$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d81f89ec-8739-4b9a-9b38-7e4523271d2a/c397cd78-3ed4-3c76-b533-f5ca6bc24aa0.roa File: c397cd78-3ed4-3c76-b533-f5ca6bc24aa0.roa (raw, json) Hash identifier: o6IuqkWisUKkLQETwf15S/qU+IMJtNL3dS75Mds1ui4= Subject key identifier: DC:D3:FB:53:06:9E:04:4A:59:7D:C1:07:E4:D5:6E:CE:F1:A8:B0:8B Certificate issuer: /CN=d81f89ec-8739-4b9a-9b38-7e4523271d2a Certificate serial: 010D0C9F4328584F268D0B772AFC0DCB80AE7EC0 Authority key identifier: 02:2B:B5:E8:02:C3:2D:EF:57:F7:58:6B:CF:83:D4:C4:36:15:81:53 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d81f89ec-8739-4b9a-9b38-7e4523271d2a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d81f89ec-8739-4b9a-9b38-7e4523271d2a/c397cd78-3ed4-3c76-b533-f5ca6bc24aa0.roa Signing time: Sat 12 Sep 2026 13:00:13 +0000 ROA not before: Sat 12 Sep 2026 13:00:13 +0000 ROA not after: Fri 11 Dec 2026 14:00:13 +0000 asID: 64079 IP address blocks: 23.144.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d81f89ec-8739-4b9a-9b38-7e4523271d2a/d81f89ec-8739-4b9a-9b38-7e4523271d2a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d81f89ec-8739-4b9a-9b38-7e4523271d2a/d81f89ec-8739-4b9a-9b38-7e4523271d2a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d81f89ec-8739-4b9a-9b38-7e4523271d2a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 Oct 2026 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:26:8d:0b:77:2a:fc:0d:cb:80:ae:7e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d81f89ec-8739-4b9a-9b38-7e4523271d2a Validity Not Before: Sep 12 13:00:13 2026 GMT Not After : Dec 11 14:00:13 2026 GMT Subject: CN=25f867bb-a55c-444c-9180-3ab3855cce60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:78:eb:3a:2e:57:93:5b:c3:36:79:12:0e:ef: 21:e1:1d:bd:d9:73:9f:e2:06:30:5a:47:9f:13:97: 73:d4:72:22:01:e7:f3:46:f8:3b:3b:f6:8b:84:68: 6d:ef:a3:9f:d2:9c:c5:b3:db:29:0a:54:76:75:3e: 18:40:33:86:2d:05:9a:69:7c:cc:d4:53:32:d3:a8: 80:e4:8d:6e:8a:dd:62:52:50:0f:ec:ad:51:b5:98: b3:b1:cb:51:5e:52:0b:6d:ef:16:82:98:06:ef:a6: 06:69:fe:e3:e7:ac:b7:5e:24:85:30:12:b3:1f:36: b0:ad:d9:54:30:7a:c7:d6:38:c1:02:84:fe:8b:02: 60:c8:30:e7:91:2d:97:c3:43:24:9c:f2:8d:37:3c: b5:14:e4:4b:f6:9c:41:e9:a1:c5:ea:f2:27:e6:c7: d5:ce:b7:d6:10:85:72:ab:15:19:24:fc:71:df:87: 42:37:12:cd:c9:4c:b8:b3:6c:c3:b8:8f:10:a9:d2: c6:bd:86:f2:67:cc:14:41:d0:61:96:d8:fa:d7:31: e8:98:12:52:e8:9d:fb:8b:28:01:2d:61:12:d2:a4: bc:e1:1d:87:72:fa:bc:c6:f0:f1:a4:94:ba:4b:37: 91:7f:7f:eb:2e:7c:bc:90:38:84:96:8e:03:13:5b: 87:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:D3:FB:53:06:9E:04:4A:59:7D:C1:07:E4:D5:6E:CE:F1:A8:B0:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d81f89ec-8739-4b9a-9b38-7e4523271d2a/c397cd78-3ed4-3c76-b533-f5ca6bc24aa0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d81f89ec-8739-4b9a-9b38-7e4523271d2a/d81f89ec-8739-4b9a-9b38-7e4523271d2a.crl X509v3 Authority Key Identifier: keyid:02:2B:B5:E8:02:C3:2D:EF:57:F7:58:6B:CF:83:D4:C4:36:15:81:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d81f89ec-8739-4b9a-9b38-7e4523271d2a.cer sbgp-ipAddrBlock: critical IPv4: 23.144.172.