$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/2b954891-480d-3983-b806-a305ce7ab30e.roa File: 2b954891-480d-3983-b806-a305ce7ab30e.roa (raw, json) Hash identifier: K1+1mRzKN61Utn2jnJHc/nVSqjLPLg6OKMEIqhsh/Q0= Subject key identifier: 3D:50:AA:D7:34:59:D4:5A:58:57:C9:6A:86:5F:0F:C4:52:DE:EA:24 Certificate issuer: /CN=18800324-5150-4981-a144-bdb80e6bcb7c Certificate serial: 010D0C9F4328584F6C582956A5B51D2A53EC43C0 Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/2b954891-480d-3983-b806-a305ce7ab30e.roa Signing time: Wed 07 Oct 2026 13:00:13 +0000 ROA not before: Wed 07 Oct 2026 13:00:13 +0000 ROA not after: Tue 05 Jan 2027 14:00:13 +0000 asID: 3356 IP address blocks: 23.230.98.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:6c:58:29:56:a5:b5:1d:2a:53:ec:43:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c Validity Not Before: Oct 7 13:00:13 2026 GMT Not After : Jan 5 14:00:13 2027 GMT Subject: CN=39404d66-c703-44bc-8630-0bbb14653f4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:f9:08:47:3c:2a:dc:8d:5d:66:d9:e1:3b:b1: 56:a0:c7:f6:a1:fc:25:ca:be:8c:dd:68:90:f1:93: 9a:8f:6c:2a:db:32:2c:6e:21:35:18:61:ca:db:2f: f9:00:bc:cc:74:bc:29:0b:66:f6:9b:dd:16:79:a5: 29:8c:b3:19:ab:f1:08:59:09:17:2c:d1:aa:68:af: 7f:a4:c3:c7:2e:74:ab:b5:39:c3:34:94:ca:b8:7d: cf:63:29:0b:a3:a5:b6:80:0a:6b:28:ec:65:83:50: 15:84:94:c2:1b:da:12:e8:5b:4e:75:e2:59:fa:e8: 2f:cb:e9:3b:9c:f1:54:19:51:da:61:d8:41:04:f3: 4a:fc:9c:f8:bf:f8:a4:ad:f6:a5:75:da:6b:2d:2b: ca:56:fc:d6:50:bd:91:a4:60:dd:cc:f0:56:1a:c1: f4:99:10:8a:af:41:9c:be:99:4c:32:91:8c:cf:00: 7d:60:4d:c4:6a:58:2b:9e:bf:2d:af:06:4e:9c:dd: 17:a7:68:50:f3:9e:6b:e4:cc:46:91:66:2f:dc:69: 1a:34:37:b2:cb:d0:8a:7e:3a:03:14:5f:29:8d:2b: e8:0c:8a:99:aa:0e:54:c1:6d:46:f0:a1:7e:a0:63: bc:ed:db:58:86:21:5b:94:54:c3:34:d6:7a:68:50: f5:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:50:AA:D7:34:59:D4:5A:58:57:C9:6A:86:5F:0F:C4:52:DE:EA:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/2b954891-480d-3983-b806-a305ce7ab30e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl X509v3 Authority Key Identifier: keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer sbgp-ipAddrBlock: critical IPv4: 23.230.98.