$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/cfefab08-df2a-3f99-9472-c89844f08526.roa File: cfefab08-df2a-3f99-9472-c89844f08526.roa (raw, json) Hash identifier: J3KQO7PMZKnpOffyByZ1SuR+iXXa4uo9z8aiREr5lH8= Subject key identifier: EF:49:28:12:52:FF:4A:2B:66:2A:BA:8F:40:5A:B7:E6:9A:62:04:70 Certificate issuer: /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Certificate serial: 010D0C9F4328584F537B4D849143C1395C790080 Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/cfefab08-df2a-3f99-9472-c89844f08526.roa Signing time: Mon 28 Sep 2026 15:15:59 +0000 ROA not before: Mon 28 Sep 2026 15:15:59 +0000 ROA not after: Sun 27 Dec 2026 16:15:59 +0000 asID: 62904 IP address blocks: 23.231.18.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:53:7b:4d:84:91:43:c1:39:5c:79:00:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Validity Not Before: Sep 28 15:15:59 2026 GMT Not After : Dec 27 16:15:59 2026 GMT Subject: CN=5d44d7fa-f994-49b7-b9db-8ef71e2976f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:a3:06:4f:33:fa:55:df:af:79:4b:e7:0c:b9: ec:4f:30:8c:38:bb:a1:0e:e4:73:07:cf:c2:1a:9d: 0e:9e:53:3d:78:2f:20:be:60:74:be:d8:e2:88:1b: 2d:90:db:0d:6b:22:fe:55:79:b6:a5:ca:bd:c8:e9: 16:2e:f6:9b:35:11:f3:fc:09:84:2a:c4:14:c8:41: 32:56:d3:5f:fb:89:5e:15:97:2b:7c:13:c3:ab:a9: 2b:4c:8c:4b:45:c2:8d:0b:8f:a4:15:7a:37:5d:06: d5:3d:eb:19:56:d5:c1:08:08:cd:60:92:d4:e9:82: 0c:56:99:df:75:c7:72:fc:58:35:b0:6b:7c:64:2f: d9:ce:92:6a:05:34:26:0e:75:8d:81:73:5c:e0:62: 56:97:5e:f7:93:69:c8:a9:22:11:c9:9e:0c:fd:bd: f9:9a:02:08:8e:6f:b9:bc:8a:c3:f5:b9:ab:84:25: 40:b7:a5:e3:51:2d:01:22:b8:2a:45:85:25:78:39: b2:b4:67:80:c4:15:13:21:6d:7b:19:5e:0e:83:86: 60:c6:8a:e6:fe:9f:fd:ca:38:e5:fd:27:a7:a6:9e: ac:1b:d2:d2:0c:ef:db:d4:b4:76:73:16:7c:66:39: f9:f2:74:3d:6a:73:2c:57:4a:33:c4:08:16:c7:2f: df:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:49:28:12:52:FF:4A:2B:66:2A:BA:8F:40:5A:B7:E6:9A:62:04:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/cfefab08-df2a-3f99-9472-c89844f08526.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl X509v3 Authority Key Identifier: keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer sbgp-ipAddrBlock: critical IPv4: 23.231.18.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:1f:be:44:84:92:00:3d:14:7e:ee:b2:a8:fe:6c:ce:89:8b: d8:ab:a6:96:6b:30:e3:b3:01:fa:08:3d:06:f4:00:e4:22:33: 0c:28:ca:5e:fb:91:ca:cd:23:42:ff:99:f8:bd:c3:81:7a:cc: 0b:d8:d7:84:d8:75:a2:27:eb:fd:f5:aa:43:3e:05:7e:1d:5a: c3:7d:c8:06:96:63:64:be:fd:cd:d2:6c:ac:c6:b0:5d:76:57: 89:ae:a8:fa:4b:2d:7e:bb:f8:40:90:59:00:db:af:0a:b4:81: 89:90:1a:85:42:66:2e:b5:70:97:9e:87:97:4b:08:da:6f:2a: 56:54:44:3f:cb:19:73:f1:89:85:48:ec:1d:bb:53:d6:7e:2a: f8:43:7a:cf:15:c2:6e:4b:1b:00:97:bc:1d:9e:83:11:73:60: dc:4d:ce:12:8a:65:ea:1f:8b:d6:22:19:cd:ad:a5:2b:39:39: 86:2a:62:42:6d:c3:e3:35:bd:03:d0:d3:0f:75:6e:b1:73:93: 57:21:58:45:d8:fe:05:79:9a:3f:6d:38:32:96:88:68:af:66: 2b:84:ec:7f:58:11:a3:b8:62:09:02:bb:af:3c:48:89:97:9f: 50:2a:81:59:04:bd:63:ff:f8:f4:ef:49:b9:42:bc:2c:01:30: 25:da:d3:c8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Te02EkUPBOVx5AIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZWYxMmUtODk1My00MzgwLWIxNmQtMjhiYTJhYTE1 YzE3MB4XDTI2MDkyODE1MTU1OVoXDTI2MTIyNzE2MTU1OVowLzEtMCsGA1UEAxMk NWQ0NGQ3ZmEtZjk5NC00OWI3LWI5ZGItOGVmNzFlMjk3NmYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqKMGTzP6Vd+veUvnDLnsTzCMOLuhDuRzB8/C Gp0OnlM9eC8gvmB0vtjiiBstkNsNayL+VXm2pcq9yOkWLvabNRHz/AmEKsQUyEEy VtNf+4leFZcrfBPDq6krTIxLRcKNC4+kFXo3XQbVPesZVtXBCAjNYJLU6YIMVpnf dcdy/Fg1sGt8ZC/ZzpJqBTQmDnWNgXNc4GJWl173k2nIqSIRyZ4M/b35mgIIjm+5 vIrD9bmrhCVAt6XjUS0BIrgqRYUleDmytGeAxBUTIW17GV4Og4Zgxorm/p/9yjjl /Senpp6sG9LSDO/b1LR2cxZ8Zjn58nQ9anMsV0ozxAgWxy/f9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO9JKBJS/0orZiq6j0Bat+aaYgRwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhl ZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJhMmFhMTVjMTcvY2ZlZmFiMDgtZGYyYS0z Zjk5LTk0NzItYzg5ODQ0ZjA4NTI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y4ZWYxMmUtODk1My00MzgwLWIx NmQtMjhiYTJhYTE1YzE3LzNmOGVmMTJlLTg5NTMtNDM4MC1iMTZkLTI4YmEyYWEx NWMxNy5jcmwwHwYDVR0jBBgwFoAURmDx/IALEkbguuKi0tarLtFQVHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhlZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJh MmFhMTVjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBF+cSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGcfvkSEkgA9FH7usqj+bM6Ji9irppZrMOOzAfoIPQb0AOQiMwwoyl77 kcrNI0L/mfi9w4F6zAvY14TYdaIn6/31qkM+BX4dWsN9yAaWY2S+/c3SbKzGsF12 V4muqPpLLX67+ECQWQDbrwq0gYmQGoVCZi61cJeeh5dLCNpvKlZURD/LGXPxiYVI 7B27U9Z+KvhDes8Vwm5LGwCXvB2egxFzYNxNzhKKZeofi9YiGc2tpSs5OYYqYkJt w+M1vQPQ0w91brFzk1chWEXY/gV5mj9tODKWiGivZiuE7H9YEaO4YgkCu688SImX n1AqgVkEvWP/+PTvSblCvCwBMCXa08g= -----END CERTIFICATE-----Generated at Sun Oct 11 22:21:48 2026 by rpki-client