$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da942a2e-a28e-4dd7-8986-8cd9d0811b18/525cb8cc-a19e-362c-834b-664f1ba9b526.roa File: 525cb8cc-a19e-362c-834b-664f1ba9b526.roa (raw, json) Hash identifier: bzWZxSYMmabuJ0Ars5FLTtBGrON4HDqyMDsGUh4HINQ= Subject key identifier: 18:00:83:1A:73:6F:62:43:6E:84:10:E8:CD:B2:08:48:33:1F:84:B0 Certificate issuer: /CN=da942a2e-a28e-4dd7-8986-8cd9d0811b18 Certificate serial: 010D0C9F4328584F4977456A06B4112EFE02F100 Authority key identifier: 8F:1F:CA:E6:D3:D2:2C:78:FE:EA:E4:59:F4:AB:6D:12:07:F8:0B:FB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da942a2e-a28e-4dd7-8986-8cd9d0811b18.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da942a2e-a28e-4dd7-8986-8cd9d0811b18/525cb8cc-a19e-362c-834b-664f1ba9b526.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 401489 IP address blocks: 23.191.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da942a2e-a28e-4dd7-8986-8cd9d0811b18/da942a2e-a28e-4dd7-8986-8cd9d0811b18.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da942a2e-a28e-4dd7-8986-8cd9d0811b18/da942a2e-a28e-4dd7-8986-8cd9d0811b18.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da942a2e-a28e-4dd7-8986-8cd9d0811b18.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:77:45:6a:06:b4:11:2e:fe:02:f1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da942a2e-a28e-4dd7-8986-8cd9d0811b18 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=65d56a49-c8fe-4192-82fb-ba0da3d74473 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:4c:44:4d:d9:f0:95:a5:35:34:7c:f6:94:c8: de:e1:6f:99:de:a9:03:e3:4f:2b:99:b8:4d:58:97: 7d:2e:ff:b0:53:72:b0:1f:b1:89:83:30:59:1b:9f: 7b:d3:42:d5:b8:9a:49:93:a2:1e:7c:dc:fc:4f:5d: 8e:f5:1b:2c:84:f7:55:30:42:cf:dd:3e:b7:dc:b1: ec:58:64:12:53:98:e8:93:66:36:70:3e:26:ef:ec: a3:cc:f0:f7:cb:a7:fe:d0:c2:5a:72:27:88:fc:12: f6:9b:52:0e:cc:24:19:a2:fe:4f:be:99:66:40:07: c7:2c:70:ce:ff:54:7e:e2:d6:94:2b:bf:38:4c:8a: 4e:01:6a:60:34:2b:d7:e2:ae:4c:a3:64:6d:84:41: 85:ea:5a:ac:85:d3:19:c3:80:48:10:68:9f:db:4a: 21:b7:2b:f5:92:27:1a:b4:78:d2:7e:72:5e:21:88: fd:e2:f3:da:cb:aa:8e:26:76:cb:ca:36:f2:87:96: d5:bc:92:ef:29:a8:5d:3a:fc:5b:46:75:00:77:9c: 6f:dd:88:b8:71:11:a0:75:ac:05:d1:dd:74:4d:d7: e3:af:b8:dc:fb:13:15:2d:68:86:37:d1:4d:dd:6d: 0b:cc:e7:d9:9b:17:ab:6c:02:77:4e:f1:7b:15:15: 47:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:00:83:1A:73:6F:62:43:6E:84:10:E8:CD:B2:08:48:33:1F:84:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da942a2e-a28e-4dd7-8986-8cd9d0811b18/525cb8cc-a19e-362c-834b-664f1ba9b526.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da942a2e-a28e-4dd7-8986-8cd9d0811b18/da942a2e-a28e-4dd7-8986-8cd9d0811b18.crl X509v3 Authority Key Identifier: keyid:8F:1F:CA:E6:D3:D2:2C:78:FE:EA:E4:59:F4:AB:6D:12:07:F8:0B:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/da942a2e-a28e-4dd7-8986-8cd9d0811b18.cer sbgp-ipAddrBlock: critical IPv4: 23.191.216.