$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8d335843-a776-4e8d-949e-8217822b7151/b38cb35a-486e-3325-8799-f39704b0b87c.roa File: b38cb35a-486e-3325-8799-f39704b0b87c.roa (raw, json) Hash identifier: cG07VrCfrupA30QvOlhDe3PijhFqtjj/mXDDZTtD15g= Subject key identifier: CC:5F:7A:FA:7F:8B:D2:10:F4:65:6A:A5:B7:CA:AB:33:BB:31:91:BF Certificate issuer: /CN=8d335843-a776-4e8d-949e-8217822b7151 Certificate serial: 010D0C9F4328584F506D6703806909B2C09D9880 Authority key identifier: F4:D1:12:A6:8C:DB:75:56:5D:AD:9A:FD:A6:92:14:D9:04:80:89:44 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8d335843-a776-4e8d-949e-8217822b7151.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8d335843-a776-4e8d-949e-8217822b7151/b38cb35a-486e-3325-8799-f39704b0b87c.roa Signing time: Sun 27 Sep 2026 13:00:12 +0000 ROA not before: Sun 27 Sep 2026 13:00:12 +0000 ROA not after: Sat 26 Dec 2026 14:00:12 +0000 asID: 29769 IP address blocks: 23.183.176.0/24 maxlen: 24 2602:fc5a::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8d335843-a776-4e8d-949e-8217822b7151/8d335843-a776-4e8d-949e-8217822b7151.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8d335843-a776-4e8d-949e-8217822b7151/8d335843-a776-4e8d-949e-8217822b7151.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8d335843-a776-4e8d-949e-8217822b7151.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:50:6d:67:03:80:69:09:b2:c0:9d:98:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d335843-a776-4e8d-949e-8217822b7151 Validity Not Before: Sep 27 13:00:12 2026 GMT Not After : Dec 26 14:00:12 2026 GMT Subject: CN=39e8356a-7945-4172-8c57-31ba4e9aa4ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:de:35:ba:9d:0e:ac:9d:72:c0:37:5b:ef:23: 38:69:d9:ea:60:82:b6:bc:15:d7:bd:83:38:27:5a: d1:ba:e8:0b:5b:de:ec:ca:88:ff:d5:df:5e:df:e0: fa:85:91:8f:18:f3:c4:3e:1b:99:37:61:49:61:8b: 09:31:7b:e8:34:ba:1c:a9:4b:37:74:17:4d:5c:46: 64:9a:3d:8d:c0:53:cf:9c:76:21:fb:2e:9e:ad:97: fe:9a:d9:4c:50:df:a7:45:d6:f3:19:83:0f:9d:57: 32:08:b2:19:e0:1c:d6:c1:2b:59:87:65:62:0c:cb: 97:76:8f:84:8a:e1:7d:9d:be:cb:0c:d1:fa:0b:37: 88:65:5d:ea:41:6a:d0:56:38:a4:a6:a7:9f:d1:a7: c6:6f:7d:7a:d5:a4:3f:7e:8e:58:e8:77:4c:05:cd: 14:2a:a0:58:09:31:cf:38:67:29:48:7e:63:fb:ac: 78:bd:ff:f6:89:4d:93:93:9e:a6:d8:37:4f:5c:26: e0:6b:60:a0:4a:3d:b8:9f:14:85:5f:3a:52:de:1c: c6:03:68:bb:0e:a3:74:44:dc:99:c0:e0:f6:5c:7f: 9f:65:1e:42:f1:db:47:43:a6:09:44:d0:d8:cc:f2: f9:d1:80:f4:b5:69:17:ed:41:9d:99:0f:63:f3:2e: ea:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:5F:7A:FA:7F:8B:D2:10:F4:65:6A:A5:B7:CA:AB:33:BB:31:91:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8d335843-a776-4e8d-949e-8217822b7151/b38cb35a-486e-3325-8799-f39704b0b87c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8d335843-a776-4e8d-949e-8217822b7151/8d335843-a776-4e8d-949e-8217822b7151.crl X509v3 Authority Key