$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7d4d1f55-ab35-4c35-9037-e56ddd833168/f21dc6fa-a30b-35b3-a2d5-61b9ebceda65.roa File: f21dc6fa-a30b-35b3-a2d5-61b9ebceda65.roa (raw, json) Hash identifier: 5RjFSATd4up4HSzC8BKJcDwEVH9q9tV30+PeszW6UxU= Subject key identifier: 1A:8B:A7:5A:2A:45:C9:4B:E8:C0:00:B7:D1:EC:0F:D8:FE:B0:EC:A6 Certificate issuer: /CN=7d4d1f55-ab35-4c35-9037-e56ddd833168 Certificate serial: 010D0C9F4328584F66C2BDE44025E8602DD7C280 Authority key identifier: 8F:44:95:DB:63:58:CB:3C:26:FD:00:BE:BB:9B:AF:EA:B7:2C:99:62 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7d4d1f55-ab35-4c35-9037-e56ddd833168.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7d4d1f55-ab35-4c35-9037-e56ddd833168/f21dc6fa-a30b-35b3-a2d5-61b9ebceda65.roa Signing time: Mon 05 Oct 2026 13:00:13 +0000 ROA not before: Mon 05 Oct 2026 13:00:13 +0000 ROA not after: Sun 03 Jan 2027 14:00:13 +0000 asID: 401736 IP address blocks: 23.142.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7d4d1f55-ab35-4c35-9037-e56ddd833168/7d4d1f55-ab35-4c35-9037-e56ddd833168.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7d4d1f55-ab35-4c35-9037-e56ddd833168/7d4d1f55-ab35-4c35-9037-e56ddd833168.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7d4d1f55-ab35-4c35-9037-e56ddd833168.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:66:c2:bd:e4:40:25:e8:60:2d:d7:c2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d4d1f55-ab35-4c35-9037-e56ddd833168 Validity Not Before: Oct 5 13:00:13 2026 GMT Not After : Jan 3 14:00:13 2027 GMT Subject: CN=5bb68b27-082b-4e95-ad8e-9fac9169a4e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:08:d5:90:b8:55:84:82:1c:b4:ec:7a:bc:1b: 71:17:18:bd:d8:77:be:8f:6d:55:5f:64:e4:da:c4: 5c:31:0b:56:39:7c:de:8e:e8:64:1c:fd:db:82:6c: 99:26:32:bd:e1:ea:1a:d0:da:8b:95:e1:f9:1c:77: 3c:c8:e2:24:55:2c:b3:d7:9b:ef:c7:f5:8e:51:96: 2f:21:d4:e6:98:a2:21:f1:36:af:c3:df:4a:12:9c: 37:a2:44:c9:48:4f:fb:4a:01:bd:83:b9:07:98:b0: 39:f2:cd:20:38:05:7b:d9:61:0a:8e:f3:d0:23:16: f8:b6:54:5c:a6:c1:c5:75:e1:48:aa:b3:e8:f7:ff: 6c:cb:06:54:6f:6c:33:9d:17:44:2d:8d:ab:c3:1a: 46:ab:c6:bb:45:8e:ab:4d:66:0b:55:89:fa:c0:f6: ca:cb:69:ad:23:4d:4b:87:c2:5e:b7:7a:99:61:fc: be:3c:8b:98:8d:aa:ca:48:17:96:54:a8:66:b7:58: 1b:43:60:e0:07:78:75:2d:19:d8:d4:2e:b8:87:e8: 94:02:4d:e6:aa:4a:10:91:b6:81:9d:e8:2a:a3:2c: 3d:8d:4f:37:49:09:ef:e7:f1:ae:05:de:c7:e2:9a: ce:59:7f:1b:29:e4:7b:d3:66:c4:8d:b7:72:6f:3d: 83:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:8B:A7:5A:2A:45:C9:4B:E8:C0:00:B7:D1:EC:0F:D8:FE:B0:EC:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7d4d1f55-ab35-4c35-9037-e56ddd833168/f21dc6fa-a30b-35b3-a2d5-61b9ebceda65.