$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de4a1dfa-8867-4aef-a2e6-131e93add9f9/db4190ad-5350-383b-b3b5-9d97a927e02f.roa File: db4190ad-5350-383b-b3b5-9d97a927e02f.roa (raw, json) Hash identifier: TeECwiR8IqbFJHONAS3ZYhnuLOyNv4iWEFXoJKuH4cA= Subject key identifier: 6A:68:A0:36:66:69:13:5E:7A:C3:2A:40:87:93:70:8A:4B:48:3F:A8 Certificate issuer: /CN=de4a1dfa-8867-4aef-a2e6-131e93add9f9 Certificate serial: 010D0C9F4328584F49760AF37654B29BE5903100 Authority key identifier: BE:D8:56:32:EB:8C:A4:4A:C0:EA:03:98:A0:D1:F1:2F:29:91:03:C4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de4a1dfa-8867-4aef-a2e6-131e93add9f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de4a1dfa-8867-4aef-a2e6-131e93add9f9/db4190ad-5350-383b-b3b5-9d97a927e02f.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 21859 IP address blocks: 23.128.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de4a1dfa-8867-4aef-a2e6-131e93add9f9/de4a1dfa-8867-4aef-a2e6-131e93add9f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de4a1dfa-8867-4aef-a2e6-131e93add9f9/de4a1dfa-8867-4aef-a2e6-131e93add9f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de4a1dfa-8867-4aef-a2e6-131e93add9f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:76:0a:f3:76:54:b2:9b:e5:90:31:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=de4a1dfa-8867-4aef-a2e6-131e93add9f9 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=d13cc232-0c25-468c-bb37-e387311f932f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:69:8a:e5:bc:fe:01:ae:7a:d4:da:46:66:11: d2:82:d1:59:a3:4c:36:af:2c:8a:bd:0c:7a:80:a3: da:6a:3b:e1:19:5b:77:57:c8:be:13:18:cf:0b:3b: 58:82:f1:a5:ac:72:88:b3:cd:16:75:74:5a:b2:1d: 58:2c:69:57:67:22:1d:38:09:92:47:3b:56:c7:b8: 87:af:95:4f:62:82:e9:71:62:67:97:5a:d2:10:29: 6e:14:f4:c0:44:12:05:53:9b:88:3d:42:00:84:8d: 0b:07:fc:79:09:42:4e:3c:4b:47:08:5c:c2:72:d0: 6c:fd:b0:5c:32:a1:bd:43:5b:17:cb:f4:dd:4c:1c: 02:89:f5:8b:8a:22:91:2c:7e:16:21:80:12:eb:9f: 33:22:b4:4d:fe:1e:e5:9b:6a:9e:19:59:f3:92:32: e5:9f:b4:5b:ee:bd:32:13:47:ea:10:f2:5b:ef:b7: 9c:2c:1a:b0:b9:56:2c:aa:d1:4d:a1:57:79:69:9e: fe:7c:c9:d4:a6:fe:37:4f:32:94:f1:46:8e:1e:e0: e4:04:5a:87:95:d6:5e:44:bc:8a:d4:a2:f2:5c:eb: 47:43:d5:d3:ea:64:b4:58:ed:b9:7d:e1:f2:38:70: e1:cc:d2:9c:09:90:b2:6f:f8:44:d8:7b:94:30:ab: ae:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:68:A0:36:66:69:13:5E:7A:C3:2A:40:87:93:70:8A:4B:48:3F:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de4a1dfa-8867-4aef-a2e6-131e93add9f9/db4190ad-5350-383b-b3b5-9d97a927e02f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de4a1dfa-8867-4aef-a2e6-131e93add9f9/de4a1dfa-8867-4aef-a2e6-131e93add9f9.crl X509v3 Authority Key Identifier: keyid:BE:D8:56:32:EB:8C:A4:4A:C0:EA:03:98:A0:D1:F1:2F:29:91:03:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/de4a1dfa-8867-4aef-a2e6-131e93add9f9.cer sbgp-ipAddrBlock: critical IPv4: 23.128.196.