$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2a576405-6d12-4321-8aff-11069dafb9f1/70dae8bc-c10e-3297-8a58-04ae61176f17.roa File: 70dae8bc-c10e-3297-8a58-04ae61176f17.roa (raw, json) Hash identifier: nhuou1i5w1yVyGJew3GRJvNo/1MRmJydAd+pJgN1Ubs= Subject key identifier: FA:7F:7D:EA:DC:9D:50:3F:04:57:D3:AF:60:68:8B:BC:23:DD:B6:0A Certificate issuer: /CN=2a576405-6d12-4321-8aff-11069dafb9f1 Certificate serial: 010D0C9F4328584F49731F2CECED7B99C6728C00 Authority key identifier: BB:4D:83:61:A4:90:4F:28:37:18:5F:95:D5:B1:1A:01:1F:4B:15:48 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2a576405-6d12-4321-8aff-11069dafb9f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2a576405-6d12-4321-8aff-11069dafb9f1/70dae8bc-c10e-3297-8a58-04ae61176f17.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 402334 IP address blocks: 23.158.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2a576405-6d12-4321-8aff-11069dafb9f1/2a576405-6d12-4321-8aff-11069dafb9f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2a576405-6d12-4321-8aff-11069dafb9f1/2a576405-6d12-4321-8aff-11069dafb9f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2a576405-6d12-4321-8aff-11069dafb9f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:1f:2c:ec:ed:7b:99:c6:72:8c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a576405-6d12-4321-8aff-11069dafb9f1 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=dab38202-2a52-4ecd-80d5-9ddb09be460a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:4a:e5:35:f0:56:be:a4:c6:d8:c8:b2:b3:9b: cd:f9:05:e4:ea:04:85:45:c4:a9:29:99:cf:0b:88: d5:46:71:9e:3c:66:e1:03:14:eb:ea:c0:1f:36:3d: 21:50:97:f3:e7:e2:18:b0:e1:92:d3:9f:ac:dc:47: cf:48:d0:6c:54:a5:3b:f2:30:6f:ca:71:8c:cd:86: 6d:39:76:cc:29:5b:e9:72:4b:5e:2b:97:e1:9e:23: 73:26:a9:71:5f:39:da:23:1a:e0:d0:0e:f9:76:4b: 1c:2c:2d:74:1d:4c:29:c9:d3:ec:da:96:1e:b2:be: d8:f4:90:da:ec:11:ab:03:ac:01:36:46:97:47:a4: 64:85:37:87:ef:45:46:dc:ea:4b:ee:83:25:bb:46: cb:41:44:1c:62:2c:84:f3:38:7e:1e:41:14:89:33: 85:5b:45:cd:ba:e6:f5:25:bb:0b:8f:78:c5:91:24: 5a:91:e8:6e:68:70:55:aa:b7:d3:99:39:5c:22:f8: c8:ab:d9:2d:34:2a:0d:26:1b:1b:ee:e7:d8:1f:7b: f6:2e:b9:5d:4b:96:65:1b:1a:77:0c:55:95:b6:c8: 3e:fc:97:29:00:46:f1:3b:d9:14:9a:c3:56:e0:db: 24:ad:69:7e:5c:6f:34:99:2e:bd:d1:91:a3:c7:84: 95:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:7F:7D:EA:DC:9D:50:3F:04:57:D3:AF:60:68:8B:BC:23:DD:B6:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2a576405-6d12-4321-8aff-11069dafb9f1/70dae8bc-c10e-3297-8a58-04ae61176f17.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2a576405-6d12-4321-8aff-11069dafb9f1/2a576405-6d12-4321-8aff-11069dafb9f1.crl X509v3 Authority Key Identifier: keyid:BB:4D:83:61:A4:90:4F:28:37:18:5F:95:D5:B1:1A:01:1F:4B:15:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/2a576405-6d12-4321-8aff-11069dafb9f1.cer sbgp-ipAddrBlock: critical IPv4: 23.158.