$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f0830a41-5b6e-4cbd-a54b-a3350aa02e0a/e95b8906-144b-3f2c-b727-9a159f4296c3.roa File: e95b8906-144b-3f2c-b727-9a159f4296c3.roa (raw, json) Hash identifier: c675mJe1B8rYNjCyACncfHzoqFJSMKWUzQE8ncFDgpk= Subject key identifier: 29:87:40:D8:80:1E:8A:54:30:AE:6F:09:CA:A6:4B:7D:09:BC:2A:E2 Certificate issuer: /CN=f0830a41-5b6e-4cbd-a54b-a3350aa02e0a Certificate serial: 010D0C9F4328584F498C3196BE72F42803DF6E00 Authority key identifier: BD:52:9A:21:FD:4F:91:3E:D4:28:17:8E:BC:5B:CC:CF:35:7B:5A:E1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f0830a41-5b6e-4cbd-a54b-a3350aa02e0a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f0830a41-5b6e-4cbd-a54b-a3350aa02e0a/e95b8906-144b-3f2c-b727-9a159f4296c3.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 20473 IP address blocks: 23.141.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f0830a41-5b6e-4cbd-a54b-a3350aa02e0a/f0830a41-5b6e-4cbd-a54b-a3350aa02e0a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f0830a41-5b6e-4cbd-a54b-a3350aa02e0a/f0830a41-5b6e-4cbd-a54b-a3350aa02e0a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f0830a41-5b6e-4cbd-a54b-a3350aa02e0a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:8c:31:96:be:72:f4:28:03:df:6e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0830a41-5b6e-4cbd-a54b-a3350aa02e0a Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=8664d192-5a37-4b60-b60a-6de447b09ac5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:31:e6:c8:ee:e5:c9:dd:9c:bd:37:e2:32:f0: 58:1e:5f:bf:16:a5:55:3a:a6:1c:50:f4:32:9f:d5: c7:fa:14:8d:cf:b6:ed:3c:fe:c0:4b:2e:8f:ba:df: 3f:25:1b:53:62:81:e6:9b:bb:16:c7:bd:ea:42:2b: 55:93:fa:1b:7b:0a:40:74:c8:6d:04:0b:dd:e4:1a: ef:52:eb:ca:f2:de:b8:d0:66:22:28:58:57:e0:bc: 21:cd:7a:d1:71:8a:a9:bc:8d:94:56:1a:d2:4c:8a: 87:7c:95:db:27:cd:c6:65:4a:5b:2e:d0:16:bd:da: 37:86:f8:fc:29:7c:e7:4e:90:37:92:ac:d3:aa:7d: 8a:09:d2:d3:e0:14:44:25:7b:80:51:5f:af:6f:f5: 71:23:fa:4c:77:38:b5:3f:11:17:97:b9:37:47:bc: c4:22:35:17:70:2f:4f:8d:8f:df:ad:bb:76:d9:0f: 27:3b:05:1f:f7:39:a9:0b:bf:39:38:c7:38:14:d7: cc:30:c6:aa:35:ab:7f:4a:d1:67:3e:9d:1c:cc:fc: 72:d2:d8:b3:f5:ec:23:66:f2:be:ad:be:84:19:e7: 81:42:49:4a:20:2f:8c:ab:62:1c:31:6f:6f:37:ef: 17:a2:2c:a5:5b:8d:7b:a8:e8:b8:45:a1:e3:ed:58: 7b:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:87:40:D8:80:1E:8A:54:30:AE:6F:09:CA:A6:4B:7D:09:BC:2A:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f0830a41-5b6e-4cbd-a54b-a3350aa02e0a/e95b8906-144b-3f2c-b727-9a159f4296c3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f0830a41-5b6e-4cbd-a54b-a3350aa02e0a/f0830a41-5b6e-4cbd-a54b-a3350aa02e0a.crl X509v3 Authority Key Identifier: keyid:BD:52:9A:21:FD:4F:91:3E:D4:28:17:8E:BC:5B:CC:CF:35:7B:5A:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f0830a41-5b6e-4cbd-a54b-a3350aa02e0a.cer sbgp-ipAddrBlock: critical IPv4: 23.141.168.