$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2b5947e4-61e6-4ddf-8c2e-0b848215b251/c9c90e12-0b40-329d-a568-38b1ffdf46aa.roa File: c9c90e12-0b40-329d-a568-38b1ffdf46aa.roa (raw, json) Hash identifier: zpGe7wcKkv1zX3U/4EwNeHR+fCuZfjYXCfc+YPg9vv8= Subject key identifier: B0:35:BF:C6:C9:C4:20:3D:A0:59:5B:09:3D:ED:D3:89:5F:5A:1F:72 Certificate issuer: /CN=2b5947e4-61e6-4ddf-8c2e-0b848215b251 Certificate serial: 010D0C9F4328584F4974C68B3770F4EF0DBB3E80 Authority key identifier: C6:E5:33:9B:6E:DB:0E:5B:59:A9:B6:64:02:6E:8E:18:9A:3C:90:D4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2b5947e4-61e6-4ddf-8c2e-0b848215b251.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2b5947e4-61e6-4ddf-8c2e-0b848215b251/c9c90e12-0b40-329d-a568-38b1ffdf46aa.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 401474 IP address blocks: 23.130.44.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2b5947e4-61e6-4ddf-8c2e-0b848215b251/2b5947e4-61e6-4ddf-8c2e-0b848215b251.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2b5947e4-61e6-4ddf-8c2e-0b848215b251/2b5947e4-61e6-4ddf-8c2e-0b848215b251.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2b5947e4-61e6-4ddf-8c2e-0b848215b251.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:c6:8b:37:70:f4:ef:0d:bb:3e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b5947e4-61e6-4ddf-8c2e-0b848215b251 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=e5d7f4f1-ccd5-4add-b572-3c8fe87eb030 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:12:b8:96:5c:8f:d5:d0:26:01:d8:0a:d3:78: 2b:0c:22:c3:6e:3f:bb:41:2c:7e:4f:27:36:44:f2: 38:8e:27:52:9e:a7:a8:54:be:a5:5e:a4:d4:e6:6f: 59:8c:90:6e:78:3a:d5:a9:1f:45:3a:95:61:34:6e: 6d:e3:da:81:b1:d0:32:6b:2c:bf:a5:19:d3:ca:24: 0b:e4:4c:7e:fe:50:b7:ab:e0:2a:c8:64:56:89:f9: 3e:22:41:bd:af:5f:45:ba:c5:f7:c0:6e:ac:1c:5d: 21:0d:fb:0f:ac:b7:59:80:26:26:4c:55:24:2a:c8: 00:95:41:14:36:98:99:8b:64:3d:2e:fc:53:d9:68: 7e:f7:96:57:c1:fb:68:b9:ed:20:1e:89:b8:18:ea: 6c:73:ec:e5:5d:26:88:e9:a4:48:87:f6:bb:59:87: 52:d0:2a:d7:91:6c:ba:d5:db:52:9a:ed:7a:e1:fb: 88:5b:2a:99:f2:98:f4:72:85:44:e0:74:65:c3:5b: ae:be:e7:90:a3:0b:87:13:f7:80:ac:02:bb:89:e3: a8:e5:86:17:75:83:e0:b8:bf:2f:b7:fd:79:8d:ac: dd:dc:cc:db:b4:b8:58:50:3a:dd:f7:47:c7:b8:73: b1:dc:e2:04:51:55:86:a6:a3:aa:97:f6:91:28:f7: 24:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:35:BF:C6:C9:C4:20:3D:A0:59:5B:09:3D:ED:D3:89:5F:5A:1F:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2b5947e4-61e6-4ddf-8c2e-0b848215b251/c9c90e12-0b40-329d-a568-38b1ffdf46aa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2b5947e4-61e6-4ddf-8c2e-0b848215b251/2b5947e4-61e6-4ddf-8c2e-0b848215b251.crl X509v3 Authority Key Identifier: keyid:C6:E5:33:9B:6E:DB:0E:5B:59:A9:B6:64:02:6E:8E:18:9A:3C:90:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2b5947e4-61e6-4ddf-8c2e-0b848215b251.cer sbgp-ipAddrBlock: critical IPv4: 23.130.44.