$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/49a1a9e2-4124-4a3b-8551-b521e6017dad/1a7af4d7-bca4-3aa7-8867-edca6d745c04.roa File: 1a7af4d7-bca4-3aa7-8867-edca6d745c04.roa (raw, json) Hash identifier: nxzkWULxN/9zpaedSBkgi8Zw5VYxM4AjPCk1AxktNHQ= Subject key identifier: 71:3D:12:26:24:4B:50:75:4B:10:15:11:E1:F0:EB:2E:4C:B3:64:1F Certificate issuer: /CN=49a1a9e2-4124-4a3b-8551-b521e6017dad Certificate serial: 010D0C9F4328584F30526EF60C9C5FE24B464D80 Authority key identifier: 94:03:9A:A9:C6:8C:B6:6F:DB:04:BB:4A:06:BA:51:D6:01:4B:DB:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/49a1a9e2-4124-4a3b-8551-b521e6017dad.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/49a1a9e2-4124-4a3b-8551-b521e6017dad/1a7af4d7-bca4-3aa7-8867-edca6d745c04.roa Signing time: Wed 16 Sep 2026 01:00:12 +0000 ROA not before: Wed 16 Sep 2026 01:00:12 +0000 ROA not after: Tue 15 Dec 2026 02:00:12 +0000 asID: 964 IP address blocks: 23.138.40.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/49a1a9e2-4124-4a3b-8551-b521e6017dad/49a1a9e2-4124-4a3b-8551-b521e6017dad.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/49a1a9e2-4124-4a3b-8551-b521e6017dad/49a1a9e2-4124-4a3b-8551-b521e6017dad.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/49a1a9e2-4124-4a3b-8551-b521e6017dad.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:30:52:6e:f6:0c:9c:5f:e2:4b:46:4d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49a1a9e2-4124-4a3b-8551-b521e6017dad Validity Not Before: Sep 16 01:00:12 2026 GMT Not After : Dec 15 02:00:12 2026 GMT Subject: CN=11d34900-b1fe-4de2-9af5-7cc42e96c2ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:40:ab:ba:6d:e1:a4:32:6d:cb:5f:99:a2:67: 53:66:73:4f:e5:18:e0:6f:88:20:95:a4:2b:02:b2: be:33:12:81:fc:ac:51:0a:c6:ce:66:ba:eb:f8:05: 18:e2:c7:0b:e0:90:43:a3:25:06:16:f8:5b:49:8a: 8b:c2:05:ee:99:79:03:24:5d:23:32:de:86:9d:5f: 58:24:50:a7:90:ea:3a:f1:3e:c6:53:d5:cd:61:81: d7:67:90:21:de:7f:d6:23:46:08:43:3b:98:26:d3: be:e8:9c:da:5c:f3:b9:b4:90:08:4b:6c:6f:76:c1: 0c:a5:48:dd:35:52:66:d6:07:fa:18:c5:c8:14:2e: cc:43:46:07:83:28:7e:6a:ea:2c:39:a2:99:cc:aa: 7c:8c:cf:ed:c6:5a:29:7b:f1:82:65:98:2e:fc:6a: ff:2c:32:40:ac:6f:9e:39:aa:16:a8:76:d0:e1:98: 4d:47:1f:81:86:ab:8b:1a:6f:44:8f:7f:65:4d:99: 98:5f:f6:bd:e2:35:2f:48:03:33:70:6c:c2:f4:cb: 40:78:0c:4d:49:11:9a:3f:eb:65:0f:7d:cf:68:dc: 4b:66:91:f9:77:57:a8:60:d9:7f:f9:ac:9e:b8:01: 3a:8f:e0:19:99:4a:ba:1d:80:ce:ff:b7:33:54:d6: 45:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:3D:12:26:24:4B:50:75:4B:10:15:11:E1:F0:EB:2E:4C:B3:64:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/49a1a9e2-4124-4a3b-8551-b521e6017dad/1a7af4d7-bca4-3aa7-8867-edca6d745c04.