$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/18787a4c-f936-301b-bc53-67ab088cba13.roa File: 18787a4c-f936-301b-bc53-67ab088cba13.roa (raw, json) Hash identifier: 8biVjSVc3UyWEu/yUtIKEvARanU0Me2vTF5X8S9oGKg= Subject key identifier: 42:2D:68:50:4A:16:42:14:23:07:4A:84:F4:09:74:FA:2C:0B:23:7B Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584F4974146E0102EB4B980FC280 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/18787a4c-f936-301b-bc53-67ab088cba13.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 16591 IP address blocks: 23.228.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:14:6e:01:02:eb:4b:98:0f:c2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=b93cc024-c5bc-4bf9-8570-8c689edd8353 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:4e:40:53:49:09:86:6e:8a:ce:18:4d:4f:18: 25:89:75:4b:cb:05:3f:22:4d:ba:34:42:4e:91:48: 77:89:59:36:fa:94:08:9a:58:99:a4:3c:e3:70:16: 4c:20:9e:22:3f:54:3f:c0:cd:1b:ab:e5:fa:78:33: f1:05:e0:b5:78:52:c5:c2:83:65:b4:60:17:c7:41: 1f:fa:f3:6f:d2:d8:f7:3d:7a:59:39:b6:38:37:fa: cc:73:b6:88:99:e7:b9:31:1c:c1:9e:d4:19:c1:6e: 86:3b:e6:31:32:72:56:b6:74:06:ba:d6:fb:57:35: 5c:b4:e6:5f:1e:6f:b0:98:46:eb:8e:25:6f:0f:27: 69:8c:22:a8:d7:26:a3:80:e7:d0:ca:0e:94:3c:b4: 31:a7:1b:cc:c3:40:4b:72:65:80:0e:72:16:0c:1b: 15:75:45:e4:f0:c4:22:c9:67:7b:45:7b:22:d7:00: 7c:69:93:38:a2:a5:6d:4e:1c:f0:03:f8:1e:59:32: d7:58:4e:b3:f1:e7:ef:77:56:0d:f4:92:23:86:55: e1:28:70:79:39:f8:f0:10:93:63:fc:50:a1:38:3a: 8b:ec:7e:4a:68:4c:9e:c9:f7:01:3e:c6:ee:c0:b5: 3a:40:a0:80:ef:8f:e5:b8:64:8e:5f:82:9b:e6:ee: 3a:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:2D:68:50:4A:16:42:14:23:07:4A:84:F4:09:74:FA:2C:0B:23:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/18787a4c-f936-301b-bc53-67ab088cba13.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 23.228.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:fc:3d:f2:c9:7a:97:7f:24:e6:f7:f2:f3:84:fe:ca:d2:60: a8:7f:08:d6:d4:7d:b1:e5:2b:80:7f:cb:50:5e:c9:85:73:41: 4c:62:43:77:4f:3a:59:17:9d:1b:f8:af:b6:8e:a0:4a:db:fb: 64:99:66:6f:f2:18:b9:81:b0:60:11:fc:04:23:54:1a:d9:ab: bd:26:cb:69:c7:e6:22:e9:f2:8a:c5:d6:9c:70:e2:83:61:4b: 4c:ed:f0:6c:b2:23:2c:d1:86:0f:f3:3c:b8:37:6b:aa:07:bd: 6b:e9:84:ea:11:f7:73:3d:12:78:8d:76:e6:86:f8:ed:ee:1d: e1:d3:a8:e2:06:60:ad:7b:64:62:4f:3e:47:cf:2e:4a:39:9c: 2f:b7:a7:be:89:dc:f1:00:5c:b2:64:4d:a4:87:f2:6b:aa:f5: 26:12:51:7c:be:61:b3:37:ac:43:23:0d:16:48:97:a1:41:6e: 2a:0a:9a:22:ab:ed:0e:c6:9d:27:77:b8:1e:90:5c:ec:01:1b: e4:5e:d4:a1:2d:68:8b:f0:9f:91:23:8b:52:8f:67:04:4f:b9: d8:ff:e4:ec:12:26:78:b4:05:6b:01:45:d8:8c:6b:bf:b1:2e: f7:40:3f:c1:00:82:b6:a3:5b:3c:d9:63:c4:eb:77:eb:13:cd: 36:1d:a9:5d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdBRuAQLrS5gPwoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YjkzY2MwMjQtYzViYy00YmY5LTg1NzAtOGM2ODllZGQ4MzUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs05AU0kJhm6KzhhNTxgliXVLywU/Ik26NEJO kUh3iVk2+pQImliZpDzjcBZMIJ4iP1Q/wM0bq+X6eDPxBeC1eFLFwoNltGAXx0Ef +vNv0tj3PXpZObY4N/rMc7aImee5MRzBntQZwW6GO+YxMnJWtnQGutb7VzVctOZf Hm+wmEbrjiVvDydpjCKo1yajgOfQyg6UPLQxpxvMw0BLcmWADnIWDBsVdUXk8MQi yWd7RXsi1wB8aZM4oqVtThzwA/geWTLXWE6z8efvd1YN9JIjhlXhKHB5OfjwEJNj /FChODqL7H5KaEyeyfcBPsbuwLU6QKCA74/luGSOX4Kb5u46VwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEItaFBKFkIUIwdKhPQJdPosCyN7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvMTg3ODdhNGMtZjkzNi0z MDFiLWJjNTMtNjdhYjA4OGNiYTEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGF+SAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACn8PfLJepd/JOb38vOE/srSYKh/CNbUfbHlK4B/y1BeyYVzQUxiQ3dP OlkXnRv4r7aOoErb+2SZZm/yGLmBsGAR/AQjVBrZq70my2nH5iLp8orF1pxw4oNh S0zt8GyyIyzRhg/zPLg3a6oHvWvphOoR93M9EniNduaG+O3uHeHTqOIGYK17ZGJP PkfPLko5nC+3p76J3PEAXLJkTaSH8muq9SYSUXy+YbM3rEMjDRZIl6FBbioKmiKr 7Q7GnSd3uB6QXOwBG+Re1KEtaIvwn5Eji1KPZwRPudj/5OwSJni0BWsBRdiMa7+x LvdAP8EAgrajWzzZY8Trd+sTzTYdqV0= -----END CERTIFICATE-----Generated at Sat Oct 10 00:19:47 2026 by rpki-client