$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e056707d-838a-4b8b-bd8e-8a874ea0684d/2c0ae8ea-b669-3e54-8772-d45364814725.roa File: 2c0ae8ea-b669-3e54-8772-d45364814725.roa (raw, json) Hash identifier: y6o/eZZ+zt8DGPaEkox4PCuVIh6DaYyTFwql2fOzb34= Subject key identifier: BA:0D:3F:49:8F:67:8B:E6:85:D4:41:9B:A5:4D:35:D0:32:80:81:AB Certificate issuer: /CN=e056707d-838a-4b8b-bd8e-8a874ea0684d Certificate serial: 010D0C9F4328584F497330983E0D66F8EBA0F980 Authority key identifier: 21:73:27:CC:A7:57:0A:AF:9B:53:F6:47:A1:F4:EE:A3:36:32:1C:73 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e056707d-838a-4b8b-bd8e-8a874ea0684d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e056707d-838a-4b8b-bd8e-8a874ea0684d/2c0ae8ea-b669-3e54-8772-d45364814725.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 400011 IP address blocks: 23.155.16.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e056707d-838a-4b8b-bd8e-8a874ea0684d/e056707d-838a-4b8b-bd8e-8a874ea0684d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e056707d-838a-4b8b-bd8e-8a874ea0684d/e056707d-838a-4b8b-bd8e-8a874ea0684d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e056707d-838a-4b8b-bd8e-8a874ea0684d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:30:98:3e:0d:66:f8:eb:a0:f9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e056707d-838a-4b8b-bd8e-8a874ea0684d Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=251ea7f9-71fa-4225-9003-4537f71c5712 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:cc:ef:97:99:28:62:f5:d8:63:34:7c:2f:c8: 3c:c7:40:b4:bc:1c:c2:e5:ac:d6:d7:8e:2c:35:ea: 13:b9:14:56:74:6a:23:6b:41:9b:93:d3:07:48:b8: 83:4d:02:11:d5:68:87:f2:dd:3b:86:58:92:6e:68: 69:55:41:3c:63:e5:22:99:90:ba:45:a5:b2:45:38: 49:31:c1:62:23:d6:45:96:53:6a:e0:b3:99:6d:24: 49:6f:8a:5d:c1:cb:61:7a:4e:fd:e2:7a:da:2f:c2: 92:b3:56:68:6e:cd:cc:dd:d9:b9:98:03:2b:2c:1f: 33:50:90:62:44:b8:a1:87:8d:59:dc:c5:55:9b:25: f4:e5:c6:86:e7:b8:b5:be:c7:26:87:1b:7d:9b:e1: 5b:a0:90:71:db:ff:54:db:07:3a:b8:64:23:d4:8a: 18:d3:fb:02:8c:08:52:1b:a1:03:e9:27:c4:72:bf: 75:89:8d:ee:06:28:fe:6d:c1:4a:90:be:05:22:08: 4f:84:25:bb:27:3f:1f:c1:ed:3b:95:41:9b:57:82: 8d:93:15:00:17:f4:8f:37:cb:c2:b0:71:1a:8b:29: ec:14:49:bb:d1:1a:d6:65:ae:98:19:f6:97:d9:72: a7:0e:39:cd:1e:fa:35:ab:2c:81:63:12:f7:c3:55: 09:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:0D:3F:49:8F:67:8B:E6:85:D4:41:9B:A5:4D:35:D0:32:80:81:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e056707d-838a-4b8b-bd8e-8a874ea0684d/2c0ae8ea-b669-3e54-8772-d45364814725.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e056707d-838a-4b8b-bd8e-8a874ea0684d/e056707d-838a-4b8b-bd8e-8a874ea0684d.crl X509v3 Authority Key Identifier: keyid:21:73:27:CC:A7:57:0A:AF:9B:53:F6:47:A1:F4:EE:A3:36:32:1C:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e056707d-838a-4b8b-bd8e-8a874ea0684d.cer sbgp-ipAddrBlock: critical IPv4: 23.155.16.