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:81:d5:0e:19:40:e5:2a:06:8f:17:2f:1e:f8:8a:b9:8d:bc: 38:2b:7e:00:1d:b6:e3:6d:80:fc:dc:81:eb:15:49:64:44:d4: 63:d0:a9:0e:49:b1:08:93:71:22:87:8b:91:55:e2:b6:ac:b8: 3b:5f:a4:32:58:03:a5:46:ac:49:50:c0:10:31:b6:8c:35:d7: f0:26:cf:c1:34:56:74:2a:40:02:a3:f4:36:31:95:99:45:92: 78:e5:9b:ee:51:f7:f4:53:0d:42:5c:a7:26:2b:d4:df:35:d5: bd:30:5c:a2:17:3b:47:d0:e2:02:73:17:21:6a:6d:78:b8:35: 7d:d8:a9:29:3d:82:84:cd:77:5e:a6:38:71:ad:8d:7a:a6:10: 60:65:cd:6d:a7:72:a3:4f:a4:bd:64:bc:06:70:58:b1:8c:d7: c4:3c:19:4e:69:a1:ed:3f:27:34:3e:d7:1f:1c:1b:88:e5:0a: d2:48:df:e5:96:c1:91:9b:94:86:05:61:f0:71:9d:58:2c:00: f1:79:a0:c6:01:96:9d:57:2b:92:5a:c7:a9:69:d3:96:d2:e9: 0f:4e:66:1e:11:63:64:11:6c:d8:fd:88:cc:91:f0:dc:25:51: 2e:77:ec:4d:36:a5:39:00:7c:99:2b:e2:c6:5e:df:f8:ac:44: 4d:1f:85:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9sWClWpbUdKlPsQ8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg4MDAzMjQtNTE1MC00OTgxLWExNDQtYmRiODBlNmJj YjdjMB4XDTI2MTAwNzEzMDAxM1oXDTI3MDEwNTE0MDAxM1owLzEtMCsGA1UEAxMk Mzk0MDRkNjYtYzcwMy00NGJjLTg2MzAtMGJiYjE0NjUzZjRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuvkIRzwq3I1dZtnhO7FWoMf2ofwlyr6M3WiQ 8ZOaj2wq2zIsbiE1GGHK2y/5ALzMdLwpC2b2m90WeaUpjLMZq/EIWQkXLNGqaK9/ pMPHLnSrtTnDNJTKuH3PYykLo6W2gAprKOxlg1AVhJTCG9oS6FtOdeJZ+ugvy+k7 nPFUGVHaYdhBBPNK/Jz4v/ikrfalddprLSvKVvzWUL2RpGDdzPBWGsH0mRCKr0Gc vplMMpGMzwB9YE3Ealgrnr8trwZOnN0Xp2hQ855r5MxGkWYv3GkaNDeyy9CKfjoD FF8pjSvoDIqZqg5UwW1G8KF+oGO87dtYhiFblFTDNNZ6aFD12QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD1Qqtc0WdRaWFfJaoZfD8RS3uokMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xODgw MDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4MGU2YmNiN2MvMmI5NTQ4OTEtNDgwZC0z OTgzLWI4MDYtYTMwNWNlN2FiMzBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTg4MDAzMjQtNTE1MC00OTgxLWEx NDQtYmRiODBlNmJjYjdjLzE4ODAwMzI0LTUxNTAtNDk4MS1hMTQ0LWJkYjgwZTZi Y2I3Yy5jcmwwHwYDVR0jBBgwFoAUEWtHMzbZ6J21lhte76NAIq7eabYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xODgwMDMyNC01MTUwLTQ5ODEtYTE0NC1iZGI4 MGU2YmNiN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF+ZiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABKB1Q4ZQOUqBo8XLx74irmNvDgrfgAdtuNtgPzcgesVSWRE1GPQqQ5J sQiTcSKHi5FV4rasuDtfpDJYA6VGrElQwBAxtow11/Amz8E0VnQqQAKj9DYxlZlF knjlm+5R9/RTDUJcpyYr1N811b0wXKIXO0fQ4gJzFyFqbXi4NX3YqSk9goTNd16m OHGtjXqmEGBlzW2ncqNPpL1kvAZwWLGM18Q8GU5poe0/JzQ+1x8cG4jlCtJI3+WW wZGblIYFYfBxnVgsAPF5oMYBlp1XK5Jax6lp05bS6Q9OZh4RY2QRbNj9iMyR8Nwl US537E02pTkAfJkr4sZe3/isRE0fhTQ= -----END CERTIFICATE-----Generated at Tue Oct 13 17:16:59 2026 by rpki-client