$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23f061ce-1a61-493b-8f3b-472334453f0d/3482c56b-a68f-3216-b18d-c6952ef07146.roa File: 3482c56b-a68f-3216-b18d-c6952ef07146.roa (raw, json) Hash identifier: PsaT3K7FQGIDPkWVA2AjUT3hKjrSYXRU/UDUnHB+0h4= Subject key identifier: BA:21:85:0F:6D:DE:C1:09:93:F8:C6:8E:54:00:D1:6D:BF:E5:DC:0B Certificate issuer: /CN=23f061ce-1a61-493b-8f3b-472334453f0d Certificate serial: 010D0C9F4328584F49769B453E2EF4E69B857FE8 Authority key identifier: B0:4C:1C:BF:DB:0C:EF:A5:7E:B9:AF:53:02:90:A0:E7:4C:BC:DC:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23f061ce-1a61-493b-8f3b-472334453f0d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23f061ce-1a61-493b-8f3b-472334453f0d/3482c56b-a68f-3216-b18d-c6952ef07146.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 2650 IP address blocks: 204.68.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23f061ce-1a61-493b-8f3b-472334453f0d/23f061ce-1a61-493b-8f3b-472334453f0d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23f061ce-1a61-493b-8f3b-472334453f0d/23f061ce-1a61-493b-8f3b-472334453f0d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23f061ce-1a61-493b-8f3b-472334453f0d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:76:9b:45:3e:2e:f4:e6:9b:85:7f:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23f061ce-1a61-493b-8f3b-472334453f0d Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=ff24f932-220b-44b0-a2f4-b33efd10161f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:df:bf:43:21:4d:44:e8:e6:eb:c9:f5:08:5a: 00:2e:dd:a6:46:4c:60:34:5d:49:48:80:a1:f0:65: 52:3e:28:c0:cb:80:b0:bf:5b:a6:bd:c0:47:06:c4: 7f:d1:6f:3c:b0:68:60:a1:83:58:de:aa:9f:d2:7c: 69:2a:cd:b7:fe:4d:eb:a4:ca:08:80:86:07:76:f7: 75:ae:c6:c1:21:32:e3:c2:df:04:d7:32:33:49:af: 47:a8:bd:07:f9:84:3b:92:40:07:60:cc:13:88:63: 0a:00:b2:38:08:c2:70:01:5f:04:13:66:eb:59:a7: 85:a7:00:73:0c:5d:c7:18:82:c4:49:e0:76:a0:27: 14:19:87:0a:9c:75:66:e5:4d:e3:1f:d7:2e:e9:13: 7d:f3:db:63:f0:ec:58:75:df:c6:76:c9:30:05:43: fe:6a:2d:1e:ba:cd:b9:9b:4e:e1:20:13:82:a7:92: b8:3d:e2:e8:e4:86:a8:02:65:76:4c:bc:b7:35:41: bf:a6:91:44:3c:71:ae:d6:c1:85:29:b6:62:60:8f: 18:89:82:c1:5a:ff:b4:bb:79:07:24:73:c3:2e:6a: 2a:b3:db:a0:a9:1d:e1:4b:f4:aa:bf:38:5c:8f:1f: ea:b7:c5:1c:b0:86:22:da:e2:1b:0b:fe:e8:cb:15: cc:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:21:85:0F:6D:DE:C1:09:93:F8:C6:8E:54:00:D1:6D:BF:E5:DC:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23f061ce-1a61-493b-8f3b-472334453f0d/3482c56b-a68f-3216-b18d-c6952ef07146.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23f061ce-1a61-493b-8f3b-472334453f0d/23f061ce-1a61-493b-8f3b-472334453f0d.crl X509v3 Authority Key Identifier: keyid:B0:4C:1C:BF:DB:0C:EF:A5:7E:B9:AF:53:02:90:A0:E7:4C:BC:DC:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23f061ce-1a61-493b-8f3b-472334453f0d.cer sbgp-ipAddrBlock: critical IPv4: 204.68.207.