$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1d7e3237-b117-456b-b736-2b3c2300bcfe/4f03a9c4-9350-3f93-b1f6-6b1b1f8bd890.roa File: 4f03a9c4-9350-3f93-b1f6-6b1b1f8bd890.roa (raw, json) Hash identifier: zvfI0OO3/uqMHI8XY1LeMa1dfxYW/1gCz2UFFlHHJDQ= Subject key identifier: 28:00:10:0E:43:20:93:74:97:F1:62:76:28:7F:04:F2:A3:00:3A:C0 Certificate issuer: /CN=1d7e3237-b117-456b-b736-2b3c2300bcfe Certificate serial: 010D0C9F4328584F49740051A3111FB66029E7C0 Authority key identifier: 15:BB:91:0D:76:63:3F:0F:69:00:4B:10:A0:61:2C:DB:26:71:73:1B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1d7e3237-b117-456b-b736-2b3c2300bcfe.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1d7e3237-b117-456b-b736-2b3c2300bcfe/4f03a9c4-9350-3f93-b1f6-6b1b1f8bd890.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 395033 IP address blocks: 23.129.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1d7e3237-b117-456b-b736-2b3c2300bcfe/1d7e3237-b117-456b-b736-2b3c2300bcfe.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1d7e3237-b117-456b-b736-2b3c2300bcfe/1d7e3237-b117-456b-b736-2b3c2300bcfe.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1d7e3237-b117-456b-b736-2b3c2300bcfe.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:00:51:a3:11:1f:b6:60:29:e7:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1d7e3237-b117-456b-b736-2b3c2300bcfe Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=d6c33370-b6e6-4599-a433-5dc118b91e24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:b1:3c:43:19:a8:0c:23:6c:d7:c6:86:ce:8e: dc:fb:93:78:3e:54:98:09:9f:29:4b:03:2b:71:7f: 0a:19:59:7b:2f:d1:82:fd:a2:64:a6:a6:67:ef:44: a6:4e:e0:50:e5:a1:a2:c8:5e:1e:0a:99:7e:45:4f: 15:36:f8:d4:7b:6a:0c:bc:1b:be:0d:af:56:76:fa: cd:f4:df:15:6c:03:f7:6d:ed:4d:52:e4:a7:1c:74: 18:a1:cd:76:19:e1:f3:32:8e:fb:99:c9:2d:26:27: 0b:15:35:fb:e5:95:d0:7f:04:bc:0f:39:c4:15:bb: 2c:1f:b7:bd:2e:c9:aa:56:2b:56:5c:7c:a7:7c:ad: 1d:80:32:b0:17:79:0a:17:6d:45:ea:d4:d1:fd:1d: 59:89:e9:be:74:b1:b1:c4:13:c7:ce:e8:40:b1:cb: 4a:87:00:eb:d5:53:da:c9:7a:71:da:79:2f:f8:24: ec:82:f9:c6:7d:1a:d2:35:4e:28:97:39:2e:2b:99: ec:71:75:b2:57:a4:a2:48:66:02:04:0b:1d:de:e7: 54:6b:da:6b:9a:64:d3:cc:25:35:37:19:1c:27:dd: 0a:2d:df:a5:05:02:4f:14:ab:85:88:de:ff:42:33: 2a:eb:c0:26:04:93:a3:04:1f:71:22:62:4d:3e:15: bf:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:00:10:0E:43:20:93:74:97:F1:62:76:28:7F:04:F2:A3:00:3A:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1d7e3237-b117-456b-b736-2b3c2300bcfe/4f03a9c4-9350-3f93-b1f6-6b1b1f8bd890.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1d7e3237-b117-456b-b736-2b3c2300bcfe/1d7e3237-b117-456b-b736-2b3c2300bcfe.crl X509v3 Authority Key Identifier: keyid:15:BB:91:0D:76:63:3F:0F:69:00:4B:10:A0:61:2C:DB:26:71:73:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1d7e3237-b117-456b-b736-2b3c2300bcfe.cer sbgp-ipAddrBlock: critical IPv4: 23.129.