$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/afc1ad95-28db-45b7-b1d9-4d82eb1631e8/d8c81ca0-e26d-316c-a8b0-6be255cb8421.roa File: d8c81ca0-e26d-316c-a8b0-6be255cb8421.roa (raw, json) Hash identifier: aNeM4YoWAHZMUksYQVMhV7eZsAr67uqZ8Co0MI5f+7o= Subject key identifier: 0D:5E:08:AC:FB:1B:FD:BB:82:10:0E:17:B3:AA:D2:7C:10:BD:3C:36 Certificate issuer: /CN=afc1ad95-28db-45b7-b1d9-4d82eb1631e8 Certificate serial: 010D0C9F4328584F49892189719BBAC01A5FF87A Authority key identifier: 19:AF:B7:62:91:E6:FE:1F:FF:48:41:17:9C:7D:3E:A5:33:AF:B3:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/afc1ad95-28db-45b7-b1d9-4d82eb1631e8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/afc1ad95-28db-45b7-b1d9-4d82eb1631e8/d8c81ca0-e26d-316c-a8b0-6be255cb8421.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 394880 IP address blocks: 123.100.232.0/24 maxlen: 24 205.210.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/afc1ad95-28db-45b7-b1d9-4d82eb1631e8/afc1ad95-28db-45b7-b1d9-4d82eb1631e8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/afc1ad95-28db-45b7-b1d9-4d82eb1631e8/afc1ad95-28db-45b7-b1d9-4d82eb1631e8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/afc1ad95-28db-45b7-b1d9-4d82eb1631e8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:89:21:89:71:9b:ba:c0:1a:5f:f8:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=afc1ad95-28db-45b7-b1d9-4d82eb1631e8 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=e8aa95f7-4483-4166-a53a-1be88bca21a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:a0:25:12:1c:03:58:73:f7:dd:82:7f:e0:db: 6b:91:66:00:75:cf:7e:45:5e:de:82:b0:27:96:0c: 39:6c:75:0c:27:8e:8b:82:05:4b:dd:26:75:4c:70: 9c:33:e4:7b:14:11:b4:78:62:a9:1e:ea:6e:50:ae: 59:8b:69:7f:d7:2e:26:02:87:b2:05:b5:8e:36:b6: d9:6d:cf:34:90:fe:8d:26:43:52:ff:10:80:f2:2d: 4c:07:34:1e:9c:6a:19:84:48:cd:0d:c7:d1:3e:f6: 5e:47:97:23:44:08:bf:d5:e1:e3:ed:d7:b0:a0:c0: 87:c3:be:9d:d1:f7:91:32:30:ac:ca:82:00:23:f3: 24:24:08:bf:6c:f4:cc:ef:ab:39:53:95:93:b0:2a: d5:5b:f4:a8:61:c7:c4:dc:2f:0a:ca:4b:c9:9c:2b: 03:54:cf:ca:06:6e:69:24:53:ca:67:ea:bd:ef:14: 8f:56:51:9c:aa:99:f1:85:9a:fc:74:0a:c3:87:4a: 02:b2:50:3d:47:9a:4a:fd:57:18:e9:64:1a:da:96: 76:4e:69:31:18:2c:27:ad:10:8a:26:7f:eb:14:36: 61:8d:96:86:05:de:4d:0f:ca:43:8e:65:3e:9d:0c: 65:11:7e:a0:7f:67:6c:e2:a3:98:5a:21:c1:0e:58: 5f:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:5E:08:AC:FB:1B:FD:BB:82:10:0E:17:B3:AA:D2:7C:10:BD:3C:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/afc1ad95-28db-45b7-b1d9-4d82eb1631e8/d8c81ca0-e26d-316c-a8b0-6be255cb8421.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/afc1ad95-28db-45b7-b1d9-4d82eb1631e8/afc1ad95-28db-45b7-b1d9-4d82eb1631e8.crl X509v3 Authority Key Identifier: keyid:19:AF:B7:62:91:E6:FE:1F:FF:48:41:17:9C:7D:3E:A5:33:AF:B3:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/afc1ad95-28db-45b7-b1d9-4d82eb1631e8.cer sbgp-ipAddrBlock: critical IPv4: 123.100.232.0/24 205.210.225.