$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1df08146-5ee7-4c5b-9f08-3436e38ab3bc/4629cd80-43ee-392b-b239-2aae9165dd21.roa File: 4629cd80-43ee-392b-b239-2aae9165dd21.roa (raw, json) Hash identifier: A43Jr2duYFugrHMisxKmwfrX9VXYuIXmkns1ViWAQ10= Subject key identifier: 95:AA:7A:8F:E0:6F:11:46:57:F2:56:DA:B3:6B:C8:5A:33:42:87:F6 Certificate issuer: /CN=1df08146-5ee7-4c5b-9f08-3436e38ab3bc Certificate serial: 010D0C9F4328584F497606197AA005B6C0C523C0 Authority key identifier: 55:71:F3:B6:E8:B2:11:08:B1:95:A4:6D:6D:78:65:76:F7:28:77:33 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1df08146-5ee7-4c5b-9f08-3436e38ab3bc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1df08146-5ee7-4c5b-9f08-3436e38ab3bc/4629cd80-43ee-392b-b239-2aae9165dd21.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 401469 IP address blocks: 23.138.24.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1df08146-5ee7-4c5b-9f08-3436e38ab3bc/1df08146-5ee7-4c5b-9f08-3436e38ab3bc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1df08146-5ee7-4c5b-9f08-3436e38ab3bc/1df08146-5ee7-4c5b-9f08-3436e38ab3bc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1df08146-5ee7-4c5b-9f08-3436e38ab3bc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:76:06:19:7a:a0:05:b6:c0:c5:23:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1df08146-5ee7-4c5b-9f08-3436e38ab3bc Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=35f4cc1d-cc09-4be1-b502-719a2d25c4eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:66:ae:28:04:46:ae:78:cf:33:ac:be:b5:c2: c8:a5:04:dc:c6:2d:83:d8:df:bb:db:0d:47:cb:8d: 96:3d:4f:92:89:a6:89:33:a3:88:80:24:55:19:62: 81:bb:c1:8b:98:a1:86:89:21:86:20:5b:47:45:14: 05:1d:a9:bd:80:76:4b:5c:04:01:83:a5:8f:de:e1: f8:5d:b6:fb:09:94:d1:1b:6b:18:f8:52:9d:1b:77: bf:8b:e8:03:44:a7:66:cf:6c:04:0d:ed:21:9c:f2: fa:5b:e8:8f:4e:3b:f9:0b:23:46:d6:33:6c:15:08: 2e:f5:3d:7c:e2:99:54:fc:06:90:cc:50:d7:2c:c1: aa:23:d0:ac:7c:e6:b7:5d:61:31:c9:3d:13:96:de: 88:f0:75:e6:5f:9a:02:ae:e1:e3:99:aa:e6:bf:57: fa:3c:1f:09:cd:72:3e:dd:5d:29:ef:34:19:0c:ee: 3c:97:81:08:be:51:62:4d:92:63:dc:1e:a6:8f:c4: 13:7c:b7:b0:56:1c:5c:18:06:fb:e9:1d:ad:9a:78: 6e:a4:ff:3c:0c:a1:a9:73:9f:05:b6:35:cb:a8:8b: 0a:41:5a:48:78:23:ff:d1:7f:04:68:c2:ea:1f:21: c6:1a:4d:f2:b9:38:9d:25:27:04:9c:01:c0:11:8d: 80:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:AA:7A:8F:E0:6F:11:46:57:F2:56:DA:B3:6B:C8:5A:33:42:87:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1df08146-5ee7-4c5b-9f08-3436e38ab3bc/4629cd80-43ee-392b-b239-2aae9165dd21.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1df08146-5ee7-4c5b-9f08-3436e38ab3bc/1df08146-5ee7-4c5b-9f08-3436e38ab3bc.crl X509v3 Authority Key Identifier: keyid:55:71:F3:B6:E8:B2:11:08:B1:95:A4:6D:6D:78:65:76:F7:28:77:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1df08146-5ee7-4c5b-9f08-3436e38ab3bc.cer sbgp-ipAddrBlock: critical IPv4: 23.138.24.