$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fa1ef48c-319b-4888-9b6e-efede6d159ca/cb9a4e83-bcfc-3465-82bf-4111784123b0.roa File: cb9a4e83-bcfc-3465-82bf-4111784123b0.roa (raw, json) Hash identifier: E1d234hqyW0A8tS8xRqEqii4keZ+z67IrKthLP5fFg4= Subject key identifier: 87:E4:61:84:30:2A:46:72:42:D7:7B:63:CD:C7:87:13:FF:6B:65:79 Certificate issuer: /CN=fa1ef48c-319b-4888-9b6e-efede6d159ca Certificate serial: 010D0C9F4328584F4C3D558A8B2D2A97011B13C0 Authority key identifier: EB:D9:DF:05:13:B5:23:E2:E3:AF:74:39:88:D1:0B:23:63:BA:5E:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fa1ef48c-319b-4888-9b6e-efede6d159ca.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fa1ef48c-319b-4888-9b6e-efede6d159ca/cb9a4e83-bcfc-3465-82bf-4111784123b0.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 401323 IP address blocks: 23.187.56.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fa1ef48c-319b-4888-9b6e-efede6d159ca/fa1ef48c-319b-4888-9b6e-efede6d159ca.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fa1ef48c-319b-4888-9b6e-efede6d159ca/fa1ef48c-319b-4888-9b6e-efede6d159ca.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fa1ef48c-319b-4888-9b6e-efede6d159ca.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:55:8a:8b:2d:2a:97:01:1b:13:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fa1ef48c-319b-4888-9b6e-efede6d159ca Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=73b583bd-dcfa-467a-b87c-a1bcb87dc550 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:92:24:a1:fa:3b:57:6c:bf:c2:09:34:54:bb: 41:9f:03:ef:69:98:ad:33:51:9f:6b:cf:51:0a:5a: e9:1d:ec:00:ee:96:36:de:36:54:9a:ef:36:67:2c: 47:54:7b:b3:8b:72:11:aa:0d:0e:7e:db:28:e2:47: f6:e5:d1:da:85:11:78:e1:a1:2c:65:48:58:00:13: 72:27:46:00:47:8d:fb:91:a3:b1:d6:13:54:4a:c8: ca:c9:1c:d5:80:aa:2d:8d:df:3f:9b:43:16:41:e0: f3:59:ff:55:8b:18:23:1b:e4:e1:3a:c6:56:1b:cf: 47:49:ee:b2:7c:84:0d:8f:e2:08:34:8b:d6:67:f1: 7c:09:43:9d:1d:e5:7b:24:59:19:fe:a3:d5:3a:a9: ea:3a:47:e7:b4:6b:a3:bf:4b:fb:91:2d:4a:9d:d8: de:52:22:f9:e1:85:9e:a7:fd:ae:47:c7:44:28:1c: 54:f9:04:a0:6b:29:00:04:f7:a8:a9:17:a9:54:42: 30:e6:18:ae:11:9c:1b:7b:d3:7c:20:82:07:54:0c: 13:40:1d:e1:f3:97:f0:45:f5:44:b4:0a:65:86:be: 1f:c5:65:c5:56:09:c3:a6:53:c4:81:fe:6a:4c:dc: 5c:cb:d2:78:51:a9:70:0d:c8:cc:e2:af:fe:f8:a4: cc:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:E4:61:84:30:2A:46:72:42:D7:7B:63:CD:C7:87:13:FF:6B:65:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fa1ef48c-319b-4888-9b6e-efede6d159ca/cb9a4e83-bcfc-3465-82bf-4111784123b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fa1ef48c-319b-4888-9b6e-efede6d159ca/fa1ef48c-319b-4888-9b6e-efede6d159ca.crl X509v3 Authority Key Identifier: keyid:EB:D9:DF:05:13:B5:23:E2:E3:AF:74:39:88:D1:0B:23:63:BA:5E:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fa1ef48c-319b-4888-9b6e-efede6d159ca.cer sbgp-ipAddrBlock: critical IPv4: 23.187.56.