$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c2bb4c54-14a6-4e32-b3a0-defad300d9fc/1190cb49-d6b6-36f1-8898-ac542e226430.roa File: 1190cb49-d6b6-36f1-8898-ac542e226430.roa (raw, json) Hash identifier: JUecsEd0cbkYlhZ+2+AjDXsxF17fwUKMMpcsy96HNUs= Subject key identifier: E7:D2:0F:71:5A:D0:BE:30:DA:FA:CF:DB:2A:44:CB:15:12:53:9C:32 Certificate issuer: /CN=c2bb4c54-14a6-4e32-b3a0-defad300d9fc Certificate serial: 010D0C9F4328584F4989F13AB7FCA2005103DD00 Authority key identifier: D4:59:63:34:92:D3:89:75:82:AD:E5:DE:DF:1B:B8:18:9B:E7:7A:2F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c2bb4c54-14a6-4e32-b3a0-defad300d9fc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c2bb4c54-14a6-4e32-b3a0-defad300d9fc/1190cb49-d6b6-36f1-8898-ac542e226430.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7018 IP address blocks: 23.132.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c2bb4c54-14a6-4e32-b3a0-defad300d9fc/c2bb4c54-14a6-4e32-b3a0-defad300d9fc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c2bb4c54-14a6-4e32-b3a0-defad300d9fc/c2bb4c54-14a6-4e32-b3a0-defad300d9fc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c2bb4c54-14a6-4e32-b3a0-defad300d9fc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:89:f1:3a:b7:fc:a2:00:51:03:dd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2bb4c54-14a6-4e32-b3a0-defad300d9fc Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=3e2998d8-9026-42ee-9f9d-c984916075ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:b6:54:2a:33:f6:3a:98:39:1c:8e:f9:39:82: 08:9b:38:99:95:44:ac:8c:fa:5a:f7:f5:72:53:72: c6:11:02:36:5a:28:ea:01:4b:8f:a4:7c:95:a3:79: 09:79:9e:f9:02:9d:54:26:85:f7:37:36:c7:bf:bc: eb:fd:44:34:40:7e:c0:1a:b5:18:c7:33:e7:93:c3: e3:c3:aa:ad:36:71:e4:74:0f:42:4d:78:f8:fd:54: 7c:30:ba:94:b0:bb:f2:12:59:f9:46:59:d2:d1:b4: 59:06:22:32:bf:51:82:8d:9a:29:47:01:4d:2e:31: de:78:1c:57:5f:e4:e1:1a:4d:c7:eb:c2:42:aa:37: 22:93:18:83:1b:ba:8a:9f:d5:af:66:dd:6a:ad:74: ae:d7:bc:f4:9d:60:d5:dc:61:dc:0e:bc:9d:a9:ba: 59:36:f7:48:21:27:6c:c5:e8:03:97:44:fa:0c:09: ca:0f:ba:87:b3:99:1c:5b:6a:b7:98:04:66:bc:81: b0:4d:9a:a6:63:e7:9b:6e:be:d5:a2:ea:8d:86:79: 53:61:74:5a:4b:8d:b7:d0:27:19:86:59:de:eb:fc: 29:ea:74:5a:20:d9:aa:08:b9:9c:b1:9c:86:5a:ec: 4d:19:a3:ca:70:8b:fd:60:0b:f9:97:f9:e9:b9:51: 53:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:D2:0F:71:5A:D0:BE:30:DA:FA:CF:DB:2A:44:CB:15:12:53:9C:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c2bb4c54-14a6-4e32-b3a0-defad300d9fc/1190cb49-d6b6-36f1-8898-ac542e226430.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c2bb4c54-14a6-4e32-b3a0-defad300d9fc/c2bb4c54-14a6-4e32-b3a0-defad300d9fc.crl X509v3 Authority Key Identifier: keyid:D4:59:63:34:92:D3:89:75:82:AD:E5:DE:DF:1B:B8:18:9B:E7:7A:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c2bb4c54-14a6-4e32-b3a0-defad300d9fc.cer sbgp-ipAddrBlock: critical IPv4: 23.132.140.