$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/4098e103-d04a-3465-a7e1-f3debf7a9e61.roa File: 4098e103-d04a-3465-a7e1-f3debf7a9e61.roa (raw, json) Hash identifier: xxJ/iRhO22B5MTMwJPU+6MO7aFOJNpkRHoUxUcB31NY= Subject key identifier: 4D:59:4D:37:88:66:62:2F:D6:6F:32:C2:C7:02:E9:BD:72:53:39:DA Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf Certificate serial: 010D0C9F4328584F4277F7906179AC6089199100 Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/4098e103-d04a-3465-a7e1-f3debf7a9e61.roa Signing time: Tue 22 Sep 2026 13:00:12 +0000 ROA not before: Tue 22 Sep 2026 13:00:12 +0000 ROA not after: Mon 21 Dec 2026 14:00:12 +0000 asID: 16509 IP address blocks: 23.239.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:42:77:f7:90:61:79:ac:60:89:19:91:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf Validity Not Before: Sep 22 13:00:12 2026 GMT Not After : Dec 21 14:00:12 2026 GMT Subject: CN=e8261bc2-7eae-47be-b386-22eabbab2f06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:2b:3a:77:af:82:f1:85:92:0a:f9:8f:04:4a: a8:92:84:0a:5c:54:e4:2e:2f:3e:d2:ea:62:01:11: f2:67:e5:69:97:47:62:2b:80:6f:1a:94:de:37:00: 40:c0:e1:a5:b7:61:0d:c4:6f:5a:85:9a:40:1a:3d: 27:28:55:2e:71:60:30:5e:7c:1e:fd:7f:65:b2:0b: 06:98:81:01:64:94:ce:0b:59:f1:f0:d0:69:8d:88: 71:94:58:dd:b3:85:25:de:e4:0b:c4:79:f4:24:02: aa:c6:f6:01:51:c3:e8:08:82:e1:c8:9b:55:80:e5: 70:b4:4f:63:fc:89:68:24:4d:dc:d0:ea:40:22:46: 1a:e6:aa:f5:70:01:de:e7:07:48:08:0f:17:e7:44: 4c:10:cc:fd:a0:ff:1c:45:a5:2b:c4:a5:32:7f:52: 8a:f8:6c:c9:69:af:59:d1:64:36:ed:bf:e1:47:a3: f9:46:a7:88:83:4e:ef:43:f4:dc:92:8e:3b:ff:31: 49:e7:90:8a:51:b0:27:76:55:0f:96:77:dc:7e:77: bb:c7:e9:7f:1b:ab:0f:df:11:f5:1f:83:c1:7c:06: f4:00:9d:c2:82:02:65:78:ec:cc:95:42:59:52:15: 47:17:3b:db:94:3f:7e:0a:84:54:da:61:73:00:01: 8b:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:59:4D:37:88:66:62:2F:D6:6F:32:C2:C7:02:E9:BD:72:53:39:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/4098e103-d04a-3465-a7e1-f3debf7a9e61.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl X509v3 Authority Key Identifier: keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer sbgp-ipAddrBlock: critical IPv4: 23.239.243.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:48:c1:d0:4e:a9:6d:aa:0a:66:7b:df:5d:4a:dd:88:2e:a2: cf:41:35:78:3b:15:ab:14:9a:5b:57:f0:d1:67:5b:8f:5c:aa: 58:5b:36:db:60:7a:71:92:c6:68:ff:76:89:08:ec:56:41:c8: ca:a2:8e:02:e8:ff:47:e8:33:31:1b:61:96:de:58:52:a9:9c: 61:f3:32:c2:74:d5:b6:99:f2:ef:9e:a2:f7:08:be:80:f0:0b: a2:58:96:ba:1f:11:9d:b5:81:f6:ac:62:ee:96:e6:ff:a3:b3: 92:59:93:2c:f7:9a:fd:8e:90:d4:f0:b5:7e:1e:3b:0a:8a:7c: 86:41:13:e8:81:31:0e:b1:da:8d:36:56:7e:1e:63:3a:eb:f7: 65:14:11:85:bd:12:28:cf:03:b4:24:26:d0:2f:be:e2:bb:8c: a1:e5:15:e3:92:cc:d5:13:be:4f:47:14:13:a3:8f:ec:87:cd: 1e:27:f9:d1:a5:1f:1a:d0:b8:8c:0e:70:fc:ec:96:0a:36:d9: 81:62:5e:ee:14:1a:77:04:d6:e6:5d:0e:e0:e8:98:23:01:d8: ba:28:9c:40:e2:d4:16:38:05:15:d8:13:34:65:5d:4e:8a:b4: 86:95:0f:0a:fb:6e:1a:ee:ad:26:a2:db:d3:d5:57:91:44:6f: 80:ff:54:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Cd/eQYXmsYIkZkQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy OWJmMB4XDTI2MDkyMjEzMDAxMloXDTI2MTIyMTE0MDAxMlowLzEtMCsGA1UEAxMk ZTgyNjFiYzItN2VhZS00N2JlLWIzODYtMjJlYWJiYWIyZjA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhCs6d6+C8YWSCvmPBEqokoQKXFTkLi8+0upi ARHyZ+Vpl0diK4BvGpTeNwBAwOGlt2ENxG9ahZpAGj0nKFUucWAwXnwe/X9lsgsG mIEBZJTOC1nx8NBpjYhxlFjds4Ul3uQLxHn0JAKqxvYBUcPoCILhyJtVgOVwtE9j /IloJE3c0OpAIkYa5qr1cAHe5wdICA8X50RMEMz9oP8cRaUrxKUyf1KK+GzJaa9Z 0WQ27b/hR6P5RqeIg07vQ/Tcko47/zFJ55CKUbAndlUPlnfcfne7x+l/G6sP3xH1 H4PBfAb0AJ3CggJleOzMlUJZUhVHFzvblD9+CoRU2mFzAAGLEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE1ZTTeIZmIv1m8ywscC6b1yUznaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2 ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvNDA5OGUxMDMtZDA0YS0z NDY1LWE3ZTEtZjNkZWJmN2E5ZTYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4 MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx YzIxODI5YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF+/zMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACZIwdBOqW2qCmZ7311K3Yguos9BNXg7FasUmltX8NFnW49cqlhbNttg enGSxmj/dokI7FZByMqijgLo/0foMzEbYZbeWFKpnGHzMsJ01baZ8u+eovcIvoDw C6JYlrofEZ21gfasYu6W5v+js5JZkyz3mv2OkNTwtX4eOwqKfIZBE+iBMQ6x2o02 Vn4eYzrr92UUEYW9EijPA7QkJtAvvuK7jKHlFeOSzNUTvk9HFBOjj+yHzR4n+dGl HxrQuIwOcPzslgo22YFiXu4UGncE1uZdDuDomCMB2LoonEDi1BY4BRXYEzRlXU6K tIaVDwr7bhrurSai29PVV5FEb4D/VOA= -----END CERTIFICATE-----Generated at Sun Oct 11 05:42:43 2026 by rpki-client