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:92:19:eb:2c:56:6a:60:c1:1d:a9:d2:b2:4a:78:e5:c7:33: b8:5a:f7:6b:1a:32:06:30:1e:2b:84:e8:7c:8f:29:d0:52:d4: 47:e7:76:6e:60:56:2e:9a:0c:15:ca:9c:72:6a:8e:e0:57:96: f0:52:68:5d:c7:fa:ae:f5:5f:2b:eb:eb:ca:45:61:66:8d:66: cf:bb:06:e5:7d:2e:1d:09:2e:4e:d9:5d:91:0d:c8:de:2f:aa: f9:11:7a:23:ee:a1:75:90:aa:85:57:2c:8e:79:2d:57:41:ca: 30:b2:0b:b5:8a:13:84:a1:72:00:a9:9d:f2:c7:27:a1:4f:ec: dd:88:40:ff:44:c9:d9:4b:11:76:61:0f:fc:14:12:d3:12:7d: c9:ef:c4:44:c8:18:ba:9a:da:48:97:34:98:db:86:dd:ba:31: 17:e0:12:87:d4:36:c3:29:76:9a:ef:be:77:37:73:4b:b5:76: ad:4d:dc:ff:c9:cb:f1:71:5d:15:9b:df:84:b7:79:57:34:0c: f7:60:55:27:99:ce:98:7f:e4:12:dd:18:9b:bc:ac:6a:8a:ff: c8:40:59:ee:b0:f9:e9:d0:2a:2b:fb:49:9b:ae:12:a1:32:1c: 6f:d9:60:78:c6:21:c7:81:59:05:c2:81:cb:67:31:c9:9d:fc: 7f:d8:b7:8d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdgrzdlSym+WQMQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGU0YTFkZmEtODg2Ny00YWVmLWEyZTYtMTMxZTkzYWRk OWY5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZDEzY2MyMzItMGMyNS00NjhjLWJiMzctZTM4NzMxMWY5MzJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlGmK5bz+Aa561NpGZhHSgtFZo0w2ryyKvQx6 gKPaajvhGVt3V8i+ExjPCztYgvGlrHKIs80WdXRash1YLGlXZyIdOAmSRztWx7iH r5VPYoLpcWJnl1rSECluFPTARBIFU5uIPUIAhI0LB/x5CUJOPEtHCFzCctBs/bBc MqG9Q1sXy/TdTBwCifWLiiKRLH4WIYAS658zIrRN/h7lm2qeGVnzkjLln7Rb7r0y E0fqEPJb77ecLBqwuVYsqtFNoVd5aZ7+fMnUpv43TzKU8UaOHuDkBFqHldZeRLyK 1KLyXOtHQ9XT6mS0WO25feHyOHDhzNKcCZCyb/hE2HuUMKuuMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGpooDZmaRNeesMqQIeTcIpLSD+oMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9kZTRh MWRmYS04ODY3LTRhZWYtYTJlNi0xMzFlOTNhZGQ5ZjkvZGI0MTkwYWQtNTM1MC0z ODNiLWIzYjUtOWQ5N2E5MjdlMDJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZGU0YTFkZmEtODg2Ny00YWVmLWEy ZTYtMTMxZTkzYWRkOWY5L2RlNGExZGZhLTg4NjctNGFlZi1hMmU2LTEzMWU5M2Fk ZDlmOS5jcmwwHwYDVR0jBBgwFoAUvthWMuuMpErA6gOYoNHxLymRA8QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9kZTRhMWRmYS04ODY3LTRhZWYtYTJlNi0xMzFl OTNhZGQ5ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4DEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG6SGessVmpgwR2p0rJKeOXHM7ha92saMgYwHiuE6HyPKdBS1Efndm5g Vi6aDBXKnHJqjuBXlvBSaF3H+q71Xyvr68pFYWaNZs+7BuV9Lh0JLk7ZXZENyN4v qvkReiPuoXWQqoVXLI55LVdByjCyC7WKE4ShcgCpnfLHJ6FP7N2IQP9EydlLEXZh D/wUEtMSfcnvxETIGLqa2kiXNJjbht26MRfgEofUNsMpdprvvnc3c0u1dq1N3P/J y/FxXRWb34S3eVc0DPdgVSeZzph/5BLdGJu8rGqK/8hAWe6w+enQKiv7SZuuEqEy HG/ZYHjGIceBWQXCgctnMcmd/H/Yt40= -----END CERTIFICATE-----Generated at Tue Sep 29 01:22:30 2026 by rpki-client