$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/43d85349-fcc3-4834-8564-24f8a824b0cd/673f4a2a-5656-3dbd-a855-f30cadf48404.roa File: 673f4a2a-5656-3dbd-a855-f30cadf48404.roa (raw, json) Hash identifier: G0KRgNG4rB+MkcTWthjqTjV8yOtUEoCVT52O9sZzkxo= Subject key identifier: 55:C5:95:5A:88:F2:EC:F7:22:65:80:39:D8:FD:FE:11:93:3C:1F:3A Certificate issuer: /CN=43d85349-fcc3-4834-8564-24f8a824b0cd Certificate serial: 010D0C9F4328584F58CD501F83AF55E4CA8FC360 Authority key identifier: 04:E6:CE:C5:24:7C:98:A4:6B:C3:A2:9A:16:AB:E3:9B:E5:A2:4E:82 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/43d85349-fcc3-4834-8564-24f8a824b0cd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/43d85349-fcc3-4834-8564-24f8a824b0cd/673f4a2a-5656-3dbd-a855-f30cadf48404.roa Signing time: Wed 30 Sep 2026 13:00:13 +0000 ROA not before: Wed 30 Sep 2026 13:00:13 +0000 ROA not after: Tue 29 Dec 2026 14:00:13 +0000 asID: 399613 IP address blocks: 23.141.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/43d85349-fcc3-4834-8564-24f8a824b0cd/43d85349-fcc3-4834-8564-24f8a824b0cd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/43d85349-fcc3-4834-8564-24f8a824b0cd/43d85349-fcc3-4834-8564-24f8a824b0cd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/43d85349-fcc3-4834-8564-24f8a824b0cd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 04 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:58:cd:50:1f:83:af:55:e4:ca:8f:c3:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43d85349-fcc3-4834-8564-24f8a824b0cd Validity Not Before: Sep 30 13:00:13 2026 GMT Not After : Dec 29 14:00:13 2026 GMT Subject: CN=4861c804-e850-4982-8c14-fa817d66cd1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:d1:f3:f4:5a:21:26:90:90:29:96:2d:00:3f: 44:5e:b7:ac:e7:39:9a:61:b1:73:f5:f0:60:f4:1a: a3:b3:a4:80:27:18:4d:d7:d0:de:fb:f8:28:bc:8e: 1d:59:92:a4:0b:dc:64:c2:a2:0c:4e:c1:2d:f4:d4: 2f:64:4f:2c:9b:88:0f:1e:0f:24:1f:91:9f:30:6b: 11:f2:95:61:7b:af:f8:07:ed:0e:82:90:5a:23:f0: ed:ed:c6:97:23:db:c4:22:fe:69:28:3d:5e:c6:9b: 9d:93:6a:76:6a:5e:b0:13:5f:80:a1:2e:70:69:d8: 0b:93:46:71:bf:07:ac:f1:c5:45:a2:61:dd:85:9b: cd:a7:19:01:2c:01:9c:73:32:25:64:d0:33:6f:9a: 4d:9b:cc:38:be:df:f2:13:42:b5:f2:8b:28:99:c7: 21:01:a9:28:5e:49:cf:21:64:8b:fb:78:79:e2:9e: 42:b3:10:89:8c:82:cc:be:3a:1e:af:c9:35:50:7b: 5f:20:8a:37:dc:f0:0a:60:66:a3:e5:85:f5:97:fc: 7e:13:87:b9:68:c9:2b:4f:b0:f8:74:f5:82:8d:af: af:38:03:fa:12:f9:67:4b:1d:68:ba:2e:b6:a7:71: 47:a8:60:18:c0:55:72:99:bb:d8:c7:bb:04:39:56: ee:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:C5:95:5A:88:F2:EC:F7:22:65:80:39:D8:FD:FE:11:93:3C:1F:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/43d85349-fcc3-4834-8564-24f8a824b0cd/673f4a2a-5656-3dbd-a855-f30cadf48404.