$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38d6b993-a8bd-44a2-8e04-89483e698a23/509d5bf3-4c6a-3407-89d3-119b86f42934.roa File: 509d5bf3-4c6a-3407-89d3-119b86f42934.roa (raw, json) Hash identifier: otUMoLzpq291zPE2sFJFt9Poq/pMAogDPt8Nk128PNk= Subject key identifier: CC:E1:1D:36:CC:5D:82:BD:6F:2B:B6:E0:F5:94:59:95:B7:28:61:B6 Certificate issuer: /CN=38d6b993-a8bd-44a2-8e04-89483e698a23 Certificate serial: 010D0C9F4328584F4973B776A8EF8D0FF5CC9580 Authority key identifier: 6E:44:A7:99:95:14:A3:8E:C7:8C:A1:78:70:17:73:5C:5D:00:A6:CC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38d6b993-a8bd-44a2-8e04-89483e698a23.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38d6b993-a8bd-44a2-8e04-89483e698a23/509d5bf3-4c6a-3407-89d3-119b86f42934.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 57406 IP address blocks: 23.145.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38d6b993-a8bd-44a2-8e04-89483e698a23/38d6b993-a8bd-44a2-8e04-89483e698a23.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38d6b993-a8bd-44a2-8e04-89483e698a23/38d6b993-a8bd-44a2-8e04-89483e698a23.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38d6b993-a8bd-44a2-8e04-89483e698a23.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:b7:76:a8:ef:8d:0f:f5:cc:95:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38d6b993-a8bd-44a2-8e04-89483e698a23 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=4ff0b58c-1836-4443-b2f7-8efc405fbbbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:a0:07:50:26:61:08:f6:d0:31:f0:ff:85:dc: 8e:ed:d3:b2:b8:4a:a3:65:6d:0e:e3:6b:2b:15:aa: fb:4d:62:9c:da:91:fe:1a:5d:50:60:a3:25:15:4c: 50:7d:97:08:69:62:83:c9:0e:56:15:9f:a7:b6:19: 73:e3:03:88:15:ac:0e:e0:41:9b:4a:7c:a2:b5:5c: b5:c8:85:f5:1e:df:b7:ee:c2:d8:dc:d0:80:a7:ed: e2:b7:12:29:6b:fa:3f:40:18:2f:26:53:16:43:36: 23:d9:f8:1c:eb:73:6c:6d:17:2e:48:31:39:d8:29: 55:38:9c:52:6f:7a:a3:15:bb:3e:45:73:c5:2c:70: 18:00:ba:b3:7f:c8:0f:80:f6:ad:7c:49:57:bd:c0: 5a:5b:18:9d:06:89:80:b5:bd:b1:ce:df:6c:47:e7: 79:64:d7:d6:b7:75:ec:bd:33:62:c3:ee:53:2d:19: fc:b8:3c:15:87:f0:99:1e:73:7d:c7:b0:97:4f:d5: 34:d8:59:2b:ca:9b:6c:41:0e:b1:67:c1:0f:d0:03: 29:e4:bc:c6:8c:67:7a:25:85:23:b6:57:9c:fb:90: 32:7f:6f:93:bf:e5:02:85:2e:74:4a:54:4b:03:cc: 68:1e:b6:fd:bf:b0:f6:2a:18:fc:65:43:5f:34:ca: 47:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:E1:1D:36:CC:5D:82:BD:6F:2B:B6:E0:F5:94:59:95:B7:28:61:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38d6b993-a8bd-44a2-8e04-89483e698a23/509d5bf3-4c6a-3407-89d3-119b86f42934.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38d6b993-a8bd-44a2-8e04-89483e698a23/38d6b993-a8bd-44a2-8e04-89483e698a23.crl X509v3 Authority Key Identifier: keyid:6E:44:A7:99:95:14:A3:8E:C7:8C:A1:78:70:17:73:5C:5D:00:A6:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/38d6b993-a8bd-44a2-8e04-89483e698a23.cer sbgp-ipAddrBlock: critical IPv4: 23.145.168.