$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/22ab24e6-59f7-4c2a-a37b-0ce98faa3dc8/8e2b994c-1b4c-3add-91c2-76c003453ce8.roa File: 8e2b994c-1b4c-3add-91c2-76c003453ce8.roa (raw, json) Hash identifier: a70BlHQadIfXm06WMf++eknXiVDKXPyF6ULUxQU1ePc= Subject key identifier: 84:B3:7F:E5:D1:B4:1F:10:30:D5:1B:63:4B:4D:C1:AA:FC:6F:83:0A Certificate issuer: /CN=22ab24e6-59f7-4c2a-a37b-0ce98faa3dc8 Certificate serial: 010D0C9F4328584F305280F569A6311E79E5C600 Authority key identifier: D6:B1:86:2D:3E:38:C4:B5:A9:99:F0:A9:DB:82:7D:8D:E1:B5:1B:A4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/22ab24e6-59f7-4c2a-a37b-0ce98faa3dc8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/22ab24e6-59f7-4c2a-a37b-0ce98faa3dc8/8e2b994c-1b4c-3add-91c2-76c003453ce8.roa Signing time: Wed 16 Sep 2026 01:00:12 +0000 ROA not before: Wed 16 Sep 2026 01:00:12 +0000 ROA not after: Tue 15 Dec 2026 02:00:12 +0000 asID: 401401 IP address blocks: 23.191.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/22ab24e6-59f7-4c2a-a37b-0ce98faa3dc8/22ab24e6-59f7-4c2a-a37b-0ce98faa3dc8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/22ab24e6-59f7-4c2a-a37b-0ce98faa3dc8/22ab24e6-59f7-4c2a-a37b-0ce98faa3dc8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/22ab24e6-59f7-4c2a-a37b-0ce98faa3dc8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:30:52:80:f5:69:a6:31:1e:79:e5:c6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22ab24e6-59f7-4c2a-a37b-0ce98faa3dc8 Validity Not Before: Sep 16 01:00:12 2026 GMT Not After : Dec 15 02:00:12 2026 GMT Subject: CN=2221ec0f-0a56-4dd0-adf1-0da56ecc4f54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:9a:5b:ff:b4:15:80:97:f2:9c:33:aa:b1:fe: 95:5f:44:61:2e:78:b1:b2:fe:db:aa:b1:fe:e8:34: 9b:fb:b1:b3:79:af:75:7b:47:ad:a0:07:b7:6e:26: 67:01:66:e7:db:40:8c:30:28:d3:16:b9:09:d1:81: 85:f0:9a:6e:82:8d:6e:b1:88:54:a1:e4:8a:53:a2: ba:6c:d6:c4:2c:31:91:50:bd:fa:a0:77:ba:d0:32: d3:d4:0f:37:39:e1:31:9d:6f:eb:dd:55:3c:36:b1: 8f:f6:75:51:17:bd:0d:f5:0b:fd:71:5d:2e:9e:b8: c1:5e:0c:32:8f:c5:08:ae:b4:65:bb:ff:9b:14:57: 25:76:64:14:5a:83:fc:44:8d:72:64:54:c4:de:09: da:36:70:33:1c:c7:20:e7:98:99:51:4c:1d:21:40: 14:3d:73:2c:8b:73:07:a6:2e:2f:cb:91:8c:cf:ee: 26:a2:60:ae:c8:6b:55:05:ea:42:a1:c4:a1:a7:b6: b8:d7:24:ce:b9:a6:2e:35:78:75:ed:61:b0:b2:22: 59:93:c2:1d:6f:42:97:07:ff:43:bd:2d:17:30:a7: 43:d4:07:c2:8b:3b:0f:b1:2a:10:d1:8f:3a:e8:54: 0a:5a:54:a6:f0:fb:97:14:7f:3d:3a:ef:e7:ea:96: 1c:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:B3:7F:E5:D1:B4:1F:10:30:D5:1B:63:4B:4D:C1:AA:FC:6F:83:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/22ab24e6-59f7-4c2a-a37b-0ce98faa3dc8/8e2b994c-1b4c-3add-91c2-76c003453ce8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/22ab24e6-59f7-4c2a-a37b-0ce98faa3dc8/22ab24e6-59f7-4c2a-a37b-0ce98faa3dc8.crl X509v3 Authority Key Identifier: keyid:D6:B1:86:2D:3E:38:C4:B5:A9:99:F0:A9:DB:82:7D:8D:E1:B5:1B:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/22ab24e6-59f7-4c2a-a37b-0ce98faa3dc8.cer sbgp-ipAddrBlock: critical IPv4: 23.191.200.