$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604a49f2-58d6-4709-bdaf-e7181b613801/c56c342d-12d7-376f-9120-568a7b965d35.roa File: c56c342d-12d7-376f-9120-568a7b965d35.roa (raw, json) Hash identifier: ULZv7m0uQuPszrsIYCiH/TZUrstv6U8ejLgAi43Wnc0= Subject key identifier: B6:7C:DC:97:0E:01:DB:83:A1:55:C7:1C:4D:EA:B7:65:C9:91:F1:57 Certificate issuer: /CN=604a49f2-58d6-4709-bdaf-e7181b613801 Certificate serial: 010D0C9F4328584F4973AAE5DC96673F6E9E9300 Authority key identifier: 85:78:22:95:76:5B:FF:E6:81:20:3B:83:B0:3F:AC:B1:74:74:47:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604a49f2-58d6-4709-bdaf-e7181b613801.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604a49f2-58d6-4709-bdaf-e7181b613801/c56c342d-12d7-376f-9120-568a7b965d35.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 202044 IP address blocks: 23.129.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604a49f2-58d6-4709-bdaf-e7181b613801/604a49f2-58d6-4709-bdaf-e7181b613801.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604a49f2-58d6-4709-bdaf-e7181b613801/604a49f2-58d6-4709-bdaf-e7181b613801.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604a49f2-58d6-4709-bdaf-e7181b613801.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 04 Oct 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:aa:e5:dc:96:67:3f:6e:9e:93:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=604a49f2-58d6-4709-bdaf-e7181b613801 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=80ae467f-d8ca-4394-9cff-f764797e3799 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:8f:a9:a5:00:f6:39:89:7e:98:a3:05:6b:88: 46:7c:a6:b8:c9:1b:aa:37:69:bf:83:c6:ae:36:c0: 00:4b:44:26:e3:bf:8f:32:7e:9b:52:7e:03:83:09: cd:41:b0:fd:9d:2f:48:7d:c2:b7:65:4c:32:57:97: b4:dd:ba:5a:70:65:ea:5e:40:99:d7:fd:22:31:9f: 83:84:48:0d:c1:bb:1f:ec:71:6a:52:f4:4f:e1:0b: 44:55:21:38:57:17:9b:50:25:00:87:41:6b:a1:99: 2e:94:10:8e:53:37:0c:f1:ad:18:aa:c1:81:9f:40: dd:d1:49:67:34:0c:da:29:85:a2:1b:15:50:e9:b3: e5:69:16:b5:39:08:9b:ea:b2:22:52:cb:9f:16:73: 3f:e6:dc:63:f7:5c:4f:2e:1b:ef:db:49:35:b1:ad: 7b:da:83:0b:be:6a:18:30:30:00:cf:28:f2:54:f2: 6e:6f:53:b2:e3:cd:52:5d:f6:07:bb:16:9c:3c:0b: ca:87:c2:cd:79:41:04:48:46:ab:ed:c2:03:da:d0: 67:f4:84:a4:44:2d:ab:ce:f3:57:e7:f8:03:f8:20: 43:b7:21:d4:ee:c8:a2:4d:91:c5:c3:16:9c:39:cc: 92:ca:b8:c9:2f:79:19:43:6e:e1:fa:cc:f1:02:29: a7:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:7C:DC:97:0E:01:DB:83:A1:55:C7:1C:4D:EA:B7:65:C9:91:F1:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604a49f2-58d6-4709-bdaf-e7181b613801/c56c342d-12d7-376f-9120-568a7b965d35.