$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/86b44355-f605-46d2-8fa6-d9cab0efb4c2/ceff734c-bba1-3dfd-9781-8d001c957177.roa File: ceff734c-bba1-3dfd-9781-8d001c957177.roa (raw, json) Hash identifier: ouhNB+AxLzss7k3knXP5/4gj17g0mxQjYO96qbihPG4= Subject key identifier: 9C:88:5D:D7:42:64:41:0A:F0:74:7A:EA:64:81:47:E1:D8:70:CD:2D Certificate issuer: /CN=86b44355-f605-46d2-8fa6-d9cab0efb4c2 Certificate serial: 010D0C9F4328584F4987C2452C899C3655B04D1A Authority key identifier: 7B:E8:AB:DC:B6:51:BF:52:A2:04:9E:75:C1:48:B4:44:13:0D:9A:0B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/86b44355-f605-46d2-8fa6-d9cab0efb4c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/86b44355-f605-46d2-8fa6-d9cab0efb4c2/ceff734c-bba1-3dfd-9781-8d001c957177.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 394838 IP address blocks: 23.142.241.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/86b44355-f605-46d2-8fa6-d9cab0efb4c2/86b44355-f605-46d2-8fa6-d9cab0efb4c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/86b44355-f605-46d2-8fa6-d9cab0efb4c2/86b44355-f605-46d2-8fa6-d9cab0efb4c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/86b44355-f605-46d2-8fa6-d9cab0efb4c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:87:c2:45:2c:89:9c:36:55:b0:4d:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86b44355-f605-46d2-8fa6-d9cab0efb4c2 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=1c4d817f-c251-4d6d-8ff6-9de0ec3278c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:66:fc:ae:2b:1a:3c:45:e0:a2:ca:55:a0:20: 0b:b2:20:41:54:8b:9f:1f:f5:d1:47:27:ea:6a:51: 3d:96:14:f3:3f:7e:ec:28:3e:72:6e:42:b3:a6:4b: 0c:80:23:35:72:a7:0e:59:45:21:ef:a6:81:89:c7: e9:2b:52:17:eb:97:f5:68:ea:6a:11:8f:a0:ac:6c: 38:b2:a2:42:82:da:68:48:ea:a4:8b:d9:30:1f:06: 74:52:81:67:04:5c:9f:9e:5f:a0:c8:ff:7f:d9:50: fd:f9:e3:b1:dc:d8:17:a2:b9:d0:ea:bd:0d:a6:38: 83:9c:16:b4:08:d3:51:ec:ae:05:22:77:5a:8e:34: 35:03:1d:0b:57:da:43:e1:6a:ad:8c:09:d7:d2:59: fb:bd:36:c6:6a:45:73:53:9f:d3:f2:5a:60:a4:ef: b6:dc:69:e9:81:1f:7d:23:e0:97:37:a4:01:22:ef: 81:3a:3b:b3:80:5a:8a:f5:a2:f7:28:f2:66:3c:dd: 19:d9:dc:31:5d:92:e4:bf:9a:dd:c1:b5:6e:f0:f7: 5f:a1:03:e2:85:49:32:4d:72:24:aa:40:d7:5c:d4: 41:52:fa:5b:f2:1f:b3:63:c4:58:39:d8:16:89:41: f2:d4:16:9d:f1:2f:2b:c1:0d:f4:5a:57:7f:94:c5: 56:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:88:5D:D7:42:64:41:0A:F0:74:7A:EA:64:81:47:E1:D8:70:CD:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/86b44355-f605-46d2-8fa6-d9cab0efb4c2/ceff734c-bba1-3dfd-9781-8d001c957177.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/86b44355-f605-46d2-8fa6-d9cab0efb4c2/86b44355-f605-46d2-8fa6-d9cab0efb4c2.crl X509v3 Authority Key Identifier: keyid:7B:E8:AB:DC:B6:51:BF:52:A2:04:9E:75:C1:48:B4:44:13:0D:9A:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/86b44355-f605-46d2-8fa6-d9cab0efb4c2.cer sbgp-ipAddrBlock: critical IPv4: 23.142.241.