$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ad994c2-ccdf-4c40-b066-c7595e9a492c/45f5cb58-72a8-3898-abe2-3604045d3bbd.roa File: 45f5cb58-72a8-3898-abe2-3604045d3bbd.roa (raw, json) Hash identifier: C522XEJLyjp7o+AQFO3q3TWyNgLRcM0sVDXj/SVqr8k= Subject key identifier: 69:2E:34:3A:E4:F0:F0:8B:B3:D2:F1:6D:0F:F5:7A:C4:24:E0:4D:38 Certificate issuer: /CN=8ad994c2-ccdf-4c40-b066-c7595e9a492c Certificate serial: 010D0C9F4328584F3482708F704F69588CA21080 Authority key identifier: 8C:38:B7:D8:DF:45:86:B4:17:E6:21:A5:DC:07:6D:D8:57:C6:7C:2D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ad994c2-ccdf-4c40-b066-c7595e9a492c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ad994c2-ccdf-4c40-b066-c7595e9a492c/45f5cb58-72a8-3898-abe2-3604045d3bbd.roa Signing time: Thu 17 Sep 2026 13:00:12 +0000 ROA not before: Thu 17 Sep 2026 13:00:12 +0000 ROA not after: Wed 16 Dec 2026 14:00:12 +0000 asID: 214483 IP address blocks: 23.185.16.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ad994c2-ccdf-4c40-b066-c7595e9a492c/8ad994c2-ccdf-4c40-b066-c7595e9a492c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ad994c2-ccdf-4c40-b066-c7595e9a492c/8ad994c2-ccdf-4c40-b066-c7595e9a492c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ad994c2-ccdf-4c40-b066-c7595e9a492c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:34:82:70:8f:70:4f:69:58:8c:a2:10:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8ad994c2-ccdf-4c40-b066-c7595e9a492c Validity Not Before: Sep 17 13:00:12 2026 GMT Not After : Dec 16 14:00:12 2026 GMT Subject: CN=3e1bda6b-7e28-46e1-9393-84f5c71aa651 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:20:f8:ec:9d:da:cb:f7:13:74:4d:1b:12:71: c5:b1:18:2e:b3:06:6c:73:42:9d:57:73:ef:0b:13: 64:39:0e:f7:ad:07:e5:46:70:4a:e9:d2:c6:c2:83: 75:6a:ea:bd:c7:54:88:72:6d:3c:25:b4:ca:58:28: 03:14:b4:8e:b7:b7:33:ed:7b:eb:74:2b:d6:05:04: 88:7f:ff:7d:c2:21:1e:39:b1:a3:35:04:82:a4:d2: ca:b8:5c:5c:bb:b1:a9:d4:92:f1:0b:ed:9c:c3:48: 88:3f:f6:b3:80:d6:ba:af:b0:ad:2a:d2:c0:6e:29: 35:ef:ed:4f:ae:60:0c:fe:81:af:a3:33:58:b2:33: 05:fa:c0:a6:86:af:08:7a:75:25:25:07:39:b5:83: 70:05:f0:87:33:1d:8a:54:6a:54:c2:c6:18:f7:4f: c7:f4:b4:6f:2e:19:98:f9:5f:fe:fa:e3:d0:2c:ec: 38:85:91:3a:78:13:ab:dd:90:2b:48:39:da:14:ea: c2:c7:24:5e:df:e0:b2:f5:2f:f2:dc:b5:50:71:80: d6:16:ad:6b:27:05:14:c5:96:c9:33:52:03:b7:be: 31:91:82:d3:cc:48:1e:89:98:45:85:52:66:c8:2e: 2f:ef:0d:31:a6:0b:f7:58:5a:a7:a4:b3:2b:61:ff: 9e:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:2E:34:3A:E4:F0:F0:8B:B3:D2:F1:6D:0F:F5:7A:C4:24:E0:4D:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ad994c2-ccdf-4c40-b066-c7595e9a492c/45f5cb58-72a8-3898-abe2-3604045d3bbd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ad994c2-ccdf-4c40-b066-c7595e9a492c/8ad994c2-ccdf-4c40-b066-c7595e9a492c.crl X509v3 Authority Key Identifier: keyid:8C:38:B7:D8:DF:45:86:B4:17:E6:21:A5:DC:07:6D:D8:57:C6:7C:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/8ad994c2-ccdf-4c40-b066-c7595e9a492c.cer sbgp-ipAddrBlock: critical IPv4: 23.185.16.