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b2:c0:77:6d:b8:f5:87:2b:8d:00:24:05:5a:78:db:a5:4f:34: 92:98:36:6b:df:a3:9d:bf:3c:ef:ca:e1:4f:2a:98:37:6f:13: 70:47:c9:28:73:1d:b6:9a:23:ff:9c:97:44:06:84:c6:d7:cb: 81:4f:8b:7a:7a:e7:e5:c5:32:fa:2a:f1:17:91:05:ff:f2:38: ad:81:c2:eb:97:1f:d5:ec:6c:4c:97:5f:aa:5b:c3:e6:4e:00: 70:b7:bf:fd:af:3a:41:bc:fb:46:c2:de:62:cb:e2:9c:5f:da: 1b:8c:d6:a8:cd:69:87:1a:ee:29:49:dd:66:44:08:c7:90:5b: 0f:8a:ce:cb:fd:0f:c3:67:94:12:5b:1f:44:4e:2c:58:f1:d1: 2e:1b:5f:3d:5c:9e:eb:77:4d:18:b3:ca:d0:84:c0:a4:00:b3: e8:c0:15:cd:6b:13:61:9b:61:b6:5a:23:e1:2f:42:1e:ef:0b: 50:5c:fb:cc:34:85:ef:6b:44:72:bb:9e:78:f5:b8:76:ee:fd: 3b:9c:01:60:4b:f8:61:8c:8d:be:ef:81:a1:6a:86:80:f2:5f: 3b:43:37:7f:6f:f7:d6:99:dc:6f:04:60:06:3b:66:ff:22:b2: e9:db:2f:44:46:55:dd:26:e8:8b:4e:a5:a2:9e:f1:b8:33:0a: 80:29:77:da -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdgYZeqAFtsDFI8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWRmMDgxNDYtNWVlNy00YzViLTlmMDgtMzQzNmUzOGFi M2JjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MzVmNGNjMWQtY2MwOS00YmUxLWI1MDItNzE5YTJkMjVjNGViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArWauKARGrnjPM6y+tcLIpQTcxi2D2N+72w1H y42WPU+SiaaJM6OIgCRVGWKBu8GLmKGGiSGGIFtHRRQFHam9gHZLXAQBg6WP3uH4 Xbb7CZTRG2sY+FKdG3e/i+gDRKdmz2wEDe0hnPL6W+iPTjv5CyNG1jNsFQgu9T18 4plU/AaQzFDXLMGqI9CsfOa3XWExyT0Tlt6I8HXmX5oCruHjmarmv1f6PB8JzXI+ 3V0p7zQZDO48l4EIvlFiTZJj3B6mj8QTfLewVhxcGAb76R2tmnhupP88DKGpc58F tjXLqIsKQVpIeCP/0X8EaMLqHyHGGk3yuTidJScEnAHAEY2AiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJWqeo/gbxFGV/JW2rNryFozQof2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xZGYw ODE0Ni01ZWU3LTRjNWItOWYwOC0zNDM2ZTM4YWIzYmMvNDYyOWNkODAtNDNlZS0z OTJiLWIyMzktMmFhZTkxNjVkZDIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMWRmMDgxNDYtNWVlNy00YzViLTlm MDgtMzQzNmUzOGFiM2JjLzFkZjA4MTQ2LTVlZTctNGM1Yi05ZjA4LTM0MzZlMzhh YjNiYy5jcmwwHwYDVR0jBBgwFoAUVXHztuiyEQixlaRtbXhldvcodzMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8xZGYwODE0Ni01ZWU3LTRjNWItOWYwOC0zNDM2 ZTM4YWIzYmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4oYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALLAd2249YcrjQAkBVp426VPNJKYNmvfo52/PO/K4U8qmDdvE3BHyShz HbaaI/+cl0QGhMbXy4FPi3p65+XFMvoq8ReRBf/yOK2BwuuXH9XsbEyXX6pbw+ZO AHC3v/2vOkG8+0bC3mLL4pxf2huM1qjNaYca7ilJ3WZECMeQWw+Kzsv9D8NnlBJb H0ROLFjx0S4bXz1cnut3TRizytCEwKQAs+jAFc1rE2GbYbZaI+EvQh7vC1Bc+8w0 he9rRHK7nnj1uHbu/TucAWBL+GGMjb7vgaFqhoDyXztDN39v99aZ3G8EYAY7Zv8i sunbL0RGVd0m6ItOpaKe8bgzCoApd9o= -----END CERTIFICATE-----Generated at Sat Sep 26 07:21:41 2026 by rpki-client