$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/22d70b0d-ee22-49c2-b31d-a9e0de4374aa/612ea9aa-fef5-3461-89b7-4f93773ef913.roa File: 612ea9aa-fef5-3461-89b7-4f93773ef913.roa (raw, json) Hash identifier: dRJxPvfp3ovJMHb9k61RlC9HzipviiwZCbi+/E/G/U4= Subject key identifier: 32:F3:7A:DD:2A:34:6A:B9:D7:2B:87:6E:99:36:9D:4D:9B:57:51:25 Certificate issuer: /CN=22d70b0d-ee22-49c2-b31d-a9e0de4374aa Certificate serial: 010D0C9F4328584F42781F513BAA7E48FBFDC280 Authority key identifier: 31:92:AA:07:3E:1F:A7:D4:35:02:61:8F:11:87:31:02:0F:3A:A5:E1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/22d70b0d-ee22-49c2-b31d-a9e0de4374aa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/22d70b0d-ee22-49c2-b31d-a9e0de4374aa/612ea9aa-fef5-3461-89b7-4f93773ef913.roa Signing time: Tue 22 Sep 2026 13:00:12 +0000 ROA not before: Tue 22 Sep 2026 13:00:12 +0000 ROA not after: Mon 21 Dec 2026 14:00:12 +0000 asID: 10103 IP address blocks: 23.187.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/22d70b0d-ee22-49c2-b31d-a9e0de4374aa/22d70b0d-ee22-49c2-b31d-a9e0de4374aa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/22d70b0d-ee22-49c2-b31d-a9e0de4374aa/22d70b0d-ee22-49c2-b31d-a9e0de4374aa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/22d70b0d-ee22-49c2-b31d-a9e0de4374aa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:42:78:1f:51:3b:aa:7e:48:fb:fd:c2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22d70b0d-ee22-49c2-b31d-a9e0de4374aa Validity Not Before: Sep 22 13:00:12 2026 GMT Not After : Dec 21 14:00:12 2026 GMT Subject: CN=59553314-8ca7-4ad4-815b-78943ea04e79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:51:a8:99:24:2e:3e:2b:80:f5:12:13:84:78: 20:4f:5b:5b:6e:1c:82:5f:4e:1a:4d:20:62:ae:20: 20:20:b3:42:2d:98:5a:e1:a5:86:f5:a8:9a:6c:07: 2d:de:ef:db:9d:58:5f:c2:34:45:20:87:e9:75:bb: 06:fb:1e:8e:f0:eb:23:0a:68:27:1b:92:6e:64:e5: 5d:29:55:54:f5:2e:d6:fc:0e:0c:d7:0b:d5:8f:79: 81:99:0b:fa:6c:64:b4:14:9d:5a:db:9b:0a:83:cd: 19:eb:7a:a7:d2:84:33:dd:cc:6d:c1:4f:49:30:fe: 7f:ba:41:5b:c0:ee:ac:d5:14:6b:f8:b0:af:8c:25: a3:d5:74:ed:e0:79:63:4c:61:d9:93:d2:ea:f0:1c: ef:15:ef:15:25:e8:cd:88:ae:44:81:bb:fa:46:45: b3:84:98:d2:dd:18:53:d2:16:e4:d1:41:48:c6:78: 9a:20:ad:e1:08:7a:a7:39:6b:1f:98:06:8f:6f:5d: 49:11:2f:5a:8d:95:93:dc:2e:7a:a8:a2:63:07:04: d9:8a:12:4c:5b:9b:94:83:ec:54:8c:5c:d3:b9:32: 33:bf:4a:cc:7c:79:8d:d5:57:f1:6f:0c:ff:16:ba: 3e:56:83:10:61:c5:48:2f:55:b0:d2:fa:45:08:c9: e9:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:F3:7A:DD:2A:34:6A:B9:D7:2B:87:6E:99:36:9D:4D:9B:57:51:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/22d70b0d-ee22-49c2-b31d-a9e0de4374aa/612ea9aa-fef5-3461-89b7-4f93773ef913.