$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2a576405-6d12-4321-8aff-11069dafb9f1/4902089e-3c9e-3493-bbe8-12023abf5341.roa File: 4902089e-3c9e-3493-bbe8-12023abf5341.roa (raw, json) Hash identifier: xss6FGDy9fhEmI/6jX0LOvVyGFsbHuoEewiA+LSL0ow= Subject key identifier: 72:DA:FC:7B:98:17:80:6F:08:B5:88:FB:60:DF:1E:53:C0:81:B0:FF Certificate issuer: /CN=2a576405-6d12-4321-8aff-11069dafb9f1 Certificate serial: 010D0C9F4328584F38672E067ED483BF226E2E80 Authority key identifier: BB:4D:83:61:A4:90:4F:28:37:18:5F:95:D5:B1:1A:01:1F:4B:15:48 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2a576405-6d12-4321-8aff-11069dafb9f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2a576405-6d12-4321-8aff-11069dafb9f1/4902089e-3c9e-3493-bbe8-12023abf5341.roa Signing time: Fri 18 Sep 2026 22:28:37 +0000 ROA not before: Fri 18 Sep 2026 22:28:37 +0000 ROA not after: Thu 17 Dec 2026 23:28:37 +0000 asID: 31898 IP address blocks: 23.158.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2a576405-6d12-4321-8aff-11069dafb9f1/2a576405-6d12-4321-8aff-11069dafb9f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2a576405-6d12-4321-8aff-11069dafb9f1/2a576405-6d12-4321-8aff-11069dafb9f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2a576405-6d12-4321-8aff-11069dafb9f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:38:67:2e:06:7e:d4:83:bf:22:6e:2e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a576405-6d12-4321-8aff-11069dafb9f1 Validity Not Before: Sep 18 22:28:37 2026 GMT Not After : Dec 17 23:28:37 2026 GMT Subject: CN=e3b2527d-9a15-4983-9c36-2f8238dcf0ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:da:cc:96:26:4d:b6:9c:ed:8b:56:6a:d1:ac: fb:ed:51:0f:d5:45:c6:46:55:02:26:01:6f:aa:28: 63:0d:8e:e6:a5:a0:31:4a:96:0d:b9:56:48:33:91: 11:02:09:12:4a:68:b8:d4:2c:07:dc:14:2f:70:2f: af:d2:b1:cd:09:5b:3c:a6:a8:d8:d6:8a:c3:66:5e: 39:60:bb:99:60:3c:78:8c:44:91:53:4e:3f:4b:30: 96:2e:26:49:21:a2:30:fe:be:5c:9f:25:1f:d0:5e: 36:de:66:79:1e:3c:ec:5e:8b:d7:8c:43:dc:50:88: f0:35:7a:14:c6:ef:65:94:6d:3e:7b:b3:4f:75:e6: b8:06:d5:07:35:22:75:45:bf:bb:1d:2f:58:d9:3d: ac:01:e3:e1:64:94:24:93:76:ac:50:d8:70:47:8e: 56:d2:06:b8:1d:db:59:70:28:86:cd:4d:37:bf:1c: 5e:75:83:a7:21:c8:7c:f5:4a:e3:06:de:fd:fb:0f: 0c:e8:17:66:90:f3:e1:33:09:44:af:eb:b6:06:73: 77:2e:6b:9c:53:c0:32:60:af:4c:69:2c:0b:61:ab: 87:44:dc:1c:da:a2:a1:ae:eb:5c:8b:69:7e:2b:48: a1:18:7a:3c:d6:9a:64:f4:4d:69:81:3d:e4:14:68: e8:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:DA:FC:7B:98:17:80:6F:08:B5:88:FB:60:DF:1E:53:C0:81:B0:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2a576405-6d12-4321-8aff-11069dafb9f1/4902089e-3c9e-3493-bbe8-12023abf5341.