$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c857cadf-4120-46e1-8a77-61ed14f8dbc9/2973c52c-5659-3596-8301-dc3e576e7381.roa File: 2973c52c-5659-3596-8301-dc3e576e7381.roa (raw, json) Hash identifier: rWysoJN+L5z5qHCDMEUJy5vN/hNXsaU1E7ubl6OO6jQ= Subject key identifier: 38:D9:7E:B8:0E:5E:42:A2:94:40:61:32:22:53:14:59:99:43:74:78 Certificate issuer: /CN=c857cadf-4120-46e1-8a77-61ed14f8dbc9 Certificate serial: 010D0C9F4328584F2957BD41B5011E96B9333C80 Authority key identifier: FB:6E:81:0E:25:AB:93:AF:83:03:2C:44:28:84:70:32:89:84:AD:AD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c857cadf-4120-46e1-8a77-61ed14f8dbc9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c857cadf-4120-46e1-8a77-61ed14f8dbc9/2973c52c-5659-3596-8301-dc3e576e7381.roa Signing time: Sun 13 Sep 2026 13:00:11 +0000 ROA not before: Sun 13 Sep 2026 13:00:11 +0000 ROA not after: Sat 12 Dec 2026 14:00:11 +0000 asID: 216435 IP address blocks: 23.157.185.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c857cadf-4120-46e1-8a77-61ed14f8dbc9/c857cadf-4120-46e1-8a77-61ed14f8dbc9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c857cadf-4120-46e1-8a77-61ed14f8dbc9/c857cadf-4120-46e1-8a77-61ed14f8dbc9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c857cadf-4120-46e1-8a77-61ed14f8dbc9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:29:57:bd:41:b5:01:1e:96:b9:33:3c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c857cadf-4120-46e1-8a77-61ed14f8dbc9 Validity Not Before: Sep 13 13:00:11 2026 GMT Not After : Dec 12 14:00:11 2026 GMT Subject: CN=f0f72b08-f6e9-404a-8655-1f2346e9fa10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:6d:5c:c6:04:17:3e:75:20:2b:8b:32:d1:b2: 40:38:39:a5:d1:70:77:21:e0:0a:43:29:e6:b8:16: 8c:a1:d9:f7:08:c1:89:a6:c7:c8:85:1f:53:f0:75: fd:12:ac:72:5e:a0:83:b2:d5:0a:fa:e4:db:f4:b7: 57:6b:34:65:68:ff:fa:07:54:a6:0a:3f:96:f2:ba: ca:b6:52:e8:31:8b:89:4f:02:03:3a:63:8a:e8:11: 2f:ec:5a:68:df:e6:73:43:f4:14:bc:56:15:1f:dc: cd:46:6a:f8:47:5c:1e:d6:b3:81:69:3f:91:9a:66: ae:83:d5:78:40:ea:0f:b2:22:5a:3d:41:4f:65:e5: 6b:b9:9e:71:89:28:43:21:b2:b6:a9:35:77:76:09: b0:11:e3:cf:0b:5e:78:a9:d2:65:0b:fe:99:0f:d7: 2f:72:7e:69:0a:d1:0e:e2:d6:1f:ae:df:8a:31:54: 45:21:12:c9:5a:5c:e0:6c:e5:90:29:2f:90:18:f9: 4f:64:2f:1c:46:e7:7e:3e:63:8b:52:47:c2:49:9d: c5:93:20:81:08:d2:5b:fd:f2:ce:3e:e2:91:17:de: 0d:1a:2f:d0:50:ea:a5:02:29:a5:9d:f0:b1:64:bb: 65:b3:94:fe:81:db:b4:aa:24:c0:66:c3:c0:39:75: 92:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:D9:7E:B8:0E:5E:42:A2:94:40:61:32:22:53:14:59:99:43:74:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c857cadf-4120-46e1-8a77-61ed14f8dbc9/2973c52c-5659-3596-8301-dc3e576e7381.