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:b2:bd:bc:a3:61:ea:24:d0:d8:db:dd:46:3b:ea:d6:86:59: 1c:83:d2:e6:b4:53:af:5a:08:1d:b9:3c:d8:d6:21:e2:ef:f4: dd:1b:3c:58:7e:52:83:9d:7c:f1:fa:33:88:5e:fe:23:dd:15: fb:e6:41:63:81:b5:63:a0:68:7b:d2:99:17:47:e2:f5:d7:b2: d1:3a:34:70:f0:0f:7a:d8:ec:91:a3:3a:91:b1:47:e4:48:c9: 57:19:9f:20:0a:fe:a0:f0:3a:93:4b:24:c3:6a:4f:47:22:b0: 9a:91:3f:8c:02:a3:53:5f:c4:e8:ea:62:29:76:d2:c4:50:ed: 43:ae:eb:da:82:70:8b:41:eb:02:5a:e9:d5:57:f7:60:c3:86: 42:67:73:9f:71:43:65:b9:d3:44:7c:4d:88:b8:05:2c:74:b2: 9a:1b:ec:8e:54:97:de:69:f9:06:fe:3f:e8:ae:66:31:98:f3: f2:c4:40:e3:fa:46:ba:8a:50:ab:ce:e9:ac:57:dc:d7:af:b1: bd:fa:46:ed:08:f6:ac:f6:56:67:f8:7c:b6:d0:af:88:b6:98: 5d:6e:71:6f:2f:b4:50:c4:e5:33:16:db:90:8d:96:01:5b:a6: ba:b4:cc:3a:a9:fb:ff:bf:73:d5:1e:3d:3e:d3:84:44:af:fb: 13:89:e2:ea -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jh8JFLImcNlWwTRowDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODZiNDQzNTUtZjYwNS00NmQyLThmYTYtZDljYWIwZWZi NGMyMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MWM0ZDgxN2YtYzI1MS00ZDZkLThmZjYtOWRlMGVjMzI3OGM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArGb8risaPEXgospVoCALsiBBVIufH/XRRyfq alE9lhTzP37sKD5ybkKzpksMgCM1cqcOWUUh76aBicfpK1IX65f1aOpqEY+grGw4 sqJCgtpoSOqki9kwHwZ0UoFnBFyfnl+gyP9/2VD9+eOx3NgXornQ6r0NpjiDnBa0 CNNR7K4FIndajjQ1Ax0LV9pD4WqtjAnX0ln7vTbGakVzU5/T8lpgpO+23GnpgR99 I+CXN6QBIu+BOjuzgFqK9aL3KPJmPN0Z2dwxXZLkv5rdwbVu8PdfoQPihUkyTXIk qkDXXNRBUvpb8h+zY8RYOdgWiUHy1Bad8S8rwQ30Wld/lMVWIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJyIXddCZEEK8HR66mSBR+HYcM0tMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi84NmI0 NDM1NS1mNjA1LTQ2ZDItOGZhNi1kOWNhYjBlZmI0YzIvY2VmZjczNGMtYmJhMS0z ZGZkLTk3ODEtOGQwMDFjOTU3MTc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvODZiNDQzNTUtZjYwNS00NmQyLThm YTYtZDljYWIwZWZiNGMyLzg2YjQ0MzU1LWY2MDUtNDZkMi04ZmE2LWQ5Y2FiMGVm YjRjMi5jcmwwHwYDVR0jBBgwFoAUe+ir3LZRv1KiBJ51wUi0RBMNmgswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi84NmI0NDM1NS1mNjA1LTQ2ZDItOGZhNi1kOWNh YjBlZmI0YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF47xMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAByyvbyjYeok0Njb3UY76taGWRyD0ua0U69aCB25PNjWIeLv9N0bPFh+ UoOdfPH6M4he/iPdFfvmQWOBtWOgaHvSmRdH4vXXstE6NHDwD3rY7JGjOpGxR+RI yVcZnyAK/qDwOpNLJMNqT0cisJqRP4wCo1NfxOjqYil20sRQ7UOu69qCcItB6wJa 6dVX92DDhkJnc59xQ2W500R8TYi4BSx0spob7I5Ul95p+Qb+P+iuZjGY8/LEQOP6 RrqKUKvO6axX3Nevsb36Ru0I9qz2Vmf4fLbQr4i2mF1ucW8vtFDE5TMW25CNlgFb prq0zDqp+/+/c9UePT7ThESv+xOJ4uo= -----END CERTIFICATE-----Generated at Mon Sep 28 16:20:49 2026 by rpki-client