$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/822f9974-af88-4d0b-a65f-065fdd26c645/3d4afe00-411b-3290-9e3b-addac0376615.roa File: 3d4afe00-411b-3290-9e3b-addac0376615.roa (raw, json) Hash identifier: Af40+NsEhOX+qKay1S+boglE+t08FCm3ovUBPjLyQAE= Subject key identifier: 24:E7:5D:CA:E5:39:23:EF:BA:4F:E2:D4:93:A1:F1:DF:CB:FD:11:2F Certificate issuer: /CN=822f9974-af88-4d0b-a65f-065fdd26c645 Certificate serial: 010D0C9F4328584F2A2C2D0C1FB18A344C314200 Authority key identifier: 3C:FD:AA:02:90:05:D1:73:A5:12:3B:E6:2C:2B:A0:C9:51:C9:26:35 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/822f9974-af88-4d0b-a65f-065fdd26c645.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/822f9974-af88-4d0b-a65f-065fdd26c645/3d4afe00-411b-3290-9e3b-addac0376615.roa Signing time: Sun 13 Sep 2026 20:08:25 +0000 ROA not before: Sun 13 Sep 2026 20:08:25 +0000 ROA not after: Sat 12 Dec 2026 21:08:25 +0000 asID: 834 IP address blocks: 23.247.244.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/822f9974-af88-4d0b-a65f-065fdd26c645/822f9974-af88-4d0b-a65f-065fdd26c645.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/822f9974-af88-4d0b-a65f-065fdd26c645/822f9974-af88-4d0b-a65f-065fdd26c645.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/822f9974-af88-4d0b-a65f-065fdd26c645.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:2a:2c:2d:0c:1f:b1:8a:34:4c:31:42:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=822f9974-af88-4d0b-a65f-065fdd26c645 Validity Not Before: Sep 13 20:08:25 2026 GMT Not After : Dec 12 21:08:25 2026 GMT Subject: CN=386499d6-5b8c-4678-af4b-2041c740cb28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:44:35:2f:12:70:ec:5e:e2:4d:91:3a:04:44: af:a5:6a:93:83:ef:03:37:e2:0e:fc:dd:44:a7:b6: bf:a0:e4:97:68:22:b8:db:5e:8c:30:d9:b1:3d:79: 2c:b0:ca:20:0a:82:94:89:67:53:11:78:89:94:39: 61:e5:de:5d:77:69:4c:04:ef:86:58:e4:1d:d0:6c: cf:8c:92:73:ed:2a:8d:81:fa:4b:0f:61:95:3c:1e: 67:4f:c1:10:a1:16:a8:55:1a:a3:23:7b:9c:20:47: 40:24:42:40:b8:68:53:3c:cb:5c:3d:49:fb:af:0c: 6a:97:20:36:4f:ca:a8:28:89:34:97:70:29:1e:40: 84:e2:77:03:31:a8:3a:36:52:a3:72:20:aa:85:4a: 39:07:9d:a4:d1:e6:84:16:34:68:a0:40:eb:e2:9a: 34:bf:72:84:a7:27:0c:22:72:b0:3c:d5:3d:19:7e: c1:c3:ea:4e:65:9a:12:5c:53:21:85:24:c8:09:e2: 4c:43:00:82:ed:0e:59:c9:2c:88:3d:da:05:19:33: 24:68:61:59:fe:82:42:f8:26:a2:62:4c:52:51:21: 85:47:a0:99:5e:a9:57:70:bd:e3:50:f4:f7:00:70: fd:bc:de:bb:e5:8d:60:4e:c1:1a:30:c8:4e:0f:f9: 8b:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:E7:5D:CA:E5:39:23:EF:BA:4F:E2:D4:93:A1:F1:DF:CB:FD:11:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/822f9974-af88-4d0b-a65f-065fdd26c645/3d4afe00-411b-3290-9e3b-addac0376615.