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/43d85349-fcc3-4834-8564-24f8a824b0cd/43d85349-fcc3-4834-8564-24f8a824b0cd.crl X509v3 Authority Key Identifier: keyid:04:E6:CE:C5:24:7C:98:A4:6B:C3:A2:9A:16:AB:E3:9B:E5:A2:4E:82 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/43d85349-fcc3-4834-8564-24f8a824b0cd.cer sbgp-ipAddrBlock: critical IPv4: 23.141.148.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:db:52:09:c9:70:ad:e9:45:5b:01:52:3a:05:b7:0a:c4:9f: 40:d8:3c:08:65:2d:21:6f:f8:70:d7:d6:51:f7:f0:26:4b:f2: b0:97:17:4d:7f:2c:9f:52:90:40:57:82:83:1f:14:34:2e:5a: 3f:2f:19:7a:ad:c3:16:05:25:3f:26:ea:f8:cb:d6:a9:91:f9: 43:9c:0c:2b:b6:a6:c3:35:e7:24:15:d2:00:72:41:41:bb:1d: 23:6d:e9:f7:93:b4:0c:e2:62:15:c0:99:68:dc:42:ea:75:4d: e0:47:2a:92:66:03:a6:06:9b:24:ac:0e:99:d6:71:00:d7:cc: da:a5:7d:e4:41:f6:83:0c:de:a1:8e:ed:5f:ad:ea:b9:e2:a3: fb:cc:22:aa:50:06:eb:11:41:f1:26:62:bf:d3:53:d0:f4:bf: 22:ca:8d:12:7d:8c:05:2a:47:df:51:fd:31:db:50:79:0b:6c: 79:9a:6d:bb:b1:28:d9:7f:f2:98:01:7f:49:f2:0b:0f:62:ad: 2c:a2:93:34:9f:37:df:0c:e6:6e:06:27:d6:1e:25:6a:9b:eb: fb:23:a0:a1:90:b8:33:32:e3:60:32:ad:f9:31:45:de:86:63: c6:e0:e4:0a:5b:18:02:5a:af:8b:a0:e4:0d:8b:0f:54:0b:05: f9:b3:31:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9YzVAfg69V5MqPw2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDNkODUzNDktZmNjMy00ODM0LTg1NjQtMjRmOGE4MjRi MGNkMB4XDTI2MDkzMDEzMDAxM1oXDTI2MTIyOTE0MDAxM1owLzEtMCsGA1UEAxMk NDg2MWM4MDQtZTg1MC00OTgyLThjMTQtZmE4MTdkNjZjZDFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqdHz9FohJpCQKZYtAD9EXres5zmaYbFz9fBg 9Bqjs6SAJxhN19De+/govI4dWZKkC9xkwqIMTsEt9NQvZE8sm4gPHg8kH5GfMGsR 8pVhe6/4B+0OgpBaI/Dt7caXI9vEIv5pKD1expudk2p2al6wE1+AoS5wadgLk0Zx vwes8cVFomHdhZvNpxkBLAGcczIlZNAzb5pNm8w4vt/yE0K18osomcchAakoXknP IWSL+3h54p5CsxCJjILMvjoer8k1UHtfIIo33PAKYGaj5YX1l/x+E4e5aMkrT7D4 dPWCja+vOAP6EvlnSx1oui62p3FHqGAYwFVymbvYx7sEOVbuBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFXFlVqI8uz3ImWAOdj9/hGTPB86MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80M2Q4 NTM0OS1mY2MzLTQ4MzQtODU2NC0yNGY4YTgyNGIwY2QvNjczZjRhMmEtNTY1Ni0z ZGJkLWE4NTUtZjMwY2FkZjQ4NDA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNDNkODUzNDktZmNjMy00ODM0LTg1 NjQtMjRmOGE4MjRiMGNkLzQzZDg1MzQ5LWZjYzMtNDgzNC04NTY0LTI0ZjhhODI0 YjBjZC5jcmwwHwYDVR0jBBgwFoAUBObOxSR8mKRrw6KaFqvjm+WiToIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy80M2Q4NTM0OS1mY2MzLTQ4MzQtODU2NC0yNGY4 YTgyNGIwY2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF42UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF/bUgnJcK3pRVsBUjoFtwrEn0DYPAhlLSFv+HDX1lH38CZL8rCXF01/ LJ9SkEBXgoMfFDQuWj8vGXqtwxYFJT8m6vjL1qmR+UOcDCu2psM15yQV0gByQUG7 HSNt6feTtAziYhXAmWjcQup1TeBHKpJmA6YGmySsDpnWcQDXzNqlfeRB9oMM3qGO 7V+t6rnio/vMIqpQBusRQfEmYr/TU9D0vyLKjRJ9jAUqR99R/THbUHkLbHmabbux KNl/8pgBf0nyCw9irSyikzSfN98M5m4GJ9YeJWqb6/sjoKGQuDMy42AyrfkxRd6G Y8bg5ApbGAJar4ug5A2LD1QLBfmzMcA= -----END CERTIFICATE-----Generated at Sat Oct 3 16:03:59 2026 by rpki-client