$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4a214c14-52f7-4b21-a2ec-7e64e41ea27d/397f62d5-6cea-3c3d-a28a-35f9d78df2f7.roa File: 397f62d5-6cea-3c3d-a28a-35f9d78df2f7.roa (raw, json) Hash identifier: 6FBSOOLqDngTGS4RRsw1kbFgkeFv2t5fgq5twMIfTr8= Subject key identifier: C3:CA:1E:93:4E:F7:F7:DA:54:0B:D5:3D:0C:6A:0D:9D:5C:1F:97:CB Certificate issuer: /CN=4a214c14-52f7-4b21-a2ec-7e64e41ea27d Certificate serial: 010D0C9F4328584F3B7D262FC4687267F3D10BC0 Authority key identifier: 18:F9:DA:91:FD:FC:57:A5:28:F5:40:9B:11:CD:B8:2D:D9:A9:0B:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4a214c14-52f7-4b21-a2ec-7e64e41ea27d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4a214c14-52f7-4b21-a2ec-7e64e41ea27d/397f62d5-6cea-3c3d-a28a-35f9d78df2f7.roa Signing time: Sun 20 Sep 2026 01:00:11 +0000 ROA not before: Sun 20 Sep 2026 01:00:11 +0000 ROA not after: Sat 19 Dec 2026 02:00:11 +0000 asID: 399463 IP address blocks: 23.169.16.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4a214c14-52f7-4b21-a2ec-7e64e41ea27d/4a214c14-52f7-4b21-a2ec-7e64e41ea27d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4a214c14-52f7-4b21-a2ec-7e64e41ea27d/4a214c14-52f7-4b21-a2ec-7e64e41ea27d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4a214c14-52f7-4b21-a2ec-7e64e41ea27d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3b:7d:26:2f:c4:68:72:67:f3:d1:0b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a214c14-52f7-4b21-a2ec-7e64e41ea27d Validity Not Before: Sep 20 01:00:11 2026 GMT Not After : Dec 19 02:00:11 2026 GMT Subject: CN=9f7a44b2-1cca-4767-9f9d-627aa44cf00a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:df:e6:5d:81:04:52:0d:4f:16:26:cc:55:b2: ed:87:99:2a:8f:27:c2:6e:9b:42:06:a9:eb:b1:8a: d0:53:9f:eb:44:32:16:0a:97:c9:2b:6e:a9:86:60: c8:b6:c2:06:c5:99:ca:84:6e:19:82:88:ef:13:2d: e9:26:db:12:b9:f0:a0:1e:33:f4:ed:8c:41:3e:d6: 82:bb:e8:4b:87:17:93:d6:58:87:86:77:e0:bc:24: c5:bf:1d:5b:4b:83:69:00:0f:fd:b9:a7:33:09:33: 77:4b:86:e2:95:b4:fb:04:ab:2b:e7:f4:d6:aa:61: 04:bf:3c:10:05:0c:f4:de:57:15:f9:ad:58:f9:9c: fe:db:23:90:3e:de:99:82:7d:4f:db:47:24:0d:15: c7:7c:5b:2f:57:26:c6:cd:09:96:56:6f:ac:35:e0: 44:0b:2a:e2:ee:87:20:73:6d:33:66:f6:b5:39:07: 91:03:bf:71:be:8e:41:b3:78:3b:2a:5c:14:55:66: 2f:80:2d:ea:06:60:f3:11:ae:13:62:82:57:25:91: 64:da:18:fc:24:84:bb:1d:95:fc:7e:e3:0b:e0:05: 7f:ba:19:fe:7e:31:3b:bf:98:91:1b:7b:61:b8:06: fb:90:e6:e4:71:d4:0b:4f:b2:f8:06:e7:86:0e:cf: 70:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:CA:1E:93:4E:F7:F7:DA:54:0B:D5:3D:0C:6A:0D:9D:5C:1F:97:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4a214c14-52f7-4b21-a2ec-7e64e41ea27d/397f62d5-6cea-3c3d-a28a-35f9d78df2f7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4a214c14-52f7-4b21-a2ec-7e64e41ea27d/4a214c14-52f7-4b21-a2ec-7e64e41ea27d.crl X509v3 Authority Key Identifier: keyid:18:F9:DA:91:FD:FC:57:A5:28:F5:40:9B:11:CD:B8:2D:D9:A9:0B:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4a214c14-52f7-4b21-a2ec-7e64e41ea27d.cer sbgp-ipAddrBlock: critical IPv4: 23.169.16.