$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f932ac50-ee05-43cb-83a6-384d4d3614d2/b225ca7a-9ca1-3a4e-8670-67dbfc6f395f.roa File: b225ca7a-9ca1-3a4e-8670-67dbfc6f395f.roa (raw, json) Hash identifier: p5vYNSKLMaLp3KP4iDvxOBrjIWN52UUBAFbJOmn2O68= Subject key identifier: 46:0E:A7:C5:2A:B0:E8:E3:2A:10:90:CE:1C:56:38:D5:13:FE:49:F9 Certificate issuer: /CN=f932ac50-ee05-43cb-83a6-384d4d3614d2 Certificate serial: 010D0C9F4328584F19FCFB54ACB0FDC4A8A37840 Authority key identifier: 49:41:33:DE:19:60:7B:4F:06:EF:6A:18:BB:BA:88:2B:E9:FB:3D:49 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f932ac50-ee05-43cb-83a6-384d4d3614d2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f932ac50-ee05-43cb-83a6-384d4d3614d2/b225ca7a-9ca1-3a4e-8670-67dbfc6f395f.roa Signing time: Tue 08 Sep 2026 01:00:12 +0000 ROA not before: Tue 08 Sep 2026 01:00:12 +0000 ROA not after: Mon 07 Dec 2026 02:00:12 +0000 asID: 402414 IP address blocks: 23.157.60.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f932ac50-ee05-43cb-83a6-384d4d3614d2/f932ac50-ee05-43cb-83a6-384d4d3614d2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f932ac50-ee05-43cb-83a6-384d4d3614d2/f932ac50-ee05-43cb-83a6-384d4d3614d2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f932ac50-ee05-43cb-83a6-384d4d3614d2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:19:fc:fb:54:ac:b0:fd:c4:a8:a3:78:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f932ac50-ee05-43cb-83a6-384d4d3614d2 Validity Not Before: Sep 8 01:00:12 2026 GMT Not After : Dec 7 02:00:12 2026 GMT Subject: CN=84cd3fd3-a54b-49d8-9bbd-a195892badc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:19:9d:3d:62:6f:6d:ab:9f:87:fb:95:e4:7c: 0b:5a:09:d4:d2:15:3e:a0:a4:24:8c:16:31:32:08: e7:5a:ca:c9:93:10:f8:c8:33:40:82:f9:1c:ee:35: 8b:62:ab:be:99:09:84:3d:72:04:b9:7a:95:d5:ed: fa:f8:d1:b7:92:e5:8f:58:87:df:50:dd:64:8b:30: e3:9f:b3:28:1c:cc:58:1a:3e:d3:82:8e:d4:9b:1c: ed:42:40:5c:78:a3:32:45:03:0d:2a:85:da:d6:42: ea:f6:36:14:f5:58:bc:57:53:02:f5:74:32:21:6f: 38:54:b2:a4:10:71:72:ff:fa:27:20:87:cc:02:4c: ce:02:2e:53:50:16:6f:df:fe:11:5a:9b:97:79:93: aa:7c:44:50:b4:34:c9:b6:93:e7:7b:53:ab:63:91: e5:4c:9d:46:2e:b9:d3:68:de:8c:04:90:58:b6:7a: 4f:1c:a0:ec:c4:d4:99:1f:42:e9:8e:9c:5e:d1:05: 8c:db:35:4a:de:68:68:e9:5b:aa:36:38:f6:fb:9b: d3:b1:92:cd:43:19:2a:5a:fa:f4:ed:60:d4:52:32: 1c:0c:57:ad:3b:35:f8:36:6c:d6:d5:4a:39:60:fe: 2b:34:66:a0:09:c8:cc:0b:c1:a5:0f:0a:0c:08:fa: 65:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:0E:A7:C5:2A:B0:E8:E3:2A:10:90:CE:1C:56:38:D5:13:FE:49:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f932ac50-ee05-43cb-83a6-384d4d3614d2/b225ca7a-9ca1-3a4e-8670-67dbfc6f395f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f932ac50-ee05-43cb-83a6-384d4d3614d2/f932ac50-ee05-43cb-83a6-384d4d3614d2.crl X509v3 Authority Key Identifier: keyid:49:41:33:DE:19:60:7B:4F:06:EF:6A:18:BB:BA:88:2B:E9:FB:3D:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f932ac50-ee05-43cb-83a6-384d4d3614d2.cer sbgp-ipAddrBlock: critical IPv4: 23.157.60.