6:51:EB:2B:1B:08:8B:5F:B9:0C:F3:88:D2:58:8B:7F:68:A5:F1:A3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/23b9386a-5c2a-4a69-bd44-c9076f51301f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/23b9386a-5c2a-4a69-bd44-c9076f51301f/a2d4ccb5-c80f-3b52-abf3-c5cf32deb612.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 393775 IP address blocks: 24.235.14.0/23 maxlen: 24 65.61.48.0/23 maxlen: 24 143.223.142.0/23 maxlen: 24 192.103.11.0/24 maxlen: 24 199.116.136.0/21 maxlen: 24 209.127.254.0/23 maxlen: 24 2604:9d00::/32 maxlen: 36 2606:4180::/32 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/23b9386a-5c2a-4a69-bd44-c9076f51301f/23b9386a-5c2a-4a69-bd44-c9076f51301f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/23b9386a-5c2a-4a69-bd44-c9076f51301f/23b9386a-5c2a-4a69-bd44-c9076f51301f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/23b9386a-5c2a-4a69-bd44-c9076f51301f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:69:0b:db:76:82:b6:44:85:a4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23b9386a-5c2a-4a69-bd44-c9076f51301f Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=b8d4acf3-2b09-4a16-b1ad-609f289118d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:f8:f8:32:2b:4b:5c:b4:84:bf:ac:14:7f:09: 6c:b2:a3:52:7a:fe:62:16:9e:06:16:b1:14:b0:e5: 9d:33:ce:94:94:41:f6:35:3e:35:a6:cd:8c:48:b3: 9d:13:95:92:00:00:58:da:66:72:7a:f5:ea:30:31: 1b:4d:ac:27:81:98:0c:49:b1:3a:8a:16:5c:5d:ff: ec:88:f6:03:8e:d5:cc:27:6b:a3:49:74:19:27:85: 6d:39:87:24:c2:3c:4b:01:5b:c2:e7:d4:53:e6:b2: 73:0e:1e:c5:96:70:a8:1b:11:3b:49:62:08:fe:76: 07:8c:87:51:e1:1d:86:78:4d:4f:33:95:96:80:24: 11:9d:64:38:78:af:1e:45:b8:51:af:0f:30:47:81: 55:bf:04:54:59:91:eb:05:b3:e9:37:ae:e5:a9:ce: fe:23:a9:c3:37:f4:8c:76:c7:9d:60:00:c2:6d:ed: ec:23:13:66:09:b7:d0:2f:98:b6:10:9c:6c:5e:80: a9:8b:24:07:b1:79:26:38:24:11:61:a9:83:36:6f: 44:d4:29:e2:08:33:31:52:9c:f2:d8:5a:e0:ad:04: e5:30:54:81:16:12:8f:80:21:6e:a1:81:db:00:eb: b7:01:07:77:e3:82:d7:b1:7f:6c:e2:be:88:22:39: 0a:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:40:DF:71:8C:FB:66:C7:B4:80:1F:3E:CA:01:FE:6E:F6:D6:A1:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/23b9386a-5c2a-4a69-bd44-c9076f51301f/a2d4ccb5-c80f-3b52-abf3-c5cf32deb612.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/23b9386a-5c2a-4a69-bd44-c9076f51301f/23b9386a-5c2a-4a69-bd44-c9076f51301f.crl X509v3 Authority Key Identifier: keyid:A6:51:EB:2B:1B:08:8B:5F:B9:0C:F3:88:D2:58:8B:7F:68:A5:F1:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/23b9386a-5c2a-4a69-bd44-c9076f51301f.cer sbgp-ipAddrBlock: critical IPv4: 24.235.14.0/23 65.61.48.0/23 143.223.142.0/23 192.103.11.0/24 199.116.136.0/21 209.127.254.0/23 IPv6: 2604:9d00::/32 