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:75:f1:36:38:73:be:9b:67:02:b1:85:76:31:cc:e5:a2:b0: 8b:db:d7:05:f0:93:62:2d:89:a9:d2:f8:30:a3:fc:01:d5:ec: 52:50:0d:20:79:a6:e5:d1:62:2e:25:53:da:52:86:31:33:4a: 5b:61:c4:f0:46:5d:df:77:b6:f7:50:e7:86:9d:be:ab:e2:26: 4c:92:ca:69:b8:b2:14:d3:01:4a:17:d9:01:86:4e:0d:9b:e0: 31:d7:bb:39:2d:86:c7:ef:2e:36:f3:4e:61:4d:04:10:0c:af: 7d:6e:ec:1f:80:47:a5:e0:80:7b:7a:59:b7:cb:93:38:3c:14: 11:ef:3a:7c:25:3b:4e:ee:5f:2a:f3:68:5d:e5:1b:46:64:5d: c1:af:b3:f5:ad:e4:b6:35:22:79:75:61:df:29:03:bc:d5:fb: 3a:f7:fc:14:0c:2e:79:f7:48:34:90:4a:e1:c5:6b:a6:7d:5e: 83:5e:5f:a0:44:2c:c9:c1:4a:a4:0e:dd:35:95:5d:3f:d2:83: c1:18:76:ba:6f:41:52:dd:00:f5:0d:98:f8:20:f4:70:76:58: 1c:12:02:7d:37:30:be:50:21:61:90:2c:da:a8:a3:a2:dd:4e: fc:3e:8a:a6:5d:0d:16:f5:c0:29:6c:79:9e:09:e8:77:d3:39: 6d:3d:41:c6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPVWKiy0qlwEbE8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmExZWY0OGMtMzE5Yi00ODg4LTliNmUtZWZlZGU2ZDE1 OWNhMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk NzNiNTgzYmQtZGNmYS00NjdhLWI4N2MtYTFiY2I4N2RjNTUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmJIkofo7V2y/wgk0VLtBnwPvaZitM1Gfa89R ClrpHewA7pY23jZUmu82ZyxHVHuzi3IRqg0Oftso4kf25dHahRF44aEsZUhYABNy J0YAR437kaOx1hNUSsjKyRzVgKotjd8/m0MWQeDzWf9VixgjG+ThOsZWG89HSe6y fIQNj+IINIvWZ/F8CUOdHeV7JFkZ/qPVOqnqOkfntGujv0v7kS1KndjeUiL54YWe p/2uR8dEKBxU+QSgaykABPeoqRepVEIw5hiuEZwbe9N8IIIHVAwTQB3h85fwRfVE tAplhr4fxWXFVgnDplPEgf5qTNxcy9J4UalwDcjM4q/++KTMZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIfkYYQwKkZyQtd7Y83HhxP/a2V5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mYTFl ZjQ4Yy0zMTliLTQ4ODgtOWI2ZS1lZmVkZTZkMTU5Y2EvY2I5YTRlODMtYmNmYy0z NDY1LTgyYmYtNDExMTc4NDEyM2IwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZmExZWY0OGMtMzE5Yi00ODg4LTli NmUtZWZlZGU2ZDE1OWNhL2ZhMWVmNDhjLTMxOWItNDg4OC05YjZlLWVmZWRlNmQx NTljYS5jcmwwHwYDVR0jBBgwFoAU69nfBRO1I+Ljr3Q5iNELI2O6Xo8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mYTFlZjQ4Yy0zMTliLTQ4ODgtOWI2ZS1lZmVk ZTZkMTU5Y2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF7s4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJh18TY4c76bZwKxhXYxzOWisIvb1wXwk2ItianS+DCj/AHV7FJQDSB5 puXRYi4lU9pShjEzSlthxPBGXd93tvdQ54advqviJkySymm4shTTAUoX2QGGTg2b 4DHXuzkthsfvLjbzTmFNBBAMr31u7B+AR6XggHt6WbfLkzg8FBHvOnwlO07uXyrz aF3lG0ZkXcGvs/Wt5LY1Inl1Yd8pA7zV+zr3/BQMLnn3SDSQSuHFa6Z9XoNeX6BE LMnBSqQO3TWVXT/Sg8EYdrpvQVLdAPUNmPgg9HB2WBwSAn03ML5QIWGQLNqoo6Ld Tvw+iqZdDRb1wClseZ4J6HfTOW09QcY= -----END CERTIFICATE-----Generated at Sat Sep 26 13:04:55 2026 by rpki-client