$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8e5b6975-a14a-49a5-bbe6-66396778d718/0740643a-762d-38e5-a671-ae13f20f7987.roa File: 0740643a-762d-38e5-a671-ae13f20f7987.roa (raw, json) Hash identifier: oFkACz6Es+nq3LT7h9RlxYADcsoz/UqBEnaFO1zo7N8= Subject key identifier: C4:E2:D9:6B:70:A5:E5:EB:93:DC:B5:ED:89:C2:7B:AF:FC:81:61:04 Certificate issuer: /CN=8e5b6975-a14a-49a5-bbe6-66396778d718 Certificate serial: 010D0C9F4328584F497343DF02258ED386B50900 Authority key identifier: 5C:C1:7D:61:BF:86:1A:A5:EF:54:15:7A:62:D8:0F:E8:61:83:39:DE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8e5b6975-a14a-49a5-bbe6-66396778d718.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8e5b6975-a14a-49a5-bbe6-66396778d718/0740643a-762d-38e5-a671-ae13f20f7987.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 26766 IP address blocks: 23.130.148.0/24 maxlen: 24 2602:f77a::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8e5b6975-a14a-49a5-bbe6-66396778d718/8e5b6975-a14a-49a5-bbe6-66396778d718.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8e5b6975-a14a-49a5-bbe6-66396778d718/8e5b6975-a14a-49a5-bbe6-66396778d718.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8e5b6975-a14a-49a5-bbe6-66396778d718.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:43:df:02:25:8e:d3:86:b5:09:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e5b6975-a14a-49a5-bbe6-66396778d718 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=3fe78551-25ec-4bfb-a541-8f38e2943857 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:5a:2e:27:15:d8:64:02:16:28:57:98:d1:bd: 49:78:a8:a3:f1:83:0e:ca:d0:6d:02:4f:e5:15:d3: 10:eb:73:50:a3:94:e3:3c:f1:16:11:7a:af:12:4e: f4:c0:fd:25:e3:a7:cf:ae:05:21:0f:7d:57:60:8f: 4d:05:53:a3:f0:fa:1e:52:aa:7a:07:3a:ab:15:08: 1f:55:97:4b:c6:fc:59:34:c6:cc:f2:c5:b6:dc:2f: a1:c0:53:e6:f8:e5:c2:a6:09:bf:34:bb:24:3b:56: 06:ae:fb:a5:51:45:df:13:e8:36:7b:a8:1a:bf:3e: 97:87:f9:09:94:84:45:1b:df:d6:f9:c1:7a:cf:85: e4:79:1c:e1:45:64:6d:51:fa:d0:3e:c1:fd:77:82: 85:e5:15:a8:e6:69:84:35:6f:a7:b3:ba:82:76:7f: 8d:96:f5:64:73:69:d2:1a:56:e5:d5:ee:fc:84:20: fe:3b:d4:13:43:73:b7:65:3b:2e:66:86:45:ca:c5: 26:5e:b7:08:36:77:1c:f5:1d:c3:64:df:a4:d9:fe: 16:42:3f:9a:65:88:89:ac:38:55:dc:33:0e:6f:41: 89:10:9e:a7:f5:32:99:c4:ac:81:a2:25:20:7c:63: 8f:79:81:8b:d2:9f:a3:b6:23:90:85:bf:02:55:f6: 42:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:E2:D9:6B:70:A5:E5:EB:93:DC:B5:ED:89:C2:7B:AF:FC:81:61:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8e5b6975-a14a-49a5-bbe6-66396778d718/0740643a-762d-38e5-a671-ae13f20f7987.