$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e04d8190-ec33-4551-9197-d06746d399d0/1ac3b25d-9769-39e7-8080-2dd3f86f1d8e.roa File: 1ac3b25d-9769-39e7-8080-2dd3f86f1d8e.roa (raw, json) Hash identifier: yT4C0bneuTgKwtddn+fgMDeB2z0AsB/m4Q6S0kLPZFw= Subject key identifier: A0:0F:27:EE:CD:C9:4C:59:45:CB:3A:70:2E:1A:69:D5:9E:29:8C:22 Certificate issuer: /CN=e04d8190-ec33-4551-9197-d06746d399d0 Certificate serial: 010D0C9F4328584F4278098A3E1CA879B830C320 Authority key identifier: 02:A8:AE:0E:2B:11:C9:18:8B:5F:88:83:6B:6B:1C:83:08:3B:78:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e04d8190-ec33-4551-9197-d06746d399d0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e04d8190-ec33-4551-9197-d06746d399d0/1ac3b25d-9769-39e7-8080-2dd3f86f1d8e.roa Signing time: Tue 22 Sep 2026 13:00:12 +0000 ROA not before: Tue 22 Sep 2026 13:00:12 +0000 ROA not after: Mon 21 Dec 2026 14:00:12 +0000 asID: 26658 IP address blocks: 23.249.184.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e04d8190-ec33-4551-9197-d06746d399d0/e04d8190-ec33-4551-9197-d06746d399d0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e04d8190-ec33-4551-9197-d06746d399d0/e04d8190-ec33-4551-9197-d06746d399d0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e04d8190-ec33-4551-9197-d06746d399d0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:42:78:09:8a:3e:1c:a8:79:b8:30:c3:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e04d8190-ec33-4551-9197-d06746d399d0 Validity Not Before: Sep 22 13:00:12 2026 GMT Not After : Dec 21 14:00:12 2026 GMT Subject: CN=65e237ff-7fce-4923-b812-c682e32a94ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:6b:d0:e2:b6:2b:02:b7:53:ca:92:60:d5:22: 08:ed:03:8e:92:38:a5:3d:6e:e1:4e:5a:8b:b2:48: e0:3b:b6:f8:50:eb:97:e8:61:2f:b7:7f:55:08:dc: 71:14:65:93:62:c8:6e:6a:50:d3:e6:99:a0:3b:5e: 55:55:31:be:41:3c:fa:69:e2:07:37:3b:1b:99:dd: 23:fa:43:96:f1:17:ad:12:ad:30:22:32:cb:2c:9f: 0f:33:ef:7e:78:1b:a0:6a:8d:6a:1f:d3:56:96:3f: 69:98:0d:d1:cb:68:3d:bd:0a:7c:9f:f6:a1:21:c5: d9:b2:8b:9a:71:82:8d:1d:f3:25:23:b7:3e:12:38: 6f:f8:6e:1c:bf:5e:f6:57:a8:00:16:48:fd:35:2e: f5:74:87:71:2e:ce:3b:c2:48:76:9c:7f:3b:78:13: 94:b2:80:d2:db:a5:ba:bc:b9:fb:d0:32:fd:64:ed: 93:67:42:ae:c9:d8:c4:36:87:da:15:75:ae:60:7b: 6e:e8:63:76:ce:16:de:c6:2b:70:eb:61:db:ec:18: 05:f8:6b:7b:d7:4c:9d:41:e3:95:5f:4f:c3:a8:66: 46:0e:43:21:a2:d6:30:f0:f6:89:12:82:38:89:fb: d0:e7:1e:0b:7d:39:c2:74:08:78:7a:a1:54:12:3e: 17:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:0F:27:EE:CD:C9:4C:59:45:CB:3A:70:2E:1A:69:D5:9E:29:8C:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e04d8190-ec33-4551-9197-d06746d399d0/1ac3b25d-9769-39e7-8080-2dd3f86f1d8e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e04d8190-ec33-4551-9197-d06746d399d0/e04d8190-ec33-4551-9197-d06746d399d0.crl X509v3 Authority Key Identifier: keyid:02:A8:AE:0E:2B:11:C9:18:8B:5F:88:83:6B:6B:1C:83:08:3B:78:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e04d8190-ec33-4551-9197-d06746d399d0.cer sbgp-ipAddrBlock: critical IPv4: 23.249.184.