$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21873e5a-a16d-4890-8dfe-c281bf6e020e/04b35b42-a07c-34ef-9f3a-c2f6e5bfb9de.roa File: 04b35b42-a07c-34ef-9f3a-c2f6e5bfb9de.roa (raw, json) Hash identifier: pKaAN5k1DsBWLxOytalP2bGELYxUKdoLoQcFdDEYelI= Subject key identifier: 04:B5:1D:FC:39:2A:F0:85:D3:78:5A:37:C4:9A:4B:00:21:BF:D9:0D Certificate issuer: /CN=21873e5a-a16d-4890-8dfe-c281bf6e020e Certificate serial: 010D0C9F4328584F49740C220C68988FE998BF00 Authority key identifier: C7:79:A7:C6:3F:DA:5B:57:55:3E:FC:42:87:91:EE:1B:37:F1:C2:A6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21873e5a-a16d-4890-8dfe-c281bf6e020e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21873e5a-a16d-4890-8dfe-c281bf6e020e/04b35b42-a07c-34ef-9f3a-c2f6e5bfb9de.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 49585 IP address blocks: 23.149.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21873e5a-a16d-4890-8dfe-c281bf6e020e/21873e5a-a16d-4890-8dfe-c281bf6e020e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21873e5a-a16d-4890-8dfe-c281bf6e020e/21873e5a-a16d-4890-8dfe-c281bf6e020e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21873e5a-a16d-4890-8dfe-c281bf6e020e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:0c:22:0c:68:98:8f:e9:98:bf:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21873e5a-a16d-4890-8dfe-c281bf6e020e Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=19a360fe-b19f-4d6a-8ac3-0308988c6073 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:4b:7f:00:a1:d6:00:14:a9:ef:6d:8b:61:96: 30:df:54:45:45:75:e0:fa:f6:a6:1e:92:d0:d3:49: ea:b2:7c:7d:99:2b:da:ec:1e:ad:27:0c:ac:44:c5: 0e:a5:e1:62:ac:92:a6:30:55:e8:34:8d:60:9e:3a: 65:39:37:18:f0:ad:87:62:81:41:6b:dd:94:da:e4: de:17:d0:6f:45:3a:3a:1f:e1:aa:98:38:6c:88:cc: 8e:8d:b7:c2:fe:26:23:28:a6:92:e3:2d:8a:f9:6a: 4c:13:05:15:13:97:7f:7b:d4:8d:2e:aa:ed:4d:fb: 4f:09:7d:c2:25:a9:bf:3f:a7:60:35:cb:23:37:ac: 04:c7:0f:ca:c8:9c:15:d2:a1:c2:f3:ca:dc:f1:b2: ac:40:16:59:9f:50:b4:e5:53:67:6f:f4:ff:16:9f: d9:52:8c:a0:a3:38:4b:e4:6b:ee:17:06:a3:66:1c: 51:13:8d:33:0c:6e:3a:b2:46:8a:5a:b5:23:91:a6: 02:dd:0b:33:23:58:e7:66:79:21:35:75:68:00:a3: df:d6:72:06:50:32:ca:c1:de:b2:86:1e:6d:10:71: 02:72:6a:84:27:d0:12:96:6b:6c:d2:5a:ce:ce:34: ea:6c:3e:6f:c9:2d:e4:65:47:79:50:9a:94:3d:30: 6a:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:B5:1D:FC:39:2A:F0:85:D3:78:5A:37:C4:9A:4B:00:21:BF:D9:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21873e5a-a16d-4890-8dfe-c281bf6e020e/04b35b42-a07c-34ef-9f3a-c2f6e5bfb9de.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21873e5a-a16d-4890-8dfe-c281bf6e020e/21873e5a-a16d-4890-8dfe-c281bf6e020e.crl X509v3 Authority Key Identifier: keyid:C7:79:A7:C6:3F:DA:5B:57:55:3E:FC:42:87:91:EE:1B:37:F1:C2:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21873e5a-a16d-4890-8dfe-c281bf6e020e.cer sbgp-ipAddrBlock: critical IPv4: 23.149.40.