$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bc648c2-2f95-48f5-acb7-9e8a2f9123a7/1e1be535-508c-330e-a6e2-85aa2a913569.roa File: 1e1be535-508c-330e-a6e2-85aa2a913569.roa (raw, json) Hash identifier: grINVnVSsT77VALV6CH91JI4s9RN+ERmrO+ZZd1uFgA= Subject key identifier: 90:8E:9F:40:C9:B1:65:38:CC:FC:8A:C3:96:93:BF:D4:FA:57:F3:84 Certificate issuer: /CN=2bc648c2-2f95-48f5-acb7-9e8a2f9123a7 Certificate serial: 010D0C9F4328584F498A86F96B502029E6D3F800 Authority key identifier: 2B:89:09:2B:FF:EC:8F:78:27:D8:87:D9:14:DA:8E:24:E7:4C:1C:62 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bc648c2-2f95-48f5-acb7-9e8a2f9123a7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bc648c2-2f95-48f5-acb7-9e8a2f9123a7/1e1be535-508c-330e-a6e2-85aa2a913569.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 8095 IP address blocks: 23.181.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bc648c2-2f95-48f5-acb7-9e8a2f9123a7/2bc648c2-2f95-48f5-acb7-9e8a2f9123a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bc648c2-2f95-48f5-acb7-9e8a2f9123a7/2bc648c2-2f95-48f5-acb7-9e8a2f9123a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bc648c2-2f95-48f5-acb7-9e8a2f9123a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:8a:86:f9:6b:50:20:29:e6:d3:f8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc648c2-2f95-48f5-acb7-9e8a2f9123a7 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=731a2a2e-f996-480e-9e18-0c0762a3a9ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:d9:e1:72:87:cf:b0:6a:21:cb:4e:df:2c:32: 63:3b:ee:20:a8:a9:53:e1:bd:2b:89:7a:d9:36:2f: 77:76:8d:7d:35:78:3d:99:77:9d:d1:d1:9c:f9:4e: 0e:85:69:7c:50:d7:fe:ce:a1:4f:9b:03:3b:5b:34: 4c:b2:ea:67:ed:e7:eb:e3:8d:4c:39:6b:21:6f:e7: e3:b4:e1:6d:b9:79:59:f4:81:57:c9:79:4f:b7:7f: e0:df:ea:80:d4:76:97:b6:c7:ab:15:6f:59:eb:92: bd:a2:4b:70:12:c6:97:dc:bf:61:04:87:10:62:2e: 23:32:56:14:dc:bd:e9:3b:ba:3c:a7:ab:ff:fb:10: f7:86:fc:d6:c8:5b:bd:47:03:de:2f:a4:81:2e:0e: 79:e5:7e:b7:2c:ba:53:03:dd:99:d3:9f:a9:5b:ef: db:96:bb:1e:65:9c:62:6d:3f:6c:07:d4:de:ae:cc: 4e:ea:b9:13:0f:42:81:3d:51:01:d9:d3:04:b5:53: 47:24:a7:f3:a1:24:bd:91:ef:44:6e:4e:3b:c7:40: 77:ec:b9:be:19:ae:28:67:c9:59:d4:10:f6:9e:23: 87:07:b0:a1:62:54:82:6b:f2:dd:84:a3:d2:41:04: 08:26:ec:0c:65:e5:fd:48:28:7e:d6:65:73:0d:35: b4:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:8E:9F:40:C9:B1:65:38:CC:FC:8A:C3:96:93:BF:D4:FA:57:F3:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bc648c2-2f95-48f5-acb7-9e8a2f9123a7/1e1be535-508c-330e-a6e2-85aa2a913569.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bc648c2-2f95-48f5-acb7-9e8a2f9123a7/2bc648c2-2f95-48f5-acb7-9e8a2f9123a7.crl X509v3 Authority Key Identifier: keyid:2B:89:09:2B:FF:EC:8F:78:27:D8:87:D9:14:DA:8E:24:E7:4C:1C:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bc648c2-2f95-48f5-acb7-9e8a2f9123a7.cer sbgp-ipAddrBlock: critical IPv4: 23.181.248.