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7d4d1f55-ab35-4c35-9037-e56ddd833168/7d4d1f55-ab35-4c35-9037-e56ddd833168.crl X509v3 Authority Key Identifier: keyid:8F:44:95:DB:63:58:CB:3C:26:FD:00:BE:BB:9B:AF:EA:B7:2C:99:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/7d4d1f55-ab35-4c35-9037-e56ddd833168.cer sbgp-ipAddrBlock: critical IPv4: 23.142.212.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:58:a4:ec:0b:6d:ec:29:8c:24:6d:13:fc:fc:c1:c2:d1:c7: b3:fb:16:76:76:6b:7a:21:7b:eb:85:48:d6:7e:32:95:11:6e: d5:55:85:44:dd:f7:ec:c2:ae:e5:1c:e9:0d:8e:0a:df:9b:2d: 5f:31:af:e3:09:3a:69:e1:91:77:36:a5:67:d3:35:6d:22:f4: df:87:46:9f:7b:7d:25:fe:de:da:1b:50:d2:3e:33:43:80:01: 3c:5f:bc:e5:75:24:cf:6f:c0:3f:aa:2a:19:9d:ad:53:ca:80: a4:c7:2f:5f:84:6b:fd:16:e3:35:79:28:f0:f6:be:d4:ce:41: ca:a2:55:3f:46:44:04:2e:e7:a2:6b:ee:70:70:93:0a:df:19: a5:3d:79:7f:ea:f6:b9:85:26:7e:bd:1c:0c:11:a0:ea:3c:a9: b2:e5:1e:be:d8:14:8a:fb:0e:b8:e5:66:c7:eb:28:33:b6:2a: c7:eb:fd:a8:ac:6c:dd:a2:b9:e7:29:2f:4d:23:52:27:42:5d: 49:1b:21:50:61:07:cc:1c:51:94:82:a5:41:a9:8b:e7:0d:33: 87:c4:88:ae:6a:20:73:23:f1:85:a0:7a:ae:4e:d5:e1:90:ce: 94:69:04:61:48:6c:3f:38:e0:9a:f2:08:72:17:ba:8f:93:87: d3:0f:af:c6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9mwr3kQCXoYC3XwoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2Q0ZDFmNTUtYWIzNS00YzM1LTkwMzctZTU2ZGRkODMz MTY4MB4XDTI2MTAwNTEzMDAxM1oXDTI3MDEwMzE0MDAxM1owLzEtMCsGA1UEAxMk NWJiNjhiMjctMDgyYi00ZTk1LWFkOGUtOWZhYzkxNjlhNGU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnQjVkLhVhIIctOx6vBtxFxi92He+j21VX2Tk 2sRcMQtWOXzejuhkHP3bgmyZJjK94eoa0NqLleH5HHc8yOIkVSyz15vvx/WOUZYv IdTmmKIh8Tavw99KEpw3okTJSE/7SgG9g7kHmLA58s0gOAV72WEKjvPQIxb4tlRc psHFdeFIqrPo9/9sywZUb2wznRdELY2rwxpGq8a7RY6rTWYLVYn6wPbKy2mtI01L h8Jet3qZYfy+PIuYjarKSBeWVKhmt1gbQ2DgB3h1LRnY1C64h+iUAk3mqkoQkbaB negqoyw9jU83SQnv5/GuBd7H4prOWX8bKeR702bEjbdybz2DCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBqLp1oqRclL6MAAt9HsD9j+sOymMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy83ZDRk MWY1NS1hYjM1LTRjMzUtOTAzNy1lNTZkZGQ4MzMxNjgvZjIxZGM2ZmEtYTMwYi0z NWIzLWEyZDUtNjFiOWViY2VkYTY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvN2Q0ZDFmNTUtYWIzNS00YzM1LTkw MzctZTU2ZGRkODMzMTY4LzdkNGQxZjU1LWFiMzUtNGMzNS05MDM3LWU1NmRkZDgz MzE2OC5jcmwwHwYDVR0jBBgwFoAUj0SV22NYyzwm/QC+u5uv6rcsmWIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy83ZDRkMWY1NS1hYjM1LTRjMzUtOTAzNy1lNTZk ZGQ4MzMxNjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF47UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIpYpOwLbewpjCRtE/z8wcLRx7P7FnZ2a3ohe+uFSNZ+MpURbtVVhUTd 9+zCruUc6Q2OCt+bLV8xr+MJOmnhkXc2pWfTNW0i9N+HRp97fSX+3tobUNI+M0OA ATxfvOV1JM9vwD+qKhmdrVPKgKTHL1+Ea/0W4zV5KPD2vtTOQcqiVT9GRAQu56Jr 7nBwkwrfGaU9eX/q9rmFJn69HAwRoOo8qbLlHr7YFIr7DrjlZsfrKDO2Ksfr/ais bN2iuecpL00jUidCXUkbIVBhB8wcUZSCpUGpi+cNM4fEiK5qIHMj8YWgeq5O1eGQ zpRpBGFIbD844JryCHIXuo+Th9MPr8Y= -----END CERTIFICATE-----Generated at Thu Oct 8 12:24:19 2026 by rpki-client