$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1cce0e4f-1927-4581-821f-686f4e5fd6be/f1b366da-3abf-3f7f-8b29-5b099b2e9327.roa File: f1b366da-3abf-3f7f-8b29-5b099b2e9327.roa (raw, json) Hash identifier: qDxNtRmhUBidGkUbK4+K/Mt1wP1MSlMf8YFHqCHSxZ4= Subject key identifier: 33:7E:5F:1E:5F:AA:6D:2D:11:1E:B4:0B:AC:42:7E:F6:42:CE:E7:21 Certificate issuer: /CN=1cce0e4f-1927-4581-821f-686f4e5fd6be Certificate serial: 010D0C9F4328584F549D62653BC81B75CF470EC0 Authority key identifier: EA:9E:FD:70:5E:BD:A0:8B:D3:6E:67:DF:53:85:8F:1C:AE:47:D6:91 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1cce0e4f-1927-4581-821f-686f4e5fd6be.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1cce0e4f-1927-4581-821f-686f4e5fd6be/f1b366da-3abf-3f7f-8b29-5b099b2e9327.roa Signing time: Tue 29 Sep 2026 01:00:12 +0000 ROA not before: Tue 29 Sep 2026 01:00:12 +0000 ROA not after: Mon 28 Dec 2026 02:00:12 +0000 asID: 7837 IP address blocks: 23.189.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1cce0e4f-1927-4581-821f-686f4e5fd6be/1cce0e4f-1927-4581-821f-686f4e5fd6be.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1cce0e4f-1927-4581-821f-686f4e5fd6be/1cce0e4f-1927-4581-821f-686f4e5fd6be.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1cce0e4f-1927-4581-821f-686f4e5fd6be.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:54:9d:62:65:3b:c8:1b:75:cf:47:0e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1cce0e4f-1927-4581-821f-686f4e5fd6be Validity Not Before: Sep 29 01:00:12 2026 GMT Not After : Dec 28 02:00:12 2026 GMT Subject: CN=02288c68-c128-40a6-8b46-0d0a3feac749 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:e7:14:72:f8:e5:9a:d1:8b:cb:d8:ac:e9:a7: 93:75:3c:a1:59:f9:34:97:35:ef:25:c4:49:8f:34: 43:4c:61:80:b1:71:86:af:d1:2f:7c:08:22:c8:df: 60:7a:43:8f:69:34:03:64:eb:13:f4:90:ec:98:ee: 49:f1:e5:a3:15:49:87:98:39:35:be:94:2d:bf:f4: 81:6c:f9:0c:4d:a6:d9:d2:fc:02:30:a1:df:de:23: 31:88:f2:7d:c4:25:e7:26:e0:2d:54:10:ea:cb:dd: 67:0c:01:10:e3:ca:29:8c:7b:8e:fb:dc:f0:01:af: ec:49:ee:0b:9f:04:ca:d2:f3:f8:98:af:01:26:4f: f0:9a:8b:fa:1c:83:ee:a6:d0:92:31:d3:1b:35:94: 4f:8b:b3:d5:a5:c4:8b:26:eb:60:88:7f:9a:22:73: 9f:03:f8:22:59:c2:df:93:10:d7:45:60:7f:31:14: 12:20:7c:28:bf:cd:90:3d:dc:c1:58:1f:ca:1a:b3: 58:7a:77:fa:49:a8:a9:ad:e7:b3:2a:19:a0:f1:b1: 04:1b:89:08:d7:39:23:e4:91:b6:ba:a0:ef:bc:a1: 6b:46:01:d6:07:40:fc:bd:51:62:5a:58:18:ec:9d: da:05:aa:09:8b:a4:2c:ea:46:71:2f:ae:88:28:86: d6:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:7E:5F:1E:5F:AA:6D:2D:11:1E:B4:0B:AC:42:7E:F6:42:CE:E7:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1cce0e4f-1927-4581-821f-686f4e5fd6be/f1b366da-3abf-3f7f-8b29-5b099b2e9327.