$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b4f91351-ba27-4d8a-9d06-59aeaa972a62/cf1f5542-3832-3dd7-a2a2-2c68571dd2aa.roa File: cf1f5542-3832-3dd7-a2a2-2c68571dd2aa.roa (raw, json) Hash identifier: q4lKhxuWzdBGW6bV7OMG1rA94qiZM7q4ZxCnoCXAdJo= Subject key identifier: 2A:BC:EA:8B:68:64:83:4E:9A:F0:E8:13:92:AC:45:4E:7F:F7:8B:DD Certificate issuer: /CN=b4f91351-ba27-4d8a-9d06-59aeaa972a62 Certificate serial: 010D0C9F4328584F49766C0102080105134B7CC0 Authority key identifier: 46:E2:26:A8:17:D7:F8:DD:BE:2B:B7:36:A7:C8:BB:56:4F:8A:FF:79 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b4f91351-ba27-4d8a-9d06-59aeaa972a62.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b4f91351-ba27-4d8a-9d06-59aeaa972a62/cf1f5542-3832-3dd7-a2a2-2c68571dd2aa.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 12131 IP address blocks: 23.161.34.0/24 maxlen: 24 23.187.0.0/24 maxlen: 24 23.187.1.0/24 maxlen: 24 2620:1df::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b4f91351-ba27-4d8a-9d06-59aeaa972a62/b4f91351-ba27-4d8a-9d06-59aeaa972a62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b4f91351-ba27-4d8a-9d06-59aeaa972a62/b4f91351-ba27-4d8a-9d06-59aeaa972a62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b4f91351-ba27-4d8a-9d06-59aeaa972a62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:76:6c:01:02:08:01:05:13:4b:7c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4f91351-ba27-4d8a-9d06-59aeaa972a62 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=469d2a42-742c-4bad-9b6a-cec400ad07bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:87:69:0e:b1:36:a2:af:41:55:69:eb:47:42: fc:e8:31:98:65:d9:f2:9c:7a:92:9d:22:04:44:1a: bb:51:4c:ca:76:09:75:7e:8c:a6:ad:66:91:54:3a: 0c:11:e3:a9:28:63:71:e0:0e:05:c6:11:2d:b6:89: 22:5b:70:d5:12:92:41:c2:23:d8:34:f5:bd:ff:f0: da:d8:bc:d3:42:98:6b:4d:46:bd:1c:27:be:8e:04: e2:a5:5d:c1:81:a0:86:59:9b:28:68:9f:63:a0:6e: 00:d1:2b:4c:30:11:8e:2a:1f:57:e0:22:93:f6:c9: 1c:fd:1a:cf:2b:d2:6d:8e:c3:63:0c:95:1a:e1:7f: 68:26:49:4e:49:79:d3:21:ee:b6:cf:e7:a0:b2:04: 80:1d:4e:da:c5:39:1c:e5:57:76:9f:2e:d5:dc:95: a2:aa:60:08:ef:3e:52:a0:a3:6e:f1:e8:ca:76:25: 62:61:99:cf:2a:c6:79:9a:05:76:3f:36:fa:66:d7: fb:41:7f:43:e6:fa:53:c9:e5:48:e5:5d:b2:65:08: e2:88:d1:f6:f6:78:43:49:b3:5c:c4:06:fb:78:ca: 55:43:18:da:ed:d0:e0:a0:19:18:f3:02:ab:d0:d4: fc:de:3a:da:03:d3:dd:83:67:41:7a:ae:79:b5:18: bb:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:BC:EA:8B:68:64:83:4E:9A:F0:E8:13:92:AC:45:4E:7F:F7:8B:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b4f91351-ba27-4d8a-9d06-59aeaa972a62/cf1f5542-3832-3dd7-a2a2-2c68571dd2aa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b4f91351-ba27-4d8a-9d06-59aeaa972a62/b4f91351-ba27-4d8a-9d06-59aeaa972a62.crl X509v3 Authority Key Identifier: