$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/694fcca8-fcd7-435e-a4d1-bd921d97c51d/4bff34b6-57f0-332c-8398-4fb31b240aa0.roa File: 4bff34b6-57f0-332c-8398-4fb31b240aa0.roa (raw, json) Hash identifier: BAMXNCUwdob0YHjzTFKHvVF/j/nyeTjKKQjymv4JwWQ= Subject key identifier: F8:7C:1E:BC:4F:08:AC:B0:35:B0:9F:BA:CA:9A:16:31:2A:B1:4A:42 Certificate issuer: /CN=694fcca8-fcd7-435e-a4d1-bd921d97c51d Certificate serial: 010D0C9F4328584F612D66C79B92DCCCF58F5D00 Authority key identifier: 80:15:58:9E:85:6E:5C:80:0F:FA:39:3C:C6:B2:06:A9:D2:4C:EB:9A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/694fcca8-fcd7-435e-a4d1-bd921d97c51d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/694fcca8-fcd7-435e-a4d1-bd921d97c51d/4bff34b6-57f0-332c-8398-4fb31b240aa0.roa Signing time: Sat 03 Oct 2026 13:00:13 +0000 ROA not before: Sat 03 Oct 2026 13:00:13 +0000 ROA not after: Fri 01 Jan 2027 14:00:13 +0000 asID: 401339 IP address blocks: 23.188.72.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/694fcca8-fcd7-435e-a4d1-bd921d97c51d/694fcca8-fcd7-435e-a4d1-bd921d97c51d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/694fcca8-fcd7-435e-a4d1-bd921d97c51d/694fcca8-fcd7-435e-a4d1-bd921d97c51d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/694fcca8-fcd7-435e-a4d1-bd921d97c51d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:61:2d:66:c7:9b:92:dc:cc:f5:8f:5d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=694fcca8-fcd7-435e-a4d1-bd921d97c51d Validity Not Before: Oct 3 13:00:13 2026 GMT Not After : Jan 1 14:00:13 2027 GMT Subject: CN=a1e62f97-4266-4339-b0e5-baeb5e1918d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:a1:67:f7:20:b2:6f:78:51:08:fd:f6:6e:0c: de:b3:73:87:ba:8e:dd:4b:90:71:6e:32:f9:b8:6c: d9:59:e7:31:3a:d6:24:d4:b7:a5:f0:3f:78:e6:e3: a0:92:c4:51:29:b8:5e:70:f2:e9:12:d3:81:84:f2: 9e:27:e2:92:c8:a6:74:70:0c:7e:6e:c7:57:57:19: d5:77:8e:83:0d:90:3d:47:7b:d6:bc:e0:89:49:74: 66:ad:23:ac:2c:f7:61:f9:79:58:02:93:cd:02:c7: 40:da:cd:f3:af:b2:6f:a9:8b:6f:9a:76:cc:06:13: 3c:0e:64:bc:c7:90:64:fd:1c:ab:1f:0f:c6:1a:40: 36:0c:30:f3:ec:14:24:a0:14:f6:bd:e0:2b:35:68: e9:82:cd:36:e8:7b:d1:45:73:7e:2d:04:46:72:05: 60:23:c5:fe:8c:30:f3:fa:3c:fb:3e:ee:47:9f:1a: 0f:34:5d:96:2d:7e:e9:92:e0:03:b0:a8:b0:4c:28: 37:d5:32:9e:9a:36:8f:76:73:6f:a8:c6:53:a7:8e: 5f:78:6a:74:51:39:87:64:55:1c:78:67:d8:e7:d2: 92:88:f0:75:b8:90:7c:90:06:f5:3c:60:35:a8:8a: c7:2e:11:71:e2:6f:ef:08:ef:49:79:44:4c:2b:81: 8f:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:7C:1E:BC:4F:08:AC:B0:35:B0:9F:BA:CA:9A:16:31:2A:B1:4A:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/694fcca8-fcd7-435e-a4d1-bd921d97c51d/4bff34b6-57f0-332c-8398-4fb31b240aa0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/694fcca8-fcd7-435e-a4d1-bd921d97c51d/694fcca8-fcd7-435e-a4d1-bd921d97c51d.crl X509v3 Authority Key Identifier: keyid:80:15:58:9E:85:6E:5C:80:0F:FA:39:3C:C6:B2:06:A9:D2:4C:EB:9A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/694fcca8-fcd7-435e-a4d1-bd921d97c51d.cer sbgp-ipAddrBlock: critical IPv4: 23.188.72.