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/822f9974-af88-4d0b-a65f-065fdd26c645/822f9974-af88-4d0b-a65f-065fdd26c645.crl X509v3 Authority Key Identifier: keyid:3C:FD:AA:02:90:05:D1:73:A5:12:3B:E6:2C:2B:A0:C9:51:C9:26:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/822f9974-af88-4d0b-a65f-065fdd26c645.cer sbgp-ipAddrBlock: critical IPv4: 23.247.244.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:a8:23:e0:38:19:14:ab:84:fa:3a:0e:85:78:d5:27:e9:12: d8:c7:25:43:06:09:11:e0:58:08:0f:57:59:a2:a3:2b:0e:15: 7c:7c:7e:3e:8e:eb:59:d5:98:12:aa:b9:ca:d6:a6:e1:54:4b: 8c:b7:58:25:d6:82:19:6e:54:b6:b7:30:b4:ed:dd:bd:8b:76: 2e:eb:31:6f:11:f6:49:e1:3f:27:5a:5a:53:b9:27:bb:8b:d6: 2d:44:85:c4:6c:aa:e9:3a:c2:87:a4:9d:87:3d:f5:66:8a:67: fe:e8:4b:23:37:b5:7b:e5:67:6e:07:23:43:a4:d9:78:d5:7e: 6b:a1:7a:b6:92:c8:6e:06:ca:99:97:28:e3:24:47:d8:b0:da: 06:61:6e:c1:e8:c3:4d:68:46:56:b0:34:19:d8:75:fe:5d:3b: 06:9d:14:9f:9a:c8:c1:18:9b:71:53:6a:92:7e:e1:d5:af:33: b8:0b:5e:eb:a8:61:d6:b3:e1:0e:cc:32:27:55:81:ff:cb:6e: ea:29:f3:1e:27:0d:60:dd:89:b3:c8:35:1a:60:ce:9a:b1:96: e2:dd:5b:84:63:e3:37:0c:47:ba:d9:7a:3f:e0:f4:f4:c3:21: 13:e3:63:73:29:81:64:88:34:08:67:da:32:af:69:0f:0a:83: 50:59:65:ac -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8qLC0MH7GKNEwxQgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODIyZjk5NzQtYWY4OC00ZDBiLWE2NWYtMDY1ZmRkMjZj NjQ1MB4XDTI2MDkxMzIwMDgyNVoXDTI2MTIxMjIxMDgyNVowLzEtMCsGA1UEAxMk Mzg2NDk5ZDYtNWI4Yy00Njc4LWFmNGItMjA0MWM3NDBjYjI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhEQ1LxJw7F7iTZE6BESvpWqTg+8DN+IO/N1E p7a/oOSXaCK4216MMNmxPXkssMogCoKUiWdTEXiJlDlh5d5dd2lMBO+GWOQd0GzP jJJz7SqNgfpLD2GVPB5nT8EQoRaoVRqjI3ucIEdAJEJAuGhTPMtcPUn7rwxqlyA2 T8qoKIk0l3ApHkCE4ncDMag6NlKjciCqhUo5B52k0eaEFjRooEDr4po0v3KEpycM InKwPNU9GX7Bw+pOZZoSXFMhhSTICeJMQwCC7Q5ZySyIPdoFGTMkaGFZ/oJC+Cai YkxSUSGFR6CZXqlXcL3jUPT3AHD9vN675Y1gTsEaMMhOD/mL6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCTnXcrlOSPvuk/i1JOh8d/L/REvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84MjJm OTk3NC1hZjg4LTRkMGItYTY1Zi0wNjVmZGQyNmM2NDUvM2Q0YWZlMDAtNDExYi0z MjkwLTllM2ItYWRkYWMwMzc2NjE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODIyZjk5NzQtYWY4OC00ZDBiLWE2 NWYtMDY1ZmRkMjZjNjQ1LzgyMmY5OTc0LWFmODgtNGQwYi1hNjVmLTA2NWZkZDI2 YzY0NS5jcmwwHwYDVR0jBBgwFoAUPP2qApAF0XOlEjvmLCugyVHJJjUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84MjJmOTk3NC1hZjg4LTRkMGItYTY1Zi0wNjVm ZGQyNmM2NDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF/f0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADyoI+A4GRSrhPo6DoV41SfpEtjHJUMGCRHgWAgPV1mioysOFXx8fj6O 61nVmBKqucrWpuFUS4y3WCXWghluVLa3MLTt3b2Ldi7rMW8R9knhPydaWlO5J7uL 1i1EhcRsquk6woeknYc99WaKZ/7oSyM3tXvlZ24HI0Ok2XjVfmuheraSyG4GypmX KOMkR9iw2gZhbsHow01oRlawNBnYdf5dOwadFJ+ayMEYm3FTapJ+4dWvM7gLXuuo Ydaz4Q7MMidVgf/Lbuop8x4nDWDdibPINRpgzpqxluLdW4Rj4zcMR7rZej/g9PTD IRPjY3MpgWSINAhn2jKvaQ8Kg1BZZaw= -----END CERTIFICATE-----Generated at Sun Sep 20 20:49:36 2026 by rpki-client