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:ff:28:59:2d:16:4d:49:1b:fb:40:9d:5d:78:c3:e6:dd:11: a2:7a:04:c3:de:04:d5:ea:fa:e9:f7:c1:e2:5d:10:61:96:3c: 46:92:2d:1b:57:65:c5:e1:33:27:ef:74:07:c3:4c:36:29:cb: c6:f2:b8:28:0a:e4:b6:4b:82:b3:5d:8b:37:e2:3a:b7:f5:c8: 3c:8c:3e:8f:91:9b:3b:22:bd:3e:5a:dc:e3:d9:d8:94:40:5d: d3:a5:a4:5e:16:06:9d:a8:d9:06:a2:35:31:ac:33:50:e1:0c: 63:12:6c:69:ab:12:c6:31:b1:52:1e:10:32:a7:e0:0e:63:6b: 4f:78:b1:58:86:d4:31:5f:80:9d:70:03:64:9c:32:58:ae:96: c2:73:6d:ca:0d:ef:8f:4f:c7:cd:54:f2:62:f2:b3:55:8a:9c: e8:35:ac:1b:00:ab:5e:dd:e0:ef:93:6e:7d:6b:58:97:3b:18: 5b:43:fa:b3:bd:e1:1a:bf:3a:ec:b3:98:56:a8:90:20:7f:d3: 36:e8:6c:ea:ca:26:dc:53:97:8b:b0:a8:f8:78:d0:a3:72:46: f0:89:e4:5b:ca:66:b5:3f:10:f5:a9:ef:dc:63:de:c2:59:01: 35:04:84:b3:a2:44:ac:4b:4c:e7:1a:60:eb:a2:b7:8f:64:f5: ea:b1:97:de -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdABRoxEftmAp58AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWQ3ZTMyMzctYjExNy00NTZiLWI3MzYtMmIzYzIzMDBi Y2ZlMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZDZjMzMzNzAtYjZlNi00NTk5LWE0MzMtNWRjMTE4YjkxZTI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp7E8QxmoDCNs18aGzo7c+5N4PlSYCZ8pSwMr cX8KGVl7L9GC/aJkpqZn70SmTuBQ5aGiyF4eCpl+RU8VNvjUe2oMvBu+Da9WdvrN 9N8VbAP3be1NUuSnHHQYoc12GeHzMo77mcktJicLFTX75ZXQfwS8DznEFbssH7e9 LsmqVitWXHynfK0dgDKwF3kKF21F6tTR/R1Ziem+dLGxxBPHzuhAsctKhwDr1VPa yXpx2nkv+CTsgvnGfRrSNU4olzkuK5nscXWyV6SiSGYCBAsd3udUa9prmmTTzCU1 NxkcJ90KLd+lBQJPFKuFiN7/QjMq68AmBJOjBB9xImJNPhW/JwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCgAEA5DIJN0l/Fidih/BPKjADrAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xZDdl MzIzNy1iMTE3LTQ1NmItYjczNi0yYjNjMjMwMGJjZmUvNGYwM2E5YzQtOTM1MC0z ZjkzLWIxZjYtNmIxYjFmOGJkODkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMWQ3ZTMyMzctYjExNy00NTZiLWI3 MzYtMmIzYzIzMDBiY2ZlLzFkN2UzMjM3LWIxMTctNDU2Yi1iNzM2LTJiM2MyMzAw YmNmZS5jcmwwHwYDVR0jBBgwFoAUFbuRDXZjPw9pAEsQoGEs2yZxcxswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8xZDdlMzIzNy1iMTE3LTQ1NmItYjczNi0yYjNj MjMwMGJjZmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4GAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC//KFktFk1JG/tAnV14w+bdEaJ6BMPeBNXq+un3weJdEGGWPEaSLRtX ZcXhMyfvdAfDTDYpy8byuCgK5LZLgrNdizfiOrf1yDyMPo+RmzsivT5a3OPZ2JRA XdOlpF4WBp2o2QaiNTGsM1DhDGMSbGmrEsYxsVIeEDKn4A5ja094sViG1DFfgJ1w A2ScMliulsJzbcoN749Px81U8mLys1WKnOg1rBsAq17d4O+Tbn1rWJc7GFtD+rO9 4Rq/OuyzmFaokCB/0zbobOrKJtxTl4uwqPh40KNyRvCJ5FvKZrU/EPWp79xj3sJZ ATUEhLOiRKxLTOcaYOuit49k9eqxl94= -----END CERTIFICATE-----Generated at Sat Oct 3 23:20:44 2026 by rpki-client