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:40:51:b8:9e:2e:1a:1e:33:77:68:5f:6c:b1:47:56:7a:73: 3a:75:28:22:49:d2:28:45:c7:f0:64:19:c8:50:09:30:78:eb: 5f:1c:c6:bc:fc:f2:c0:9b:32:f7:0a:f6:1a:db:da:f5:a5:18: 2a:99:35:93:ed:11:bd:23:c0:a8:6a:cd:e6:94:fa:91:3c:f2: e1:92:2b:e6:f0:59:28:0f:41:32:64:d2:dc:4e:96:d9:fd:13: 77:c4:b2:0d:12:d7:83:47:fb:55:c7:b7:44:f9:07:92:a7:0c: f2:51:9f:5c:33:c8:da:98:37:33:d2:c6:c3:18:60:83:ff:f2: 52:18:7f:c6:c2:17:65:ce:d5:78:c2:ab:12:13:84:ed:ac:7f: 4f:9d:a0:a1:ba:48:a4:1f:09:0d:22:d5:69:d9:10:37:ce:f4: a4:43:0d:27:ae:83:9f:ad:78:09:2d:f8:fa:85:10:39:e8:ed: d4:a1:0c:cf:0d:91:ae:22:46:8c:9f:12:81:74:a8:9b:78:8a: 23:67:96:bd:bd:09:0e:64:9d:ba:f8:fe:a9:24:57:74:53:b1: 4f:4c:e4:1a:7c:ba:5f:1d:13:81:60:08:a2:6d:ea:b1:66:1a: 12:c9:6c:90:ad:d4:6e:dd:7b:70:0a:25:50:29:0f:89:21:05: 31:02:8f:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JczCYPg1m+Oug+YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTA1NjcwN2QtODM4YS00YjhiLWJkOGUtOGE4NzRlYTA2 ODRkMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MjUxZWE3ZjktNzFmYS00MjI1LTkwMDMtNDUzN2Y3MWM1NzEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiszvl5koYvXYYzR8L8g8x0C0vBzC5azW144s NeoTuRRWdGoja0Gbk9MHSLiDTQIR1WiH8t07hliSbmhpVUE8Y+UimZC6RaWyRThJ McFiI9ZFllNq4LOZbSRJb4pdwcthek794nraL8KSs1Zobs3M3dm5mAMrLB8zUJBi RLihh41Z3MVVmyX05caG57i1vscmhxt9m+FboJBx2/9U2wc6uGQj1IoY0/sCjAhS G6ED6SfEcr91iY3uBij+bcFKkL4FIghPhCW7Jz8fwe07lUGbV4KNkxUAF/SPN8vC sHEaiynsFEm70RrWZa6YGfaX2XKnDjnNHvo1qyyBYxL3w1UJtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLoNP0mPZ4vmhdRBm6VNNdAygIGrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9lMDU2 NzA3ZC04MzhhLTRiOGItYmQ4ZS04YTg3NGVhMDY4NGQvMmMwYWU4ZWEtYjY2OS0z ZTU0LTg3NzItZDQ1MzY0ODE0NzI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvZTA1NjcwN2QtODM4YS00YjhiLWJk OGUtOGE4NzRlYTA2ODRkL2UwNTY3MDdkLTgzOGEtNGI4Yi1iZDhlLThhODc0ZWEw Njg0ZC5jcmwwHwYDVR0jBBgwFoAUIXMnzKdXCq+bU/ZHofTuozYyHHMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9lMDU2NzA3ZC04MzhhLTRiOGItYmQ4ZS04YTg3 NGVhMDY4NGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5sQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACxAUbieLhoeM3doX2yxR1Z6czp1KCJJ0ihFx/BkGchQCTB4618cxrz8 8sCbMvcK9hrb2vWlGCqZNZPtEb0jwKhqzeaU+pE88uGSK+bwWSgPQTJk0txOltn9 E3fEsg0S14NH+1XHt0T5B5KnDPJRn1wzyNqYNzPSxsMYYIP/8lIYf8bCF2XO1XjC qxIThO2sf0+doKG6SKQfCQ0i1WnZEDfO9KRDDSeug5+teAkt+PqFEDno7dShDM8N ka4iRoyfEoF0qJt4iiNnlr29CQ5knbr4/qkkV3RTsU9M5Bp8ul8dE4FgCKJt6rFm GhLJbJCt1G7de3AKJVApD4khBTECj4Q= -----END CERTIFICATE-----Generated at Sun Sep 27 10:33:59 2026 by rpki-client