$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2a576405-6d12-4321-8aff-11069dafb9f1/432814c4-a5fa-341c-bc25-4c1b6fddaa27.roa File: 432814c4-a5fa-341c-bc25-4c1b6fddaa27.roa (raw, json) Hash identifier: jKj8mv0mFX2vIhAib2/HJIkLIiqopJHk0eFBbtl9TR8= Subject key identifier: F3:BF:DE:1D:FE:DD:4C:A4:2C:A1:F2:6A:52:BE:5A:2A:FC:A0:43:02 Certificate issuer: /CN=2a576405-6d12-4321-8aff-11069dafb9f1 Certificate serial: 010D0C9F4328584F498AD6DEE73D5C4B768AE080 Authority key identifier: BB:4D:83:61:A4:90:4F:28:37:18:5F:95:D5:B1:1A:01:1F:4B:15:48 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2a576405-6d12-4321-8aff-11069dafb9f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2a576405-6d12-4321-8aff-11069dafb9f1/432814c4-a5fa-341c-bc25-4c1b6fddaa27.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 402333 IP address blocks: 23.158.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2a576405-6d12-4321-8aff-11069dafb9f1/2a576405-6d12-4321-8aff-11069dafb9f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2a576405-6d12-4321-8aff-11069dafb9f1/2a576405-6d12-4321-8aff-11069dafb9f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2a576405-6d12-4321-8aff-11069dafb9f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:8a:d6:de:e7:3d:5c:4b:76:8a:e0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a576405-6d12-4321-8aff-11069dafb9f1 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=92699e28-3f5c-4b97-ad02-f6c8d91e1a1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:e8:23:4b:d2:1d:e4:36:d3:dd:1c:e8:6d:f4: 10:96:10:eb:b7:59:82:6f:75:2c:7a:f1:e1:2c:59: 22:be:e6:4f:c0:37:d0:5e:31:9b:05:f1:74:a6:bf: 3d:14:b1:3d:5f:9e:43:ba:92:db:8d:4d:80:b7:38: 2a:3b:e2:c6:16:89:a5:ad:47:e7:77:ea:70:74:ed: bc:1c:e4:53:d0:14:19:55:97:64:a0:28:22:67:01: 71:67:36:21:d9:11:07:6c:2c:4a:99:93:4c:00:1e: 04:82:7d:69:15:87:53:22:8f:1b:8a:21:20:43:e4: f7:30:36:f9:8c:18:b9:ab:4b:5b:ce:02:30:b4:16: 03:45:ab:8e:12:6e:ee:f9:08:14:9f:fe:2e:1c:4c: 39:45:2f:15:9f:f6:9d:2b:ce:55:b9:f6:cd:7b:1b: a3:2f:0c:2d:6e:99:bb:1a:4c:16:54:83:84:26:4f: 49:7d:53:77:22:93:e6:b2:0f:0c:5d:06:0d:ed:33: ff:e4:ff:a2:0d:08:b4:2e:68:e0:2b:dc:e8:cf:44: 95:6f:45:0e:8e:50:f4:5e:92:77:be:fe:e4:9e:35: 6a:cd:e2:c6:3d:6f:02:13:09:b8:3d:8a:81:f5:0e: 3b:80:9e:d2:76:cc:8a:58:97:dd:29:af:cd:12:a4: d9:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:BF:DE:1D:FE:DD:4C:A4:2C:A1:F2:6A:52:BE:5A:2A:FC:A0:43:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2a576405-6d12-4321-8aff-11069dafb9f1/432814c4-a5fa-341c-bc25-4c1b6fddaa27.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2a576405-6d12-4321-8aff-11069dafb9f1/2a576405-6d12-4321-8aff-11069dafb9f1.crl X509v3 Authority Key Identifier: keyid:BB:4D:83:61:A4:90:4F:28:37:18:5F:95:D5:B1:1A:01:1F:4B:15:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2a576405-6d12-4321-8aff-11069dafb9f1.cer sbgp-ipAddrBlock: critical IPv4: 23.158.