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:da:bb:a2:02:aa:3a:51:05:7e:7a:a1:3b:fd:12:ad:14:80: 2b:cf:9b:97:2f:ce:51:22:52:c5:06:cc:df:55:58:20:59:ac: 74:03:9b:56:9c:01:36:bf:c8:3b:e1:90:f0:5f:03:30:4a:46: f8:6c:9c:cf:46:e5:4b:34:0f:a7:a0:f8:f7:43:dd:8d:bd:ca: b5:43:f5:eb:d0:d4:8a:aa:4b:79:24:b1:da:69:34:fd:eb:bb: 4a:f6:d1:4d:6e:ca:ac:f6:cc:27:26:f0:ab:66:6d:dc:65:2d: d9:3d:8c:0b:17:f6:6d:93:cd:15:b0:13:93:d7:06:b8:d5:47: 29:f3:72:b2:cf:ba:70:45:6f:9b:e0:37:77:37:a4:84:3d:d3: ef:4a:6f:07:5c:49:ed:d3:e0:6f:84:37:05:18:ad:7b:fa:9a: 8f:cd:d7:3d:45:bf:ee:52:a3:0a:93:19:56:47:c3:a1:45:6d: 16:8b:c1:c8:65:fd:32:45:95:58:fe:dc:55:e6:eb:73:e5:6e: c3:c6:9f:e0:e9:83:ea:5a:08:1f:b6:95:5a:24:ef:c0:11:36: 69:20:1c:87:c9:58:f3:35:72:6f:05:ba:c3:04:83:fa:ea:bd: 6b:0d:fe:74:eb:8e:c9:74:a7:34:d0:8b:c3:9e:15:ba:3d:b7: 79:5d:cc:b2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdptFPi705puFf+gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNmMDYxY2UtMWE2MS00OTNiLThmM2ItNDcyMzM0NDUz ZjBkMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZmYyNGY5MzItMjIwYi00NGIwLWEyZjQtYjMzZWZkMTAxNjFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgN+/QyFNROjm68n1CFoALt2mRkxgNF1JSICh 8GVSPijAy4Cwv1umvcBHBsR/0W88sGhgoYNY3qqf0nxpKs23/k3rpMoIgIYHdvd1 rsbBITLjwt8E1zIzSa9HqL0H+YQ7kkAHYMwTiGMKALI4CMJwAV8EE2brWaeFpwBz DF3HGILESeB2oCcUGYcKnHVm5U3jH9cu6RN989tj8OxYdd/GdskwBUP+ai0eus25 m07hIBOCp5K4PeLo5IaoAmV2TLy3NUG/ppFEPHGu1sGFKbZiYI8YiYLBWv+0u3kH JHPDLmoqs9ugqR3hS/Sqvzhcjx/qt8UcsIYi2uIbC/7oyxXMrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLohhQ9t3sEJk/jGjlQA0W2/5dwLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8yM2Yw NjFjZS0xYTYxLTQ5M2ItOGYzYi00NzIzMzQ0NTNmMGQvMzQ4MmM1NmItYTY4Zi0z MjE2LWIxOGQtYzY5NTJlZjA3MTQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMjNmMDYxY2UtMWE2MS00OTNiLThm M2ItNDcyMzM0NDUzZjBkLzIzZjA2MWNlLTFhNjEtNDkzYi04ZjNiLTQ3MjMzNDQ1 M2YwZC5jcmwwHwYDVR0jBBgwFoAUsEwcv9sM76V+ua9TApCg50y83MkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8yM2YwNjFjZS0xYTYxLTQ5M2ItOGYzYi00NzIz MzQ0NTNmMGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzETPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG7au6ICqjpRBX56oTv9Eq0UgCvPm5cvzlEiUsUGzN9VWCBZrHQDm1ac ATa/yDvhkPBfAzBKRvhsnM9G5Us0D6eg+PdD3Y29yrVD9evQ1IqqS3kksdppNP3r u0r20U1uyqz2zCcm8KtmbdxlLdk9jAsX9m2TzRWwE5PXBrjVRynzcrLPunBFb5vg N3c3pIQ90+9KbwdcSe3T4G+ENwUYrXv6mo/N1z1Fv+5SowqTGVZHw6FFbRaLwchl /TJFlVj+3FXm63PlbsPGn+Dpg+paCB+2lVok78ARNmkgHIfJWPM1cm8FusMEg/rq vWsN/nTrjsl0pzTQi8OeFbo9t3ldzLI= -----END CERTIFICATE-----Generated at Wed Oct 14 04:43:53 2026 by rpki-client