Identifier: keyid:F4:D1:12:A6:8C:DB:75:56:5D:AD:9A:FD:A6:92:14:D9:04:80:89:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8d335843-a776-4e8d-949e-8217822b7151.cer sbgp-ipAddrBlock: critical IPv4: 23.183.176.0/24 IPv6: 2602:fc5a::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:ea:5b:bd:17:02:01:76:cf:27:3d:67:d4:b3:d4:8a:af:64: f9:7c:7b:ef:99:d1:e1:b4:f4:68:5e:db:db:f2:07:6f:02:e5: d8:40:e9:d8:e5:e7:1e:cf:33:74:16:c1:d6:ec:cf:24:e0:8e: 53:0c:a1:60:ba:a6:2f:cf:d8:64:1b:ef:3f:91:a5:eb:a5:0a: 22:e9:f9:72:fb:7a:e9:2d:15:25:71:5d:4e:a5:81:a2:32:fd: 14:bb:1f:ee:91:5b:19:b5:64:5d:a9:e3:93:38:4f:d7:24:c7: 31:85:1e:ec:0a:bf:dc:4e:ca:7b:6a:3b:01:2e:22:90:21:01: eb:b7:bd:d8:b1:d1:b7:ee:c8:62:60:44:ef:f4:7a:99:61:e9: dd:90:1d:a7:ab:90:f3:59:86:43:37:fa:e2:24:96:d3:20:5e: 74:1a:25:b4:c7:e0:73:70:da:87:f1:4a:46:21:9a:57:18:38: 59:a1:c3:3d:46:9c:56:00:f1:3e:79:92:9b:6c:82:56:10:07: e6:21:6c:23:53:73:01:40:54:fb:ad:a7:43:8c:2a:2c:88:3d: 26:31:3e:c3:ad:44:8a:e6:01:8f:3c:d0:6c:7a:89:b4:8c:64: 59:81:4e:a6:66:65:cc:7a:8d:da:96:29:00:ed:f6:64:d9:69: 12:80:a1:c2 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE9QbWcDgGkJssCdmIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGQzMzU4NDMtYTc3Ni00ZThkLTk0OWUtODIxNzgyMmI3 MTUxMB4XDTI2MDkyNzEzMDAxMloXDTI2MTIyNjE0MDAxMlowLzEtMCsGA1UEAxMk MzllODM1NmEtNzk0NS00MTcyLThjNTctMzFiYTRlOWFhNGZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh941up0OrJ1ywDdb7yM4adnqYIK2vBXXvYM4 J1rRuugLW97syoj/1d9e3+D6hZGPGPPEPhuZN2FJYYsJMXvoNLocqUs3dBdNXEZk mj2NwFPPnHYh+y6erZf+mtlMUN+nRdbzGYMPnVcyCLIZ4BzWwStZh2ViDMuXdo+E iuF9nb7LDNH6CzeIZV3qQWrQVjikpqef0afGb3161aQ/fo5Y6HdMBc0UKqBYCTHP OGcpSH5j+6x4vf/2iU2Tk56m2DdPXCbga2CgSj24nxSFXzpS3hzGA2i7DqN0RNyZ wOD2XH+fZR5C8dtHQ6YJRNDYzPL50YD0tWkX7UGdmQ9j8y7qdQIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFMxfevp/i9IQ9GVqpbfKqzO7MZG/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84ZDMz NTg0My1hNzc2LTRlOGQtOTQ5ZS04MjE3ODIyYjcxNTEvYjM4Y2IzNWEtNDg2ZS0z MzI1LTg3OTktZjM5NzA0YjBiODdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOGQzMzU4NDMtYTc3Ni00ZThkLTk0 OWUtODIxNzgyMmI3MTUxLzhkMzM1ODQzLWE3NzYtNGU4ZC05NDllLTgyMTc4MjJi NzE1MS5jcmwwHwYDVR0jBBgwFoAU9NESpozbdVZdrZr9ppIU2QSAiUQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS84ZDMzNTg0My1hNzc2LTRlOGQtOTQ5ZS04MjE3 ODIyYjcxNTEuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF7ewMA4E AgACMAgDBgQmAvxaADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBL6lu9FwIBds8nPWfUs9SKr2T5fHvvmdHh tPRoXtvb8gdvAuXYQOnY5ecezzN0FsHW7M8k4I5TDKFguqYvz9hkG+8/kaXrpQoi 6fly+3rpLRUlcV1OpYGiMv0Uux/ukVsZtWRdqeOTOE/XJMcxhR7sCr/cTsp7ajsB LiKQIQHrt73YsdG37shiYETv9HqZYendkB2nq5DzWYZDN/riJJbTIF50GiW0x+Bz cNqH8UpGIZpXGDhZocM9RpxWAPE+eZKbbIJWEAfmIWwjU3MBQFT7radDjCosiD0m MT7DrUSK5gGPPNBseom0jGRZgU6mZmXMeo3alikA7fZk2WkSgKHC -----END CERTIFICATE-----Generated at Thu Oct 8 15:49:30 2026 by rpki-client