$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12/3617a1fa-a777-38fd-af3c-3691004a3020.roa File: 3617a1fa-a777-38fd-af3c-3691004a3020.roa (raw, json) Hash identifier: aXawVk+GOHvcac0s8sXg+CKOTvfH/DeIXS0OsAdYVl0= Subject key identifier: 23:23:6E:92:AD:BB:64:DD:02:D9:56:74:9A:CB:C3:01:84:44:A6:30 Certificate issuer: /CN=3eb60253-f02d-4723-999f-e2e3e0fd9b12 Certificate serial: 010D0C9F4328584F7E7E0B1C43B028767498F440 Authority key identifier: F6:29:BD:F8:D6:50:CA:43:85:31:05:27:81:20:63:48:3A:4A:58:5B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12/3617a1fa-a777-38fd-af3c-3691004a3020.roa Signing time: Wed 14 Oct 2026 01:00:13 +0000 ROA not before: Wed 14 Oct 2026 01:00:13 +0000 ROA not after: Tue 12 Jan 2027 02:00:13 +0000 asID: 62349 IP address blocks: 23.188.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12/3eb60253-f02d-4723-999f-e2e3e0fd9b12.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12/3eb60253-f02d-4723-999f-e2e3e0fd9b12.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 16 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7e:7e:0b:1c:43:b0:28:76:74:98:f4:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3eb60253-f02d-4723-999f-e2e3e0fd9b12 Validity Not Before: Oct 14 01:00:13 2026 GMT Not After : Jan 12 02:00:13 2027 GMT Subject: CN=d81410d1-df4c-409b-84b4-629798fba385 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:29:ce:6b:21:f3:4b:a1:7a:3e:a3:30:70:cb: 22:ad:43:30:8b:ea:17:cc:a0:83:8b:fd:56:2d:16: d7:d2:1d:17:29:68:cc:e0:7f:c4:5a:23:21:ec:c8: 10:7b:84:bd:04:4d:d9:eb:70:55:19:0e:cc:cc:69: b6:e7:9f:1d:91:4b:40:dc:62:c0:31:1e:05:df:89: 76:05:c9:03:bc:77:67:34:59:22:40:6a:ef:e9:57: 52:63:51:7d:c6:bc:15:ec:69:6f:10:cb:d3:44:2c: 18:2f:c1:63:b2:4d:ea:19:23:e9:50:df:ed:c1:81: d6:00:1b:e0:62:f0:43:8f:69:6b:f8:98:d5:07:79: b2:31:e7:3a:6a:4a:ef:dd:10:3a:a7:93:3e:e6:5a: 33:1f:06:e6:ed:67:0b:54:24:3e:70:9c:45:14:f6: 2c:13:b5:c2:98:65:49:8f:9a:6d:0a:36:9a:dd:00: ac:fa:11:21:2f:9a:6a:64:e0:3d:d3:ed:ce:30:bd: dd:05:b5:44:9f:d8:b3:d0:0a:4e:28:e2:44:82:95: 35:27:fd:f3:a5:ab:17:a0:bf:bb:76:25:08:52:94: da:a6:30:c7:9e:b9:4f:61:a5:86:c7:ce:ee:be:56: b4:7b:66:fa:79:2e:7e:f9:86:3a:61:23:42:53:8c: b0:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:23:6E:92:AD:BB:64:DD:02:D9:56:74:9A:CB:C3:01:84:44:A6:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12/3617a1fa-a777-38fd-af3c-3691004a3020.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12/3eb60253-f02d-4723-999f-e2e3e0fd9b12.crl X509v3 Authority Key Identifier: keyid:F6:29:BD:F8:D6:50:CA:43:85:31:05:27:81:20:63:48:3A:4A:58:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12.cer sbgp-ipAddrBlock: critical IPv4: 23.188.21.