$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d189c13c-82f8-4a93-80ac-c659e448dd77/944af092-9dad-36e3-a6b5-5ea25e25cb0a.roa File: 944af092-9dad-36e3-a6b5-5ea25e25cb0a.roa (raw, json) Hash identifier: Q3HHGYiwVB1Pw/wCzX48FCIuFe2guJDpyIuIxvz+QUs= Subject key identifier: 8C:F1:68:B2:FA:AA:1E:BC:0C:F6:3D:FE:E7:79:8B:6D:A0:52:56:D4 Certificate issuer: /CN=d189c13c-82f8-4a93-80ac-c659e448dd77 Certificate serial: 010D0C9F4328584F374D2F54826644E4A5B0A300 Authority key identifier: 34:77:9B:3F:83:B7:E0:2E:32:80:F6:25:8B:10:3F:DA:3D:D5:BD:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d189c13c-82f8-4a93-80ac-c659e448dd77.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d189c13c-82f8-4a93-80ac-c659e448dd77/944af092-9dad-36e3-a6b5-5ea25e25cb0a.roa Signing time: Fri 18 Sep 2026 13:00:12 +0000 ROA not before: Fri 18 Sep 2026 13:00:12 +0000 ROA not after: Thu 17 Dec 2026 14:00:12 +0000 asID: 401400 IP address blocks: 23.128.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d189c13c-82f8-4a93-80ac-c659e448dd77/d189c13c-82f8-4a93-80ac-c659e448dd77.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d189c13c-82f8-4a93-80ac-c659e448dd77/d189c13c-82f8-4a93-80ac-c659e448dd77.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d189c13c-82f8-4a93-80ac-c659e448dd77.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:37:4d:2f:54:82:66:44:e4:a5:b0:a3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d189c13c-82f8-4a93-80ac-c659e448dd77 Validity Not Before: Sep 18 13:00:12 2026 GMT Not After : Dec 17 14:00:12 2026 GMT Subject: CN=99b9399c-892b-45c9-9e9b-b2c482992c4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:91:39:8d:ee:bf:c7:5a:b1:b1:52:04:15:e0: 21:0b:e6:ba:3d:d3:48:d2:46:98:37:1b:b3:36:e6: 5b:d3:58:2b:68:4a:6d:dc:59:b9:ab:5f:d5:e2:5a: 46:a2:4b:5a:6d:92:1a:50:d6:d4:63:59:2d:8c:a1: a9:81:45:e3:d4:d4:a1:03:aa:ff:ff:60:f6:8f:05: 46:d5:c7:1c:62:b1:72:89:13:46:2b:6d:c2:98:27: 35:56:50:e6:67:32:58:4f:ea:7f:7c:ef:79:17:aa: 80:74:46:04:8c:ad:01:10:99:cc:b5:0a:b8:c6:f5: 71:2c:6a:31:37:b5:90:db:6a:07:b9:f4:d0:7a:ca: fd:86:37:c0:c4:3d:a4:3e:c3:ef:b9:aa:3a:69:c7: 45:29:ee:9e:33:48:98:b9:5e:16:e3:68:e5:16:8d: 10:2a:65:94:89:96:e6:d8:7f:ce:8e:ad:16:ef:56: a8:28:1e:73:36:57:dc:8e:57:7c:ad:67:44:d6:7a: 8b:06:86:a3:83:1c:51:7e:4e:58:20:61:7d:f0:f7: 24:5d:de:1c:e2:89:d7:2c:36:5d:71:c9:59:57:da: ec:92:92:f4:9b:6a:c7:63:75:68:d9:7e:c8:34:43: df:a2:20:2d:c6:be:0e:82:d6:61:9f:5a:35:82:8b: e6:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:F1:68:B2:FA:AA:1E:BC:0C:F6:3D:FE:E7:79:8B:6D:A0:52:56:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d189c13c-82f8-4a93-80ac-c659e448dd77/944af092-9dad-36e3-a6b5-5ea25e25cb0a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d189c13c-82f8-4a93-80ac-c659e448dd77/d189c13c-82f8-4a93-80ac-c659e448dd77.crl X509v3 Authority Key Identifier: keyid:34:77:9B:3F:83:B7:E0:2E:32:80:F6:25:8B:10:3F:DA:3D:D5:BD:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d189c13c-82f8-4a93-80ac-c659e448dd77.cer sbgp-ipAddrBlock: critical IPv4: 23.128.4.