$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4dbb61da-2e8b-4329-96f7-b408b17cd6d2/c9d2aee8-9e2c-30a1-99b9-0583cc4ff437.roa File: c9d2aee8-9e2c-30a1-99b9-0583cc4ff437.roa (raw, json) Hash identifier: ovRNUskW6SDgrqiWBZwgtYv9QrZW8xWT/aPrKEn4i44= Subject key identifier: 0B:41:25:0D:8E:37:C3:31:F5:FC:AC:C6:91:3C:A7:C0:C8:EB:1C:D7 Certificate issuer: /CN=4dbb61da-2e8b-4329-96f7-b408b17cd6d2 Certificate serial: 010D0C9F4328584F4C3D52A60989381293532B00 Authority key identifier: 2C:1E:0B:FA:9C:8A:2D:A8:61:80:34:5F:5C:29:54:05:11:3D:64:B5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4dbb61da-2e8b-4329-96f7-b408b17cd6d2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4dbb61da-2e8b-4329-96f7-b408b17cd6d2/c9d2aee8-9e2c-30a1-99b9-0583cc4ff437.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 27458 IP address blocks: 23.169.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4dbb61da-2e8b-4329-96f7-b408b17cd6d2/4dbb61da-2e8b-4329-96f7-b408b17cd6d2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4dbb61da-2e8b-4329-96f7-b408b17cd6d2/4dbb61da-2e8b-4329-96f7-b408b17cd6d2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4dbb61da-2e8b-4329-96f7-b408b17cd6d2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:52:a6:09:89:38:12:93:53:2b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4dbb61da-2e8b-4329-96f7-b408b17cd6d2 Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=ef77644b-9c5c-463e-bd5b-b9c0722e5daf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:d7:21:ae:62:a7:20:50:04:3e:f8:89:a5:95: fd:6e:7c:97:84:5c:8b:c9:78:5a:c3:b0:7d:af:c7: 0a:45:0e:44:99:c7:3d:ef:5d:3c:86:60:b7:9f:8f: a0:65:62:9b:da:1a:b4:28:26:fb:38:62:ab:81:96: 22:d6:eb:2f:f7:51:ed:21:a2:49:75:2c:b9:67:a6: a5:5e:b9:65:4a:43:c3:ef:c8:49:c6:d0:67:8b:f3: bf:88:4a:68:ad:e8:41:30:4e:c9:b2:71:35:e0:0e: 28:c2:00:4a:e6:4d:fc:f8:16:9a:09:cd:a2:48:a5: c1:c9:69:31:2a:58:e0:7e:3a:5a:59:a6:49:f1:c7: 23:db:c6:ba:ec:44:37:04:3b:ec:6f:31:bb:5d:95: 6a:03:b2:b1:e2:66:8e:f1:81:ac:17:6b:af:07:1a: 2a:ee:14:81:06:e8:6e:af:b2:2b:e9:f5:06:66:97: ee:1f:6d:1b:b7:77:30:90:4c:f6:d9:59:a5:22:16: 23:6c:e8:4d:9d:8b:5a:9f:26:6b:03:88:73:8f:46: 8f:91:1f:cf:d5:10:1b:01:82:3c:c9:1e:70:2d:b6: 55:6c:5c:26:00:18:73:2c:47:b6:56:44:21:9c:8c: c3:a9:9c:c6:8a:90:79:c7:4e:d8:30:64:a6:04:9c: 18:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:41:25:0D:8E:37:C3:31:F5:FC:AC:C6:91:3C:A7:C0:C8:EB:1C:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4dbb61da-2e8b-4329-96f7-b408b17cd6d2/c9d2aee8-9e2c-30a1-99b9-0583cc4ff437.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4dbb61da-2e8b-4329-96f7-b408b17cd6d2/4dbb61da-2e8b-4329-96f7-b408b17cd6d2.crl X509v3 Authority Key Identifier: keyid:2C:1E:0B:FA:9C:8A:2D:A8:61:80:34:5F:5C:29:54:05:11:3D:64:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4dbb61da-2e8b-4329-96f7-b408b17cd6d2.cer sbgp-ipAddrBlock: critical IPv4: 23.169.40.