$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e699b02b-ca04-4557-94f4-189989d49ccd/4c5a075a-c8d2-3f9e-aece-6e424fd5f034.roa File: 4c5a075a-c8d2-3f9e-aece-6e424fd5f034.roa (raw, json) Hash identifier: NVzzXs2V84jeERoDPeFARP4quIXxGaXMlcj8BPmu3Fw= Subject key identifier: F6:8E:CF:85:FF:14:9A:45:81:48:9E:E9:A7:6A:FA:11:B6:63:50:77 Certificate issuer: /CN=e699b02b-ca04-4557-94f4-189989d49ccd Certificate serial: 010D0C9F4328584F4973A90A6E4EC650565FAE80 Authority key identifier: 5E:AF:98:D1:00:83:CD:28:7D:A6:48:52:90:CA:41:DB:EC:6E:31:77 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e699b02b-ca04-4557-94f4-189989d49ccd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e699b02b-ca04-4557-94f4-189989d49ccd/4c5a075a-c8d2-3f9e-aece-6e424fd5f034.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 16509 IP address blocks: 23.180.16.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e699b02b-ca04-4557-94f4-189989d49ccd/e699b02b-ca04-4557-94f4-189989d49ccd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e699b02b-ca04-4557-94f4-189989d49ccd/e699b02b-ca04-4557-94f4-189989d49ccd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e699b02b-ca04-4557-94f4-189989d49ccd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:a9:0a:6e:4e:c6:50:56:5f:ae:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e699b02b-ca04-4557-94f4-189989d49ccd Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=4f703c5c-1c31-4575-b5c4-6e1202534523 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:c4:a3:47:73:ab:2c:33:60:92:8d:5f:d6:3e: 22:ba:93:4d:88:24:c3:14:2a:a0:00:f8:2b:96:f7: 9f:5d:37:de:f8:a8:f4:5b:c2:ee:38:b1:3c:66:fe: e3:ae:2b:db:da:4b:0e:d4:0e:d7:88:d0:65:2b:cb: 9e:61:5e:36:e6:69:6a:6e:85:2b:ae:d4:bc:16:b1: 88:ea:b5:46:4a:1b:f0:12:8d:eb:b7:4f:f3:75:10: 84:06:fc:b1:10:b1:62:f1:64:02:6d:51:53:0f:ad: c8:2a:ca:0d:f7:cc:75:57:94:eb:9e:92:44:8e:39: 86:3c:53:da:e3:86:ca:f6:ac:68:57:44:60:b1:0e: 80:b3:4b:75:fb:69:4b:8c:7a:96:d4:b1:a2:23:cb: e1:d2:60:cf:76:cb:c7:f1:2e:37:38:d8:8d:67:ce: a3:e3:74:aa:ff:19:07:c1:9f:fe:5f:df:0d:3d:d0: eb:ac:c4:72:75:47:ef:45:ce:fe:15:c7:f7:54:66: dd:fc:31:e8:87:cd:cf:bb:dc:3d:4c:7c:a6:ad:af: 23:35:16:dd:f7:9f:a0:a2:a6:b6:4b:d9:fe:35:5a: 1d:92:f3:45:fb:e4:bd:6e:26:03:9f:33:80:6e:3c: 51:56:0a:da:3c:e8:03:9f:69:28:04:95:e3:05:ad: 19:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:8E:CF:85:FF:14:9A:45:81:48:9E:E9:A7:6A:FA:11:B6:63:50:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e699b02b-ca04-4557-94f4-189989d49ccd/4c5a075a-c8d2-3f9e-aece-6e424fd5f034.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e699b02b-ca04-4557-94f4-189989d49ccd/e699b02b-ca04-4557-94f4-189989d49ccd.crl X509v3 Authority Key Identifier: keyid:5E:AF:98:D1:00:83:CD:28:7D:A6:48:52:90:CA:41:DB:EC:6E:31:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e699b02b-ca04-4557-94f4-189989d49ccd.cer sbgp-ipAddrBlock: critical IPv4: 23.180.16.