$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/baa47c38-d554-4849-bca9-e7ed28932034/34827400-375f-3793-a621-53cacce76602.roa File: 34827400-375f-3793-a621-53cacce76602.roa (raw, json) Hash identifier: cFnGa3Qpl/FxnVI2thvX+rJHh9UnWGGgLk/VfJC7Zuo= Subject key identifier: 1B:31:9B:68:0B:78:A8:9B:BC:DC:C4:90:97:46:E3:8E:62:C8:AB:43 Certificate issuer: /CN=baa47c38-d554-4849-bca9-e7ed28932034 Certificate serial: 010D0C9F4328584F49748F45CC117D445BF64460 Authority key identifier: 03:DB:4C:F5:7B:C3:7D:0B:92:F7:C5:3C:20:BF:41:F4:23:7B:77:93 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/baa47c38-d554-4849-bca9-e7ed28932034.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/baa47c38-d554-4849-bca9-e7ed28932034/34827400-375f-3793-a621-53cacce76602.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 6079 IP address blocks: 23.145.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/baa47c38-d554-4849-bca9-e7ed28932034/baa47c38-d554-4849-bca9-e7ed28932034.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/baa47c38-d554-4849-bca9-e7ed28932034/baa47c38-d554-4849-bca9-e7ed28932034.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/baa47c38-d554-4849-bca9-e7ed28932034.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:8f:45:cc:11:7d:44:5b:f6:44:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=baa47c38-d554-4849-bca9-e7ed28932034 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=4a9672d0-23ab-42fb-849d-fbda055c9135 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:bb:75:55:70:c6:63:c4:4e:3a:df:45:42:97: 30:94:3d:d1:5a:e6:fd:1d:03:ca:98:26:11:64:02: 29:9d:68:bb:5c:c9:98:04:b7:ae:ec:67:8f:c4:1a: fa:56:7b:ab:d9:b1:9c:fe:d0:a2:3f:f4:7f:43:0b: 31:7a:83:04:ca:e8:82:2d:b6:02:96:4c:5f:1f:9a: 99:7b:aa:49:f9:45:bc:7a:53:1a:df:bb:60:45:26: cf:0c:51:c1:5c:7c:38:39:ce:0d:dd:2f:0b:7e:49: 5b:70:71:93:25:f1:69:eb:f2:26:76:9a:bc:c6:a4: b4:cd:10:cd:31:f8:e6:4c:be:49:df:45:4b:55:10: 24:07:eb:d8:26:6f:5f:72:df:72:15:5f:4b:23:60: 9e:c8:25:01:bd:21:2e:df:0a:6c:93:84:20:4d:4b: 92:db:7d:ee:be:a6:ca:41:aa:3e:0b:06:b9:70:08: 73:b1:d5:02:50:d3:c4:08:e4:08:aa:74:96:d9:a9: 8a:db:73:6a:38:b2:01:23:a2:c2:9e:ac:9f:72:98: 55:d4:bb:cc:a4:43:a6:89:f0:4e:9d:4d:2b:f2:38: 8b:b8:01:cf:8f:4a:9f:9d:5a:a2:9c:e8:b9:6e:3b: d2:35:ca:50:36:2d:40:a7:7d:99:bc:77:8b:f6:78: 12:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:31:9B:68:0B:78:A8:9B:BC:DC:C4:90:97:46:E3:8E:62:C8:AB:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/baa47c38-d554-4849-bca9-e7ed28932034/34827400-375f-3793-a621-53cacce76602.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/baa47c38-d554-4849-bca9-e7ed28932034/baa47c38-d554-4849-bca9-e7ed28932034.crl X509v3 Authority Key Identifier: keyid:03:DB:4C:F5:7B:C3:7D:0B:92:F7:C5:3C:20:BF:41:F4:23:7B:77:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/baa47c38-d554-4849-bca9-e7ed28932034.cer sbgp-ipAddrBlock: critical IPv4: 23.145.68.