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:c6:62:fd:56:20:94:19:68:1f:2c:99:21:f8:b8:49:4a:4d: cc:1d:1c:8b:60:9e:58:31:86:c1:79:d4:33:b3:62:60:8d:38: 1f:e3:1b:a3:1c:97:01:4c:97:a1:ab:fd:86:62:e0:5d:f8:c4: 43:dc:d3:68:d3:93:ba:13:84:66:97:ac:71:6e:40:a7:b9:b3: f2:e9:18:79:af:68:63:39:a7:17:1b:86:81:4b:19:6e:fe:ab: 5f:8d:6c:80:79:a6:40:bd:35:8c:8c:09:6e:c5:3b:12:c2:b1: 00:46:fd:d3:27:8a:fa:7b:be:fb:4f:62:c9:df:02:27:32:19: d9:1e:3e:e1:33:00:5a:0d:51:e1:c3:50:46:29:e4:6a:1e:54: 16:48:a9:a4:4e:93:ee:04:88:50:31:3e:e2:1b:6c:83:00:9e: af:fb:c5:d7:38:f3:06:94:34:4c:3a:b6:61:5e:0b:56:a6:37: be:aa:83:98:a1:92:6d:0d:06:03:3f:a7:3c:55:d5:91:ac:df: c4:c8:12:45:6b:39:d1:3c:e4:c6:f2:1b:a7:f2:fc:32:e8:b4: 49:26:59:9b:85:83:0c:7b:27:93:39:80:e8:5e:ad:6d:e3:c2: 00:82:c7:75:7a:01:cf:b0:e2:c7:2a:2d:60:94:e3:e3:70:10: b7:01:98:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jiob5a1AgKebT+AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjQ4YzItMmY5NS00OGY1LWFjYjctOWU4YTJmOTEy M2E3MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NzMxYTJhMmUtZjk5Ni00ODBlLTllMTgtMGMwNzYyYTNhOWFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAldnhcofPsGohy07fLDJjO+4gqKlT4b0riXrZ Ni93do19NXg9mXed0dGc+U4OhWl8UNf+zqFPmwM7WzRMsupn7efr441MOWshb+fj tOFtuXlZ9IFXyXlPt3/g3+qA1HaXtserFW9Z65K9oktwEsaX3L9hBIcQYi4jMlYU 3L3pO7o8p6v/+xD3hvzWyFu9RwPeL6SBLg555X63LLpTA92Z05+pW+/blrseZZxi bT9sB9TersxO6rkTD0KBPVEB2dMEtVNHJKfzoSS9ke9Ebk47x0B37Lm+Ga4oZ8lZ 1BD2niOHB7ChYlSCa/LdhKPSQQQIJuwMZeX9SCh+1mVzDTW07QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJCOn0DJsWU4zPyKw5aTv9T6V/OEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8yYmM2 NDhjMi0yZjk1LTQ4ZjUtYWNiNy05ZThhMmY5MTIzYTcvMWUxYmU1MzUtNTA4Yy0z MzBlLWE2ZTItODVhYTJhOTEzNTY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMmJjNjQ4YzItMmY5NS00OGY1LWFj YjctOWU4YTJmOTEyM2E3LzJiYzY0OGMyLTJmOTUtNDhmNS1hY2I3LTllOGEyZjkx MjNhNy5jcmwwHwYDVR0jBBgwFoAUK4kJK//sj3gn2IfZFNqOJOdMHGIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8yYmM2NDhjMi0yZjk1LTQ4ZjUtYWNiNy05ZThh MmY5MTIzYTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF7X4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGrGYv1WIJQZaB8smSH4uElKTcwdHItgnlgxhsF51DOzYmCNOB/jG6Mc lwFMl6Gr/YZi4F34xEPc02jTk7oThGaXrHFuQKe5s/LpGHmvaGM5pxcbhoFLGW7+ q1+NbIB5pkC9NYyMCW7FOxLCsQBG/dMnivp7vvtPYsnfAicyGdkePuEzAFoNUeHD UEYp5GoeVBZIqaROk+4EiFAxPuIbbIMAnq/7xdc48waUNEw6tmFeC1amN76qg5ih km0NBgM/pzxV1ZGs38TIEkVrOdE85MbyG6fy/DLotEkmWZuFgwx7J5M5gOherW3j wgCCx3V6Ac+w4scqLWCU4+NwELcBmPs= -----END CERTIFICATE-----Generated at Mon Sep 28 18:04:52 2026 by rpki-client