$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/18e69682-4687-489d-8a3f-464eb9fd28e2/0a2654a9-bb11-384c-be39-c85e40d330ae.roa File: 0a2654a9-bb11-384c-be39-c85e40d330ae.roa (raw, json) Hash identifier: kD2WLuWpfDeGjwroNxR7e6CMmku+KXD2FrIMgmtvzmo= Subject key identifier: 26:46:73:94:33:AD:AF:9E:C8:22:D7:99:D6:31:7C:41:AB:28:5C:01 Certificate issuer: /CN=18e69682-4687-489d-8a3f-464eb9fd28e2 Certificate serial: 010D0C9F4328584F18979B945A6882F2A5329100 Authority key identifier: A3:D2:F2:B4:5F:8B:B9:F7:55:B1:C4:9E:D8:C0:FB:42:3F:95:1C:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/18e69682-4687-489d-8a3f-464eb9fd28e2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/18e69682-4687-489d-8a3f-464eb9fd28e2/0a2654a9-bb11-384c-be39-c85e40d330ae.roa Signing time: Mon 07 Sep 2026 13:00:12 +0000 ROA not before: Mon 07 Sep 2026 13:00:12 +0000 ROA not after: Sun 06 Dec 2026 14:00:12 +0000 asID: 30381 IP address blocks: 23.145.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/18e69682-4687-489d-8a3f-464eb9fd28e2/18e69682-4687-489d-8a3f-464eb9fd28e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/18e69682-4687-489d-8a3f-464eb9fd28e2/18e69682-4687-489d-8a3f-464eb9fd28e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/18e69682-4687-489d-8a3f-464eb9fd28e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:18:97:9b:94:5a:68:82:f2:a5:32:91:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18e69682-4687-489d-8a3f-464eb9fd28e2 Validity Not Before: Sep 7 13:00:12 2026 GMT Not After : Dec 6 14:00:12 2026 GMT Subject: CN=ff25c0c3-ce47-44d5-beea-e17e0d3b6832 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:5f:31:ef:db:b9:05:c7:fc:8d:04:12:51:9f: 47:d7:77:b6:94:9c:22:1d:92:2c:de:d2:59:02:42: ae:c6:1a:23:f7:d6:3a:61:b5:a1:7f:5e:0f:24:52: 43:d4:69:89:1f:6f:74:77:88:93:8d:5f:ce:ff:b5: 9b:06:58:5b:3e:b5:62:30:27:41:b3:25:e4:d6:38: 8d:54:09:81:12:76:5c:08:06:c0:3a:fe:03:02:2f: 17:98:95:4e:3f:ef:0e:e4:d3:63:fd:21:85:36:07: ff:46:06:09:4f:b1:2e:30:ef:95:c5:5d:ac:67:70: 34:1c:f1:87:97:58:fc:5c:f8:74:6f:b8:a7:ab:c7: 7d:d5:59:0d:84:0d:d1:f2:b1:9c:2f:0c:19:be:bc: d9:dd:57:55:44:d5:4b:a8:39:d5:a3:d5:d5:62:82: 8c:c5:9d:fb:73:b5:fd:bb:d7:1c:4b:ea:ce:3b:25: c3:63:b0:a8:fb:77:f4:d0:a8:c1:8d:d7:ae:b6:84: cd:42:b3:eb:29:ad:2d:a2:00:4a:04:ac:31:57:89: d6:39:24:e5:57:1b:cf:7f:da:64:1c:47:30:41:70: af:7d:02:f6:7f:13:67:e6:72:98:26:d2:d5:f5:7a: 0d:48:ed:4c:ec:b4:34:c7:3c:2c:85:3e:ea:9b:b5: a6:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:46:73:94:33:AD:AF:9E:C8:22:D7:99:D6:31:7C:41:AB:28:5C:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/18e69682-4687-489d-8a3f-464eb9fd28e2/0a2654a9-bb11-384c-be39-c85e40d330ae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/18e69682-4687-489d-8a3f-464eb9fd28e2/18e69682-4687-489d-8a3f-464eb9fd28e2.crl X509v3 Authority Key Identifier: keyid:A3:D2:F2:B4:5F:8B:B9:F7:55:B1:C4:9E:D8:C0:FB:42:3F:95:1C:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/18e69682-4687-489d-8a3f-464eb9fd28e2.cer sbgp-ipAddrBlock: critical IPv4: 23.145.4.