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:b6:8d:cb:aa:92:e9:50:9f:5f:eb:29:d5:63:2c:20:b8:8b: 8c:ba:74:73:6c:00:c8:1e:f7:ef:db:1f:7d:e5:8c:68:12:5b: 03:26:c9:1d:fb:08:e5:b1:71:70:b9:6d:00:a9:d3:9f:9f:52: 1c:d6:ca:1b:ec:81:74:9f:bd:d8:05:b7:82:84:8a:a0:78:86: a2:9d:94:ea:b4:cf:97:27:43:ee:3b:01:48:93:ba:c3:ae:27: 74:96:9e:5f:92:5f:ce:4f:51:e3:74:85:c6:d4:6f:67:47:6d: ac:b2:c2:8a:8a:c7:58:1e:3f:14:68:37:af:38:49:f6:b6:54: e3:01:5c:69:e2:33:44:1f:e5:90:7a:8b:be:68:4a:db:3a:d1: 4c:81:19:f4:00:1e:19:17:d9:2b:6e:43:a7:d7:63:ea:1c:00: a8:9d:18:57:df:ad:92:59:61:ff:ab:06:b9:bf:4c:df:18:42: 79:14:87:fc:bb:87:c2:9e:5e:96:91:53:8b:b8:d1:12:d2:a3: 54:1e:a0:8a:c4:dd:b5:a1:90:30:16:4b:f6:55:67:ea:ea:b3: aa:63:9f:d7:92:be:f5:a0:dd:4b:16:a1:8f:de:52:62:ba:4e: 8e:7e:f7:96:33:4a:22:56:92:f6:d3:6d:0f:41:02:d1:e3:99: 63:9a:ad:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdI9FzBF9RFv2RGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmFhNDdjMzgtZDU1NC00ODQ5LWJjYTktZTdlZDI4OTMy MDM0MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NGE5NjcyZDAtMjNhYi00MmZiLTg0OWQtZmJkYTA1NWM5MTM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAort1VXDGY8ROOt9FQpcwlD3RWub9HQPKmCYR ZAIpnWi7XMmYBLeu7GePxBr6Vnur2bGc/tCiP/R/QwsxeoMEyuiCLbYClkxfH5qZ e6pJ+UW8elMa37tgRSbPDFHBXHw4Oc4N3S8LfklbcHGTJfFp6/Imdpq8xqS0zRDN MfjmTL5J30VLVRAkB+vYJm9fct9yFV9LI2CeyCUBvSEu3wpsk4QgTUuS233uvqbK Qao+Cwa5cAhzsdUCUNPECOQIqnSW2amK23NqOLIBI6LCnqyfcphV1LvMpEOmifBO nU0r8jiLuAHPj0qfnVqinOi5bjvSNcpQNi1Ap32ZvHeL9ngSgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBsxm2gLeKibvNzEkJdG445iyKtDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9iYWE0 N2MzOC1kNTU0LTQ4NDktYmNhOS1lN2VkMjg5MzIwMzQvMzQ4Mjc0MDAtMzc1Zi0z NzkzLWE2MjEtNTNjYWNjZTc2NjAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYmFhNDdjMzgtZDU1NC00ODQ5LWJj YTktZTdlZDI4OTMyMDM0L2JhYTQ3YzM4LWQ1NTQtNDg0OS1iY2E5LWU3ZWQyODkz MjAzNC5jcmwwHwYDVR0jBBgwFoAUA9tM9XvDfQuS98U8IL9B9CN7d5MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9iYWE0N2MzOC1kNTU0LTQ4NDktYmNhOS1lN2Vk Mjg5MzIwMzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5FEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACS2jcuqkulQn1/rKdVjLCC4i4y6dHNsAMge9+/bH33ljGgSWwMmyR37 COWxcXC5bQCp05+fUhzWyhvsgXSfvdgFt4KEiqB4hqKdlOq0z5cnQ+47AUiTusOu J3SWnl+SX85PUeN0hcbUb2dHbayywoqKx1gePxRoN684Sfa2VOMBXGniM0Qf5ZB6 i75oSts60UyBGfQAHhkX2StuQ6fXY+ocAKidGFffrZJZYf+rBrm/TN8YQnkUh/y7 h8KeXpaRU4u40RLSo1QeoIrE3bWhkDAWS/ZVZ+rqs6pjn9eSvvWg3UsWoY/eUmK6 To5+95YzSiJWkvbTbQ9BAtHjmWOaraM= -----END CERTIFICATE-----Generated at Sat Sep 26 11:05:37 2026 by rpki-client