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:96:e3:d8:ea:9e:b9:d9:55:e5:45:6f:6e:ae:ab:04:22:f2: 06:8b:f1:90:0d:09:a6:40:a6:e3:91:29:47:7b:dc:8e:ae:7d: df:2b:e9:60:f8:7c:17:25:18:06:62:4c:fb:1d:e7:98:38:0d: 8c:2a:9a:33:f4:79:e9:ad:33:97:f7:ad:78:f2:f4:ef:73:d1: 3e:78:8e:a4:61:9f:10:f8:e8:00:42:1b:e7:1e:13:5b:97:59: d9:5c:62:4c:7d:4a:0d:91:99:bd:f9:df:5c:c7:d4:fd:0e:59: 7c:96:e7:68:c9:ba:1c:86:95:52:44:0d:5a:46:d3:ac:a9:dc: 20:aa:70:86:c3:3b:9d:05:24:a3:af:df:ee:02:3d:a8:1b:5d: 76:ae:31:e7:36:c6:5b:8d:97:5b:88:2e:03:3d:d9:e3:70:9f: 77:08:e0:d0:59:f5:34:e0:54:48:bc:3e:27:02:03:16:92:51: 9c:c4:17:1e:c3:87:f8:51:32:d8:09:24:d5:aa:06:f0:ee:35: e2:56:9e:59:af:e0:cc:16:8d:3e:a9:0f:91:a2:78:05:b4:56: 6a:35:f0:f3:7f:c1:80:7f:09:dc:f1:f6:4d:e7:7d:d3:07:ff: 72:fe:ef:8e:9a:2d:88:13:17:63:85:98:e5:af:28:91:3a:3e: d0:cd:b4:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jc6kKbk7GUFZfroAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTY5OWIwMmItY2EwNC00NTU3LTk0ZjQtMTg5OTg5ZDQ5 Y2NkMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NGY3MDNjNWMtMWMzMS00NTc1LWI1YzQtNmUxMjAyNTM0NTIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo8SjR3OrLDNgko1f1j4iupNNiCTDFCqgAPgr lvefXTfe+Kj0W8LuOLE8Zv7jrivb2ksO1A7XiNBlK8ueYV425mlqboUrrtS8FrGI 6rVGShvwEo3rt0/zdRCEBvyxELFi8WQCbVFTD63IKsoN98x1V5TrnpJEjjmGPFPa 44bK9qxoV0RgsQ6As0t1+2lLjHqW1LGiI8vh0mDPdsvH8S43ONiNZ86j43Sq/xkH wZ/+X98NPdDrrMRydUfvRc7+Fcf3VGbd/DHoh83Pu9w9THymra8jNRbd95+goqa2 S9n+NVodkvNF++S9biYDnzOAbjxRVgraPOgDn2koBJXjBa0ZbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPaOz4X/FJpFgUie6adq+hG2Y1B3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9lNjk5 YjAyYi1jYTA0LTQ1NTctOTRmNC0xODk5ODlkNDljY2QvNGM1YTA3NWEtYzhkMi0z ZjllLWFlY2UtNmU0MjRmZDVmMDM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZTY5OWIwMmItY2EwNC00NTU3LTk0 ZjQtMTg5OTg5ZDQ5Y2NkL2U2OTliMDJiLWNhMDQtNDU1Ny05NGY0LTE4OTk4OWQ0 OWNjZC5jcmwwHwYDVR0jBBgwFoAUXq+Y0QCDzSh9pkhSkMpB2+xuMXcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9lNjk5YjAyYi1jYTA0LTQ1NTctOTRmNC0xODk5 ODlkNDljY2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF7QQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGuW49jqnrnZVeVFb26uqwQi8gaL8ZANCaZApuORKUd73I6ufd8r6WD4 fBclGAZiTPsd55g4DYwqmjP0eemtM5f3rXjy9O9z0T54jqRhnxD46ABCG+ceE1uX WdlcYkx9Sg2Rmb3531zH1P0OWXyW52jJuhyGlVJEDVpG06yp3CCqcIbDO50FJKOv 3+4CPagbXXauMec2xluNl1uILgM92eNwn3cI4NBZ9TTgVEi8PicCAxaSUZzEFx7D h/hRMtgJJNWqBvDuNeJWnlmv4MwWjT6pD5GieAW0Vmo18PN/wYB/Cdzx9k3nfdMH /3L+746aLYgTF2OFmOWvKJE6PtDNtLc= -----END CERTIFICATE-----Generated at Sat Sep 26 10:55:57 2026 by rpki-client