$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cc2b08f9-b3dc-4cf6-870c-a730b860c491/4a7ffbf8-fc17-3caf-a320-6e099b7b6b99.roa File: 4a7ffbf8-fc17-3caf-a320-6e099b7b6b99.roa (raw, json) Hash identifier: 1qZaVcNJ5l9w30B4o2X55Z/vHD1IRk4Fv67Db5amYyY= Subject key identifier: 49:C0:85:E1:60:C3:26:A9:7A:56:2D:D7:0E:B0:DC:3B:A1:9C:5C:E3 Certificate issuer: /CN=cc2b08f9-b3dc-4cf6-870c-a730b860c491 Certificate serial: 010D0C9F4328584F23C25D508C74361193DE9380 Authority key identifier: E1:1F:BF:28:EA:F0:4B:06:8B:E0:2B:51:CA:BD:60:3B:8D:C7:18:98 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cc2b08f9-b3dc-4cf6-870c-a730b860c491.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cc2b08f9-b3dc-4cf6-870c-a730b860c491/4a7ffbf8-fc17-3caf-a320-6e099b7b6b99.roa Signing time: Fri 11 Sep 2026 13:00:12 +0000 ROA not before: Fri 11 Sep 2026 13:00:12 +0000 ROA not after: Thu 10 Dec 2026 14:00:12 +0000 asID: 395332 IP address blocks: 23.146.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cc2b08f9-b3dc-4cf6-870c-a730b860c491/cc2b08f9-b3dc-4cf6-870c-a730b860c491.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cc2b08f9-b3dc-4cf6-870c-a730b860c491/cc2b08f9-b3dc-4cf6-870c-a730b860c491.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cc2b08f9-b3dc-4cf6-870c-a730b860c491.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 Oct 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:23:c2:5d:50:8c:74:36:11:93:de:93:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cc2b08f9-b3dc-4cf6-870c-a730b860c491 Validity Not Before: Sep 11 13:00:12 2026 GMT Not After : Dec 10 14:00:12 2026 GMT Subject: CN=5ccc7a0a-2d71-48a9-a268-4308bc093e7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:75:0a:29:20:b6:32:ba:31:39:28:97:23:16: bf:19:fd:c9:6d:ec:39:a8:01:29:3c:78:d1:f8:ae: ce:69:46:2f:c8:53:30:8a:14:f5:d8:ef:71:61:1e: 5f:20:44:e8:47:ac:48:24:10:fc:97:9d:6d:8a:bb: 7b:d0:74:96:d1:aa:a5:53:73:85:74:07:5b:6a:eb: cf:6a:96:6f:0f:e6:2f:e7:ab:8c:94:e1:69:f8:92: ab:3f:44:b6:da:65:87:69:da:ec:8e:0a:de:b7:f3: 2c:80:f6:c2:26:68:1b:96:82:fe:64:4d:ff:de:4d: dd:80:78:ff:2b:e2:2e:f6:37:fe:3b:24:2a:41:86: 2a:6e:d7:b7:ef:5c:77:af:73:06:eb:8c:77:9f:fd: 9b:b8:d5:3c:e3:b2:1e:3d:2c:68:ec:7c:bb:7a:50: dd:af:6e:b4:c9:b8:be:4b:d1:df:fe:e3:64:56:da: ac:f1:68:7f:4f:fc:38:a3:ed:32:10:73:78:0d:db: e2:34:92:1c:d4:a9:fa:27:ef:fa:99:33:52:08:e1: 5f:78:cd:56:22:26:21:14:66:a7:75:ec:52:c1:bb: 3d:be:40:1e:76:24:67:05:8d:67:d7:ab:b9:6c:ac: cc:62:aa:31:18:ba:1a:22:ba:dc:22:bc:3f:5b:db: 46:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:C0:85:E1:60:C3:26:A9:7A:56:2D:D7:0E:B0:DC:3B:A1:9C:5C:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cc2b08f9-b3dc-4cf6-870c-a730b860c491/4a7ffbf8-fc17-3caf-a320-6e099b7b6b99.