$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/97b2b039-29df-464b-999d-0a4a81b0c669/294c0fe2-3508-3bef-8338-7a1bf29278c8.roa File: 294c0fe2-3508-3bef-8338-7a1bf29278c8.roa (raw, json) Hash identifier: lKLYpXwuHkdC6HCPGod4tRk8S5cl6GplbKGuQRlJhYk= Subject key identifier: C3:AD:95:E4:47:B3:06:77:4B:63:B6:48:65:3A:42:0D:7F:20:E8:A5 Certificate issuer: /CN=97b2b039-29df-464b-999d-0a4a81b0c669 Certificate serial: 010D0C9F4328584F3FAD22C2C1FE700D0289BA80 Authority key identifier: 39:5D:B9:19:6A:02:69:36:AD:71:4A:1F:D9:79:30:81:73:6C:D7:E5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/97b2b039-29df-464b-999d-0a4a81b0c669.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/97b2b039-29df-464b-999d-0a4a81b0c669/294c0fe2-3508-3bef-8338-7a1bf29278c8.roa Signing time: Mon 21 Sep 2026 13:00:12 +0000 ROA not before: Mon 21 Sep 2026 13:00:12 +0000 ROA not after: Sun 20 Dec 2026 14:00:12 +0000 asID: 2914 IP address blocks: 23.149.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/97b2b039-29df-464b-999d-0a4a81b0c669/97b2b039-29df-464b-999d-0a4a81b0c669.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/97b2b039-29df-464b-999d-0a4a81b0c669/97b2b039-29df-464b-999d-0a4a81b0c669.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/97b2b039-29df-464b-999d-0a4a81b0c669.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3f:ad:22:c2:c1:fe:70:0d:02:89:ba:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97b2b039-29df-464b-999d-0a4a81b0c669 Validity Not Before: Sep 21 13:00:12 2026 GMT Not After : Dec 20 14:00:12 2026 GMT Subject: CN=abbc0971-0886-4c1c-9e32-0e60d84f5b7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:7c:cb:cf:6d:be:b0:08:0e:cf:50:d2:93:69: ad:28:ed:1b:b3:7d:44:a0:41:c7:e4:80:7c:88:ea: 5b:da:3d:9d:3d:d0:e2:56:b8:99:49:64:ca:64:a0: 03:d0:ed:7d:91:c1:b0:98:aa:93:e6:c3:a5:a8:b8: 9f:7f:ef:49:ef:22:10:20:1a:dd:9d:20:36:ae:8c: 6d:85:3f:4e:a9:14:23:7a:c6:8e:9c:d3:88:63:ad: f4:6e:09:ae:8d:49:83:2d:17:f1:07:48:a9:d4:09: 7a:d1:77:34:ab:90:ef:30:af:67:c9:d8:88:5e:52: e9:af:f4:4b:f3:86:41:1b:97:1d:9e:e0:2b:0e:91: 3e:1d:1a:c6:39:66:c0:7d:5e:44:b9:89:9e:2c:cc: 46:b1:04:41:5b:0e:62:5d:38:25:26:c8:c0:92:a2: dd:b3:ff:71:6e:6a:b2:51:45:94:e4:e5:2e:67:da: 19:0e:77:9d:1c:c3:14:47:b8:69:89:5c:b4:a0:12: e1:58:95:29:6c:42:ef:fa:96:73:38:5f:ce:db:78: 97:cf:b7:02:8f:8b:f1:2c:b8:64:43:6d:0e:aa:87: f7:ad:e4:09:8e:8c:18:d6:5d:1b:f8:74:66:75:d9: 37:2f:1d:83:6b:34:3f:7f:e0:4f:2f:ae:99:e2:46: e9:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:AD:95:E4:47:B3:06:77:4B:63:B6:48:65:3A:42:0D:7F:20:E8:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/97b2b039-29df-464b-999d-0a4a81b0c669/294c0fe2-3508-3bef-8338-7a1bf29278c8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/97b2b039-29df-464b-999d-0a4a81b0c669/97b2b039-29df-464b-999d-0a4a81b0c669.crl X509v3 Authority Key Identifier: keyid:39:5D:B9:19:6A:02:69:36:AD:71:4A:1F:D9:79:30:81:73:6C:D7:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/97b2b039-29df-464b-999d-0a4a81b0c669.cer sbgp-ipAddrBlock: critical IPv4: 23.149.244.