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:46:8a:f4:84:8e:38:19:c4:b8:0c:20:39:12:1f:65:37:3c: 9a:55:7a:f8:3a:47:55:b0:4a:ec:40:f0:d2:fc:c7:24:09:13: 1d:1c:6a:eb:27:e7:2b:f3:6c:65:f7:ef:92:d5:1b:c6:e3:e3: a8:99:00:95:a2:05:16:e6:4c:da:53:f2:dc:d4:b3:c8:31:dd: 6f:46:41:64:73:2a:99:52:fc:57:0b:9e:c2:21:df:00:c9:38: 3e:4a:bc:dc:2d:9b:ab:4e:e5:37:83:24:fd:6b:92:7f:02:af: 1c:8c:09:98:8a:21:84:0e:58:69:52:97:66:f0:ee:84:20:32: b3:c1:de:15:26:2e:d7:1c:d8:fe:ca:8c:96:13:c3:4a:d5:98: 44:0e:b7:88:c0:45:96:b7:04:4a:c6:cc:5f:98:74:a6:19:2d: 67:82:e8:1b:d3:6e:61:86:95:2b:6d:40:ee:15:07:28:82:b5: cc:ef:c4:d8:b6:12:ed:0a:a1:62:f8:0e:48:5f:de:49:bd:e5: 08:5c:3a:26:71:2a:86:b9:db:54:47:59:69:88:47:c7:d1:00: f1:03:c2:3d:a2:ce:f5:c0:1f:20:f8:76:ef:81:2d:13:31:5e: a7:c8:9d:39:8b:9a:c5:72:bd:9a:82:b3:9d:19:7f:b5:d1:4d: bc:fa:6c:4a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jitbe5z1cS3aK4IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmE1NzY0MDUtNmQxMi00MzIxLThhZmYtMTEwNjlkYWZi OWYxMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk OTI2OTllMjgtM2Y1Yy00Yjk3LWFkMDItZjZjOGQ5MWUxYTFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1OgjS9Id5DbT3RzobfQQlhDrt1mCb3UsevHh LFkivuZPwDfQXjGbBfF0pr89FLE9X55DupLbjU2AtzgqO+LGFomlrUfnd+pwdO28 HORT0BQZVZdkoCgiZwFxZzYh2REHbCxKmZNMAB4Egn1pFYdTIo8biiEgQ+T3MDb5 jBi5q0tbzgIwtBYDRauOEm7u+QgUn/4uHEw5RS8Vn/adK85VufbNexujLwwtbpm7 GkwWVIOEJk9JfVN3IpPmsg8MXQYN7TP/5P+iDQi0LmjgK9zoz0SVb0UOjlD0XpJ3 vv7knjVqzeLGPW8CEwm4PYqB9Q47gJ7SdsyKWJfdKa/NEqTZkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPO/3h3+3UykLKHyalK+Wir8oEMCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yYTU3 NjQwNS02ZDEyLTQzMjEtOGFmZi0xMTA2OWRhZmI5ZjEvNDMyODE0YzQtYTVmYS0z NDFjLWJjMjUtNGMxYjZmZGRhYTI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMmE1NzY0MDUtNmQxMi00MzIxLThh ZmYtMTEwNjlkYWZiOWYxLzJhNTc2NDA1LTZkMTItNDMyMS04YWZmLTExMDY5ZGFm YjlmMS5jcmwwHwYDVR0jBBgwFoAUu02DYaSQTyg3GF+V1bEaAR9LFUgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yYTU3NjQwNS02ZDEyLTQzMjEtOGFmZi0xMTA2 OWRhZmI5ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF54UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJBGivSEjjgZxLgMIDkSH2U3PJpVevg6R1WwSuxA8NL8xyQJEx0causn 5yvzbGX375LVG8bj46iZAJWiBRbmTNpT8tzUs8gx3W9GQWRzKplS/FcLnsIh3wDJ OD5KvNwtm6tO5TeDJP1rkn8CrxyMCZiKIYQOWGlSl2bw7oQgMrPB3hUmLtcc2P7K jJYTw0rVmEQOt4jARZa3BErGzF+YdKYZLWeC6BvTbmGGlSttQO4VByiCtczvxNi2 Eu0KoWL4Dkhf3km95QhcOiZxKoa521RHWWmIR8fRAPEDwj2izvXAHyD4du+BLRMx XqfInTmLmsVyvZqCs50Zf7XRTbz6bEo= -----END CERTIFICATE-----Generated at Mon Sep 28 06:10:16 2026 by rpki-client