$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/61d173a5-dc04-3628-8133-7496c3b4074f.roa File: 61d173a5-dc04-3628-8133-7496c3b4074f.roa (raw, json) Hash identifier: DbjAwgA0CcgHWNXNVWVsUO1ashYo4z9Gw6NBC0H9Lms= Subject key identifier: 16:EE:25:3D:0F:A1:91:63:B5:EC:C1:15:FD:0D:73:BC:73:83:10:17 Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Certificate serial: 010D0C9F4328584F4973C7BCB5932A5601D68400 Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/61d173a5-dc04-3628-8133-7496c3b4074f.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 852 IP address blocks: 23.16.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:c7:bc:b5:93:2a:56:01:d6:84:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=7bd3a80a-feb9-4582-8532-a8a0772f72de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:5d:a2:ca:ee:0a:4b:7a:2d:4c:85:6c:1e:b4: 34:00:ac:99:b2:29:ab:7b:1a:18:b1:2b:6c:59:d7: d6:69:24:c6:0e:b3:30:02:fe:d9:bf:40:05:7f:fb: 90:e5:b4:37:2b:1e:2e:45:3e:8d:db:93:11:70:81: 4a:89:56:d9:dd:2d:67:50:21:8c:89:bd:fa:7b:57: a2:00:38:5f:86:f3:d6:49:c5:31:e7:93:25:b1:b5: ba:18:d1:4b:19:e3:44:42:30:fd:c7:07:66:f1:34: fd:c5:03:12:ca:b5:67:76:5d:f8:54:79:db:03:ce: a1:9a:a7:f9:cb:99:7d:23:4b:50:3f:b4:ff:f2:7a: 32:19:22:0a:e7:d6:03:91:71:c0:07:e8:21:6a:93: 2f:46:ab:85:8a:b6:fd:d4:c3:47:e1:2a:9d:72:66: c9:ca:de:cf:a7:fb:fd:a7:3a:1e:50:f6:6e:07:0a: eb:94:af:f3:74:33:1b:0e:e1:a2:69:f2:73:59:b6: f6:86:c1:86:01:9a:ab:7c:5d:bb:ac:94:7e:43:e4: 58:a0:65:7d:94:d7:ee:f6:18:79:c1:a4:c9:fc:bf: 97:cc:be:1f:00:e4:ea:87:ac:44:2a:dc:db:34:9e: 02:10:ac:33:52:d2:11:40:fa:21:7b:b9:51:5b:9c: dd:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:EE:25:3D:0F:A1:91:63:B5:EC:C1:15:FD:0D:73:BC:73:83:10:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/61d173a5-dc04-3628-8133-7496c3b4074f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl X509v3 Authority Key Identifier: keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer sbgp-ipAddrBlock: critical IPv4: 23.16.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption e7:e9:5b:d8:7e:f8:49:79:1b:22:25:e5:9d:2d:e3:ce:23:6c: 11:b5:a2:54:a2:35:f5:5a:59:87:05:be:f8:93:98:84:95:05: 0c:1c:c1:79:87:9e:6a:95:0a:b4:02:48:e9:8c:7e:93:fe:08: 62:9e:43:5f:6f:1a:98:7a:a4:93:b1:87:f1:22:21:74:58:18: b8:12:da:de:e3:51:76:eb:ac:4a:9c:7a:35:86:92:7a:cf:09: e0:94:81:16:79:e7:92:93:e9:78:32:a3:bd:89:77:96:04:60: 99:35:08:e1:39:8b:00:57:be:15:7f:0b:e1:3c:62:14:e9:d3: 80:d7:31:2d:bb:5e:0c:46:71:68:64:78:37:d9:99:26:f5:45: ef:33:8a:ef:4d:c1:5f:df:a7:61:ee:1a:e1:b2:bd:ef:fd:84: 0c:98:6c:fe:f3:7a:1d:e2:9b:b3:6a:b5:84:9c:69:fa:00:3e: 90:35:31:66:84:d6:9c:90:d4:dc:d3:98:d4:f1:8f:5c:7f:9a: ff:ef:2f:ef:bb:b6:5e:af:33:a2:51:69:82:96:93:d7:da:68: 65:5c:02:7c:43:aa:79:c7:06:66:46:2c:53:bd:ab:fe:6e:b0: ae:71:a7:fb:2d:5c:22:13:b3:cf:dd:d3:3d:c8:2b:b0:6d:af: a4:9f:4f:5d -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE9Jc8e8tZMqVgHWhAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl YjI0MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk N2JkM2E4MGEtZmViOS00NTgyLTg1MzItYThhMDc3MmY3MmRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlV2iyu4KS3otTIVsHrQ0AKyZsimrexoYsSts WdfWaSTGDrMwAv7Zv0AFf/uQ5bQ3Kx4uRT6N25MRcIFKiVbZ3S1nUCGMib36e1ei ADhfhvPWScUx55MlsbW6GNFLGeNEQjD9xwdm8TT9xQMSyrVndl34VHnbA86hmqf5 y5l9I0tQP7T/8noyGSIK59YDkXHAB+ghapMvRquFirb91MNH4SqdcmbJyt7Pp/v9 pzoeUPZuBwrrlK/zdDMbDuGiafJzWbb2hsGGAZqrfF27rJR+Q+RYoGV9lNfu9hh5 waTJ/L+XzL4fAOTqh6xEKtzbNJ4CEKwzUtIRQPohe7lRW5zdOwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFBbuJT0PoZFjtezBFf0Nc7xzgxAXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvNjFkMTczYTUtZGMwNC0z NjI4LTgxMzMtNzQ5NmMzYjQwNzRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi NzcyYWViMjQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAFxAwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEA5+lb2H74SXkbIiXlnS3jziNsEbWiVKI19VpZhwW++JOYhJUFDBzBeYee apUKtAJI6Yx+k/4IYp5DX28amHqkk7GH8SIhdFgYuBLa3uNRduusSpx6NYaSes8J 4JSBFnnnkpPpeDKjvYl3lgRgmTUI4TmLAFe+FX8L4TxiFOnTgNcxLbteDEZxaGR4 N9mZJvVF7zOK703BX9+nYe4a4bK97/2EDJhs/vN6HeKbs2q1hJxp+gA+kDUxZoTW nJDU3NOY1PGPXH+a/+8v77u2Xq8zolFpgpaT19poZVwCfEOqeccGZkYsU72r/m6w rnGn+y1cIhOzz93TPcgrsG2vpJ9PXQ== -----END CERTIFICATE-----Generated at Sat Oct 10 17:12:02 2026 by rpki-client