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:c6:96:5a:e3:ce:d7:20:28:89:7c:b4:20:0b:ab:38:d1:12: ce:9c:99:36:e2:dd:52:66:02:42:7b:3e:d4:34:b3:3e:a5:00: b3:e4:c0:a6:e0:d7:c9:20:68:b8:91:5b:9b:55:22:ad:a1:c8: 43:45:6b:ae:64:4f:3e:12:19:15:dc:bc:35:fb:36:37:8f:70: d8:2f:e6:3f:57:64:9f:16:1f:3e:cc:b9:02:93:5b:64:d7:50: 3e:54:45:89:77:08:82:14:e3:f0:eb:4e:05:30:09:b8:05:9a: 98:2b:ae:6c:61:76:84:0e:e3:b6:e5:17:41:90:82:c1:a9:2e: e6:02:79:a2:57:2b:f6:98:2c:17:08:9d:10:43:08:45:f7:66: 19:8e:2d:90:a0:60:68:47:a8:34:d8:a4:a7:77:10:d9:89:d5: a5:1f:1c:43:47:14:c9:5f:9e:df:1c:da:63:d8:82:c5:7c:a7: 61:de:7b:8c:95:2d:95:e5:74:6b:3e:07:c8:24:30:35:a3:96: 96:5f:80:62:ef:09:6c:81:68:6c:83:82:b5:03:3f:ef:20:54: 0f:79:01:99:59:6c:5a:71:fd:c3:65:f8:de:15:9a:4a:30:85: e5:c1:34:e0:68:c9:f1:5f:8a:5e:29:be:d7:d4:9b:eb:ee:5d: aa:9c:5f:7a -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE9JiSGJcZu6wBpf+HowDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWZjMWFkOTUtMjhkYi00NWI3LWIxZDktNGQ4MmViMTYz MWU4MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZThhYTk1ZjctNDQ4My00MTY2LWE1M2EtMWJlODhiY2EyMWE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr6AlEhwDWHP33YJ/4NtrkWYAdc9+RV7egrAn lgw5bHUMJ46LggVL3SZ1THCcM+R7FBG0eGKpHupuUK5Zi2l/1y4mAoeyBbWONrbZ bc80kP6NJkNS/xCA8i1MBzQenGoZhEjNDcfRPvZeR5cjRAi/1eHj7dewoMCHw76d 0feRMjCsyoIAI/MkJAi/bPTM76s5U5WTsCrVW/SoYcfE3C8KykvJnCsDVM/KBm5p JFPKZ+q97xSPVlGcqpnxhZr8dArDh0oCslA9R5pK/VcY6WQa2pZ2TmkxGCwnrRCK Jn/rFDZhjZaGBd5ND8pDjmU+nQxlEX6gf2ds4qOYWiHBDlhfSQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFA1eCKz7G/27ghAOF7Oq0nwQvTw2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9hZmMx YWQ5NS0yOGRiLTQ1YjctYjFkOS00ZDgyZWIxNjMxZTgvZDhjODFjYTAtZTI2ZC0z MTZjLWE4YjAtNmJlMjU1Y2I4NDIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvYWZjMWFkOTUtMjhkYi00NWI3LWIx ZDktNGQ4MmViMTYzMWU4L2FmYzFhZDk1LTI4ZGItNDViNy1iMWQ5LTRkODJlYjE2 MzFlOC5jcmwwHwYDVR0jBBgwFoAUGa+3YpHm/h//SEEXnH0+pTOvs40wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi9hZmMxYWQ5NS0yOGRiLTQ1YjctYjFkOS00ZDgy ZWIxNjMxZTguY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAe2ToAwQA zdLhMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAJ/GllrjztcgKIl8tCALqzjREs6cmTbi3VJmAkJ7PtQ0sz6l ALPkwKbg18kgaLiRW5tVIq2hyENFa65kTz4SGRXcvDX7NjePcNgv5j9XZJ8WHz7M uQKTW2TXUD5URYl3CIIU4/DrTgUwCbgFmpgrrmxhdoQO47blF0GQgsGpLuYCeaJX K/aYLBcInRBDCEX3ZhmOLZCgYGhHqDTYpKd3ENmJ1aUfHENHFMlfnt8c2mPYgsV8 p2Hee4yVLZXldGs+B8gkMDWjlpZfgGLvCWyBaGyDgrUDP+8gVA95AZlZbFpx/cNl +N4VmkowheXBNOBoyfFfil4pvtfUm+vuXaqcX3o= -----END CERTIFICATE-----Generated at Sat Sep 26 12:36:37 2026 by rpki-client