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:0d:71:28:8d:d2:0b:fc:75:96:43:0d:53:04:9f:65:c7:05: a9:8e:2e:75:5f:dd:11:b8:d4:13:d4:eb:11:cd:3c:de:1a:29: e8:cf:a7:44:d4:af:aa:58:61:a1:2e:e4:ce:51:0b:70:8b:df: 5a:85:a8:40:e3:1f:05:bb:1c:d9:f5:a8:23:a8:e5:9d:07:32: fb:0d:b8:cd:a9:ff:a9:8e:83:6a:0a:84:b0:8d:51:4f:7c:62: 30:a2:12:13:d9:0a:68:0a:40:d8:02:7a:16:32:65:4b:29:ba: 39:46:1c:5e:31:27:71:4d:b2:ff:02:b7:10:e0:e8:04:9c:31: 9e:7e:ab:cf:e6:51:f8:44:2c:6e:ae:66:40:64:77:94:89:e1: d1:02:93:01:7a:4a:43:8e:bc:05:f3:c0:71:84:8a:1a:d3:54: 1a:bb:f0:03:3b:31:0b:87:ea:ab:7c:c1:3b:25:bc:2d:62:47: b8:7b:ef:c5:2d:e9:e2:9e:e7:16:ba:21:ef:34:d0:21:ca:13: 01:aa:38:c0:52:4a:e8:61:99:c4:7d:8d:1f:fd:01:26:43:fb: f0:a7:ad:ac:08:d5:d2:4c:cb:53:e4:a1:ff:eb:4e:ad:60:59: 15:93:3a:0f:36:77:07:34:18:57:fc:b4:09:6c:a2:93:46:a8: ca:b9:83:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8wUoD1aaYxHnnlxgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjJhYjI0ZTYtNTlmNy00YzJhLWEzN2ItMGNlOThmYWEz ZGM4MB4XDTI2MDkxNjAxMDAxMloXDTI2MTIxNTAyMDAxMlowLzEtMCsGA1UEAxMk MjIyMWVjMGYtMGE1Ni00ZGQwLWFkZjEtMGRhNTZlY2M0ZjU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg5pb/7QVgJfynDOqsf6VX0RhLnixsv7bqrH+ 6DSb+7Gzea91e0etoAe3biZnAWbn20CMMCjTFrkJ0YGF8Jpugo1usYhUoeSKU6K6 bNbELDGRUL36oHe60DLT1A83OeExnW/r3VU8NrGP9nVRF70N9Qv9cV0unrjBXgwy j8UIrrRlu/+bFFcldmQUWoP8RI1yZFTE3gnaNnAzHMcg55iZUUwdIUAUPXMsi3MH pi4vy5GMz+4momCuyGtVBepCocShp7a41yTOuaYuNXh17WGwsiJZk8Idb0KXB/9D vS0XMKdD1AfCizsPsSoQ0Y866FQKWlSm8PuXFH89Ou/n6pYckQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFISzf+XRtB8QMNUbY0tNwar8b4MKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8yMmFi MjRlNi01OWY3LTRjMmEtYTM3Yi0wY2U5OGZhYTNkYzgvOGUyYjk5NGMtMWI0Yy0z YWRkLTkxYzItNzZjMDAzNDUzY2U4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMjJhYjI0ZTYtNTlmNy00YzJhLWEz N2ItMGNlOThmYWEzZGM4LzIyYWIyNGU2LTU5ZjctNGMyYS1hMzdiLTBjZTk4ZmFh M2RjOC5jcmwwHwYDVR0jBBgwFoAU1rGGLT44xLWpmfCp24J9jeG1G6QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8yMmFiMjRlNi01OWY3LTRjMmEtYTM3Yi0wY2U5 OGZhYTNkYzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF7/IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAgNcSiN0gv8dZZDDVMEn2XHBamOLnVf3RG41BPU6xHNPN4aKejPp0TU r6pYYaEu5M5RC3CL31qFqEDjHwW7HNn1qCOo5Z0HMvsNuM2p/6mOg2oKhLCNUU98 YjCiEhPZCmgKQNgCehYyZUspujlGHF4xJ3FNsv8CtxDg6AScMZ5+q8/mUfhELG6u ZkBkd5SJ4dECkwF6SkOOvAXzwHGEihrTVBq78AM7MQuH6qt8wTslvC1iR7h778Ut 6eKe5xa6Ie800CHKEwGqOMBSSuhhmcR9jR/9ASZD+/CnrawI1dJMy1Pkof/rTq1g WRWTOg82dwc0GFf8tAlsopNGqMq5g8Q= -----END CERTIFICATE-----Generated at Wed Sep 23 10:57:47 2026 by rpki-client