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:04:e7:8d:33:dc:a5:98:e1:ff:ee:05:3b:85:ea:8a:de:4e: 3e:57:a8:c7:af:a2:9a:79:e8:9f:9d:80:8c:5b:9c:b5:e8:ab: 2f:28:93:0c:be:62:e8:ef:86:82:c7:a2:ef:f2:44:bf:df:91: 55:bc:94:f5:2d:bf:ca:13:8e:17:52:32:86:08:04:4e:af:65: 30:6a:14:2e:55:7b:e7:ec:b8:ed:d9:04:5c:4e:69:f9:a7:d5: 00:24:f0:36:22:9d:48:ed:d5:1d:04:fb:09:fd:47:9b:e2:e4: 71:18:53:d1:34:2a:f0:b4:3c:ac:35:e9:37:31:4b:a8:72:16: 56:51:73:bd:30:19:07:74:39:31:b6:fe:4e:de:6b:1e:cf:63: 80:cd:ed:d2:ad:bd:31:40:4e:f6:03:52:5d:2d:17:85:87:3b: 52:56:65:2f:78:0a:d7:75:52:47:9b:c5:ac:ff:07:ba:f1:5e: 21:bf:0b:d4:3b:1d:01:44:89:ca:f6:c4:57:dd:83:c7:9a:44: 93:82:c7:65:99:b9:8a:c0:7c:84:d1:be:95:4b:64:e0:14:4b: 69:61:a2:6e:39:e8:68:6e:b2:50:6a:f2:b6:c5:44:04:b2:bb: 4f:29:5f:8b:36:2b:00:b6:34:a6:6d:39:24:c2:0f:d1:9a:35: 19:96:e6:7c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jcx8s7O17mcZyjAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmE1NzY0MDUtNmQxMi00MzIxLThhZmYtMTEwNjlkYWZi OWYxMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZGFiMzgyMDItMmE1Mi00ZWNkLTgwZDUtOWRkYjA5YmU0NjBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyErlNfBWvqTG2Miys5vN+QXk6gSFRcSpKZnP C4jVRnGePGbhAxTr6sAfNj0hUJfz5+IYsOGS05+s3EfPSNBsVKU78jBvynGMzYZt OXbMKVvpckteK5fhniNzJqlxXznaIxrg0A75dkscLC10HUwpydPs2pYesr7Y9JDa 7BGrA6wBNkaXR6RkhTeH70VG3OpL7oMlu0bLQUQcYiyE8zh+HkEUiTOFW0XNuub1 JbsLj3jFkSRakehuaHBVqrfTmTlcIvjIq9ktNCoNJhsb7ufYH3v2LrldS5ZlGxp3 DFWVtsg+/JcpAEbxO9kUmsNW4NskrWl+XG80mS690ZGjx4SVQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPp/fercnVA/BFfTr2Boi7wj3bYKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yYTU3 NjQwNS02ZDEyLTQzMjEtOGFmZi0xMTA2OWRhZmI5ZjEvNzBkYWU4YmMtYzEwZS0z Mjk3LThhNTgtMDRhZTYxMTc2ZjE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMmE1NzY0MDUtNmQxMi00MzIxLThh ZmYtMTEwNjlkYWZiOWYxLzJhNTc2NDA1LTZkMTItNDMyMS04YWZmLTExMDY5ZGFm YjlmMS5jcmwwHwYDVR0jBBgwFoAUu02DYaSQTyg3GF+V1bEaAR9LFUgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yYTU3NjQwNS02ZDEyLTQzMjEtOGFmZi0xMTA2 OWRhZmI5ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF54UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD8E540z3KWY4f/uBTuF6oreTj5XqMevopp56J+dgIxbnLXoqy8okwy+ YujvhoLHou/yRL/fkVW8lPUtv8oTjhdSMoYIBE6vZTBqFC5Ve+fsuO3ZBFxOafmn 1QAk8DYinUjt1R0E+wn9R5vi5HEYU9E0KvC0PKw16TcxS6hyFlZRc70wGQd0OTG2 /k7eax7PY4DN7dKtvTFATvYDUl0tF4WHO1JWZS94Ctd1Ukebxaz/B7rxXiG/C9Q7 HQFEicr2xFfdg8eaRJOCx2WZuYrAfITRvpVLZOAUS2lhom456GhuslBq8rbFRASy u08pX4s2KwC2NKZtOSTCD9GaNRmW5nw= -----END CERTIFICATE-----Generated at Fri Oct 9 22:45:33 2026 by rpki-client