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8e5b6975-a14a-49a5-bbe6-66396778d718/8e5b6975-a14a-49a5-bbe6-66396778d718.crl X509v3 Authority Key Identifier: keyid:5C:C1:7D:61:BF:86:1A:A5:EF:54:15:7A:62:D8:0F:E8:61:83:39:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8e5b6975-a14a-49a5-bbe6-66396778d718.cer sbgp-ipAddrBlock: critical IPv4: 23.130.148.0/24 IPv6: 2602:f77a::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:b7:61:fa:dc:34:a3:fa:c4:66:cd:40:b8:d9:39:0e:87:09: 9f:26:29:1d:36:46:8a:0b:e2:c0:f3:64:c4:34:9f:2e:70:d2: d3:44:ad:9b:ff:58:3e:da:f1:eb:f6:e0:4a:0a:19:81:27:37: d4:10:01:6f:de:9d:5c:79:3b:ef:16:66:4f:88:2a:cb:54:96: f6:bd:50:c1:ad:3d:b6:35:32:73:db:db:c5:e3:77:52:8d:2d: 78:89:60:95:87:1d:05:64:99:57:a0:d2:65:4c:04:f4:cd:13: 7c:80:37:2a:9f:87:38:c0:ed:cb:4b:ed:b3:e4:48:b7:d4:ad: 68:ad:30:fc:19:43:0a:7c:58:55:a8:86:45:5a:f2:cc:e2:7e: 73:a5:69:70:83:6f:eb:12:99:81:79:8e:b8:b4:ea:68:5d:71: c1:97:05:51:91:f8:bd:42:d5:7b:f1:e0:1d:22:91:93:31:5c: 93:c2:7b:75:ab:11:6d:9b:d6:f9:bc:ab:08:5d:e5:94:0e:5f: f7:28:32:13:9a:cb:9a:6b:ed:a8:9e:b4:df:e2:97:f5:33:a7: 92:41:8d:7e:4c:89:39:4f:d4:5d:ae:3a:a7:28:eb:a7:9c:34: 25:cd:6c:11:31:ca:75:f9:ed:27:96:d8:96:04:16:d8:f0:f8: f1:84:53:3a -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE9Jc0PfAiWO04a1CQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGU1YjY5NzUtYTE0YS00OWE1LWJiZTYtNjYzOTY3Nzhk NzE4MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk M2ZlNzg1NTEtMjVlYy00YmZiLWE1NDEtOGYzOGUyOTQzODU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyVouJxXYZAIWKFeY0b1JeKij8YMOytBtAk/l FdMQ63NQo5TjPPEWEXqvEk70wP0l46fPrgUhD31XYI9NBVOj8PoeUqp6BzqrFQgf VZdLxvxZNMbM8sW23C+hwFPm+OXCpgm/NLskO1YGrvulUUXfE+g2e6gavz6Xh/kJ lIRFG9/W+cF6z4XkeRzhRWRtUfrQPsH9d4KF5RWo5mmENW+ns7qCdn+NlvVkc2nS Glbl1e78hCD+O9QTQ3O3ZTsuZoZFysUmXrcINncc9R3DZN+k2f4WQj+aZYiJrDhV 3DMOb0GJEJ6n9TKZxKyBoiUgfGOPeYGL0p+jtiOQhb8CVfZCfQIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFMTi2WtwpeXrk9y17YnCe6/8gWEEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC84ZTVi Njk3NS1hMTRhLTQ5YTUtYmJlNi02NjM5Njc3OGQ3MTgvMDc0MDY0M2EtNzYyZC0z OGU1LWE2NzEtYWUxM2YyMGY3OTg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvOGU1YjY5NzUtYTE0YS00OWE1LWJi ZTYtNjYzOTY3NzhkNzE4LzhlNWI2OTc1LWExNGEtNDlhNS1iYmU2LTY2Mzk2Nzc4 ZDcxOC5jcmwwHwYDVR0jBBgwFoAUXMF9Yb+GGqXvVBV6YtgP6GGDOd4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC84ZTViNjk3NS1hMTRhLTQ5YTUtYmJlNi02NjM5 Njc3OGQ3MTguY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF4KUMA4E AgACMAgDBgQmAvd6ADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAit2H63DSj+sRmzUC42TkOhwmfJikdNkaK C+LA82TENJ8ucNLTRK2b/1g+2vHr9uBKChmBJzfUEAFv3p1ceTvvFmZPiCrLVJb2 vVDBrT22NTJz29vF43dSjS14iWCVhx0FZJlXoNJlTAT0zRN8gDcqn4c4wO3LS+2z 5Ei31K1orTD8GUMKfFhVqIZFWvLM4n5zpWlwg2/rEpmBeY64tOpoXXHBlwVRkfi9 QtV78eAdIpGTMVyTwnt1qxFtm9b5vKsIXeWUDl/3KDITmsuaa+2onrTf4pf1M6eS QY1+TIk5T9RdrjqnKOunnDQlzWwRMcp1+e0nltiWBBbY8PjxhFM6 -----END CERTIFICATE-----Generated at Sat Sep 26 00:20:21 2026 by rpki-client