$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/db4c8a39-6acc-31cf-bfb3-0fa5ea626dc3.roa File: db4c8a39-6acc-31cf-bfb3-0fa5ea626dc3.roa (raw, json) Hash identifier: NcDTa8+fJxXRWwvuKKnTyqjojvwRNVGectIJtkv6kZE= Subject key identifier: 2C:C4:F0:12:C6:00:38:67:0C:B4:20:E2:8D:08:26:58:20:E5:61:89 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F497CFB6E5644372B096A29C0 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/db4c8a39-6acc-31cf-bfb3-0fa5ea626dc3.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 396982 IP address blocks: 23.236.48.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7c:fb:6e:56:44:37:2b:09:6a:29:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=df5ceaa5-3052-4f07-89d3-a20340152460 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:47:32:a9:0e:ee:6c:3a:57:d9:36:2e:8e:62: 4d:99:58:25:0c:f6:b3:83:87:6e:38:96:41:1e:f0: 8f:f3:be:52:0e:71:bb:ea:0e:03:bb:76:86:92:9e: 0b:72:d6:5f:2f:ef:eb:1c:73:85:35:6d:71:ac:7e: 17:e3:25:12:56:56:4c:f5:51:b1:ac:7a:65:c9:c4: 3d:ce:dd:39:e2:98:65:49:44:a7:91:8b:13:56:41: c7:a8:aa:99:8e:93:a6:21:80:ea:23:83:5e:88:b3: de:de:75:f1:dc:17:22:4f:4c:ed:63:82:d8:44:47: d7:9c:06:d7:fc:84:d9:55:a8:3d:65:6e:91:87:2b: 8e:3e:3a:b4:d2:d0:7e:a6:59:a1:44:52:82:59:1f: 20:81:10:0d:a5:eb:d0:01:7c:bd:9f:8d:ea:e3:aa: c7:76:17:25:24:8a:b4:e6:45:ad:36:39:84:ad:11: a0:53:ec:a8:a6:f8:d8:6c:76:9a:88:a6:3d:33:2a: 20:72:e5:2a:99:35:bc:4e:78:9d:72:e8:4a:0d:6a: e4:01:3a:b1:f5:a8:63:82:cf:c7:d4:b5:b1:4b:1b: 31:e8:0b:ec:00:be:2c:ab:92:26:56:f5:e8:11:74: 7a:a5:9e:31:a3:ec:e7:6a:d4:73:86:3e:de:7d:e0: 54:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:C4:F0:12:C6:00:38:67:0C:B4:20:E2:8D:08:26:58:20:E5:61:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/db4c8a39-6acc-31cf-bfb3-0fa5ea626dc3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 23.236.48.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:d0:d3:5e:94:20:65:a9:6c:b9:1e:fd:ac:97:b7:7d:8d:89: c8:a1:40:f9:97:b5:35:56:40:9f:10:d9:c7:1a:9e:ac:24:bb: dd:4a:57:db:7a:22:39:ec:48:bc:02:45:56:e1:49:53:3e:35: fb:a2:c0:6b:c2:15:dd:d1:21:52:e7:50:46:08:94:0c:95:9f: cf:6e:e7:6d:2d:16:cf:b8:d9:2d:9a:4e:c0:0d:13:04:99:e0: c6:65:56:25:c6:bd:ef:73:66:d6:70:0f:77:01:13:b1:6e:e0: 58:28:34:6b:3e:0e:34:d2:3c:69:53:a5:84:db:ac:90:4f:0e: 5e:fe:3a:ba:b9:38:6e:2c:52:5e:03:19:44:3e:81:d9:04:56: 51:e6:3d:2c:61:11:69:07:69:a0:2a:5a:a0:fc:68:af:bc:24: 46:59:8e:c6:76:68:ef:db:7e:01:40:14:72:0f:05:1d:8b:dd: aa:a0:65:3b:4b:f0:ad:69:62:68:7e:db:85:fd:2f:80:c9:e0: c2:7b:39:e7:51:ba:3b:2e:07:d4:7a:10:7f:3c:c7:7b:3e:8f: db:32:8c:15:bb:a5:9e:46:65:fb:b8:2f:ab:df:0c:0d:2b:5c: 7a:12:73:4f:96:95:e6:fd:91:cd:c0:40:57:e6:fb:32:37:98: 88:c9:df:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JfPtuVkQ3KwlqKcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZGY1Y2VhYTUtMzA1Mi00ZjA3LTg5ZDMtYTIwMzQwMTUyNDYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhkcyqQ7ubDpX2TYujmJNmVglDPazg4duOJZB HvCP875SDnG76g4Du3aGkp4LctZfL+/rHHOFNW1xrH4X4yUSVlZM9VGxrHplycQ9 zt054phlSUSnkYsTVkHHqKqZjpOmIYDqI4NeiLPe3nXx3BciT0ztY4LYREfXnAbX /ITZVag9ZW6RhyuOPjq00tB+plmhRFKCWR8ggRANpevQAXy9n43q46rHdhclJIq0 5kWtNjmErRGgU+yopvjYbHaaiKY9MyogcuUqmTW8TnidcuhKDWrkATqx9ahjgs/H 1LWxSxsx6AvsAL4sq5ImVvXoEXR6pZ4xo+znatRzhj7efeBUswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCzE8BLGADhnDLQg4o0IJlgg5WGJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZGI0YzhhMzktNmFjYy0z MWNmLWJmYjMtMGZhNWVhNjI2ZGMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF+wwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB3Q016UIGWpbLke/ayXt32NicihQPmXtTVWQJ8Q2ccanqwku91KV9t6 IjnsSLwCRVbhSVM+NfuiwGvCFd3RIVLnUEYIlAyVn89u520tFs+42S2aTsANEwSZ 4MZlViXGve9zZtZwD3cBE7Fu4FgoNGs+DjTSPGlTpYTbrJBPDl7+Orq5OG4sUl4D GUQ+gdkEVlHmPSxhEWkHaaAqWqD8aK+8JEZZjsZ2aO/bfgFAFHIPBR2L3aqgZTtL 8K1pYmh+24X9L4DJ4MJ7OedRujsuB9R6EH88x3s+j9syjBW7pZ5GZfu4L6vfDA0r XHoSc0+Wleb9kc3AQFfm+zI3mIjJ38A= -----END CERTIFICATE-----Generated at Fri Sep 25 22:55:18 2026 by rpki-client