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:4a:85:53:d1:4a:83:ce:c8:6e:52:f5:69:10:a5:e8:01:80: db:f6:08:95:aa:01:df:16:56:27:be:be:ba:49:60:55:78:ca: 1a:b3:03:c5:aa:da:2c:20:63:3a:3a:cd:7d:df:2d:59:e9:22: 09:c2:34:99:05:9f:5f:8f:24:22:fe:54:71:fb:ab:73:9d:83: 59:09:6a:27:9b:5e:42:eb:34:ba:af:05:23:6c:31:fc:85:9b: e2:a9:8c:da:0f:48:0d:bf:2c:e6:e3:41:09:26:cb:4f:0c:61: 34:a7:fb:0f:ba:1e:04:81:71:9d:73:17:71:3c:6d:98:50:87: 60:03:5a:69:c3:90:67:0d:1e:0c:dd:56:bc:d2:4a:6a:84:6a: 84:9d:05:0c:ea:2c:bf:70:f7:4e:60:40:bd:08:6c:80:c5:02: d1:9c:b2:f8:56:0c:be:56:b5:d9:18:a9:a4:dc:25:66:b6:05: 23:f3:7c:4e:32:0f:86:c0:1e:08:b2:e0:ce:f5:11:a1:20:f2: 5b:e4:b4:c6:9a:46:ed:c7:47:6e:5e:1b:fb:65:6d:74:5f:0d: 81:7c:22:e2:ca:d2:b1:a0:63:7f:b3:00:12:e3:0c:5c:74:85: 12:09:79:44:d6:7b:b7:dc:fd:a3:eb:41:21:cb:48:3b:bd:0d: a4:a3:4e:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8Z/PtUrLD9xKijeEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjkzMmFjNTAtZWUwNS00M2NiLTgzYTYtMzg0ZDRkMzYx NGQyMB4XDTI2MDkwODAxMDAxMloXDTI2MTIwNzAyMDAxMlowLzEtMCsGA1UEAxMk ODRjZDNmZDMtYTU0Yi00OWQ4LTliYmQtYTE5NTg5MmJhZGMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmxmdPWJvbaufh/uV5HwLWgnU0hU+oKQkjBYx MgjnWsrJkxD4yDNAgvkc7jWLYqu+mQmEPXIEuXqV1e36+NG3kuWPWIffUN1kizDj n7MoHMxYGj7Tgo7UmxztQkBceKMyRQMNKoXa1kLq9jYU9Vi8V1MC9XQyIW84VLKk EHFy//onIIfMAkzOAi5TUBZv3/4RWpuXeZOqfERQtDTJtpPne1OrY5HlTJ1GLrnT aN6MBJBYtnpPHKDsxNSZH0Lpjpxe0QWM2zVK3mho6VuqNjj2+5vTsZLNQxkqWvr0 7WDUUjIcDFetOzX4NmzW1Uo5YP4rNGagCcjMC8GlDwoMCPplzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEYOp8UqsOjjKhCQzhxWONUT/kn5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9mOTMy YWM1MC1lZTA1LTQzY2ItODNhNi0zODRkNGQzNjE0ZDIvYjIyNWNhN2EtOWNhMS0z YTRlLTg2NzAtNjdkYmZjNmYzOTVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvZjkzMmFjNTAtZWUwNS00M2NiLTgz YTYtMzg0ZDRkMzYxNGQyL2Y5MzJhYzUwLWVlMDUtNDNjYi04M2E2LTM4NGQ0ZDM2 MTRkMi5jcmwwHwYDVR0jBBgwFoAUSUEz3hlge08G72oYu7qIK+n7PUkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi9mOTMyYWM1MC1lZTA1LTQzY2ItODNhNi0zODRk NGQzNjE0ZDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF508MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABxKhVPRSoPOyG5S9WkQpegBgNv2CJWqAd8WVie+vrpJYFV4yhqzA8Wq 2iwgYzo6zX3fLVnpIgnCNJkFn1+PJCL+VHH7q3Odg1kJaiebXkLrNLqvBSNsMfyF m+KpjNoPSA2/LObjQQkmy08MYTSn+w+6HgSBcZ1zF3E8bZhQh2ADWmnDkGcNHgzd VrzSSmqEaoSdBQzqLL9w905gQL0IbIDFAtGcsvhWDL5WtdkYqaTcJWa2BSPzfE4y D4bAHgiy4M71EaEg8lvktMaaRu3HR25eG/tlbXRfDYF8IuLK0rGgY3+zABLjDFx0 hRIJeUTWe7fc/aPrQSHLSDu9DaSjTvI= -----END CERTIFICATE-----Generated at Fri Oct 9 01:04:05 2026 by rpki-client