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:62:36:63:bf:7a:02:56:e7:31:4f:35:61:bc:f2:d1:eb:1d: a7:62:4f:73:f1:d8:ec:f3:58:31:69:7f:a3:f3:44:96:cf:cd: 7c:15:a8:36:51:7f:5a:ca:e2:a3:cd:ee:81:1f:9b:6e:52:78: 92:1a:0c:47:54:3c:c6:a3:82:bd:89:07:0b:24:57:fd:d9:76: bf:82:4b:ca:ea:33:0d:5e:9b:03:f1:42:cb:32:86:ef:3e:42: 2b:5e:bc:72:6a:54:30:f5:d7:bf:25:e9:02:cb:ba:ca:61:39: d2:54:08:dc:01:51:5f:b9:10:11:6d:37:5d:c8:cd:15:c5:e8: a8:0d:66:98:fc:9f:0f:59:60:af:c1:0d:3c:1d:97:cf:e4:58: 3f:bb:45:7d:6c:c0:a5:af:38:b1:3e:33:ef:bb:7d:53:12:ac: 0b:43:d2:6e:e7:b6:50:b1:f5:71:b8:0f:5e:14:26:e7:2d:27: c6:3f:00:11:d3:98:e6:f7:fe:5e:b4:4d:1b:0c:5e:10:3a:fb: ac:28:f0:00:08:61:ed:60:32:3d:87:82:1e:6e:f5:7c:6c:e3: d7:02:8c:56:b2:35:3f:0a:c3:60:98:ae:21:73:68:1a:22:e9: f0:67:a8:46:32:54:d2:af:61:84:cc:d1:e5:4a:fc:8f:2d:85: e6:cc:7b:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JjDGWvnL0KAPfbgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjA4MzBhNDEtNWI2ZS00Y2JkLWE1NGItYTMzNTBhYTAy ZTBhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ODY2NGQxOTItNWEzNy00YjYwLWI2MGEtNmRlNDQ3YjA5YWM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzjHmyO7lyd2cvTfiMvBYHl+/FqVVOqYcUPQy n9XH+hSNz7btPP7ASy6Put8/JRtTYoHmm7sWx73qQitVk/obewpAdMhtBAvd5Brv UuvK8t640GYiKFhX4LwhzXrRcYqpvI2UVhrSTIqHfJXbJ83GZUpbLtAWvdo3hvj8 KXznTpA3kqzTqn2KCdLT4BREJXuAUV+vb/VxI/pMdzi1PxEXl7k3R7zEIjUXcC9P jY/frbt22Q8nOwUf9zmpC785OMc4FNfMMMaqNat/StFnPp0czPxy0tiz9ewjZvK+ rb6EGeeBQklKIC+Mq2IcMW9vN+8XoiylW417qOi4RaHj7Vh7xQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCmHQNiAHopUMK5vCcqmS30JvCriMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9mMDgz MGE0MS01YjZlLTRjYmQtYTU0Yi1hMzM1MGFhMDJlMGEvZTk1Yjg5MDYtMTQ0Yi0z ZjJjLWI3MjctOWExNTlmNDI5NmMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZjA4MzBhNDEtNWI2ZS00Y2JkLWE1 NGItYTMzNTBhYTAyZTBhL2YwODMwYTQxLTViNmUtNGNiZC1hNTRiLWEzMzUwYWEw MmUwYS5jcmwwHwYDVR0jBBgwFoAUvVKaIf1PkT7UKBeOvFvMzzV7WuEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9mMDgzMGE0MS01YjZlLTRjYmQtYTU0Yi1hMzM1 MGFhMDJlMGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF42oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG5iNmO/egJW5zFPNWG88tHrHadiT3Px2OzzWDFpf6PzRJbPzXwVqDZR f1rK4qPN7oEfm25SeJIaDEdUPMajgr2JBwskV/3Zdr+CS8rqMw1emwPxQssyhu8+ QitevHJqVDD1178l6QLLusphOdJUCNwBUV+5EBFtN13IzRXF6KgNZpj8nw9ZYK/B DTwdl8/kWD+7RX1swKWvOLE+M++7fVMSrAtD0m7ntlCx9XG4D14UJuctJ8Y/ABHT mOb3/l60TRsMXhA6+6wo8AAIYe1gMj2Hgh5u9Xxs49cCjFayNT8Kw2CYriFzaBoi 6fBnqEYyVNKvYYTM0eVK/I8thebMe3k= -----END CERTIFICATE-----Generated at Fri Sep 25 15:27:27 2026 by rpki-client