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:19:a0:99:4c:b3:bb:e8:d0:ad:c6:a6:cd:43:c2:19:d1:b9: 96:ff:63:d6:a4:68:29:80:4b:00:f1:bc:a0:59:50:ab:7c:85: 5f:97:4e:70:96:9c:1a:01:5c:cf:d7:1e:d9:f4:d1:bb:26:79: 39:da:54:3a:00:ca:03:59:64:6b:aa:11:91:0c:8e:8a:1c:75: 14:9a:d2:55:fb:b9:44:05:59:ac:5a:17:40:50:c8:b9:67:da: 8a:3e:03:27:c8:44:63:96:b2:de:e8:fb:10:45:b9:cd:5d:8a: e6:1a:30:f1:eb:f9:26:b8:73:51:96:1c:18:30:1e:d3:48:02: 6a:d2:22:08:bc:57:74:ad:8e:c5:25:d0:84:2b:39:6e:2f:9d: 22:78:73:f8:b2:46:73:9a:02:54:b2:c8:5a:5a:e2:a9:c9:7e: 70:8e:97:93:35:f4:19:eb:97:05:7a:e6:e5:00:53:c5:ed:ac: cf:cf:e3:11:7f:f3:b8:bf:22:e2:64:fa:d7:16:1b:65:76:b8: c2:e5:c7:cf:b9:12:bd:b6:55:a6:77:66:f5:62:ab:ea:03:c7: e7:69:76:0a:35:3b:27:22:07:34:85:31:46:f3:ef:a5:13:54: 62:98:b9:f4:69:c3:63:ff:82:1e:de:4d:98:ae:f3:90:9a:ae: cc:ae:a5:45 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPVKmCYk4EpNTKwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGRiYjYxZGEtMmU4Yi00MzI5LTk2ZjctYjQwOGIxN2Nk NmQyMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk ZWY3NzY0NGItOWM1Yy00NjNlLWJkNWItYjljMDcyMmU1ZGFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAptchrmKnIFAEPviJpZX9bnyXhFyLyXhaw7B9 r8cKRQ5Emcc97108hmC3n4+gZWKb2hq0KCb7OGKrgZYi1usv91HtIaJJdSy5Z6al XrllSkPD78hJxtBni/O/iEporehBME7JsnE14A4owgBK5k38+BaaCc2iSKXByWkx KljgfjpaWaZJ8ccj28a67EQ3BDvsbzG7XZVqA7Kx4maO8YGsF2uvBxoq7hSBBuhu r7Ir6fUGZpfuH20bt3cwkEz22VmlIhYjbOhNnYtanyZrA4hzj0aPkR/P1RAbAYI8 yR5wLbZVbFwmABhzLEe2VkQhnIzDqZzGipB5x07YMGSmBJwYXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAtBJQ2ON8Mx9fysxpE8p8DI6xzXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS80ZGJi NjFkYS0yZThiLTQzMjktOTZmNy1iNDA4YjE3Y2Q2ZDIvYzlkMmFlZTgtOWUyYy0z MGExLTk5YjktMDU4M2NjNGZmNDM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNGRiYjYxZGEtMmU4Yi00MzI5LTk2 ZjctYjQwOGIxN2NkNmQyLzRkYmI2MWRhLTJlOGItNDMyOS05NmY3LWI0MDhiMTdj ZDZkMi5jcmwwHwYDVR0jBBgwFoAULB4L+pyKLahhgDRfXClUBRE9ZLUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS80ZGJiNjFkYS0yZThiLTQzMjktOTZmNy1iNDA4 YjE3Y2Q2ZDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6koMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC8ZoJlMs7vo0K3Gps1DwhnRuZb/Y9akaCmASwDxvKBZUKt8hV+XTnCW nBoBXM/XHtn00bsmeTnaVDoAygNZZGuqEZEMjoocdRSa0lX7uUQFWaxaF0BQyLln 2oo+AyfIRGOWst7o+xBFuc1diuYaMPHr+Sa4c1GWHBgwHtNIAmrSIgi8V3StjsUl 0IQrOW4vnSJ4c/iyRnOaAlSyyFpa4qnJfnCOl5M19BnrlwV65uUAU8XtrM/P4xF/ 87i/IuJk+tcWG2V2uMLlx8+5Er22VaZ3ZvViq+oDx+dpdgo1OyciBzSFMUbz76UT VGKYufRpw2P/gh7eTZiu85CarsyupUU= -----END CERTIFICATE-----Generated at Sat Sep 26 12:53:07 2026 by rpki-client