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:7f:a3:79:28:cc:4a:0f:28:47:4e:12:06:33:51:77:3f:50: 7d:1f:b8:7d:f9:0f:c7:92:92:12:ce:56:02:15:b3:54:fe:26: 40:d8:3e:20:08:b6:0a:fd:94:32:eb:67:b9:ee:5f:ee:37:a6: d6:88:57:52:00:bc:52:56:b0:ab:1c:d7:21:1f:40:b7:c1:d1: da:e4:34:b3:11:c9:c9:98:2a:a4:0e:34:8c:ef:d2:6f:aa:c5: 51:40:b8:b0:03:40:aa:49:18:23:6d:e5:57:f1:35:b6:8f:33: 68:2a:7f:dc:b7:d6:ab:18:fe:2c:09:99:d9:17:27:35:44:34: 39:ae:a4:58:70:ff:25:60:04:7d:92:b7:b9:03:ac:98:e0:bf: 9b:4d:ac:9f:53:96:25:07:ac:d0:4e:50:cf:f0:4d:62:c2:3b: 4c:83:0c:ec:77:09:da:0a:0e:72:53:d6:3a:ed:62:cf:2e:16: bb:96:be:db:e8:a4:1c:b0:90:28:64:aa:1f:07:29:d9:3b:c6: 41:a6:f9:56:25:b3:92:77:61:86:75:2b:ad:f8:b2:70:9f:3d: 8e:48:80:d8:0a:0e:67:3a:0d:49:7e:25:9c:bf:4e:5b:35:78: c5:89:8a:7d:84:a1:8f:0e:d0:bf:35:88:ce:5a:48:07:e3:81: 73:63:ca:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jd0VqBrQRLv4C8QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGE5NDJhMmUtYTI4ZS00ZGQ3LTg5ODYtOGNkOWQwODEx YjE4MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NjVkNTZhNDktYzhmZS00MTkyLTgyZmItYmEwZGEzZDc0NDczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmExETdnwlaU1NHz2lMje4W+Z3qkD408rmbhN WJd9Lv+wU3KwH7GJgzBZG59700LVuJpJk6IefNz8T12O9RsshPdVMELP3T633LHs WGQSU5jok2Y2cD4m7+yjzPD3y6f+0MJacieI/BL2m1IOzCQZov5PvplmQAfHLHDO /1R+4taUK784TIpOAWpgNCvX4q5Mo2RthEGF6lqshdMZw4BIEGif20ohtyv1kica tHjSfnJeIYj94vPay6qOJnbLyjbyh5bVvJLvKahdOvxbRnUAd5xv3Yi4cRGgdawF 0d10Tdfjr7jc+xMVLWiGN9FN3W0LzOfZmxerbAJ3TvF7FRVH9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBgAgxpzb2JDboQQ6M2yCEgzH4SwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9kYTk0 MmEyZS1hMjhlLTRkZDctODk4Ni04Y2Q5ZDA4MTFiMTgvNTI1Y2I4Y2MtYTE5ZS0z NjJjLTgzNGItNjY0ZjFiYTliNTI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZGE5NDJhMmUtYTI4ZS00ZGQ3LTg5 ODYtOGNkOWQwODExYjE4L2RhOTQyYTJlLWEyOGUtNGRkNy04OTg2LThjZDlkMDgx MWIxOC5jcmwwHwYDVR0jBBgwFoAUjx/K5tPSLHj+6uRZ9KttEgf4C/swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9kYTk0MmEyZS1hMjhlLTRkZDctODk4Ni04Y2Q5 ZDA4MTFiMTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF7/YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAx/o3kozEoPKEdOEgYzUXc/UH0fuH35D8eSkhLOVgIVs1T+JkDYPiAI tgr9lDLrZ7nuX+43ptaIV1IAvFJWsKsc1yEfQLfB0drkNLMRycmYKqQONIzv0m+q xVFAuLADQKpJGCNt5VfxNbaPM2gqf9y31qsY/iwJmdkXJzVENDmupFhw/yVgBH2S t7kDrJjgv5tNrJ9TliUHrNBOUM/wTWLCO0yDDOx3CdoKDnJT1jrtYs8uFruWvtvo pBywkChkqh8HKdk7xkGm+VYls5J3YYZ1K634snCfPY5IgNgKDmc6DUl+JZy/Tls1 eMWJin2EoY8O0L81iM5aSAfjgXNjygQ= -----END CERTIFICATE-----Generated at Sat Sep 26 16:11:18 2026 by rpki-client