$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1e504b-f881-4524-a98f-2a623e4a476d/28931be6-4e16-34bb-90eb-77f681bd268b.roa File: 28931be6-4e16-34bb-90eb-77f681bd268b.roa (raw, json) Hash identifier: otutcmU5cx8r/WjES5DSyHZe9LastW5eVbNfvxVoYDQ= Subject key identifier: 22:B2:0C:9D:37:09:ED:41:F7:F9:95:E2:50:2D:6C:15:66:88:A3:32 Certificate issuer: /CN=8c1e504b-f881-4524-a98f-2a623e4a476d Certificate serial: 010D0C9F4328584F45429B2FAF3D271C386ED680 Authority key identifier: B9:04:42:C3:CF:95:42:60:87:CD:AE:2A:D4:82:C7:4E:DC:18:18:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1e504b-f881-4524-a98f-2a623e4a476d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1e504b-f881-4524-a98f-2a623e4a476d/28931be6-4e16-34bb-90eb-77f681bd268b.roa Signing time: Wed 23 Sep 2026 13:00:11 +0000 ROA not before: Wed 23 Sep 2026 13:00:11 +0000 ROA not after: Tue 22 Dec 2026 14:00:11 +0000 asID: 396952 IP address blocks: 23.140.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1e504b-f881-4524-a98f-2a623e4a476d/8c1e504b-f881-4524-a98f-2a623e4a476d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1e504b-f881-4524-a98f-2a623e4a476d/8c1e504b-f881-4524-a98f-2a623e4a476d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1e504b-f881-4524-a98f-2a623e4a476d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:45:42:9b:2f:af:3d:27:1c:38:6e:d6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c1e504b-f881-4524-a98f-2a623e4a476d Validity Not Before: Sep 23 13:00:11 2026 GMT Not After : Dec 22 14:00:11 2026 GMT Subject: CN=c36b85e2-98eb-4361-9293-bf1777eda827 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:2a:22:4f:a9:8e:7a:41:a0:a5:c2:1e:68:bb: 55:0c:13:1e:18:6f:c3:3e:b8:8e:21:64:a0:37:99: 69:f2:44:1f:9e:fb:af:0c:58:2d:c3:88:8b:c3:9f: 06:69:f7:1f:ed:5d:7a:58:3e:77:57:b1:0d:00:95: 09:07:0d:36:cf:6b:1d:ed:62:96:ac:c8:a7:f3:9c: 72:ea:01:de:c2:7d:75:fe:11:91:7e:80:fb:ce:ec: 78:96:66:2c:47:1e:23:3d:90:9a:f6:c7:13:71:fb: 6c:d0:29:97:6f:ee:47:0d:9c:af:72:c1:71:ec:e9: 1b:3a:33:88:94:33:49:52:36:2c:6f:20:f7:40:4a: 81:ee:dd:08:6b:80:36:bd:9a:17:d6:22:e4:6e:31: 7b:3f:4e:ac:2e:d7:d7:7c:3b:3e:d8:38:de:17:31: 3d:c8:23:11:87:5b:cd:13:65:32:1e:d9:9a:b8:4b: 90:c9:08:f6:5e:c0:ae:00:ab:ca:2c:da:42:f9:da: 20:c2:5e:f5:73:fb:b7:d2:b7:93:d3:d2:6e:e0:f7: 11:6d:0a:25:9a:24:94:f8:06:25:98:92:7e:ff:74: c5:60:e5:11:97:d2:82:b5:c5:83:f2:a9:d8:12:fe: 6a:47:2e:98:cc:25:7f:04:e4:7b:33:ba:f7:4d:31: 42:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:B2:0C:9D:37:09:ED:41:F7:F9:95:E2:50:2D:6C:15:66:88:A3:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1e504b-f881-4524-a98f-2a623e4a476d/28931be6-4e16-34bb-90eb-77f681bd268b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1e504b-f881-4524-a98f-2a623e4a476d/8c1e504b-f881-4524-a98f-2a623e4a476d.crl X509v3 Authority Key Identifier: keyid:B9:04:42:C3:CF:95:42:60:87:CD:AE:2A:D4:82:C7:4E:DC:18:18:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1e504b-f881-4524-a98f-2a623e4a476d.cer sbgp-ipAddrBlock: critical IPv4: 23.140.108.