2606:4180::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:f4:dc:f8:b5:e6:12:e7:9b:af:0c:d2:42:03:4a:dd:26:d2: f7:9c:ae:e0:35:06:90:96:69:56:6f:ad:9d:58:a5:66:6a:16: 00:47:51:05:83:b6:22:a6:79:4e:4e:f4:46:7e:8e:ad:fd:d3: 7f:5d:e5:49:9b:d7:b8:ea:56:01:4a:73:53:9e:3a:94:5a:42: 6b:bf:25:20:5f:55:f7:a8:1c:24:d0:a6:02:20:1a:8a:ef:6f: 57:6c:43:3e:94:8c:aa:4f:73:1a:13:3e:6c:01:84:79:24:26: b0:d0:71:3d:97:65:cc:18:e4:d3:00:9e:aa:fc:3d:d0:5f:20: 4e:c5:1a:b6:a3:d6:82:f8:ef:0b:39:34:ed:44:9d:a1:f2:98: 85:42:17:b0:29:7a:0d:7a:08:31:08:b9:4b:72:eb:4a:d6:27: 34:39:e4:4f:2c:39:2d:ab:91:d3:37:a3:12:c9:88:4f:f4:f2: 32:8d:9f:de:43:4e:9f:28:22:d9:14:7f:cd:76:96:64:66:bc: e6:70:a7:85:41:9e:40:2a:16:81:cd:ae:58:d8:e4:f8:c8:a3: 32:17:78:09:b9:29:92:36:c8:d3:4f:0b:5d:93:5b:d3:67:72: c7:94:b2:21:ae:df:8e:73:e2:24:b2:36:11:94:de:ae:5a:a7: 2c:30:94:07 -----BEGIN CERTIFICATE----- MIIGdzCCBV+gAwIBAgIUAQ0Mn0MoWE9MPWkL23aCtkSFpIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNiOTM4NmEtNWMyYS00YTY5LWJkNDQtYzkwNzZmNTEz MDFmMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk YjhkNGFjZjMtMmIwOS00YTE2LWIxYWQtNjA5ZjI4OTExOGQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhfj4MitLXLSEv6wUfwlssqNSev5iFp4GFrEU sOWdM86UlEH2NT41ps2MSLOdE5WSAABY2mZyevXqMDEbTawngZgMSbE6ihZcXf/s iPYDjtXMJ2ujSXQZJ4VtOYckwjxLAVvC59RT5rJzDh7FlnCoGxE7SWII/nYHjIdR 4R2GeE1PM5WWgCQRnWQ4eK8eRbhRrw8wR4FVvwRUWZHrBbPpN67lqc7+I6nDN/SM dsedYADCbe3sIxNmCbfQL5i2EJxsXoCpiyQHsXkmOCQRYamDNm9E1CniCDMxUpzy 2FrgrQTlMFSBFhKPgCFuoYHbAOu3AQd344LXsX9s4r6IIjkKCQIDAQABo4IDiTCC A4UwHQYDVR0OBBYEFDVA33GM+2bHtIAfPsoB/m721qGuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yM2I5 Mzg2YS01YzJhLTRhNjktYmQ0NC1jOTA3NmY1MTMwMWYvYTJkNGNjYjUtYzgwZi0z YjUyLWFiZjMtYzVjZjMyZGViNjEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjNiOTM4NmEtNWMyYS00YTY5LWJk NDQtYzkwNzZmNTEzMDFmLzIzYjkzODZhLTVjMmEtNGE2OS1iZDQ0LWM5MDc2ZjUx MzAxZi5jcmwwHwYDVR0jBBgwFoAUplHrKxsIi1+5DPOI0liLf2il8aMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yM2I5Mzg2YS01YzJhLTRhNjktYmQ0NC1jOTA3 NmY1MTMwMWYuY2VyMFMGCCsGAQUFBwEHAQH/BEQwQjAqBAIAATAkAwQBGOsOAwQB QT0wAwQBj9+OAwQAwGcLAwQDx3SIAwQB0X/+MBQEAgACMA4DBQAmBJ0AAwUAJgZB gDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBz Oi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3 DQEBCwUAA4IBAQCi9Nz4teYS55uvDNJCA0rdJtL3nK7gNQaQlmlWb62dWKVmahYA R1EFg7YipnlOTvRGfo6t/dN/XeVJm9e46lYBSnNTnjqUWkJrvyUgX1X3qBwk0KYC IBqK729XbEM+lIyqT3MaEz5sAYR5JCaw0HE9l2XMGOTTAJ6q/D3QXyBOxRq2o9aC +O8LOTTtRJ2h8piFQhewKXoNeggxCLlLcutK1ic0OeRPLDktq5HTN6MSyYhP9PIy jZ/eQ06fKCLZFH/NdpZkZrzmcKeFQZ5AKhaBza5Y2OT4yKMyF3gJuSmSNsjTTwtd k1vTZ3LHlLIhrt+Oc+IksjYRlN6uWqcsMJQH -----END CERTIFICATE-----Generated at Sat Sep 26 14:10:34 2026 by rpki-client