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2a576405-6d12-4321-8aff-11069dafb9f1/2a576405-6d12-4321-8aff-11069dafb9f1.crl X509v3 Authority Key Identifier: keyid:BB:4D:83:61:A4:90:4F:28:37:18:5F:95:D5:B1:1A:01:1F:4B:15:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2a576405-6d12-4321-8aff-11069dafb9f1.cer sbgp-ipAddrBlock: critical IPv4: 23.158.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:9e:21:2e:1a:eb:e3:97:b1:bf:0e:a7:23:5a:65:6a:95:7d: cc:f1:db:83:af:6c:1b:60:49:2a:78:3b:92:87:21:74:bb:26: e6:ee:f0:39:40:b2:b0:3c:83:b8:2c:3b:e1:f8:56:26:84:ba: af:fb:06:45:e1:ff:d6:53:21:45:96:14:d7:ad:66:02:f7:3d: 91:4a:75:38:62:3e:2f:6b:95:c0:4d:4b:18:df:68:31:3e:0c: 7d:03:30:50:a8:e1:07:b3:7f:0d:8f:2e:88:bf:b5:43:5c:de: 43:b5:e5:a1:23:cd:20:fe:eb:80:0f:ce:28:f3:c9:52:23:fa: 6e:19:c2:f3:ab:6c:7e:ef:27:ae:67:54:b4:97:2e:a1:7e:9d: 14:19:0d:67:2d:ea:97:2c:92:2a:f4:41:6c:58:b3:ce:d6:de: 21:a7:73:ea:22:a0:b9:42:e3:ef:37:d3:2f:c6:b2:a9:29:51: c3:13:1f:97:38:58:f0:03:fd:9d:a6:8c:d5:30:38:40:53:c4: af:03:77:09:78:04:31:f7:be:8c:e2:6d:77:09:93:94:7f:85: c5:ff:6b:4e:f8:f6:3a:87:a7:e9:d9:cf:25:f6:0a:fd:cd:04: 8e:18:24:12:5b:b4:9a:f5:43:4e:62:01:c8:e4:8a:82:72:af: 4c:1d:98:af -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE84Zy4GftSDvyJuLoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmE1NzY0MDUtNmQxMi00MzIxLThhZmYtMTEwNjlkYWZi OWYxMB4XDTI2MDkxODIyMjgzN1oXDTI2MTIxNzIzMjgzN1owLzEtMCsGA1UEAxMk ZTNiMjUyN2QtOWExNS00OTgzLTljMzYtMmY4MjM4ZGNmMGVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApNrMliZNtpzti1Zq0az77VEP1UXGRlUCJgFv qihjDY7mpaAxSpYNuVZIM5ERAgkSSmi41CwH3BQvcC+v0rHNCVs8pqjY1orDZl45 YLuZYDx4jESRU04/SzCWLiZJIaIw/r5cnyUf0F423mZ5HjzsXovXjEPcUIjwNXoU xu9llG0+e7NPdea4BtUHNSJ1Rb+7HS9Y2T2sAePhZJQkk3asUNhwR45W0ga4HdtZ cCiGzU03vxxedYOnIch89UrjBt79+w8M6BdmkPPhMwlEr+u2BnN3LmucU8AyYK9M aSwLYauHRNwc2qKhrutci2l+K0ihGHo81ppk9E1pgT3kFGjoRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHLa/HuYF4BvCLWI+2DfHlPAgbD/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yYTU3 NjQwNS02ZDEyLTQzMjEtOGFmZi0xMTA2OWRhZmI5ZjEvNDkwMjA4OWUtM2M5ZS0z NDkzLWJiZTgtMTIwMjNhYmY1MzQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMmE1NzY0MDUtNmQxMi00MzIxLThh ZmYtMTEwNjlkYWZiOWYxLzJhNTc2NDA1LTZkMTItNDMyMS04YWZmLTExMDY5ZGFm YjlmMS5jcmwwHwYDVR0jBBgwFoAUu02DYaSQTyg3GF+V1bEaAR9LFUgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yYTU3NjQwNS02ZDEyLTQzMjEtOGFmZi0xMTA2 OWRhZmI5ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF54UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAACeIS4a6+OXsb8OpyNaZWqVfczx24OvbBtgSSp4O5KHIXS7Jubu8DlA srA8g7gsO+H4ViaEuq/7BkXh/9ZTIUWWFNetZgL3PZFKdThiPi9rlcBNSxjfaDE+ DH0DMFCo4Qezfw2PLoi/tUNc3kO15aEjzSD+64APzijzyVIj+m4ZwvOrbH7vJ65n VLSXLqF+nRQZDWct6pcskir0QWxYs87W3iGnc+oioLlC4+830y/GsqkpUcMTH5c4 WPAD/Z2mjNUwOEBTxK8Ddwl4BDH3vozibXcJk5R/hcX/a0749jqHp+nZzyX2Cv3N BI4YJBJbtJr1Q05iAcjkioJyr0wdmK8= -----END CERTIFICATE-----Generated at Sun Sep 27 03:02:35 2026 by rpki-client