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:bd:b4:9b:a0:71:bd:26:87:cb:4d:55:7e:5b:2f:07:b1:b7: ef:69:1f:54:9a:bb:19:56:cc:f1:45:75:fe:a0:0a:2b:95:05: 09:a6:61:64:71:1c:eb:50:fc:c7:c1:72:c9:2a:fa:64:64:41: a4:f9:0a:cd:f4:1b:46:ae:1a:7e:58:14:b8:33:a9:f6:3f:d6: bc:29:e0:ba:a5:7b:ad:ff:06:ee:9c:6b:29:4e:86:95:b4:ab: 64:e7:f7:ae:16:7f:f8:34:f0:40:6f:20:36:e0:6e:b9:f8:5b: f5:6b:25:58:36:ed:27:56:62:fc:84:2d:1b:7e:6c:2c:d9:fe: de:12:d9:39:5a:80:2c:4a:49:de:61:4f:4e:7a:c5:e7:bb:05: fd:4c:ac:53:65:63:6c:79:80:50:c5:95:78:0f:b5:e7:de:e3: 8a:22:66:db:6a:c1:73:7c:2c:4e:8f:a6:ce:9b:80:d3:dd:e0: 1f:52:1d:22:8e:b7:3e:83:0e:88:38:37:90:21:7e:e1:97:d6: d8:e3:3e:ac:25:8a:fc:11:1d:6b:f3:55:1b:e6:9c:ce:a4:ab: 37:ae:2a:37:00:25:a7:27:51:fa:8b:9a:a3:67:44:d6:51:8a: 15:1a:20:68:e2:52:0b:1a:2e:5d:b8:e4:6b:8b:d7:9a:10:20: 45:93:16:10 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8/rSLCwf5wDQKJuoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTdiMmIwMzktMjlkZi00NjRiLTk5OWQtMGE0YTgxYjBj NjY5MB4XDTI2MDkyMTEzMDAxMloXDTI2MTIyMDE0MDAxMlowLzEtMCsGA1UEAxMk YWJiYzA5NzEtMDg4Ni00YzFjLTllMzItMGU2MGQ4NGY1YjdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiHzLz22+sAgOz1DSk2mtKO0bs31EoEHH5IB8 iOpb2j2dPdDiVriZSWTKZKAD0O19kcGwmKqT5sOlqLiff+9J7yIQIBrdnSA2roxt hT9OqRQjesaOnNOIY630bgmujUmDLRfxB0ip1Al60Xc0q5DvMK9nydiIXlLpr/RL 84ZBG5cdnuArDpE+HRrGOWbAfV5EuYmeLMxGsQRBWw5iXTglJsjAkqLds/9xbmqy UUWU5OUuZ9oZDnedHMMUR7hpiVy0oBLhWJUpbELv+pZzOF/O23iXz7cCj4vxLLhk Q20Oqof3reQJjowY1l0b+HRmddk3Lx2DazQ/f+BPL66Z4kbpMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMOtleRHswZ3S2O2SGU6Qg1/IOilMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi85N2Iy YjAzOS0yOWRmLTQ2NGItOTk5ZC0wYTRhODFiMGM2NjkvMjk0YzBmZTItMzUwOC0z YmVmLTgzMzgtN2ExYmYyOTI3OGM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvOTdiMmIwMzktMjlkZi00NjRiLTk5 OWQtMGE0YTgxYjBjNjY5Lzk3YjJiMDM5LTI5ZGYtNDY0Yi05OTlkLTBhNGE4MWIw YzY2OS5jcmwwHwYDVR0jBBgwFoAUOV25GWoCaTatcUof2XkwgXNs1+UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi85N2IyYjAzOS0yOWRmLTQ2NGItOTk5ZC0wYTRh ODFiMGM2NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5X0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJS9tJugcb0mh8tNVX5bLwext+9pH1SauxlWzPFFdf6gCiuVBQmmYWRx HOtQ/MfBcskq+mRkQaT5Cs30G0auGn5YFLgzqfY/1rwp4Lqle63/Bu6caylOhpW0 q2Tn964Wf/g08EBvIDbgbrn4W/VrJVg27SdWYvyELRt+bCzZ/t4S2TlagCxKSd5h T056xee7Bf1MrFNlY2x5gFDFlXgPtefe44oiZttqwXN8LE6Pps6bgNPd4B9SHSKO tz6DDog4N5AhfuGX1tjjPqwlivwRHWvzVRvmnM6kqzeuKjcAJacnUfqLmqNnRNZR ihUaIGjiUgsaLl245GuL15oQIEWTFhA= -----END CERTIFICATE-----Generated at Sun Oct 4 12:56:19 2026 by rpki-client