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604a49f2-58d6-4709-bdaf-e7181b613801/604a49f2-58d6-4709-bdaf-e7181b613801.crl X509v3 Authority Key Identifier: keyid:85:78:22:95:76:5B:FF:E6:81:20:3B:83:B0:3F:AC:B1:74:74:47:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604a49f2-58d6-4709-bdaf-e7181b613801.cer sbgp-ipAddrBlock: critical IPv4: 23.129.200.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:7e:96:f7:3b:1a:ed:68:0f:f8:27:90:1d:db:ae:ba:06:b8: 18:ec:17:81:3c:39:c0:84:7e:30:1a:9a:dd:6d:a5:9f:64:16: 5a:f6:0a:5a:04:ac:34:0d:52:d9:32:92:d6:9b:03:b0:45:c2: 6e:a0:ae:30:f5:fe:cf:28:5f:e1:1d:dc:13:0e:79:29:1c:97: b8:cc:10:8a:24:a2:5b:c2:a1:e1:6a:f9:da:d2:23:da:68:f6: db:82:5e:36:67:a7:3a:8a:41:6e:1b:7f:17:4e:58:c2:00:b6: 2c:84:22:18:1c:6d:02:02:d4:c0:69:7b:20:a1:ea:f7:d2:26: f4:b1:a4:04:14:6a:8c:a1:82:9f:19:1f:16:9f:36:f9:cb:f0: 2e:a3:aa:44:5b:6b:95:f3:26:cc:ab:cb:84:5a:eb:01:a3:0f: 21:87:1d:bb:1b:2d:73:c9:47:b7:3a:bb:7f:d3:80:9a:41:07: c4:f0:56:2c:69:f3:f2:a7:3f:1b:f6:c8:74:c0:7d:0d:e2:d6: b5:c7:02:e1:91:2d:4a:c8:b5:1f:25:84:e4:98:d6:5d:f9:02: 1f:66:79:00:90:e7:18:e5:7c:1e:0c:7f:91:6f:91:c1:9c:9c: 6f:71:6b:a2:0b:e9:e8:ca:a7:e7:a5:87:43:36:6f:9f:74:84: 7e:1f:e7:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jc6rl3JZnP26ekwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjA0YTQ5ZjItNThkNi00NzA5LWJkYWYtZTcxODFiNjEz ODAxMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ODBhZTQ2N2YtZDhjYS00Mzk0LTljZmYtZjc2NDc5N2UzNzk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuo+ppQD2OYl+mKMFa4hGfKa4yRuqN2m/g8au NsAAS0Qm47+PMn6bUn4DgwnNQbD9nS9IfcK3ZUwyV5e03bpacGXqXkCZ1/0iMZ+D hEgNwbsf7HFqUvRP4QtEVSE4VxebUCUAh0FroZkulBCOUzcM8a0YqsGBn0Dd0Uln NAzaKYWiGxVQ6bPlaRa1OQib6rIiUsufFnM/5txj91xPLhvv20k1sa172oMLvmoY MDAAzyjyVPJub1Oy481SXfYHuxacPAvKh8LNeUEESEar7cID2tBn9ISkRC2rzvNX 5/gD+CBDtyHU7siiTZHFwxacOcySyrjJL3kZQ27h+szxAimnsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLZ83JcOAduDoVXHHE3qt2XJkfFXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82MDRh NDlmMi01OGQ2LTQ3MDktYmRhZi1lNzE4MWI2MTM4MDEvYzU2YzM0MmQtMTJkNy0z NzZmLTkxMjAtNTY4YTdiOTY1ZDM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjA0YTQ5ZjItNThkNi00NzA5LWJk YWYtZTcxODFiNjEzODAxLzYwNGE0OWYyLTU4ZDYtNDcwOS1iZGFmLWU3MTgxYjYx MzgwMS5jcmwwHwYDVR0jBBgwFoAUhXgilXZb/+aBIDuDsD+ssXR0R3wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82MDRhNDlmMi01OGQ2LTQ3MDktYmRhZi1lNzE4 MWI2MTM4MDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4HIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB5+lvc7Gu1oD/gnkB3brroGuBjsF4E8OcCEfjAamt1tpZ9kFlr2CloE rDQNUtkyktabA7BFwm6grjD1/s8oX+Ed3BMOeSkcl7jMEIokolvCoeFq+drSI9po 9tuCXjZnpzqKQW4bfxdOWMIAtiyEIhgcbQIC1MBpeyCh6vfSJvSxpAQUaoyhgp8Z HxafNvnL8C6jqkRba5XzJsyry4Ra6wGjDyGHHbsbLXPJR7c6u3/TgJpBB8TwVixp 8/KnPxv2yHTAfQ3i1rXHAuGRLUrItR8lhOSY1l35Ah9meQCQ5xjlfB4Mf5FvkcGc nG9xa6IL6ejKp+elh0M2b590hH4f58A= -----END CERTIFICATE-----Generated at Sat Oct 3 05:49:45 2026 by rpki-client