$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/09b9a56d-f767-36a4-b619-fa85f3e3b924.roa File: 09b9a56d-f767-36a4-b619-fa85f3e3b924.roa (raw, json) Hash identifier: bLWsImnr/s9lammKCNnUV2b8lo7/HTTrbQsY+ZWDRYo= Subject key identifier: 35:42:B1:AE:B0:64:E8:87:F6:34:AC:41:11:3C:64:FB:8E:5D:9B:33 Certificate issuer: /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Certificate serial: 010D0C9F4328584F53816A84DEDCB5236C0ACBB0 Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/09b9a56d-f767-36a4-b619-fa85f3e3b924.roa Signing time: Mon 28 Sep 2026 15:28:18 +0000 ROA not before: Mon 28 Sep 2026 15:28:18 +0000 ROA not after: Sun 27 Dec 2026 16:28:18 +0000 asID: 62904 IP address blocks: 23.231.72.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:53:81:6a:84:de:dc:b5:23:6c:0a:cb:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Validity Not Before: Sep 28 15:28:18 2026 GMT Not After : Dec 27 16:28:18 2026 GMT Subject: CN=b1529289-8622-4fc6-99c6-dc10cd63f82a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:7d:2f:c9:7f:63:4a:dc:ce:de:da:17:87:79: bb:1a:8c:39:02:97:c2:20:a7:d2:b6:e1:8b:c6:65: f5:d0:64:01:22:bb:48:92:85:a1:40:90:29:3e:0f: 71:a4:2d:4d:55:72:6d:72:89:8c:32:02:5a:54:24: d7:6e:cc:40:f0:c7:4a:ea:cb:ec:a1:e9:e4:dc:83: 49:93:c2:ae:64:a5:c2:8e:21:83:47:40:1c:99:b7: cd:e4:30:d1:38:98:20:67:c7:41:7e:86:5a:b8:c5: e1:ea:a3:45:70:e7:dc:af:ee:4b:a0:5f:fa:a0:44: 00:42:fd:2c:a7:14:fa:96:6c:e0:b0:2e:27:e9:7e: 21:39:a6:0a:9b:be:82:61:5a:a6:41:43:e0:c2:05: 16:67:77:ee:63:36:bc:9e:bf:36:76:bf:8f:ea:46: fb:aa:ed:1b:ef:62:23:72:03:29:c2:fb:21:53:41: c0:2c:40:5a:a2:f3:82:4b:4b:86:64:de:c8:c5:75: 58:85:1a:2d:e6:cf:68:93:dd:0d:de:e0:04:6f:50: 2f:8e:49:e2:1e:e6:e2:ff:9b:22:69:4d:51:d0:df: c6:1a:b9:28:ce:01:0f:36:8f:d7:e9:1f:77:46:10: 4c:84:3d:94:e6:97:24:28:22:01:00:57:9f:28:90: 48:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:42:B1:AE:B0:64:E8:87:F6:34:AC:41:11:3C:64:FB:8E:5D:9B:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/09b9a56d-f767-36a4-b619-fa85f3e3b924.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl X509v3 Authority Key Identifier: keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer sbgp-ipAddrBlock: critical IPv4: 23.231.72.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:62:63:24:e2:ce:9e:f2:ed:cf:6c:23:88:9f:8b:fe:5c:ff: e0:18:67:1e:3f:57:99:c5:df:42:2b:1e:bf:32:7e:f8:17:a0: 1e:27:b1:e7:c9:14:76:6b:d1:41:76:54:2f:39:45:81:14:03: 7c:99:b7:30:ea:ef:af:09:13:f8:a7:4d:81:08:2b:57:29:82: ff:a9:fe:35:61:4e:22:e8:de:00:6c:50:bd:ce:ab:92:26:cf: 50:2a:e8:11:95:74:f0:13:70:97:78:d5:5c:51:5d:7f:52:92: 16:3c:44:34:79:b3:b6:31:3b:dc:ac:5c:13:82:e2:d5:20:95: ae:d0:7c:35:dd:b6:48:85:35:f9:01:ec:28:53:be:98:22:5e: e3:68:20:c2:89:f1:b8:e0:ba:a8:0c:2f:10:66:31:dd:95:88: 9c:7d:ad:3a:dd:80:e1:77:42:13:c5:41:87:9f:08:b7:79:f9: c8:c7:5d:ed:dc:df:b8:e9:c6:f1:4f:a7:6c:c2:a1:b5:12:23: f5:0c:9c:b9:3f:90:ff:87:a7:4a:6e:66:8c:a8:43:98:97:88: 69:97:3a:f5:fa:01:41:b0:81:83:7a:9e:be:cd:41:26:9e:2a: 71:17:ab:7c:ee:f8:00:d5:5f:78:58:f5:07:1c:ba:2b:82:7f: 6d:d2:7c:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9TgWqE3ty1I2wKy7AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZWYxMmUtODk1My00MzgwLWIxNmQtMjhiYTJhYTE1 YzE3MB4XDTI2MDkyODE1MjgxOFoXDTI2MTIyNzE2MjgxOFowLzEtMCsGA1UEAxMk YjE1MjkyODktODYyMi00ZmM2LTk5YzYtZGMxMGNkNjNmODJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp30vyX9jStzO3toXh3m7Gow5ApfCIKfStuGL xmX10GQBIrtIkoWhQJApPg9xpC1NVXJtcomMMgJaVCTXbsxA8MdK6svsoenk3INJ k8KuZKXCjiGDR0AcmbfN5DDROJggZ8dBfoZauMXh6qNFcOfcr+5LoF/6oEQAQv0s pxT6lmzgsC4n6X4hOaYKm76CYVqmQUPgwgUWZ3fuYza8nr82dr+P6kb7qu0b72Ij cgMpwvshU0HALEBaovOCS0uGZN7IxXVYhRot5s9ok90N3uAEb1AvjkniHubi/5si aU1R0N/GGrkozgEPNo/X6R93RhBMhD2U5pckKCIBAFefKJBIHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDVCsa6wZOiH9jSsQRE8ZPuOXZszMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhl ZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJhMmFhMTVjMTcvMDliOWE1NmQtZjc2Ny0z NmE0LWI2MTktZmE4NWYzZTNiOTI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y4ZWYxMmUtODk1My00MzgwLWIx NmQtMjhiYTJhYTE1YzE3LzNmOGVmMTJlLTg5NTMtNDM4MC1iMTZkLTI4YmEyYWEx NWMxNy5jcmwwHwYDVR0jBBgwFoAURmDx/IALEkbguuKi0tarLtFQVHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhlZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJh MmFhMTVjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF+dIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADViYyTizp7y7c9sI4ifi/5c/+AYZx4/V5nF30IrHr8yfvgXoB4nsefJ FHZr0UF2VC85RYEUA3yZtzDq768JE/inTYEIK1cpgv+p/jVhTiLo3gBsUL3Oq5Im z1Aq6BGVdPATcJd41VxRXX9SkhY8RDR5s7YxO9ysXBOC4tUgla7QfDXdtkiFNfkB 7ChTvpgiXuNoIMKJ8bjguqgMLxBmMd2ViJx9rTrdgOF3QhPFQYefCLd5+cjHXe3c 37jpxvFPp2zCobUSI/UMnLk/kP+Hp0puZoyoQ5iXiGmXOvX6AUGwgYN6nr7NQSae KnEXq3zu+ADVX3hY9QccuiuCf23SfEA= -----END CERTIFICATE-----Generated at Sun Oct 11 10:12:08 2026 by rpki-client