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:c3:b4:b0:aa:85:b3:5b:ca:ca:02:cb:66:4f:15:75:2b:59: 23:4a:9d:67:7e:81:03:0b:41:a6:b1:6c:49:92:7c:78:8a:7a: 0d:eb:3b:26:f0:f1:f0:f2:48:7c:68:67:88:81:58:0b:d7:e2: 5e:fe:39:e8:59:e3:ec:6f:0c:34:79:37:1c:99:4e:33:df:fd: 23:1f:fa:8c:25:1a:48:b8:f5:f0:60:11:88:54:b5:97:bb:ba: f3:5d:4f:8d:54:40:18:28:1e:4f:3b:a2:51:cc:74:1c:f7:5c: 70:b5:6a:44:32:f6:35:92:de:49:42:aa:46:22:4b:5d:1f:36: 54:14:1a:45:b1:6c:42:a2:73:6d:e5:a7:c1:52:00:5e:89:66: 41:d3:ff:7b:19:ea:ca:b7:90:60:ec:c7:28:bc:ea:04:d8:ad: f2:71:a8:a5:af:84:24:bd:0d:47:ea:20:2f:1b:fd:6f:b4:8b: 94:af:1e:cc:37:a1:9f:78:eb:fc:24:d4:d1:d3:63:ce:16:b5: ae:d4:4e:c8:36:67:b0:42:a1:03:87:f3:a2:94:4f:af:6c:04: b6:67:79:10:09:f5:c3:03:22:4e:d7:2f:35:79:02:66:f7:78: 1f:3d:60:8e:b8:01:e1:dd:2e:da:95:98:b8:03:68:d2:92:ae: 3b:92:fb:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE83TS9UgmZE5KWwowAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDE4OWMxM2MtODJmOC00YTkzLTgwYWMtYzY1OWU0NDhk ZDc3MB4XDTI2MDkxODEzMDAxMloXDTI2MTIxNzE0MDAxMlowLzEtMCsGA1UEAxMk OTliOTM5OWMtODkyYi00NWM5LTllOWItYjJjNDgyOTkyYzRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuJE5je6/x1qxsVIEFeAhC+a6PdNI0kaYNxuz NuZb01graEpt3Fm5q1/V4lpGoktabZIaUNbUY1ktjKGpgUXj1NShA6r//2D2jwVG 1cccYrFyiRNGK23CmCc1VlDmZzJYT+p/fO95F6qAdEYEjK0BEJnMtQq4xvVxLGox N7WQ22oHufTQesr9hjfAxD2kPsPvuao6acdFKe6eM0iYuV4W42jlFo0QKmWUiZbm 2H/Ojq0W71aoKB5zNlfcjld8rWdE1nqLBoajgxxRfk5YIGF98PckXd4c4onXLDZd cclZV9rskpL0m2rHY3Vo2X7INEPfoiAtxr4OgtZhn1o1govmjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIzxaLL6qh68DPY9/ud5i22gUlbUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9kMTg5 YzEzYy04MmY4LTRhOTMtODBhYy1jNjU5ZTQ0OGRkNzcvOTQ0YWYwOTItOWRhZC0z NmUzLWE2YjUtNWVhMjVlMjVjYjBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZDE4OWMxM2MtODJmOC00YTkzLTgw YWMtYzY1OWU0NDhkZDc3L2QxODljMTNjLTgyZjgtNGE5My04MGFjLWM2NTllNDQ4 ZGQ3Ny5jcmwwHwYDVR0jBBgwFoAUNHebP4O34C4ygPYlixA/2j3VvUwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9kMTg5YzEzYy04MmY4LTRhOTMtODBhYy1jNjU5 ZTQ0OGRkNzcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4AEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF3DtLCqhbNbysoCy2ZPFXUrWSNKnWd+gQMLQaaxbEmSfHiKeg3rOybw 8fDySHxoZ4iBWAvX4l7+OehZ4+xvDDR5NxyZTjPf/SMf+owlGki49fBgEYhUtZe7 uvNdT41UQBgoHk87olHMdBz3XHC1akQy9jWS3klCqkYiS10fNlQUGkWxbEKic23l p8FSAF6JZkHT/3sZ6sq3kGDsxyi86gTYrfJxqKWvhCS9DUfqIC8b/W+0i5SvHsw3 oZ946/wk1NHTY84Wta7UTsg2Z7BCoQOH86KUT69sBLZneRAJ9cMDIk7XLzV5Amb3 eB89YI64AeHdLtqVmLgDaNKSrjuS+8I= -----END CERTIFICATE-----Generated at Mon Sep 21 15:00:04 2026 by rpki-client