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:ed:e7:a7:17:3e:6e:c9:12:66:d1:ad:2d:85:2a:17:c5:75: a7:84:77:18:7a:99:42:a1:12:24:ac:04:64:44:14:41:2a:e0: 58:fa:ee:3d:46:50:1a:00:64:14:08:8f:43:22:f1:3d:95:4f: 1f:f8:0e:05:4b:2f:3e:15:51:d2:c3:5c:ec:9e:cc:7c:77:4b: ab:50:f0:20:84:e0:8b:10:8d:3e:d4:e7:ce:d4:24:39:65:c8: 3e:4c:f9:5d:c6:82:3f:d4:a7:19:d4:74:f2:c8:c6:90:e6:34: 4f:89:86:0b:7c:87:66:9d:a6:43:5d:93:a5:25:c2:d2:22:b4: c4:f5:38:ed:7f:06:76:09:c2:d8:e7:45:04:6b:94:5f:5a:05: 01:68:e8:d5:d8:99:f5:45:7b:7c:7d:38:63:c2:1d:03:c2:4e: 5c:58:6b:37:a7:2d:08:29:d5:0b:67:6c:f2:17:59:af:c7:99: bc:3a:4c:e2:ec:93:58:1c:42:d9:43:96:af:fd:d3:3e:64:26: 30:56:c5:55:eb:ca:f0:26:be:24:43:19:0b:67:a6:f2:04:80: 10:fe:73:72:e3:55:50:99:c8:34:db:ac:38:d3:76:fe:39:ec: 29:20:74:44:fb:ef:f0:c6:20:9f:24:2b:c2:ce:ad:9b:e2:e2: de:a8:f1:cc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8mjQt3KvwNy4CufsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDgxZjg5ZWMtODczOS00YjlhLTliMzgtN2U0NTIzMjcx ZDJhMB4XDTI2MDkxMjEzMDAxM1oXDTI2MTIxMTE0MDAxM1owLzEtMCsGA1UEAxMk MjVmODY3YmItYTU1Yy00NDRjLTkxODAtM2FiMzg1NWNjZTYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmHjrOi5Xk1vDNnkSDu8h4R292XOf4gYwWkef E5dz1HIiAefzRvg7O/aLhGht76Of0pzFs9spClR2dT4YQDOGLQWaaXzM1FMy06iA 5I1uit1iUlAP7K1RtZizsctRXlILbe8WgpgG76YGaf7j56y3XiSFMBKzHzawrdlU MHrH1jjBAoT+iwJgyDDnkS2Xw0MknPKNNzy1FORL9pxB6aHF6vIn5sfVzrfWEIVy qxUZJPxx34dCNxLNyUy4s2zDuI8QqdLGvYbyZ8wUQdBhltj61zHomBJS6J37iygB LWES0qS84R2Hcvq8xvDxpJS6SzeRf3/rLny8kDiElo4DE1uHyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNzT+1MGngRKWX3BB+TVbs7xqLCLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9kODFm ODllYy04NzM5LTRiOWEtOWIzOC03ZTQ1MjMyNzFkMmEvYzM5N2NkNzgtM2VkNC0z Yzc2LWI1MzMtZjVjYTZiYzI0YWEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvZDgxZjg5ZWMtODczOS00YjlhLTli MzgtN2U0NTIzMjcxZDJhL2Q4MWY4OWVjLTg3MzktNGI5YS05YjM4LTdlNDUyMzI3 MWQyYS5jcmwwHwYDVR0jBBgwFoAUAiu16ALDLe9X91hrz4PUxDYVgVMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9kODFmODllYy04NzM5LTRiOWEtOWIzOC03ZTQ1 MjMyNzFkMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5CsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKjt56cXPm7JEmbRrS2FKhfFdaeEdxh6mUKhEiSsBGREFEEq4Fj67j1G UBoAZBQIj0Mi8T2VTx/4DgVLLz4VUdLDXOyezHx3S6tQ8CCE4IsQjT7U587UJDll yD5M+V3Ggj/UpxnUdPLIxpDmNE+Jhgt8h2adpkNdk6UlwtIitMT1OO1/BnYJwtjn RQRrlF9aBQFo6NXYmfVFe3x9OGPCHQPCTlxYazenLQgp1QtnbPIXWa/Hmbw6TOLs k1gcQtlDlq/90z5kJjBWxVXryvAmviRDGQtnpvIEgBD+c3LjVVCZyDTbrDjTdv45 7CkgdET77/DGIJ8kK8LOrZvi4t6o8cw= -----END CERTIFICATE-----Generated at Sun Oct 4 07:43:52 2026 by rpki-client