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:32:67:0f:ad:d5:d6:61:06:c4:75:ed:62:cd:93:53:90:c7: 56:9d:42:22:5b:26:f6:0c:2c:21:1e:06:81:4a:90:60:0c:c4: 69:f9:64:bc:c8:cc:72:91:ab:04:b4:5c:26:2a:d8:ad:99:05: 59:ed:9a:42:a6:02:ee:02:f9:43:3c:9a:2e:17:fd:33:db:2a: 7e:60:43:ba:20:ea:4f:8b:21:ba:5e:c2:2e:0f:66:93:e2:be: bd:d9:5d:e3:85:bc:45:27:c2:b5:36:08:53:24:60:95:37:b7: d2:86:35:cd:97:44:c2:f1:30:df:2f:3f:80:1c:76:30:97:2d: c7:4f:3d:62:8f:a3:1a:a3:05:2c:e9:67:bf:99:05:1a:bb:4d: 46:d5:3a:a9:48:cc:d0:56:bb:6f:f9:21:41:00:c6:56:fa:5a: bb:70:f0:b6:ca:b0:ae:94:db:6d:e4:57:72:d4:67:2a:03:84: e1:8a:ba:ba:31:7e:b2:3e:90:54:b1:cf:45:ba:0f:13:f4:89: b3:91:54:7a:54:0b:28:fb:88:40:8c:f0:73:aa:2a:59:b8:f0: ef:01:8d:11:47:90:de:e6:7e:91:c3:f2:4c:5a:38:5e:07:2f: d8:75:0a:24:0d:36:c2:b3:62:3b:49:43:72:80:cf:22:21:98: f2:1f:1e:4a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdMaLN3D07w27PoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmI1OTQ3ZTQtNjFlNi00ZGRmLThjMmUtMGI4NDgyMTVi MjUxMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZTVkN2Y0ZjEtY2NkNS00YWRkLWI1NzItM2M4ZmU4N2ViMDMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAshK4llyP1dAmAdgK03grDCLDbj+7QSx+Tyc2 RPI4jidSnqeoVL6lXqTU5m9ZjJBueDrVqR9FOpVhNG5t49qBsdAyayy/pRnTyiQL 5Ex+/lC3q+AqyGRWifk+IkG9r19FusX3wG6sHF0hDfsPrLdZgCYmTFUkKsgAlUEU NpiZi2Q9LvxT2Wh+95ZXwftoue0gHom4GOpsc+zlXSaI6aRIh/a7WYdS0CrXkWy6 1dtSmu164fuIWyqZ8pj0coVE4HRlw1uuvueQowuHE/eArAK7ieOo5YYXdYPguL8v t/15jazd3MzbtLhYUDrd90fHuHOx3OIEUVWGpqOql/aRKPckgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLA1v8bJxCA9oFlbCT3t04lfWh9yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yYjU5 NDdlNC02MWU2LTRkZGYtOGMyZS0wYjg0ODIxNWIyNTEvYzljOTBlMTItMGI0MC0z MjlkLWE1NjgtMzhiMWZmZGY0NmFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMmI1OTQ3ZTQtNjFlNi00ZGRmLThj MmUtMGI4NDgyMTViMjUxLzJiNTk0N2U0LTYxZTYtNGRkZi04YzJlLTBiODQ4MjE1 YjI1MS5jcmwwHwYDVR0jBBgwFoAUxuUzm27bDltZqbZkAm6OGJo8kNQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8yYjU5NDdlNC02MWU2LTRkZGYtOGMyZS0wYjg0 ODIxNWIyNTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4IsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI8yZw+t1dZhBsR17WLNk1OQx1adQiJbJvYMLCEeBoFKkGAMxGn5ZLzI zHKRqwS0XCYq2K2ZBVntmkKmAu4C+UM8mi4X/TPbKn5gQ7og6k+LIbpewi4PZpPi vr3ZXeOFvEUnwrU2CFMkYJU3t9KGNc2XRMLxMN8vP4AcdjCXLcdPPWKPoxqjBSzp Z7+ZBRq7TUbVOqlIzNBWu2/5IUEAxlb6Wrtw8LbKsK6U223kV3LUZyoDhOGKurox frI+kFSxz0W6DxP0ibORVHpUCyj7iECM8HOqKlm48O8BjRFHkN7mfpHD8kxaOF4H L9h1CiQNNsKzYjtJQ3KAzyIhmPIfHko= -----END CERTIFICATE-----Generated at Fri Sep 25 09:05:52 2026 by rpki-client