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:ad:bc:57:ad:a2:28:e8:f5:0b:2e:d4:f7:2f:1b:a1:24:1a: 65:57:bf:13:48:9b:8d:21:e8:fa:aa:f9:e1:9e:27:3b:b5:b3: 95:d6:4c:02:58:09:a1:0f:51:4b:75:be:ff:e6:26:1a:6a:e3: 02:6f:69:0b:5f:d0:08:e1:b9:4f:fa:44:fa:83:95:ea:0c:1b: cc:66:5e:b5:a3:ed:f1:c5:2e:4f:92:18:fe:ef:d6:80:14:a7: 59:df:b4:c2:64:18:33:3a:46:ac:57:6c:9b:9c:6b:49:85:5e: b8:95:be:71:5a:b1:52:c1:2e:00:c0:64:46:31:0d:58:01:5b: 0a:b3:c2:08:8e:1b:f6:80:89:4e:6f:e0:e0:be:94:3e:18:db: 42:c9:fe:a0:ce:9f:a1:90:22:da:fe:ad:e4:c6:89:16:cd:31: ca:95:e8:9b:6f:c7:6c:1b:19:66:ef:18:dd:3a:e1:e7:48:b4: 95:4b:ba:31:d0:35:12:93:b9:0c:7c:2f:60:10:57:dc:01:12: 0a:68:0f:fa:6d:a7:22:06:e0:fa:fb:b2:c9:39:ef:00:45:b3: 9f:ef:81:d2:4d:3a:0e:19:7d:73:66:cf:c9:5c:04:73:ea:78: 5e:d1:d4:8c:a0:c7:da:30:cc:19:3c:4c:8c:a5:d5:a1:86:4d: 06:f5:be:b2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JifE6t/yiAFED3QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzJiYjRjNTQtMTRhNi00ZTMyLWIzYTAtZGVmYWQzMDBk OWZjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk M2UyOTk4ZDgtOTAyNi00MmVlLTlmOWQtYzk4NDkxNjA3NWVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAurZUKjP2Opg5HI75OYIImziZlUSsjPpa9/Vy U3LGEQI2WijqAUuPpHyVo3kJeZ75Ap1UJoX3NzbHv7zr/UQ0QH7AGrUYxzPnk8Pj w6qtNnHkdA9CTXj4/VR8MLqUsLvyEln5RlnS0bRZBiIyv1GCjZopRwFNLjHeeBxX X+ThGk3H68JCqjcikxiDG7qKn9WvZt1qrXSu17z0nWDV3GHcDrydqbpZNvdIISds xegDl0T6DAnKD7qHs5kcW2q3mARmvIGwTZqmY+ebbr7VouqNhnlTYXRaS4230CcZ hlne6/wp6nRaINmqCLmcsZyGWuxNGaPKcIv9YAv5l/npuVFTuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOfSD3Fa0L4w2vrP2ypEyxUSU5wyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9jMmJi NGM1NC0xNGE2LTRlMzItYjNhMC1kZWZhZDMwMGQ5ZmMvMTE5MGNiNDktZDZiNi0z NmYxLTg4OTgtYWM1NDJlMjI2NDMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYzJiYjRjNTQtMTRhNi00ZTMyLWIz YTAtZGVmYWQzMDBkOWZjL2MyYmI0YzU0LTE0YTYtNGUzMi1iM2EwLWRlZmFkMzAw ZDlmYy5jcmwwHwYDVR0jBBgwFoAU1FljNJLTiXWCreXe3xu4GJvnei8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9jMmJiNGM1NC0xNGE2LTRlMzItYjNhMC1kZWZh ZDMwMGQ5ZmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4SMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACutvFetoijo9Qsu1PcvG6EkGmVXvxNIm40h6Pqq+eGeJzu1s5XWTAJY CaEPUUt1vv/mJhpq4wJvaQtf0AjhuU/6RPqDleoMG8xmXrWj7fHFLk+SGP7v1oAU p1nftMJkGDM6RqxXbJuca0mFXriVvnFasVLBLgDAZEYxDVgBWwqzwgiOG/aAiU5v 4OC+lD4Y20LJ/qDOn6GQItr+reTGiRbNMcqV6Jtvx2wbGWbvGN064edItJVLujHQ NRKTuQx8L2AQV9wBEgpoD/ptpyIG4Pr7ssk57wBFs5/vgdJNOg4ZfXNmz8lcBHPq eF7R1Iygx9owzBk8TIyl1aGGTQb1vrI= -----END CERTIFICATE-----Generated at Fri Sep 25 07:14:03 2026 by rpki-client