$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/2f7411be-e759-3d9e-9833-6e412c75caad.roa File: 2f7411be-e759-3d9e-9833-6e412c75caad.roa (raw, json) Hash identifier: nYLlOFCk+qiRgqM+bgjUq7t/BC9J+h6WLMpOFgt1Xjk= Subject key identifier: 19:F3:00:C1:51:D2:13:CE:72:D8:07:C4:DF:F8:4D:C7:70:2D:17:98 Certificate issuer: /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Certificate serial: 010D0C9F4328584F41F98099456037E7525EDE0F Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/2f7411be-e759-3d9e-9833-6e412c75caad.roa Signing time: Tue 22 Sep 2026 08:45:43 +0000 ROA not before: Tue 22 Sep 2026 08:45:43 +0000 ROA not after: Mon 21 Dec 2026 09:45:43 +0000 asID: 20473 IP address blocks: 23.90.48.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:41:f9:80:99:45:60:37:e7:52:5e:de:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Validity Not Before: Sep 22 08:45:43 2026 GMT Not After : Dec 21 09:45:43 2026 GMT Subject: CN=6faf54bf-46df-4f95-88de-0c631601f0f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:f9:5f:3f:3d:8a:a4:61:5f:49:b8:a9:c5:7a: 0e:a8:ef:33:94:d1:17:e8:51:f7:4c:ec:0c:d9:ef: bf:98:71:71:c3:e1:bb:f9:58:17:2a:75:51:49:b0: aa:79:45:73:00:82:45:f0:93:a7:ce:44:a5:af:b2: bd:09:f2:d8:26:cb:8c:a8:ba:37:8a:5b:5c:24:29: f3:6b:ab:1c:a7:d3:31:08:08:85:31:e5:e6:99:00: 57:25:6b:10:6c:20:a5:fb:e5:a6:45:38:a2:a2:cc: ab:69:f1:39:cc:86:f2:a6:f1:c3:d4:a6:83:94:37: c6:33:b1:d7:1d:43:c0:85:a7:27:46:28:bd:1f:b8: 74:43:4c:af:67:b1:8d:1b:79:db:26:c6:eb:af:a6: fd:f8:b7:b0:1d:94:94:b5:f7:41:e1:45:9d:b4:65: 65:3f:fe:e5:70:bb:0d:19:71:79:14:86:e2:51:11: 08:fa:64:d5:a4:83:a9:8f:4e:2d:4c:09:47:41:2c: 0e:5a:cf:8c:da:a5:ae:49:0c:52:5c:c7:68:40:05: 94:a3:67:68:7d:5b:bc:63:74:82:3b:22:27:d0:bb: 7c:8e:82:4f:e0:6c:27:f0:7e:7a:89:5e:fe:d0:5d: d1:fa:b1:d1:e1:39:d6:3c:30:3e:b6:fb:d2:01:6d: 34:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:F3:00:C1:51:D2:13:CE:72:D8:07:C4:DF:F8:4D:C7:70:2D:17:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/2f7411be-e759-3d9e-9833-6e412c75caad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl X509v3 Authority Key Identifier: keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer sbgp-ipAddrBlock: critical IPv4: 23.90.48.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:41:da:23:be:76:15:19:bb:8d:19:b9:7d:bf:92:d4:9b:25: c9:2f:30:3a:e7:7e:df:53:34:5f:bf:70:75:e5:19:04:ca:ac: fd:cd:5a:18:51:66:0f:4e:b1:97:24:9f:65:9a:39:2c:a4:b5: ea:78:dd:89:f1:77:be:21:db:04:30:6e:34:d0:1e:85:63:a7: 50:fa:07:cf:73:16:51:64:64:3f:b1:70:5c:8e:dd:4b:dd:db: 49:85:b7:c2:a2:b9:e5:96:a0:08:85:2f:77:ed:84:10:1f:9a: b6:0d:74:7d:c1:7b:9f:1f:72:95:97:ee:51:39:56:69:62:23: 92:ba:a2:24:f4:c3:57:8f:71:2c:49:e2:a6:0a:a3:54:1f:36: 65:39:9f:b1:ce:79:e8:59:32:60:69:8c:5d:10:2a:3b:96:15: fd:c5:5c:0e:fb:95:54:36:bb:3f:71:ed:0b:d9:33:40:78:2d: da:ee:5a:91:af:0c:ad:6e:a5:29:76:6a:00:8e:a3:f0:36:0c: bd:ea:8f:a4:b8:18:34:e7:42:7c:f2:58:fb:95:29:1c:ea:1e: ed:e9:63:90:e9:93:a4:42:1a:5b:b5:b0:c6:bc:5a:00:2a:68: 81:b6:f5:a9:42:f2:97:6f:4e:0b:d7:a6:58:8d:4c:b4:bd:2b: f3:97:ba:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9B+YCZRWA351Je3g8wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZWYxMmUtODk1My00MzgwLWIxNmQtMjhiYTJhYTE1 YzE3MB4XDTI2MDkyMjA4NDU0M1oXDTI2MTIyMTA5NDU0M1owLzEtMCsGA1UEAxMk NmZhZjU0YmYtNDZkZi00Zjk1LTg4ZGUtMGM2MzE2MDFmMGYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtvlfPz2KpGFfSbipxXoOqO8zlNEX6FH3TOwM 2e+/mHFxw+G7+VgXKnVRSbCqeUVzAIJF8JOnzkSlr7K9CfLYJsuMqLo3iltcJCnz a6scp9MxCAiFMeXmmQBXJWsQbCCl++WmRTiiosyrafE5zIbypvHD1KaDlDfGM7HX HUPAhacnRii9H7h0Q0yvZ7GNG3nbJsbrr6b9+LewHZSUtfdB4UWdtGVlP/7lcLsN GXF5FIbiUREI+mTVpIOpj04tTAlHQSwOWs+M2qWuSQxSXMdoQAWUo2dofVu8Y3SC OyIn0Lt8joJP4Gwn8H56iV7+0F3R+rHR4TnWPDA+tvvSAW00WQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBnzAMFR0hPOctgHxN/4TcdwLReYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhl ZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJhMmFhMTVjMTcvMmY3NDExYmUtZTc1OS0z ZDllLTk4MzMtNmU0MTJjNzVjYWFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y4ZWYxMmUtODk1My00MzgwLWIx NmQtMjhiYTJhYTE1YzE3LzNmOGVmMTJlLTg5NTMtNDM4MC1iMTZkLTI4YmEyYWEx NWMxNy5jcmwwHwYDVR0jBBgwFoAURmDx/IALEkbguuKi0tarLtFQVHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhlZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJh MmFhMTVjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF1owMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB9B2iO+dhUZu40ZuX2/ktSbJckvMDrnft9TNF+/cHXlGQTKrP3NWhhR Zg9OsZckn2WaOSyktep43Ynxd74h2wQwbjTQHoVjp1D6B89zFlFkZD+xcFyO3Uvd 20mFt8KiueWWoAiFL3fthBAfmrYNdH3Be58fcpWX7lE5VmliI5K6oiT0w1ePcSxJ 4qYKo1QfNmU5n7HOeehZMmBpjF0QKjuWFf3FXA77lVQ2uz9x7QvZM0B4LdruWpGv DK1upSl2agCOo/A2DL3qj6S4GDTnQnzyWPuVKRzqHu3pY5Dpk6RCGlu1sMa8WgAq aIG29alC8pdvTgvXpliNTLS9K/OXutM= -----END CERTIFICATE-----Generated at Sat Sep 26 08:46:08 2026 by rpki-client