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:06:c7:9e:8f:01:2c:c1:19:2a:03:f5:38:bd:83:6e:f6:d5: dc:cd:3e:5d:a9:7b:bd:33:f5:f5:83:aa:14:59:5c:60:10:3f: b8:b2:0c:01:9b:f7:5a:a9:3d:b2:1b:6e:40:5b:f6:14:2c:9d: fd:f7:08:57:4f:56:a2:b1:3c:c4:ee:7b:01:34:c1:79:17:2b: db:f7:87:4e:7a:c4:d0:c6:65:8a:f1:8e:b4:ba:06:82:52:4b: fc:6a:d4:25:6a:28:86:60:43:fc:82:23:fe:fc:c2:9b:42:d0: 94:65:cd:b6:7d:3f:ce:a0:e2:d8:30:7c:8e:d0:2c:1e:b1:be: 3d:65:03:2d:ec:e6:ec:11:c7:70:49:3f:4d:80:52:3f:69:cf: 3e:95:a4:f5:24:4a:80:17:c9:b3:8a:02:b3:be:72:d0:37:3d: 31:23:76:51:02:26:32:25:ee:ee:d4:b4:6b:d0:22:d1:ad:2b: 51:db:94:35:55:e9:7a:ec:ee:3f:b9:fa:5c:85:95:6b:e6:0b: eb:a8:4a:b5:b0:2d:cc:1f:88:14:a3:6d:49:dc:39:ac:3c:03: 02:51:32:12:38:40:13:34:93:c0:d2:f9:7d:19:fc:11:0e:f7: f3:bd:c6:b8:4d:54:d5:1f:f8:ac:7b:a0:69:2b:30:a5:cf:bb: b1:2f:aa:16 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE87fSYvxGhyZ/PRC8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEyMTRjMTQtNTJmNy00YjIxLWEyZWMtN2U2NGU0MWVh MjdkMB4XDTI2MDkyMDAxMDAxMVoXDTI2MTIxOTAyMDAxMVowLzEtMCsGA1UEAxMk OWY3YTQ0YjItMWNjYS00NzY3LTlmOWQtNjI3YWE0NGNmMDBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApd/mXYEEUg1PFibMVbLth5kqjyfCbptCBqnr sYrQU5/rRDIWCpfJK26phmDItsIGxZnKhG4ZgojvEy3pJtsSufCgHjP07YxBPtaC u+hLhxeT1liHhnfgvCTFvx1bS4NpAA/9uaczCTN3S4bilbT7BKsr5/TWqmEEvzwQ BQz03lcV+a1Y+Zz+2yOQPt6Zgn1P20ckDRXHfFsvVybGzQmWVm+sNeBECyri7ocg c20zZva1OQeRA79xvo5Bs3g7KlwUVWYvgC3qBmDzEa4TYoJXJZFk2hj8JIS7HZX8 fuML4AV/uhn+fjE7v5iRG3thuAb7kObkcdQLT7L4BueGDs9wbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMPKHpNO9/faVAvVPQxqDZ1cH5fLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi80YTIx NGMxNC01MmY3LTRiMjEtYTJlYy03ZTY0ZTQxZWEyN2QvMzk3ZjYyZDUtNmNlYS0z YzNkLWEyOGEtMzVmOWQ3OGRmMmY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvNGEyMTRjMTQtNTJmNy00YjIxLWEy ZWMtN2U2NGU0MWVhMjdkLzRhMjE0YzE0LTUyZjctNGIyMS1hMmVjLTdlNjRlNDFl YTI3ZC5jcmwwHwYDVR0jBBgwFoAUGPnakf38V6Uo9UCbEc24LdmpC8MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi80YTIxNGMxNC01MmY3LTRiMjEtYTJlYy03ZTY0 ZTQxZWEyN2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6kQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJwGx56PASzBGSoD9Ti9g2721dzNPl2pe70z9fWDqhRZXGAQP7iyDAGb 91qpPbIbbkBb9hQsnf33CFdPVqKxPMTuewE0wXkXK9v3h056xNDGZYrxjrS6BoJS S/xq1CVqKIZgQ/yCI/78wptC0JRlzbZ9P86g4tgwfI7QLB6xvj1lAy3s5uwRx3BJ P02AUj9pzz6VpPUkSoAXybOKArO+ctA3PTEjdlECJjIl7u7UtGvQItGtK1HblDVV 6Xrs7j+5+lyFlWvmC+uoSrWwLcwfiBSjbUncOaw8AwJRMhI4QBM0k8DS+X0Z/BEO 9/O9xrhNVNUf+Kx7oGkrMKXPu7EvqhY= -----END CERTIFICATE-----Generated at Thu Sep 24 12:58:09 2026 by rpki-client