$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/656505ca-964d-328e-ac35-f3c146f1fc1e.roa File: 656505ca-964d-328e-ac35-f3c146f1fc1e.roa (raw, json) Hash identifier: XH317N7AtW3N/spwPl0Q51haiC262cw3lYduz46wgBY= Subject key identifier: 8A:35:D5:C9:47:5F:05:84:99:2F:3E:4F:3C:70:4A:0B:EE:16:C2:8D Certificate issuer: /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Certificate serial: 010D0C9F4328584F538099F101EB9919482671E0 Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/656505ca-964d-328e-ac35-f3c146f1fc1e.roa Signing time: Mon 28 Sep 2026 15:26:40 +0000 ROA not before: Mon 28 Sep 2026 15:26:40 +0000 ROA not after: Sun 27 Dec 2026 16:26:40 +0000 asID: 62904 IP address blocks: 23.231.64.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:53:80:99:f1:01:eb:99:19:48:26:71:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Validity Not Before: Sep 28 15:26:40 2026 GMT Not After : Dec 27 16:26:40 2026 GMT Subject: CN=1ef13416-3b33-46b8-a543-eba16cdecbf6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:3c:83:ed:f3:44:c1:51:8b:23:cd:1f:ad:44: 25:45:b2:d8:21:11:9d:c7:0e:22:9c:f8:55:75:cb: 09:c9:88:1f:04:b9:e5:8f:cf:04:c7:0a:80:63:69: 98:91:1a:25:3b:fb:e8:a2:04:5a:c1:92:bf:7f:ad: d3:fa:6c:9a:73:4c:b4:26:6a:db:dd:e9:ab:72:a9: f1:79:b2:c0:13:9b:a1:d4:a8:0d:81:6f:1b:38:1a: 5d:94:e0:3b:8b:e1:db:d2:16:ad:1c:cc:02:52:8b: 10:c1:5b:41:7c:bc:73:af:94:ed:35:30:30:d0:42: bb:c7:10:9d:4e:d8:0c:6b:f3:16:e3:9c:e6:c1:03: 7c:b4:6d:0e:fe:25:b6:88:04:40:41:20:c9:4f:34: b1:14:f1:31:c1:2d:4d:0e:77:76:a5:a1:a4:ca:61: 45:ad:78:3b:a5:0f:f6:d8:e7:f9:f3:9e:30:1a:c9: f1:f1:cb:54:63:d2:7e:3a:f8:71:e9:de:e1:67:06: 95:a6:c6:e5:c4:2a:9e:de:d0:e6:c3:2d:fc:f1:a3: fa:e1:28:f3:fb:ce:f0:b1:39:b5:8b:39:ad:a8:72: 41:76:6a:32:96:45:e1:56:3b:08:d2:24:2d:8e:37: 2e:e3:18:b8:aa:38:ba:44:93:94:b9:80:e8:2c:eb: a8:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:35:D5:C9:47:5F:05:84:99:2F:3E:4F:3C:70:4A:0B:EE:16:C2:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/656505ca-964d-328e-ac35-f3c146f1fc1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl X509v3 Authority Key Identifier: keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer sbgp-ipAddrBlock: critical IPv4: 23.231.64.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:28:39:ef:ba:1e:8c:bb:a4:0a:e4:9d:69:09:51:0a:56:91: f6:ec:97:30:96:97:c8:f7:ee:0c:21:66:cf:b5:a6:12:48:ec: 33:b2:b7:b5:54:ea:2c:49:f0:85:6a:21:e0:32:93:62:0e:6c: 2c:a8:8c:17:86:a6:bd:77:44:06:08:85:01:1f:12:2e:90:c5: 39:0e:3b:c2:7b:45:ec:d5:3e:ea:b6:e4:48:00:76:78:0f:c8: 15:42:3b:ac:c7:1f:73:61:0b:47:99:eb:94:aa:f9:28:20:cb: 91:4d:e4:a3:58:8e:bb:45:b8:b4:53:61:e6:ae:99:bf:d5:86: 42:c5:da:4d:fe:71:24:49:48:ed:7e:b7:ee:0a:e7:79:6a:27: 56:7b:05:50:63:bb:76:82:2e:01:9d:77:24:8b:d0:36:e9:e6: 9f:3b:65:d7:08:10:77:c0:da:5f:cf:39:5d:45:e9:07:f9:12: 2a:46:c3:e3:4c:8a:bd:34:c9:c7:ad:f9:ac:71:f2:ae:69:16: 85:d5:c6:53:d5:0b:13:9c:c3:d2:d4:f4:de:e5:50:5f:00:f5: a4:8a:8b:9f:7d:08:cd:0b:dc:dd:5d:33:27:69:ab:ab:82:92: 93:4f:52:f1:2f:bb:a0:13:1c:a2:5a:8e:8c:9c:91:ee:f5:f8: 95:8c:9d:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9TgJnxAeuZGUgmceAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZWYxMmUtODk1My00MzgwLWIxNmQtMjhiYTJhYTE1 YzE3MB4XDTI2MDkyODE1MjY0MFoXDTI2MTIyNzE2MjY0MFowLzEtMCsGA1UEAxMk MWVmMTM0MTYtM2IzMy00NmI4LWE1NDMtZWJhMTZjZGVjYmY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiTyD7fNEwVGLI80frUQlRbLYIRGdxw4inPhV dcsJyYgfBLnlj88ExwqAY2mYkRolO/voogRawZK/f63T+myac0y0Jmrb3emrcqnx ebLAE5uh1KgNgW8bOBpdlOA7i+Hb0hatHMwCUosQwVtBfLxzr5TtNTAw0EK7xxCd TtgMa/MW45zmwQN8tG0O/iW2iARAQSDJTzSxFPExwS1NDnd2paGkymFFrXg7pQ/2 2Of5854wGsnx8ctUY9J+Ovhx6d7hZwaVpsblxCqe3tDmwy388aP64Sjz+87wsTm1 izmtqHJBdmoylkXhVjsI0iQtjjcu4xi4qji6RJOUuYDoLOuo9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIo11clHXwWEmS8+TzxwSgvuFsKNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhl ZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJhMmFhMTVjMTcvNjU2NTA1Y2EtOTY0ZC0z MjhlLWFjMzUtZjNjMTQ2ZjFmYzFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y4ZWYxMmUtODk1My00MzgwLWIx NmQtMjhiYTJhYTE1YzE3LzNmOGVmMTJlLTg5NTMtNDM4MC1iMTZkLTI4YmEyYWEx NWMxNy5jcmwwHwYDVR0jBBgwFoAURmDx/IALEkbguuKi0tarLtFQVHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhlZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJh MmFhMTVjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBF+dAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH8oOe+6Hoy7pArknWkJUQpWkfbslzCWl8j37gwhZs+1phJI7DOyt7VU 6ixJ8IVqIeAyk2IObCyojBeGpr13RAYIhQEfEi6QxTkOO8J7RezVPuq25EgAdngP yBVCO6zHH3NhC0eZ65Sq+Sggy5FN5KNYjrtFuLRTYeaumb/VhkLF2k3+cSRJSO1+ t+4K53lqJ1Z7BVBju3aCLgGddySL0Dbp5p87ZdcIEHfA2l/POV1F6Qf5EipGw+NM ir00ycet+axx8q5pFoXVxlPVCxOcw9LU9N7lUF8A9aSKi599CM0L3N1dMydpq6uC kpNPUvEvu6ATHKJajoycke71+JWMnWo= -----END CERTIFICATE-----Generated at Sun Oct 11 10:31:26 2026 by rpki-client