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/22d70b0d-ee22-49c2-b31d-a9e0de4374aa/22d70b0d-ee22-49c2-b31d-a9e0de4374aa.crl X509v3 Authority Key Identifier: keyid:31:92:AA:07:3E:1F:A7:D4:35:02:61:8F:11:87:31:02:0F:3A:A5:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/22d70b0d-ee22-49c2-b31d-a9e0de4374aa.cer sbgp-ipAddrBlock: critical IPv4: 23.187.40.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:7d:11:73:a7:74:f3:35:97:62:0e:44:cb:13:be:1e:6e:fc: 71:5d:71:e7:69:3a:18:b5:32:ec:3a:d6:d6:fc:8b:b4:4d:e2: 43:4e:f4:cb:38:0c:21:f6:f0:cc:c7:50:6b:83:68:a0:8c:ab: 51:d3:f6:c9:d8:ba:59:37:5c:85:d2:5b:1b:72:51:e8:24:01: d2:0e:5f:d5:3b:21:8f:ab:8c:36:eb:87:01:61:4e:cb:3b:bb: e6:f1:b5:87:ef:26:94:43:76:b9:64:28:fd:d9:26:ae:c2:e5: df:dc:cf:42:50:b2:05:b6:f2:22:13:36:91:2e:3e:d8:7e:04: 1a:f4:95:c2:03:3a:68:22:5e:f1:d2:60:cd:bf:4e:94:58:bf: c1:23:48:ca:5a:84:35:94:49:b9:f2:f0:db:d2:1b:03:b1:82: c7:6c:fd:9c:40:13:60:90:ba:83:55:2f:a0:72:a6:f3:e7:9d: c9:5f:b0:0d:c6:b9:83:64:99:e7:08:66:b3:00:c4:e4:75:34: 67:9f:e4:14:1c:d6:65:3d:e9:ba:20:95:11:50:05:11:5d:3e: d7:d7:d3:37:41:80:0e:9e:c9:55:5e:f4:27:af:47:fa:48:56: e0:09:9f:fc:c4:2c:46:fa:fd:d1:c4:a5:91:99:d3:30:31:4d: 81:5e:e1:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9CeB9RO6p+SPv9woAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjJkNzBiMGQtZWUyMi00OWMyLWIzMWQtYTllMGRlNDM3 NGFhMB4XDTI2MDkyMjEzMDAxMloXDTI2MTIyMTE0MDAxMlowLzEtMCsGA1UEAxMk NTk1NTMzMTQtOGNhNy00YWQ0LTgxNWItNzg5NDNlYTA0ZTc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApFGomSQuPiuA9RIThHggT1tbbhyCX04aTSBi riAgILNCLZha4aWG9aiabAct3u/bnVhfwjRFIIfpdbsG+x6O8OsjCmgnG5JuZOVd KVVU9S7W/A4M1wvVj3mBmQv6bGS0FJ1a25sKg80Z63qn0oQz3cxtwU9JMP5/ukFb wO6s1RRr+LCvjCWj1XTt4HljTGHZk9Lq8BzvFe8VJejNiK5Egbv6RkWzhJjS3RhT 0hbk0UFIxniaIK3hCHqnOWsfmAaPb11JES9ajZWT3C56qKJjBwTZihJMW5uUg+xU jFzTuTIzv0rMfHmN1Vfxbwz/Fro+VoMQYcVIL1Ww0vpFCMnpHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDLzet0qNGq51yuHbpk2nU2bV1ElMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8yMmQ3 MGIwZC1lZTIyLTQ5YzItYjMxZC1hOWUwZGU0Mzc0YWEvNjEyZWE5YWEtZmVmNS0z NDYxLTg5YjctNGY5Mzc3M2VmOTEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMjJkNzBiMGQtZWUyMi00OWMyLWIz MWQtYTllMGRlNDM3NGFhLzIyZDcwYjBkLWVlMjItNDljMi1iMzFkLWE5ZTBkZTQz NzRhYS5jcmwwHwYDVR0jBBgwFoAUMZKqBz4fp9Q1AmGPEYcxAg86peEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8yMmQ3MGIwZC1lZTIyLTQ5YzItYjMxZC1hOWUw ZGU0Mzc0YWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF7soMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABF9EXOndPM1l2IORMsTvh5u/HFdcedpOhi1Muw61tb8i7RN4kNO9Ms4 DCH28MzHUGuDaKCMq1HT9snYulk3XIXSWxtyUegkAdIOX9U7IY+rjDbrhwFhTss7 u+bxtYfvJpRDdrlkKP3ZJq7C5d/cz0JQsgW28iITNpEuPth+BBr0lcIDOmgiXvHS YM2/TpRYv8EjSMpahDWUSbny8NvSGwOxgsds/ZxAE2CQuoNVL6BypvPnnclfsA3G uYNkmecIZrMAxOR1NGef5BQc1mU96boglRFQBRFdPtfX0zdBgA6eyVVe9CevR/pI VuAJn/zELEb6/dHEpZGZ0zAxTYFe4ek= -----END CERTIFICATE-----Generated at Mon Sep 28 05:48:58 2026 by rpki-client