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:63:44:81:c7:d2:fa:54:a4:f9:58:65:d3:d4:ef:0b:e1:64: 71:94:c3:7b:a9:ff:34:49:0f:bc:ed:e5:2b:01:cb:9f:2a:50: 2c:b1:13:e1:4e:7a:15:fd:9c:f1:8f:f1:43:45:44:27:30:13: 1b:02:58:d9:7c:99:97:0e:dd:2b:cd:88:51:b1:d2:61:b1:32: 4a:a0:70:41:e4:9e:37:a1:f5:6f:58:c4:c8:d3:65:60:35:47: 51:bb:46:64:5c:c3:23:f1:f6:87:6f:86:5d:85:87:08:e1:53: e3:d6:2a:bf:66:96:41:db:af:19:c3:f8:6d:79:c2:fa:a2:e6: 39:d3:0f:bf:c4:3d:82:85:22:46:ff:ef:dd:ff:b9:de:c3:a8: ec:b5:70:71:67:35:22:e8:e0:1c:50:d5:54:92:2a:44:9d:67: b2:7e:92:2a:be:4a:fe:34:08:a3:ba:90:99:b7:6d:75:31:e1: 8f:88:a6:00:fd:19:0c:b7:6e:ec:1c:5a:2b:ea:5c:f6:e1:9c: 47:8f:17:ed:1f:36:af:29:0f:a1:fd:ba:d4:8f:81:1b:4d:c0: 10:12:29:a8:11:77:32:35:d0:df:89:62:42:7b:3c:de:f8:d5: 7a:e1:b8:39:91:41:31:cc:64:9c:d2:60:4c:8b:fb:de:d6:43: a5:b2:51:2d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE80gnCPcE9pWIyiEIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGFkOTk0YzItY2NkZi00YzQwLWIwNjYtYzc1OTVlOWE0 OTJjMB4XDTI2MDkxNzEzMDAxMloXDTI2MTIxNjE0MDAxMlowLzEtMCsGA1UEAxMk M2UxYmRhNmItN2UyOC00NmUxLTkzOTMtODRmNWM3MWFhNjUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkSD47J3ay/cTdE0bEnHFsRguswZsc0KdV3Pv CxNkOQ73rQflRnBK6dLGwoN1auq9x1SIcm08JbTKWCgDFLSOt7cz7XvrdCvWBQSI f/99wiEeObGjNQSCpNLKuFxcu7Gp1JLxC+2cw0iIP/azgNa6r7CtKtLAbik17+1P rmAM/oGvozNYsjMF+sCmhq8IenUlJQc5tYNwBfCHMx2KVGpUwsYY90/H9LRvLhmY +V/++uPQLOw4hZE6eBOr3ZArSDnaFOrCxyRe3+Cy9S/y3LVQcYDWFq1rJwUUxZbJ M1IDt74xkYLTzEgeiZhFhVJmyC4v7w0xpgv3WFqnpLMrYf+eNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGkuNDrk8PCLs9LxbQ/1esQk4E04MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84YWQ5 OTRjMi1jY2RmLTRjNDAtYjA2Ni1jNzU5NWU5YTQ5MmMvNDVmNWNiNTgtNzJhOC0z ODk4LWFiZTItMzYwNDA0NWQzYmJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOGFkOTk0YzItY2NkZi00YzQwLWIw NjYtYzc1OTVlOWE0OTJjLzhhZDk5NGMyLWNjZGYtNGM0MC1iMDY2LWM3NTk1ZTlh NDkyYy5jcmwwHwYDVR0jBBgwFoAUjDi32N9FhrQX5iGl3Adt2FfGfC0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84YWQ5OTRjMi1jY2RmLTRjNDAtYjA2Ni1jNzU5 NWU5YTQ5MmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF7kQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABVjRIHH0vpUpPlYZdPU7wvhZHGUw3up/zRJD7zt5SsBy58qUCyxE+FO ehX9nPGP8UNFRCcwExsCWNl8mZcO3SvNiFGx0mGxMkqgcEHknjeh9W9YxMjTZWA1 R1G7RmRcwyPx9odvhl2FhwjhU+PWKr9mlkHbrxnD+G15wvqi5jnTD7/EPYKFIkb/ 793/ud7DqOy1cHFnNSLo4BxQ1VSSKkSdZ7J+kiq+Sv40CKO6kJm3bXUx4Y+IpgD9 GQy3buwcWivqXPbhnEePF+0fNq8pD6H9utSPgRtNwBASKagRdzI10N+JYkJ7PN74 1XrhuDmRQTHMZJzSYEyL+97WQ6WyUS0= -----END CERTIFICATE-----Generated at Tue Sep 22 18:53:04 2026 by rpki-client