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/49a1a9e2-4124-4a3b-8551-b521e6017dad/49a1a9e2-4124-4a3b-8551-b521e6017dad.crl X509v3 Authority Key Identifier: keyid:94:03:9A:A9:C6:8C:B6:6F:DB:04:BB:4A:06:BA:51:D6:01:4B:DB:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/49a1a9e2-4124-4a3b-8551-b521e6017dad.cer sbgp-ipAddrBlock: critical IPv4: 23.138.40.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:93:2b:1f:47:7d:a6:7b:4d:a4:56:fe:60:a9:05:c9:4f:70: 35:2e:ae:7d:f7:8b:82:1b:a6:d0:9b:51:70:b9:95:a9:6a:1a: 09:94:c5:4e:c2:4c:9c:7d:14:f4:b6:09:18:ff:b0:81:05:b1: 77:5a:93:e7:f8:43:8e:64:b8:61:23:f9:b1:c4:88:aa:1c:90: 24:d2:b7:3c:19:93:f8:cb:13:d9:e6:1c:77:7f:ca:44:f0:4f: 5a:6b:f9:cd:31:ad:51:0f:00:cd:88:f2:20:0d:eb:b3:94:fa: 95:69:b3:f1:26:b8:ca:60:2f:09:ea:96:a2:d2:a9:a2:1a:59: f9:35:41:63:42:6e:f9:4c:68:8f:22:e1:9c:cf:8a:1b:1a:7a: 53:84:6d:0a:00:b8:ca:56:3e:e0:51:5f:bf:a2:71:44:85:12: 78:30:bd:4a:9d:e8:d4:58:be:96:f6:2f:fd:ce:4c:2d:40:5b: 2c:2a:eb:49:fc:63:5d:a5:ba:27:0c:68:09:e3:37:84:86:5d: 9a:5a:64:1a:f7:88:1a:a2:00:74:e4:cf:62:4e:ba:08:62:f7: 5b:e4:cc:e6:fa:b2:4a:e4:13:b5:ea:7c:16:01:1f:e4:97:60: 90:1c:23:3b:4c:70:6b:b1:cc:c0:43:bf:9e:7b:72:d1:98:be: bc:90:bd:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8wUm72DJxf4ktGTYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDlhMWE5ZTItNDEyNC00YTNiLTg1NTEtYjUyMWU2MDE3 ZGFkMB4XDTI2MDkxNjAxMDAxMloXDTI2MTIxNTAyMDAxMlowLzEtMCsGA1UEAxMk MTFkMzQ5MDAtYjFmZS00ZGUyLTlhZjUtN2NjNDJlOTZjMmFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsUCrum3hpDJty1+ZomdTZnNP5Rjgb4gglaQr ArK+MxKB/KxRCsbOZrrr+AUY4scL4JBDoyUGFvhbSYqLwgXumXkDJF0jMt6GnV9Y JFCnkOo68T7GU9XNYYHXZ5Ah3n/WI0YIQzuYJtO+6JzaXPO5tJAIS2xvdsEMpUjd NVJm1gf6GMXIFC7MQ0YHgyh+auosOaKZzKp8jM/txlope/GCZZgu/Gr/LDJArG+e OaoWqHbQ4ZhNRx+BhquLGm9Ej39lTZmYX/a94jUvSAMzcGzC9MtAeAxNSRGaP+tl D33PaNxLZpH5d1eoYNl/+ayeuAE6j+AZmUq6HYDO/7czVNZF9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHE9EiYkS1B1SxAVEeHw6y5Ms2QfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi80OWEx YTllMi00MTI0LTRhM2ItODU1MS1iNTIxZTYwMTdkYWQvMWE3YWY0ZDctYmNhNC0z YWE3LTg4NjctZWRjYTZkNzQ1YzA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvNDlhMWE5ZTItNDEyNC00YTNiLTg1 NTEtYjUyMWU2MDE3ZGFkLzQ5YTFhOWUyLTQxMjQtNGEzYi04NTUxLWI1MjFlNjAx N2RhZC5jcmwwHwYDVR0jBBgwFoAUlAOaqcaMtm/bBLtKBrpR1gFL27cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi80OWExYTllMi00MTI0LTRhM2ItODU1MS1iNTIx ZTYwMTdkYWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF4ooMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEKTKx9HfaZ7TaRW/mCpBclPcDUurn33i4IbptCbUXC5lalqGgmUxU7C TJx9FPS2CRj/sIEFsXdak+f4Q45kuGEj+bHEiKockCTStzwZk/jLE9nmHHd/ykTw T1pr+c0xrVEPAM2I8iAN67OU+pVps/EmuMpgLwnqlqLSqaIaWfk1QWNCbvlMaI8i 4ZzPihsaelOEbQoAuMpWPuBRX7+icUSFEngwvUqd6NRYvpb2L/3OTC1AWywq60n8 Y12luicMaAnjN4SGXZpaZBr3iBqiAHTkz2JOughi91vkzOb6skrkE7XqfBYBH+SX YJAcIztMcGuxzMBDv557ctGYvryQvf0= -----END CERTIFICATE-----Generated at Wed Sep 30 19:43:23 2026 by rpki-client