$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/9de0425b-788e-45de-93cd-d9e343be4db2/23fafbdb-1bf1-3c21-b721-1a9efc539d86.roa File: 23fafbdb-1bf1-3c21-b721-1a9efc539d86.roa (raw, json) Hash identifier: eytbG/dw0jcW1617UQEaoaczN8W1BfyuUosEroTtr8Q= Subject key identifier: C4:E5:39:58:3F:C1:05:74:C8:F3:D8:48:48:5B:E6:B9:7D:90:A1:F7 Certificate issuer: /CN=9de0425b-788e-45de-93cd-d9e343be4db2 Certificate serial: 010D0C9F4328584F46A7D7866CF7643FEEEEFB60 Authority key identifier: 8C:98:D6:E3:29:CE:9D:23:87:77:68:9B:84:FD:20:5A:D2:82:B3:D9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/9de0425b-788e-45de-93cd-d9e343be4db2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/9de0425b-788e-45de-93cd-d9e343be4db2/23fafbdb-1bf1-3c21-b721-1a9efc539d86.roa Signing time: Thu 24 Sep 2026 01:00:12 +0000 ROA not before: Thu 24 Sep 2026 01:00:12 +0000 ROA not after: Wed 23 Dec 2026 02:00:12 +0000 asID: 22278 IP address blocks: 198.96.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/9de0425b-788e-45de-93cd-d9e343be4db2/9de0425b-788e-45de-93cd-d9e343be4db2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/9de0425b-788e-45de-93cd-d9e343be4db2/9de0425b-788e-45de-93cd-d9e343be4db2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/9de0425b-788e-45de-93cd-d9e343be4db2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:46:a7:d7:86:6c:f7:64:3f:ee:ee:fb:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9de0425b-788e-45de-93cd-d9e343be4db2 Validity Not Before: Sep 24 01:00:12 2026 GMT Not After : Dec 23 02:00:12 2026 GMT Subject: CN=c2fdae36-4b73-42eb-9fba-1e6d329ae597 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:5c:5f:74:71:dd:21:4c:ff:5b:0b:e4:9f:33: bc:46:1b:aa:63:9b:b9:84:7c:20:8d:34:1c:58:03: 63:c7:7b:cf:ba:50:a7:4f:74:99:00:e5:21:5a:da: 34:32:f2:04:aa:93:68:ee:a6:02:0d:64:20:d1:38: f7:3f:35:37:29:bb:d4:70:86:ca:02:b2:ae:48:87: e0:7b:46:c0:1e:30:5b:e1:b2:cc:23:0d:a7:ae:68: 5b:2c:07:34:cb:05:da:8f:f4:d5:1d:19:f1:c5:8b: 4a:a8:6c:bc:30:93:34:3a:f1:2d:50:7a:44:db:f7: 9b:d6:60:70:6e:89:b8:f8:5f:9d:d0:00:a5:75:89: a7:49:36:dd:20:08:29:f4:bb:36:6f:14:22:64:c7: 47:68:3d:8d:0f:9f:eb:9b:f8:57:ad:85:f6:1f:21: 8c:fe:8f:2e:f3:4f:5d:57:3d:bc:d0:fe:7a:a0:80: f1:a5:2d:ad:11:9b:a3:8c:90:71:f1:13:d7:96:e0: 98:2d:76:cc:fe:f9:85:01:41:60:a2:0f:56:cd:f2: 9e:75:55:18:13:9a:f9:67:f8:be:2d:8b:4a:fd:c1: e5:f7:b5:09:c5:65:27:11:00:63:4a:2c:b0:90:81: 8b:0d:d4:30:df:fe:14:07:2e:9d:d1:bc:77:16:48: 98:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:E5:39:58:3F:C1:05:74:C8:F3:D8:48:48:5B:E6:B9:7D:90:A1:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/9de0425b-788e-45de-93cd-d9e343be4db2/23fafbdb-1bf1-3c21-b721-1a9efc539d86.