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c857cadf-4120-46e1-8a77-61ed14f8dbc9/c857cadf-4120-46e1-8a77-61ed14f8dbc9.crl X509v3 Authority Key Identifier: keyid:FB:6E:81:0E:25:AB:93:AF:83:03:2C:44:28:84:70:32:89:84:AD:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c857cadf-4120-46e1-8a77-61ed14f8dbc9.cer sbgp-ipAddrBlock: critical IPv4: 23.157.185.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d2:16:51:4f:f2:cb:67:fa:54:f4:aa:d6:1b:39:0c:67:f0:92: 61:d7:b4:4b:54:3c:8f:c1:44:32:32:98:d3:a5:c5:6c:c6:e8: 9d:ae:4d:ab:dd:50:cd:f5:a8:85:f1:c7:a0:5d:80:79:30:df: 6a:24:55:27:b2:eb:59:bc:82:82:9a:ae:42:4f:fb:16:89:88: 61:7b:84:70:05:34:9a:91:aa:1c:c1:c0:c7:09:62:e1:e1:b1: 06:48:17:4a:0a:02:b4:87:4e:11:0f:75:32:16:d4:9e:d3:8f: 18:0d:0e:bd:36:6a:11:d4:79:1c:49:88:79:f4:16:36:21:6a: ad:ef:50:54:48:f0:b3:3f:de:96:f8:50:b7:51:c3:56:15:af: 65:12:ab:32:2b:f3:87:e4:0e:7d:63:8e:62:72:8d:b0:fb:e6: e5:f7:a9:8c:bd:a1:b7:85:a0:7e:ce:4f:94:cd:57:b8:d4:67: 48:08:1e:15:71:32:65:33:c2:4d:0d:41:75:f8:62:b4:97:9b: cf:61:bd:b9:22:08:ee:b8:c6:5d:24:a3:2c:d6:03:33:59:03: 31:83:64:22:0a:45:f2:77:65:12:4d:6d:e2:15:65:f1:d2:e4: 29:7f:34:47:2f:2a:2a:b7:26:11:88:34:a6:4b:ef:50:c3:33: d5:89:f4:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8pV71BtQEelrkzPIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg1N2NhZGYtNDEyMC00NmUxLThhNzctNjFlZDE0Zjhk YmM5MB4XDTI2MDkxMzEzMDAxMVoXDTI2MTIxMjE0MDAxMVowLzEtMCsGA1UEAxMk ZjBmNzJiMDgtZjZlOS00MDRhLTg2NTUtMWYyMzQ2ZTlmYTEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1G1cxgQXPnUgK4sy0bJAODml0XB3IeAKQynm uBaModn3CMGJpsfIhR9T8HX9EqxyXqCDstUK+uTb9LdXazRlaP/6B1SmCj+W8rrK tlLoMYuJTwIDOmOK6BEv7Fpo3+ZzQ/QUvFYVH9zNRmr4R1we1rOBaT+Rmmaug9V4 QOoPsiJaPUFPZeVruZ5xiShDIbK2qTV3dgmwEePPC154qdJlC/6ZD9cvcn5pCtEO 4tYfrt+KMVRFIRLJWlzgbOWQKS+QGPlPZC8cRud+PmOLUkfCSZ3FkyCBCNJb/fLO PuKRF94NGi/QUOqlAimlnfCxZLtls5T+gdu0qiTAZsPAOXWSKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDjZfrgOXkKilEBhMiJTFFmZQ3R4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jODU3 Y2FkZi00MTIwLTQ2ZTEtOGE3Ny02MWVkMTRmOGRiYzkvMjk3M2M1MmMtNTY1OS0z NTk2LTgzMDEtZGMzZTU3NmU3MzgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYzg1N2NhZGYtNDEyMC00NmUxLThh NzctNjFlZDE0ZjhkYmM5L2M4NTdjYWRmLTQxMjAtNDZlMS04YTc3LTYxZWQxNGY4 ZGJjOS5jcmwwHwYDVR0jBBgwFoAU+26BDiWrk6+DAyxEKIRwMomEra0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9jODU3Y2FkZi00MTIwLTQ2ZTEtOGE3Ny02MWVk MTRmOGRiYzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF525MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANIWUU/yy2f6VPSq1hs5DGfwkmHXtEtUPI/BRDIymNOlxWzG6J2uTavd UM31qIXxx6BdgHkw32okVSey61m8goKarkJP+xaJiGF7hHAFNJqRqhzBwMcJYuHh sQZIF0oKArSHThEPdTIW1J7TjxgNDr02ahHUeRxJiHn0FjYhaq3vUFRI8LM/3pb4 ULdRw1YVr2USqzIr84fkDn1jjmJyjbD75uX3qYy9obeFoH7OT5TNV7jUZ0gIHhVx MmUzwk0NQXX4YrSXm89hvbkiCO64xl0koyzWAzNZAzGDZCIKRfJ3ZRJNbeIVZfHS 5Cl/NEcvKiq3JhGINKZL71DDM9WJ9FQ= -----END CERTIFICATE-----Generated at Tue Sep 29 15:57:45 2026 by rpki-client