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cc2b08f9-b3dc-4cf6-870c-a730b860c491/cc2b08f9-b3dc-4cf6-870c-a730b860c491.crl X509v3 Authority Key Identifier: keyid:E1:1F:BF:28:EA:F0:4B:06:8B:E0:2B:51:CA:BD:60:3B:8D:C7:18:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cc2b08f9-b3dc-4cf6-870c-a730b860c491.cer sbgp-ipAddrBlock: critical IPv4: 23.146.104.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:a2:0b:3f:7d:11:6f:8f:4d:c8:90:f3:37:c4:c0:07:91:bf: 08:9b:8e:37:df:4d:d7:f5:8a:40:13:95:62:13:61:66:71:30: 0e:f5:48:9c:2a:6b:aa:80:b8:b6:2b:09:53:0d:fb:e1:27:16: ee:bb:4c:ab:41:ea:65:5f:f6:be:38:4b:4f:98:35:ed:4b:03: 98:2a:86:46:ca:48:cb:be:0e:2b:87:ac:da:2f:f4:88:ce:41: 25:73:c1:42:9f:94:78:75:51:18:cd:d8:85:14:6f:82:90:5e: 87:41:0d:3a:22:24:3a:39:f2:26:c6:e7:cb:f9:75:a7:42:2b: 5a:6b:ae:26:63:31:b4:f8:ae:a4:55:fb:5c:59:8f:f6:f9:75: b8:4c:e8:42:b9:80:a6:3b:0f:9a:b9:1c:58:30:30:2b:8c:d7: a2:34:cf:e1:31:80:9c:fc:cc:a5:76:54:53:06:d2:36:70:12: b8:a9:18:40:cf:14:1a:63:7d:ea:8e:b5:d7:e6:5a:2e:0a:a8: 0e:e6:66:fd:14:71:f6:9e:38:31:35:98:1e:dd:9c:cc:91:43: ee:b1:36:0f:cf:da:4c:b8:fa:a5:74:78:59:3c:15:f6:f6:28: 41:8f:1f:d0:19:c7:57:c7:d9:da:b5:6f:29:fa:98:44:e4:1f: 3e:cb:8e:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8jwl1QjHQ2EZPek4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2MyYjA4ZjktYjNkYy00Y2Y2LTg3MGMtYTczMGI4NjBj NDkxMB4XDTI2MDkxMTEzMDAxMloXDTI2MTIxMDE0MDAxMlowLzEtMCsGA1UEAxMk NWNjYzdhMGEtMmQ3MS00OGE5LWEyNjgtNDMwOGJjMDkzZTdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs3UKKSC2MroxOSiXIxa/Gf3Jbew5qAEpPHjR +K7OaUYvyFMwihT12O9xYR5fIEToR6xIJBD8l51tirt70HSW0aqlU3OFdAdbauvP apZvD+Yv56uMlOFp+JKrP0S22mWHadrsjgret/MsgPbCJmgbloL+ZE3/3k3dgHj/ K+Iu9jf+OyQqQYYqbte371x3r3MG64x3n/2buNU847IePSxo7Hy7elDdr260ybi+ S9Hf/uNkVtqs8Wh/T/w4o+0yEHN4DdviNJIc1Kn6J+/6mTNSCOFfeM1WIiYhFGan dexSwbs9vkAediRnBY1n16u5bKzMYqoxGLoaIrrcIrw/W9tGqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEnAheFgwyapelYt1w6w3DuhnFzjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jYzJi MDhmOS1iM2RjLTRjZjYtODcwYy1hNzMwYjg2MGM0OTEvNGE3ZmZiZjgtZmMxNy0z Y2FmLWEzMjAtNmUwOTliN2I2Yjk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvY2MyYjA4ZjktYjNkYy00Y2Y2LTg3 MGMtYTczMGI4NjBjNDkxL2NjMmIwOGY5LWIzZGMtNGNmNi04NzBjLWE3MzBiODYw YzQ5MS5jcmwwHwYDVR0jBBgwFoAU4R+/KOrwSwaL4CtRyr1gO43HGJgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9jYzJiMDhmOS1iM2RjLTRjZjYtODcwYy1hNzMw Yjg2MGM0OTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5JoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI2iCz99EW+PTciQ8zfEwAeRvwibjjffTdf1ikATlWITYWZxMA71SJwq a6qAuLYrCVMN++EnFu67TKtB6mVf9r44S0+YNe1LA5gqhkbKSMu+DiuHrNov9IjO QSVzwUKflHh1URjN2IUUb4KQXodBDToiJDo58ibG58v5dadCK1prriZjMbT4rqRV +1xZj/b5dbhM6EK5gKY7D5q5HFgwMCuM16I0z+ExgJz8zKV2VFMG0jZwEripGEDP FBpjfeqOtdfmWi4KqA7mZv0UcfaeODE1mB7dnMyRQ+6xNg/P2ky4+qV0eFk8Ffb2 KEGPH9AZx1fH2dq1byn6mETkHz7LjiQ= -----END CERTIFICATE-----Generated at Sun Oct 4 17:52:37 2026 by rpki-client