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1cce0e4f-1927-4581-821f-686f4e5fd6be/1cce0e4f-1927-4581-821f-686f4e5fd6be.crl X509v3 Authority Key Identifier: keyid:EA:9E:FD:70:5E:BD:A0:8B:D3:6E:67:DF:53:85:8F:1C:AE:47:D6:91 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1cce0e4f-1927-4581-821f-686f4e5fd6be.cer sbgp-ipAddrBlock: critical IPv4: 23.189.200.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:e9:49:e5:15:87:ea:1b:fe:3c:cf:51:99:ec:f1:a6:62:05: 1e:a3:74:73:75:d2:dc:f1:57:01:47:cb:58:bc:59:67:57:c1: e0:81:9a:ee:7d:6c:b1:7a:44:bb:25:29:17:a8:4e:1e:51:e9: dc:cd:1d:0d:6e:9e:a3:39:87:f1:ea:2a:f4:e2:0b:ae:2c:71: 54:82:e8:f7:c1:cd:06:13:37:fb:d3:f0:cf:85:90:b7:98:47: b7:9c:81:27:8a:83:1d:8b:01:aa:77:c3:ca:d1:77:18:fd:bc: aa:a6:6e:67:12:2b:90:44:0d:60:82:00:1e:2a:0f:ea:a4:08: 3d:a0:88:64:e1:3e:f8:6c:fc:de:13:bc:1a:82:ef:e4:e4:0b: e4:0d:a6:13:ec:18:bd:b1:32:b5:fd:38:98:4e:e2:23:39:03: b5:e0:65:24:6f:3e:d6:18:55:ab:86:1c:a6:c6:a6:f5:cc:e4: 8b:aa:bd:d2:b4:3b:3e:14:c7:b1:85:ed:d8:1b:b2:aa:74:78: 08:13:d4:ca:23:59:7a:a9:41:bc:99:ff:54:cb:19:d6:52:dd: 9f:a6:97:73:f2:dc:d3:0f:80:20:b4:f9:dc:6c:97:4f:a2:21: 33:84:db:94:1b:a6:d8:44:85:7e:0f:0e:a8:6e:54:09:12:84: 88:37:1e:fc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9UnWJlO8gbdc9HDsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWNjZTBlNGYtMTkyNy00NTgxLTgyMWYtNjg2ZjRlNWZk NmJlMB4XDTI2MDkyOTAxMDAxMloXDTI2MTIyODAyMDAxMlowLzEtMCsGA1UEAxMk MDIyODhjNjgtYzEyOC00MGE2LThiNDYtMGQwYTNmZWFjNzQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjucUcvjlmtGLy9is6aeTdTyhWfk0lzXvJcRJ jzRDTGGAsXGGr9EvfAgiyN9gekOPaTQDZOsT9JDsmO5J8eWjFUmHmDk1vpQtv/SB bPkMTabZ0vwCMKHf3iMxiPJ9xCXnJuAtVBDqy91nDAEQ48opjHuO+9zwAa/sSe4L nwTK0vP4mK8BJk/wmov6HIPuptCSMdMbNZRPi7PVpcSLJutgiH+aInOfA/giWcLf kxDXRWB/MRQSIHwov82QPdzBWB/KGrNYenf6SaipreezKhmg8bEEG4kI1zkj5JG2 uqDvvKFrRgHWB0D8vVFiWlgY7J3aBaoJi6Qs6kZxL66IKIbWzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDN+Xx5fqm0tER60C6xCfvZCzuchMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8xY2Nl MGU0Zi0xOTI3LTQ1ODEtODIxZi02ODZmNGU1ZmQ2YmUvZjFiMzY2ZGEtM2FiZi0z ZjdmLThiMjktNWIwOTliMmU5MzI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMWNjZTBlNGYtMTkyNy00NTgxLTgy MWYtNjg2ZjRlNWZkNmJlLzFjY2UwZTRmLTE5MjctNDU4MS04MjFmLTY4NmY0ZTVm ZDZiZS5jcmwwHwYDVR0jBBgwFoAU6p79cF69oIvTbmffU4WPHK5H1pEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8xY2NlMGU0Zi0xOTI3LTQ1ODEtODIxZi02ODZm NGU1ZmQ2YmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF73IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFjpSeUVh+ob/jzPUZns8aZiBR6jdHN10tzxVwFHy1i8WWdXweCBmu59 bLF6RLslKReoTh5R6dzNHQ1unqM5h/HqKvTiC64scVSC6PfBzQYTN/vT8M+FkLeY R7ecgSeKgx2LAap3w8rRdxj9vKqmbmcSK5BEDWCCAB4qD+qkCD2giGThPvhs/N4T vBqC7+TkC+QNphPsGL2xMrX9OJhO4iM5A7XgZSRvPtYYVauGHKbGpvXM5IuqvdK0 Oz4Ux7GF7dgbsqp0eAgT1MojWXqpQbyZ/1TLGdZS3Z+ml3Py3NMPgCC0+dxsl0+i ITOE25QbpthEhX4PDqhuVAkShIg3Hvw= -----END CERTIFICATE-----Generated at Tue Sep 29 04:56:25 2026 by rpki-client