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/9de0425b-788e-45de-93cd-d9e343be4db2/9de0425b-788e-45de-93cd-d9e343be4db2.crl X509v3 Authority Key Identifier: keyid:8C:98:D6:E3:29:CE:9D:23:87:77:68:9B:84:FD:20:5A:D2:82:B3:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/9de0425b-788e-45de-93cd-d9e343be4db2.cer sbgp-ipAddrBlock: critical IPv4: 198.96.111.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:90:cf:ae:09:18:5e:e3:87:53:d9:8f:11:75:9d:b6:45:ef: c5:7c:ad:d0:c7:45:e5:97:6a:eb:ab:36:f2:53:df:27:48:29: 36:ac:a6:84:67:5d:88:90:47:63:08:a0:df:bd:ed:15:7a:95: c4:f4:a5:62:43:0e:cb:21:2c:7b:a4:0c:61:22:e8:24:3b:1a: 61:f5:8d:05:e0:48:4a:ea:3c:a8:fd:fa:66:17:c6:96:cd:ed: 41:15:22:e6:c8:1f:50:05:af:67:97:4c:a5:77:8e:53:40:9d: 64:b6:af:ee:db:fb:c6:5f:09:6b:2e:77:99:d8:0b:ac:ee:c4: f8:1c:59:7a:91:1b:5a:ff:c1:54:88:73:26:4e:8b:a9:7b:56: ab:f4:0e:14:32:74:c7:da:2e:b9:9b:4a:7d:42:de:a2:77:70: 8b:d8:cb:09:bf:1b:78:08:76:6d:cb:4a:86:29:90:78:04:3c: 02:36:90:cb:61:67:66:57:ac:53:e4:d2:a0:02:57:de:43:1b: 9d:b3:6d:0e:c6:78:c7:7f:8e:67:9d:36:94:e8:5d:00:c7:ed: 52:2b:db:97:bf:d9:b3:0f:20:00:24:f4:bb:fc:c0:fb:e2:de: f0:6e:60:6d:74:70:92:07:82:51:39:3c:8f:6c:4d:ca:45:a5: bd:49:04:b5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Gp9eGbPdkP+7u+2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWRlMDQyNWItNzg4ZS00NWRlLTkzY2QtZDllMzQzYmU0 ZGIyMB4XDTI2MDkyNDAxMDAxMloXDTI2MTIyMzAyMDAxMlowLzEtMCsGA1UEAxMk YzJmZGFlMzYtNGI3My00MmViLTlmYmEtMWU2ZDMyOWFlNTk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAklxfdHHdIUz/WwvknzO8RhuqY5u5hHwgjTQc WANjx3vPulCnT3SZAOUhWto0MvIEqpNo7qYCDWQg0Tj3PzU3KbvUcIbKArKuSIfg e0bAHjBb4bLMIw2nrmhbLAc0ywXaj/TVHRnxxYtKqGy8MJM0OvEtUHpE2/eb1mBw bom4+F+d0ACldYmnSTbdIAgp9Ls2bxQiZMdHaD2ND5/rm/hXrYX2HyGM/o8u809d Vz280P56oIDxpS2tEZujjJBx8RPXluCYLXbM/vmFAUFgog9WzfKedVUYE5r5Z/i+ LYtK/cHl97UJxWUnEQBjSiywkIGLDdQw3/4UBy6d0bx3FkiY/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMTlOVg/wQV0yPPYSEhb5rl9kKH3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi85ZGUw NDI1Yi03ODhlLTQ1ZGUtOTNjZC1kOWUzNDNiZTRkYjIvMjNmYWZiZGItMWJmMS0z YzIxLWI3MjEtMWE5ZWZjNTM5ZDg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82MTVmZTFkZC1k ODI5LTRjODctYjJjYy01Njg5MzgxYTNjNDIvOWRlMDQyNWItNzg4ZS00NWRlLTkz Y2QtZDllMzQzYmU0ZGIyLzlkZTA0MjViLTc4OGUtNDVkZS05M2NkLWQ5ZTM0M2Jl NGRiMi5jcmwwHwYDVR0jBBgwFoAUjJjW4ynOnSOHd2ibhP0gWtKCs9kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4 Ny1iMmNjLTU2ODkzODFhM2M0Mi85ZGUwNDI1Yi03ODhlLTQ1ZGUtOTNjZC1kOWUz NDNiZTRkYjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxmBvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABuQz64JGF7jh1PZjxF1nbZF78V8rdDHReWXauurNvJT3ydIKTaspoRn XYiQR2MIoN+97RV6lcT0pWJDDsshLHukDGEi6CQ7GmH1jQXgSErqPKj9+mYXxpbN 7UEVIubIH1AFr2eXTKV3jlNAnWS2r+7b+8ZfCWsud5nYC6zuxPgcWXqRG1r/wVSI cyZOi6l7Vqv0DhQydMfaLrmbSn1C3qJ3cIvYywm/G3gIdm3LSoYpkHgEPAI2kMth Z2ZXrFPk0qACV95DG52zbQ7GeMd/jmedNpToXQDH7VIr25e/2bMPIAAk9Lv8wPvi 3vBuYG10cJIHglE5PI9sTcpFpb1JBLU= -----END CERTIFICATE-----Generated at Thu Sep 24 04:39:40 2026 by rpki-client