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:2f:b9:df:ad:26:69:ab:7b:19:be:e7:78:3b:fe:96:24:18: 2d:85:11:ef:fa:93:b5:d9:b5:f0:90:9f:be:37:8c:ca:9d:c1: cc:c5:58:a7:04:74:35:89:09:29:58:86:37:2f:68:13:5f:8d: 63:1e:d7:44:26:d1:6d:f2:f8:ff:cf:20:94:ba:29:93:96:c0: 39:66:98:2e:e8:80:4d:f1:2b:60:38:37:d1:09:c6:ab:21:68: a4:cc:d5:3e:40:88:76:bf:f3:5c:50:1d:99:12:e5:c8:4a:01: 35:46:1c:37:40:71:81:45:39:d6:6d:20:da:09:fa:36:99:ae: a6:28:e2:00:5d:fb:d8:0d:0a:8b:4b:94:66:a4:93:b7:89:f7: 8b:ec:7e:f5:23:96:b7:94:5c:24:36:0b:a6:c3:10:48:e9:30: f6:2e:09:d6:c1:85:a8:01:13:18:7f:df:08:ea:22:c2:21:3f: 23:d3:b5:23:b6:c9:0e:19:52:82:86:53:99:af:76:ce:fa:04: 14:7d:2d:27:56:10:a4:31:1c:65:28:28:47:94:12:38:56:64: 82:74:26:c4:25:2c:60:24:0f:1c:00:b0:8f:8a:ed:e3:56:94: d4:ee:ce:48:98:70:d6:8d:97:a6:50:23:6c:fd:7b:40:5e:48: 8f:7e:65:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9FQpsvrz0nHDhu1oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGMxZTUwNGItZjg4MS00NTI0LWE5OGYtMmE2MjNlNGE0 NzZkMB4XDTI2MDkyMzEzMDAxMVoXDTI2MTIyMjE0MDAxMVowLzEtMCsGA1UEAxMk YzM2Yjg1ZTItOThlYi00MzYxLTkyOTMtYmYxNzc3ZWRhODI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhCoiT6mOekGgpcIeaLtVDBMeGG/DPriOIWSg N5lp8kQfnvuvDFgtw4iLw58Gafcf7V16WD53V7ENAJUJBw02z2sd7WKWrMin85xy 6gHewn11/hGRfoD7zux4lmYsRx4jPZCa9scTcfts0CmXb+5HDZyvcsFx7OkbOjOI lDNJUjYsbyD3QEqB7t0Ia4A2vZoX1iLkbjF7P06sLtfXfDs+2DjeFzE9yCMRh1vN E2UyHtmauEuQyQj2XsCuAKvKLNpC+dogwl71c/u30reT09Ju4PcRbQolmiSU+AYl mJJ+/3TFYOURl9KCtcWD8qnYEv5qRy6YzCV/BOR7M7r3TTFCVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCKyDJ03Ce1B9/mV4lAtbBVmiKMyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84YzFl NTA0Yi1mODgxLTQ1MjQtYTk4Zi0yYTYyM2U0YTQ3NmQvMjg5MzFiZTYtNGUxNi0z NGJiLTkwZWItNzdmNjgxYmQyNjhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOGMxZTUwNGItZjg4MS00NTI0LWE5 OGYtMmE2MjNlNGE0NzZkLzhjMWU1MDRiLWY4ODEtNDUyNC1hOThmLTJhNjIzZTRh NDc2ZC5jcmwwHwYDVR0jBBgwFoAUuQRCw8+VQmCHza4q1ILHTtwYGN0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS84YzFlNTA0Yi1mODgxLTQ1MjQtYTk4Zi0yYTYy M2U0YTQ3NmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4xsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF4vud+tJmmrexm+53g7/pYkGC2FEe/6k7XZtfCQn743jMqdwczFWKcE dDWJCSlYhjcvaBNfjWMe10Qm0W3y+P/PIJS6KZOWwDlmmC7ogE3xK2A4N9EJxqsh aKTM1T5AiHa/81xQHZkS5chKATVGHDdAcYFFOdZtINoJ+jaZrqYo4gBd+9gNCotL lGakk7eJ94vsfvUjlreUXCQ2C6bDEEjpMPYuCdbBhagBExh/3wjqIsIhPyPTtSO2 yQ4ZUoKGU5mvds76BBR9LSdWEKQxHGUoKEeUEjhWZIJ0JsQlLGAkDxwAsI+K7eNW lNTuzkiYcNaNl6ZQI2z9e0BeSI9+ZT0= -----END CERTIFICATE-----Generated at Sun Oct 11 18:29:02 2026 by rpki-client