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:9c:8f:6a:4f:15:ed:c1:b2:5f:12:48:2c:91:18:8d:8a:9f: 6f:e7:cf:ee:d1:28:7f:27:31:79:be:d1:6f:71:00:8c:4f:8d: ed:25:e6:69:09:02:8d:10:f0:22:dc:b3:99:87:7b:d1:f8:40: 36:a5:f4:01:03:58:19:b0:48:e5:dd:15:8a:dc:36:68:6e:47: d8:0a:bf:71:61:94:ff:16:bc:30:ce:b8:af:0a:5c:98:de:84: 52:3e:7c:5e:7e:52:d8:0f:a8:c2:b8:08:d3:83:8d:bd:6a:88: 9d:d8:8d:b8:66:cd:2d:50:c6:c5:b0:2b:df:2f:8c:ba:31:39: ec:fb:e4:b3:7a:08:46:ea:80:a0:3d:8b:cf:a6:99:8d:82:31: 44:8b:18:e4:e8:68:60:5b:08:c8:a7:97:86:f4:4b:4d:aa:20: c8:ad:ac:99:78:77:1f:79:3e:5f:20:c6:ea:1e:ff:f7:4c:29: 71:7c:58:8b:0d:94:93:36:4c:2c:fe:42:e2:90:96:db:08:7e: d2:f1:1c:ee:cb:3d:b2:c6:21:c6:5f:89:da:b1:57:71:72:ba: 3d:f8:44:cc:6d:bf:7b:c6:11:fb:01:63:46:d3:e2:87:e5:47: 18:a0:40:fe:4a:25:08:d7:da:d4:0f:3f:3f:22:06:34:9b:b2: 59:ec:d2:63 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8Yl5uUWmiC8qUykQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMThlNjk2ODItNDY4Ny00ODlkLThhM2YtNDY0ZWI5ZmQy OGUyMB4XDTI2MDkwNzEzMDAxMloXDTI2MTIwNjE0MDAxMlowLzEtMCsGA1UEAxMk ZmYyNWMwYzMtY2U0Ny00NGQ1LWJlZWEtZTE3ZTBkM2I2ODMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAil8x79u5Bcf8jQQSUZ9H13e2lJwiHZIs3tJZ AkKuxhoj99Y6YbWhf14PJFJD1GmJH290d4iTjV/O/7WbBlhbPrViMCdBsyXk1jiN VAmBEnZcCAbAOv4DAi8XmJVOP+8O5NNj/SGFNgf/RgYJT7EuMO+VxV2sZ3A0HPGH l1j8XPh0b7inq8d91VkNhA3R8rGcLwwZvrzZ3VdVRNVLqDnVo9XVYoKMxZ37c7X9 u9ccS+rOOyXDY7Co+3f00KjBjdeutoTNQrPrKa0togBKBKwxV4nWOSTlVxvPf9pk HEcwQXCvfQL2fxNn5nKYJtLV9XoNSO1M7LQ0xzwshT7qm7WmZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCZGc5Qzra+eyCLXmdYxfEGrKFwBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8xOGU2 OTY4Mi00Njg3LTQ4OWQtOGEzZi00NjRlYjlmZDI4ZTIvMGEyNjU0YTktYmIxMS0z ODRjLWJlMzktYzg1ZTQwZDMzMGFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMThlNjk2ODItNDY4Ny00ODlkLThh M2YtNDY0ZWI5ZmQyOGUyLzE4ZTY5NjgyLTQ2ODctNDg5ZC04YTNmLTQ2NGViOWZk MjhlMi5jcmwwHwYDVR0jBBgwFoAUo9LytF+LufdVscSe2MD7Qj+VHI0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8xOGU2OTY4Mi00Njg3LTQ4OWQtOGEzZi00NjRl YjlmZDI4ZTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5EEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGOcj2pPFe3Bsl8SSCyRGI2Kn2/nz+7RKH8nMXm+0W9xAIxPje0l5mkJ Ao0Q8CLcs5mHe9H4QDal9AEDWBmwSOXdFYrcNmhuR9gKv3FhlP8WvDDOuK8KXJje hFI+fF5+UtgPqMK4CNODjb1qiJ3YjbhmzS1QxsWwK98vjLoxOez75LN6CEbqgKA9 i8+mmY2CMUSLGOToaGBbCMinl4b0S02qIMitrJl4dx95Pl8gxuoe//dMKXF8WIsN lJM2TCz+QuKQltsIftLxHO7LPbLGIcZfidqxV3Fyuj34RMxtv3vGEfsBY0bT4ofl RxigQP5KJQjX2tQPPz8iBjSbslns0mM= -----END CERTIFICATE-----Generated at Thu Sep 24 21:30:00 2026 by rpki-client