$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9c2da67c-11a4-4c1b-b100-46b8c2dd97ae/d2afa191-abdb-30af-b5a2-fcae4e03229f.roa File: d2afa191-abdb-30af-b5a2-fcae4e03229f.roa (raw, json) Hash identifier: HQLLDl3HPBWuXDaTpifM25Mo7Cg+72diqGEMM+BgZlM= Subject key identifier: B0:20:F2:B2:2F:F1:06:DA:4D:47:42:3E:01:06:18:6C:3A:06:4E:98 Certificate issuer: /CN=9c2da67c-11a4-4c1b-b100-46b8c2dd97ae Certificate serial: 010D0C9F4328584F506D6910442DA4C1E1DA0B00 Authority key identifier: 6C:28:27:9E:B3:F4:1C:22:41:34:D4:47:8A:4A:6D:BF:AA:E6:64:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9c2da67c-11a4-4c1b-b100-46b8c2dd97ae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9c2da67c-11a4-4c1b-b100-46b8c2dd97ae/d2afa191-abdb-30af-b5a2-fcae4e03229f.roa Signing time: Sun 27 Sep 2026 13:00:12 +0000 ROA not before: Sun 27 Sep 2026 13:00:12 +0000 ROA not after: Sat 26 Dec 2026 14:00:12 +0000 asID: 402585 IP address blocks: 23.159.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9c2da67c-11a4-4c1b-b100-46b8c2dd97ae/9c2da67c-11a4-4c1b-b100-46b8c2dd97ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9c2da67c-11a4-4c1b-b100-46b8c2dd97ae/9c2da67c-11a4-4c1b-b100-46b8c2dd97ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9c2da67c-11a4-4c1b-b100-46b8c2dd97ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:50:6d:69:10:44:2d:a4:c1:e1:da:0b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9c2da67c-11a4-4c1b-b100-46b8c2dd97ae Validity Not Before: Sep 27 13:00:12 2026 GMT Not After : Dec 26 14:00:12 2026 GMT Subject: CN=b552fd19-816e-4a5a-9871-b4f1e98ad31e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:d2:50:f4:d6:b3:96:6f:31:27:70:ee:6f:2d: 63:cd:dd:d1:20:18:76:0f:6e:cd:b3:a5:8c:c1:4f: 40:1a:71:c3:fd:ee:2a:10:59:3b:4d:2b:47:0d:fe: e8:ea:0c:2e:b3:d4:6f:4d:9d:11:17:b4:64:59:ac: 41:92:68:a9:c2:ef:cf:14:9d:af:c9:08:40:e4:a5: 04:fa:0e:a9:4a:be:cf:00:aa:10:5f:8b:32:e3:17: 9d:84:36:71:83:5a:de:b5:5f:ef:36:24:7c:b0:7a: b8:f5:a7:4a:e6:b4:89:3a:f6:1c:da:91:b4:db:7e: 67:90:c5:66:00:84:49:e2:2a:f5:c9:9c:e0:1c:33: e4:91:1e:9a:cb:7c:56:14:12:be:4e:7d:7a:34:28: 3c:67:d8:a7:69:a8:df:b1:a1:9e:5d:1a:cd:6b:3c: d9:16:62:92:1d:20:de:4d:b3:18:56:9f:5d:42:05: 2d:b6:50:41:dc:24:6a:3f:04:83:10:28:8f:bf:b2: 52:67:ca:ea:8c:28:51:9b:6a:24:52:a0:00:b2:94: c4:00:bc:7c:5c:6d:f4:64:4f:03:94:ea:67:86:10: 11:ef:72:35:bf:97:bb:0d:8c:38:74:5b:6c:8d:cd: a0:99:57:68:e2:03:7a:b8:6c:3e:d4:f4:f0:62:b6: b3:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:20:F2:B2:2F:F1:06:DA:4D:47:42:3E:01:06:18:6C:3A:06:4E:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9c2da67c-11a4-4c1b-b100-46b8c2dd97ae/d2afa191-abdb-30af-b5a2-fcae4e03229f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9c2da67c-11a4-4c1b-b100-46b8c2dd97ae/9c2da67c-11a4-4c1b-b100-46b8c2dd97ae.crl X509v3 Authority Key Identifier: keyid:6C:28:27:9E:B3:F4:1C:22:41:34:D4:47:8A:4A:6D:BF:AA:E6:64:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/9c2da67c-11a4-4c1b-b100-46b8c2dd97ae.cer sbgp-ipAddrBlock: critical IPv4: 23.159.124.