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:29:35:2d:a2:5f:32:29:f6:01:34:81:1f:3e:70:32:29:96: 91:33:e2:67:de:df:5a:26:33:f0:5b:0e:cd:b7:9e:de:89:ce: 31:88:23:16:3d:dc:0e:54:43:dc:30:a6:32:fb:ac:54:54:28: cc:7c:c6:f7:a6:5f:df:66:7a:3b:71:93:da:8e:43:15:07:f0: e8:24:05:7e:a7:c3:25:de:92:62:d8:cd:57:c2:60:f1:48:f6: d2:11:5b:99:56:9e:9b:38:d8:b3:cd:a1:6a:b5:10:49:c3:ee: ed:bd:2d:88:e7:56:2c:3a:89:79:06:96:09:38:4f:76:52:1e: 46:1e:35:0a:4c:88:34:c1:17:72:54:bc:64:d1:15:2b:4f:07: 71:8b:73:62:21:2b:19:fd:dd:e9:20:ad:cf:14:a7:7c:d6:3c: 72:71:3f:14:11:36:3e:87:51:85:8e:48:8e:29:21:bc:3a:92: bb:c9:42:83:18:00:36:c4:03:cf:83:63:33:dc:ad:1b:62:a4: 33:29:b8:a9:82:04:56:e9:8c:35:9b:81:c9:98:4e:b1:32:60: 9e:12:39:25:6b:47:a6:8d:2a:d8:db:c2:fd:4e:a9:82:ab:d4: ac:e5:1d:ab:df:5e:c6:a9:e8:4a:4e:0d:99:7f:b3:cf:d4:c0: 1e:04:21:2a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jc7d2qO+ND/XMlYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzhkNmI5OTMtYThiZC00NGEyLThlMDQtODk0ODNlNjk4 YTIzMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NGZmMGI1OGMtMTgzNi00NDQzLWIyZjctOGVmYzQwNWZiYmJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh6AHUCZhCPbQMfD/hdyO7dOyuEqjZW0O42sr Far7TWKc2pH+Gl1QYKMlFUxQfZcIaWKDyQ5WFZ+nthlz4wOIFawO4EGbSnyitVy1 yIX1Ht+37sLY3NCAp+3itxIpa/o/QBgvJlMWQzYj2fgc63NsbRcuSDE52ClVOJxS b3qjFbs+RXPFLHAYALqzf8gPgPatfElXvcBaWxidBomAtb2xzt9sR+d5ZNfWt3Xs vTNiw+5TLRn8uDwVh/CZHnN9x7CXT9U02FkryptsQQ6xZ8EP0AMp5LzGjGd6JYUj tlec+5Ayf2+Tv+UChS50SlRLA8xoHrb9v7D2Khj8ZUNfNMpH5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMzhHTbMXYK9byu24PWUWZW3KGG2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8zOGQ2 Yjk5My1hOGJkLTQ0YTItOGUwNC04OTQ4M2U2OThhMjMvNTA5ZDViZjMtNGM2YS0z NDA3LTg5ZDMtMTE5Yjg2ZjQyOTM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMzhkNmI5OTMtYThiZC00NGEyLThl MDQtODk0ODNlNjk4YTIzLzM4ZDZiOTkzLWE4YmQtNDRhMi04ZTA0LTg5NDgzZTY5 OGEyMy5jcmwwHwYDVR0jBBgwFoAUbkSnmZUUo47HjKF4cBdzXF0ApswwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8zOGQ2Yjk5My1hOGJkLTQ0YTItOGUwNC04OTQ4 M2U2OThhMjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5GoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAgpNS2iXzIp9gE0gR8+cDIplpEz4mfe31omM/BbDs23nt6JzjGIIxY9 3A5UQ9wwpjL7rFRUKMx8xvemX99mejtxk9qOQxUH8OgkBX6nwyXekmLYzVfCYPFI 9tIRW5lWnps42LPNoWq1EEnD7u29LYjnViw6iXkGlgk4T3ZSHkYeNQpMiDTBF3JU vGTRFStPB3GLc2IhKxn93ekgrc8Up3zWPHJxPxQRNj6HUYWOSI4pIbw6krvJQoMY ADbEA8+DYzPcrRtipDMpuKmCBFbpjDWbgcmYTrEyYJ4SOSVrR6aNKtjbwv1OqYKr 1KzlHavfXsap6EpODZl/s8/UwB4EISo= -----END CERTIFICATE-----Generated at Sun Sep 27 11:28:51 2026 by rpki-client