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:63:bc:0e:ec:99:b5:f0:ef:c4:e4:81:a7:eb:b3:b9:31:d2: 82:9e:8d:83:75:5a:85:06:10:86:0f:16:2f:c3:d5:e2:70:0c: c8:f0:56:51:50:6b:62:72:c5:9f:36:71:f8:e0:e1:65:96:19: d7:99:66:3d:07:d3:36:e9:02:fe:02:51:51:64:b3:f2:0f:6f: 52:9d:25:8c:98:35:67:85:e6:be:d8:a5:60:0f:cb:00:7f:48: bc:ca:97:bb:4d:5f:0b:63:a8:30:aa:91:43:da:b3:25:c2:3c: 2a:9a:75:15:d4:f5:37:5a:84:87:c0:07:27:6e:b2:ee:d7:6b: ee:59:40:50:a8:74:cd:13:50:b1:26:11:d7:75:a2:65:84:89: 73:b8:93:59:de:21:54:f2:16:6d:d8:3a:b2:e3:70:68:d1:e9: 58:ac:4e:c5:ff:0a:3c:3b:05:c6:66:1e:b0:98:de:c9:a4:4e: ef:6a:91:66:91:1c:ab:7f:22:4e:9d:f8:38:83:ad:e5:06:8b: 34:ac:2d:ef:54:10:da:fd:45:11:6f:06:e9:05:e9:b7:04:20: 56:33:54:91:89:34:11:01:7d:e6:24:ac:fd:c7:88:df:df:ba: e4:42:fe:75:da:b5:db:f9:29:6d:4c:10:97:13:43:69:6e:a2: 08:dd:01:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9CeAmKPhyoebgwwyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTA0ZDgxOTAtZWMzMy00NTUxLTkxOTctZDA2NzQ2ZDM5 OWQwMB4XDTI2MDkyMjEzMDAxMloXDTI2MTIyMTE0MDAxMlowLzEtMCsGA1UEAxMk NjVlMjM3ZmYtN2ZjZS00OTIzLWI4MTItYzY4MmUzMmE5NGFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi2vQ4rYrArdTypJg1SII7QOOkjilPW7hTlqL skjgO7b4UOuX6GEvt39VCNxxFGWTYshualDT5pmgO15VVTG+QTz6aeIHNzsbmd0j +kOW8RetEq0wIjLLLJ8PM+9+eBugao1qH9NWlj9pmA3Ry2g9vQp8n/ahIcXZsoua cYKNHfMlI7c+Ejhv+G4cv172V6gAFkj9NS71dIdxLs47wkh2nH87eBOUsoDS26W6 vLn70DL9ZO2TZ0KuydjENofaFXWuYHtu6GN2zhbexitw62Hb7BgF+Gt710ydQeOV X0/DqGZGDkMhotYw8PaJEoI4ifvQ5x4LfTnCdAh4eqFUEj4XOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKAPJ+7NyUxZRcs6cC4aadWeKYwiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9lMDRk ODE5MC1lYzMzLTQ1NTEtOTE5Ny1kMDY3NDZkMzk5ZDAvMWFjM2IyNWQtOTc2OS0z OWU3LTgwODAtMmRkM2Y4NmYxZDhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZTA0ZDgxOTAtZWMzMy00NTUxLTkx OTctZDA2NzQ2ZDM5OWQwL2UwNGQ4MTkwLWVjMzMtNDU1MS05MTk3LWQwNjc0NmQz OTlkMC5jcmwwHwYDVR0jBBgwFoAUAqiuDisRyRiLX4iDa2scgwg7eOYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9lMDRkODE5MC1lYzMzLTQ1NTEtOTE5Ny1kMDY3 NDZkMzk5ZDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF/m4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABVjvA7smbXw78Tkgafrs7kx0oKejYN1WoUGEIYPFi/D1eJwDMjwVlFQ a2JyxZ82cfjg4WWWGdeZZj0H0zbpAv4CUVFks/IPb1KdJYyYNWeF5r7YpWAPywB/ SLzKl7tNXwtjqDCqkUPasyXCPCqadRXU9TdahIfABydusu7Xa+5ZQFCodM0TULEm Edd1omWEiXO4k1neIVTyFm3YOrLjcGjR6VisTsX/Cjw7BcZmHrCY3smkTu9qkWaR HKt/Ik6d+DiDreUGizSsLe9UENr9RRFvBukF6bcEIFYzVJGJNBEBfeYkrP3HiN/f uuRC/nXatdv5KW1MEJcTQ2luogjdAfg= -----END CERTIFICATE-----Generated at Mon Sep 28 00:58:41 2026 by rpki-client