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:f8:83:17:f1:70:80:e0:fa:88:b8:cc:91:5b:04:cd:4f:49: 60:08:49:e1:a1:ce:0e:ed:c4:c7:7e:cc:fc:af:82:e5:cf:55: 4e:e1:5e:65:e6:d7:0b:e6:6b:39:7d:79:e9:64:d4:15:10:cc: af:ca:b3:62:e2:c7:2a:0b:2f:18:2c:54:13:eb:7b:ba:54:98: 45:45:9f:8c:8d:d4:e7:8b:ee:6f:7a:af:63:fd:dc:9f:59:17: bc:84:01:d9:24:97:d5:1f:88:0f:bc:3e:76:f4:87:ae:db:23: b4:5d:26:fe:d9:9c:50:4e:fc:e0:3f:42:dc:50:21:32:cb:2c: cd:b5:6b:e7:0b:04:87:cc:0a:2e:19:dc:28:d5:84:e6:d5:fc: 54:f2:3d:3a:f6:41:99:ed:f5:f6:69:f8:46:4b:69:9e:6a:fa: 37:b3:d6:36:14:3f:11:29:7c:f4:ab:b9:48:77:24:d7:38:b0: 80:ff:c1:f2:d5:b6:13:51:86:15:e4:84:2e:46:53:cb:a8:ac: e9:27:77:32:35:89:3c:5d:f5:00:68:cd:4e:b5:81:99:88:57: cd:01:f6:67:9b:ff:31:35:c7:9a:88:c5:fb:a5:eb:d5:91:b2: 36:3a:e7:d2:9b:04:da:a8:e5:8d:27:cc:71:dc:be:78:68:b0: ad:0c:72:7a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9QbWkQRC2kweHaCwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWMyZGE2N2MtMTFhNC00YzFiLWIxMDAtNDZiOGMyZGQ5 N2FlMB4XDTI2MDkyNzEzMDAxMloXDTI2MTIyNjE0MDAxMlowLzEtMCsGA1UEAxMk YjU1MmZkMTktODE2ZS00YTVhLTk4NzEtYjRmMWU5OGFkMzFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAptJQ9Nazlm8xJ3Duby1jzd3RIBh2D27Ns6WM wU9AGnHD/e4qEFk7TStHDf7o6gwus9RvTZ0RF7RkWaxBkmipwu/PFJ2vyQhA5KUE +g6pSr7PAKoQX4sy4xedhDZxg1retV/vNiR8sHq49adK5rSJOvYc2pG0235nkMVm AIRJ4ir1yZzgHDPkkR6ay3xWFBK+Tn16NCg8Z9inaajfsaGeXRrNazzZFmKSHSDe TbMYVp9dQgUttlBB3CRqPwSDECiPv7JSZ8rqjChRm2okUqAAspTEALx8XG30ZE8D lOpnhhAR73I1v5e7DYw4dFtsjc2gmVdo4gN6uGw+1PTwYrazOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLAg8rIv8QbaTUdCPgEGGGw6Bk6YMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi85YzJk YTY3Yy0xMWE0LTRjMWItYjEwMC00NmI4YzJkZDk3YWUvZDJhZmExOTEtYWJkYi0z MGFmLWI1YTItZmNhZTRlMDMyMjlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvOWMyZGE2N2MtMTFhNC00YzFiLWIx MDAtNDZiOGMyZGQ5N2FlLzljMmRhNjdjLTExYTQtNGMxYi1iMTAwLTQ2YjhjMmRk OTdhZS5jcmwwHwYDVR0jBBgwFoAUbCgnnrP0HCJBNNRHikptv6rmZCAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi85YzJkYTY3Yy0xMWE0LTRjMWItYjEwMC00NmI4 YzJkZDk3YWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF598MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHz4gxfxcIDg+oi4zJFbBM1PSWAISeGhzg7txMd+zPyvguXPVU7hXmXm 1wvmazl9eelk1BUQzK/Ks2LixyoLLxgsVBPre7pUmEVFn4yN1OeL7m96r2P93J9Z F7yEAdkkl9UfiA+8Pnb0h67bI7RdJv7ZnFBO/OA/QtxQITLLLM21a+cLBIfMCi4Z 3CjVhObV/FTyPTr2QZnt9fZp+EZLaZ5q+jez1jYUPxEpfPSruUh3JNc4sID/wfLV thNRhhXkhC5GU8uorOkndzI1iTxd9QBozU61gZmIV80B9meb/zE1x5qIxful69WR sjY659KbBNqo5Y0nzHHcvnhosK0Mcno= -----END CERTIFICATE-----Generated at Wed Sep 30 21:50:53 2026 by rpki-client