keyid:46:E2:26:A8:17:D7:F8:DD:BE:2B:B7:36:A7:C8:BB:56:4F:8A:FF:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b4f91351-ba27-4d8a-9d06-59aeaa972a62.cer sbgp-ipAddrBlock: critical IPv4: 23.161.34.0/24 23.187.0.0/23 IPv6: 2620:1df::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:7e:5e:c8:1d:ea:84:12:76:47:96:d1:9a:7c:cc:18:94:d8: 8f:8d:cc:73:ff:46:6c:5d:c7:d1:4b:37:3e:b4:cd:e0:97:f2: bc:43:79:18:b6:84:c7:42:2d:6c:c8:e1:a3:12:a8:78:36:24: 28:cc:19:25:e0:c9:7d:c4:43:61:e4:02:90:9c:c1:4a:b6:f3: f9:23:00:62:cb:b8:ab:18:75:dd:fc:ed:11:e8:42:a2:2f:a0: 6b:d0:ac:9f:36:85:52:32:37:ee:4c:3a:ab:17:18:91:45:2c: 5c:0e:01:2a:47:2e:31:ae:1b:d3:34:38:ed:3e:b1:74:13:75: 4b:64:3d:1e:92:3d:27:2a:10:9b:9a:80:a0:59:35:fc:57:e3: 8b:c0:96:c3:f6:5e:d2:e8:df:fd:b4:89:53:1c:8f:7f:68:6a: 0d:7c:57:d8:4c:17:29:dd:db:af:62:ca:60:a0:0e:f6:66:16: 0d:d1:64:a3:36:94:f2:7b:97:92:74:25:59:ee:d2:80:0c:55: c4:41:e3:f7:44:50:04:71:50:b0:76:1e:27:d3:9c:1d:7a:88: 63:ff:d4:16:76:4e:bc:02:80:8b:90:4c:49:17:61:3b:2b:6c: d5:45:a3:3a:d5:5b:72:a0:e7:fa:15:57:40:11:81:11:30:26: 6a:c8:95:c6 -----BEGIN CERTIFICATE----- MIIGWDCCBUCgAwIBAgIUAQ0Mn0MoWE9JdmwBAggBBRNLfMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjRmOTEzNTEtYmEyNy00ZDhhLTlkMDYtNTlhZWFhOTcy YTYyMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NDY5ZDJhNDItNzQyYy00YmFkLTliNmEtY2VjNDAwYWQwN2JmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiYdpDrE2oq9BVWnrR0L86DGYZdnynHqSnSIE RBq7UUzKdgl1foymrWaRVDoMEeOpKGNx4A4FxhEttokiW3DVEpJBwiPYNPW9//Da 2LzTQphrTUa9HCe+jgTipV3BgaCGWZsoaJ9joG4A0StMMBGOKh9X4CKT9skc/RrP K9JtjsNjDJUa4X9oJklOSXnTIe62z+egsgSAHU7axTkc5Vd2ny7V3JWiqmAI7z5S oKNu8ejKdiViYZnPKsZ5mgV2Pzb6Ztf7QX9D5vpTyeVI5V2yZQjiiNH29nhDSbNc xAb7eMpVQxja7dDgoBkY8wKr0NT83jraA9Pdg2dBeq55tRi7twIDAQABo4IDajCC A2YwHQYDVR0OBBYEFCq86otoZINOmvDoE5KsRU5/94vdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9iNGY5 MTM1MS1iYTI3LTRkOGEtOWQwNi01OWFlYWE5NzJhNjIvY2YxZjU1NDItMzgzMi0z ZGQ3LWEyYTItMmM2ODU3MWRkMmFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYjRmOTEzNTEtYmEyNy00ZDhhLTlk MDYtNTlhZWFhOTcyYTYyL2I0ZjkxMzUxLWJhMjctNGQ4YS05ZDA2LTU5YWVhYTk3 MmE2Mi5jcmwwHwYDVR0jBBgwFoAURuImqBfX+N2+K7c2p8i7Vk+K/3kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9iNGY5MTM1MS1iYTI3LTRkOGEtOWQwNi01OWFl YWE5NzJhNjIuY2VyMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQAF6EiAwQB F7sAMA0EAgACMAcDBQAmIAHfMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAFl+Xsgd6oQSdkeW0Zp8zBiU2I+N zHP/Rmxdx9FLNz60zeCX8rxDeRi2hMdCLWzI4aMSqHg2JCjMGSXgyX3EQ2HkApCc wUq28/kjAGLLuKsYdd387RHoQqIvoGvQrJ82hVIyN+5MOqsXGJFFLFwOASpHLjGu G9M0OO0+sXQTdUtkPR6SPScqEJuagKBZNfxX44vAlsP2XtLo3/20iVMcj39oag18 V9hMFynd269iymCgDvZmFg3RZKM2lPJ7l5J0JVnu0oAMVcRB4/dEUARxULB2HifT nB16iGP/1BZ2TrwCgIuQTEkXYTsrbNVFozrVW3Kg5/oVV0ARgREwJmrIlcY= -----END CERTIFICATE-----Generated at Sat Oct 10 23:21:32 2026 by rpki-client