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:48:09:1c:96:31:b3:69:7f:c8:e4:c0:86:3e:47:05:9a:68: 38:88:d1:4f:5c:c1:c4:9f:a7:9f:a1:80:aa:e3:79:b2:e5:f1: 72:cf:be:c6:08:12:06:01:c5:5f:e2:c2:8c:38:57:96:d4:ac: a0:13:30:0d:40:af:fc:5c:44:0f:48:11:c4:32:cc:f4:33:3b: 6c:aa:d4:ef:23:48:8d:d0:8d:be:49:7a:37:7d:04:48:a2:86: 37:2c:17:a7:21:ea:57:42:fb:42:da:3f:65:38:aa:e3:02:39: f3:4b:ef:b5:89:9f:8b:95:2a:16:91:ad:86:b1:c2:27:a6:7c: 11:48:ba:0c:fc:77:27:3d:20:ec:98:9f:61:96:88:ac:b8:be: 53:38:d6:ec:60:0b:e7:f0:c4:cc:34:f6:18:a1:79:e0:bc:75: ab:ee:53:8b:3b:50:5c:67:93:c1:6b:7c:c7:20:be:8b:ec:e0: 8f:ee:dd:fc:c8:1e:bc:49:9e:96:69:5d:2d:5e:30:6b:ae:f0: 1d:8e:59:e3:94:36:91:99:db:65:29:b9:f3:47:ec:a8:52:02: 23:e1:27:ed:5a:1a:20:b2:41:2e:9d:7b:9b:c6:46:0f:03:67: b9:14:eb:05:b4:b0:21:15:6f:fa:d9:5c:a8:1d:8e:4f:81:a7: 98:06:fb:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9hLWbHm5LczPWPXQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjk0ZmNjYTgtZmNkNy00MzVlLWE0ZDEtYmQ5MjFkOTdj NTFkMB4XDTI2MTAwMzEzMDAxM1oXDTI3MDEwMTE0MDAxM1owLzEtMCsGA1UEAxMk YTFlNjJmOTctNDI2Ni00MzM5LWIwZTUtYmFlYjVlMTkxOGQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqaFn9yCyb3hRCP32bgzes3OHuo7dS5BxbjL5 uGzZWecxOtYk1Lel8D945uOgksRRKbhecPLpEtOBhPKeJ+KSyKZ0cAx+bsdXVxnV d46DDZA9R3vWvOCJSXRmrSOsLPdh+XlYApPNAsdA2s3zr7JvqYtvmnbMBhM8DmS8 x5Bk/RyrHw/GGkA2DDDz7BQkoBT2veArNWjpgs026HvRRXN+LQRGcgVgI8X+jDDz +jz7Pu5HnxoPNF2WLX7pkuADsKiwTCg31TKemjaPdnNvqMZTp45feGp0UTmHZFUc eGfY59KSiPB1uJB8kAb1PGA1qIrHLhFx4m/vCO9JeURMK4GPZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPh8HrxPCKywNbCfusqaFjEqsUpCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82OTRm Y2NhOC1mY2Q3LTQzNWUtYTRkMS1iZDkyMWQ5N2M1MWQvNGJmZjM0YjYtNTdmMC0z MzJjLTgzOTgtNGZiMzFiMjQwYWEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNjk0ZmNjYTgtZmNkNy00MzVlLWE0 ZDEtYmQ5MjFkOTdjNTFkLzY5NGZjY2E4LWZjZDctNDM1ZS1hNGQxLWJkOTIxZDk3 YzUxZC5jcmwwHwYDVR0jBBgwFoAUgBVYnoVuXIAP+jk8xrIGqdJM65owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS82OTRmY2NhOC1mY2Q3LTQzNWUtYTRkMS1iZDky MWQ5N2M1MWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF7xIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGVICRyWMbNpf8jkwIY+RwWaaDiI0U9cwcSfp5+hgKrjebLl8XLPvsYI EgYBxV/iwow4V5bUrKATMA1Ar/xcRA9IEcQyzPQzO2yq1O8jSI3Qjb5Jejd9BEii hjcsF6ch6ldC+0LaP2U4quMCOfNL77WJn4uVKhaRrYaxwiemfBFIugz8dyc9IOyY n2GWiKy4vlM41uxgC+fwxMw09hiheeC8davuU4s7UFxnk8FrfMcgvovs4I/u3fzI HrxJnpZpXS1eMGuu8B2OWeOUNpGZ22UpufNH7KhSAiPhJ+1aGiCyQS6de5vGRg8D Z7kU6wW0sCEVb/rZXKgdjk+Bp5gG+7A= -----END CERTIFICATE-----Generated at Tue Oct 6 21:38:33 2026 by rpki-client