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:42:63:7d:a0:42:d0:0c:a8:91:82:a2:10:73:2d:7c:f6:15: 65:99:3d:74:02:35:07:36:1c:10:08:0d:39:91:e5:17:63:69: a9:43:25:f4:7f:39:1f:28:d7:b3:13:b4:db:f8:33:80:cb:e0: 49:18:02:96:80:06:7c:53:e7:52:26:c3:7f:54:d5:e8:53:9f: 60:e4:f6:bc:c9:b7:2d:84:4e:24:22:4e:8c:62:a1:34:80:1a: 1d:0d:18:1a:e6:af:18:5c:09:9e:cd:37:f9:05:71:a4:c5:66: 80:c1:21:de:9e:fa:57:67:5e:7c:3a:61:34:23:26:a9:ee:57: 76:a6:54:ee:c6:77:ab:fb:54:68:45:c5:c6:bc:3f:00:fb:b6: b0:3d:d4:28:7b:8e:0e:46:c0:52:52:29:75:5b:4b:d2:48:ef: d1:18:cd:45:80:d0:a9:0f:10:95:37:af:b4:dc:40:68:ab:53: 0c:40:86:62:d6:f1:81:0d:18:04:64:c3:43:78:da:b4:e9:dc: 1e:9a:2d:c1:48:d5:e9:2a:5d:91:de:94:79:d0:60:ef:57:5f: 29:66:f9:8f:87:95:0f:3a:55:82:56:6b:66:d4:4f:5d:e3:ad: 8e:05:f7:89:61:bb:e3:ba:7f:5f:6c:b5:cb:46:d0:ea:02:56: c1:68:ee:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdAwiDGiYj+mYvwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjE4NzNlNWEtYTE2ZC00ODkwLThkZmUtYzI4MWJmNmUw MjBlMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MTlhMzYwZmUtYjE5Zi00ZDZhLThhYzMtMDMwODk4OGM2MDczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn0t/AKHWABSp722LYZYw31RFRXXg+vamHpLQ 00nqsnx9mSva7B6tJwysRMUOpeFirJKmMFXoNI1gnjplOTcY8K2HYoFBa92U2uTe F9BvRTo6H+GqmDhsiMyOjbfC/iYjKKaS4y2K+WpMEwUVE5d/e9SNLqrtTftPCX3C Jam/P6dgNcsjN6wExw/KyJwV0qHC88rc8bKsQBZZn1C05VNnb/T/Fp/ZUoygozhL 5GvuFwajZhxRE40zDG46skaKWrUjkaYC3QszI1jnZnkhNXVoAKPf1nIGUDLKwd6y hh5tEHECcmqEJ9ASlmts0lrOzjTqbD5vyS3kZUd5UJqUPTBqMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAS1Hfw5KvCF03haN8SaSwAhv9kNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8yMTg3 M2U1YS1hMTZkLTQ4OTAtOGRmZS1jMjgxYmY2ZTAyMGUvMDRiMzViNDItYTA3Yy0z NGVmLTlmM2EtYzJmNmU1YmZiOWRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMjE4NzNlNWEtYTE2ZC00ODkwLThk ZmUtYzI4MWJmNmUwMjBlLzIxODczZTVhLWExNmQtNDg5MC04ZGZlLWMyODFiZjZl MDIwZS5jcmwwHwYDVR0jBBgwFoAUx3mnxj/aW1dVPvxCh5HuGzfxwqYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8yMTg3M2U1YS1hMTZkLTQ4OTAtOGRmZS1jMjgx YmY2ZTAyMGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5UoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEpCY32gQtAMqJGCohBzLXz2FWWZPXQCNQc2HBAIDTmR5RdjaalDJfR/ OR8o17MTtNv4M4DL4EkYApaABnxT51Imw39U1ehTn2Dk9rzJty2ETiQiToxioTSA Gh0NGBrmrxhcCZ7NN/kFcaTFZoDBId6e+ldnXnw6YTQjJqnuV3amVO7Gd6v7VGhF xca8PwD7trA91Ch7jg5GwFJSKXVbS9JI79EYzUWA0KkPEJU3r7TcQGirUwxAhmLW 8YENGARkw0N42rTp3B6aLcFI1ekqXZHelHnQYO9XXylm+Y+HlQ86VYJWa2bUT13j rY4F94lhu+O6f19stctG0OoCVsFo7oQ= -----END CERTIFICATE-----Generated at Mon Sep 28 18:40:23 2026 by rpki-client