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:99:e3:76:94:59:cb:bb:fd:85:f3:d9:0a:59:2d:0c:2a:d7: d3:24:a5:6a:1c:72:24:7e:dc:a3:87:06:6e:6c:06:3e:7c:d3: f3:81:43:f9:15:90:3e:00:90:99:b6:ba:31:23:a8:c0:eb:14: db:ea:e6:28:99:67:4c:37:e3:c2:2c:78:cc:cf:54:36:c9:63: 95:a7:00:e3:7a:b4:33:7e:92:56:9f:c9:f8:60:23:0c:53:04: 37:b5:dc:81:c5:59:97:97:f0:98:cc:c6:24:00:37:bb:e2:4b: b5:bd:af:d5:dc:5a:ca:d2:39:e3:e6:98:7c:37:9b:c7:f1:0f: c0:7d:38:4c:e4:6e:50:56:88:67:5c:23:60:2b:ab:c1:e4:52: ec:77:00:6d:04:24:ad:ef:6d:da:d2:ab:9d:ae:d0:fe:27:b1: 9b:96:fd:39:7e:a7:04:85:ce:30:47:34:33:f2:1d:8b:20:60: 5c:26:dd:90:e9:77:cb:8f:1a:aa:ce:1e:ab:aa:d5:03:55:da: 92:1b:5a:72:e8:1f:11:c8:a2:43:f5:b0:10:e2:d1:cf:50:fb: 8b:68:f2:04:30:3a:79:6d:cb:c5:0b:18:9e:64:85:d4:96:5d: 00:df:00:22:ad:2d:f4:10:23:40:c4:af:a1:25:a1:a7:c5:b5: 63:4c:8d:e5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9+fgscQ7AodnSY9EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2ViNjAyNTMtZjAyZC00NzIzLTk5OWYtZTJlM2UwZmQ5 YjEyMB4XDTI2MTAxNDAxMDAxM1oXDTI3MDExMjAyMDAxM1owLzEtMCsGA1UEAxMk ZDgxNDEwZDEtZGY0Yy00MDliLTg0YjQtNjI5Nzk4ZmJhMzg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsSnOayHzS6F6PqMwcMsirUMwi+oXzKCDi/1W LRbX0h0XKWjM4H/EWiMh7MgQe4S9BE3Z63BVGQ7MzGm2558dkUtA3GLAMR4F34l2 BckDvHdnNFkiQGrv6VdSY1F9xrwV7GlvEMvTRCwYL8Fjsk3qGSPpUN/twYHWABvg YvBDj2lr+JjVB3myMec6akrv3RA6p5M+5lozHwbm7WcLVCQ+cJxFFPYsE7XCmGVJ j5ptCjaa3QCs+hEhL5pqZOA90+3OML3dBbVEn9iz0ApOKOJEgpU1J/3zpasXoL+7 diUIUpTapjDHnrlPYaWGx87uvla0e2b6eS5++YY6YSNCU4ywvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCMjbpKtu2TdAtlWdJrLwwGERKYwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zZWI2 MDI1My1mMDJkLTQ3MjMtOTk5Zi1lMmUzZTBmZDliMTIvMzYxN2ExZmEtYTc3Ny0z OGZkLWFmM2MtMzY5MTAwNGEzMDIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvM2ViNjAyNTMtZjAyZC00NzIzLTk5 OWYtZTJlM2UwZmQ5YjEyLzNlYjYwMjUzLWYwMmQtNDcyMy05OTlmLWUyZTNlMGZk OWIxMi5jcmwwHwYDVR0jBBgwFoAU9im9+NZQykOFMQUngSBjSDpKWFswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zZWI2MDI1My1mMDJkLTQ3MjMtOTk5Zi1lMmUz ZTBmZDliMTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF7wVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFSZ43aUWcu7/YXz2QpZLQwq19MkpWocciR+3KOHBm5sBj580/OBQ/kV kD4AkJm2ujEjqMDrFNvq5iiZZ0w348IseMzPVDbJY5WnAON6tDN+klafyfhgIwxT BDe13IHFWZeX8JjMxiQAN7viS7W9r9XcWsrSOePmmHw3m8fxD8B9OEzkblBWiGdc I2Arq8HkUux3AG0EJK3vbdrSq52u0P4nsZuW/Tl+pwSFzjBHNDPyHYsgYFwm3ZDp d8uPGqrOHquq1QNV2pIbWnLoHxHIokP1sBDi0c9Q+4to8gQwOnlty8ULGJ5khdSW XQDfACKtLfQQI0DEr6EloafFtWNMjeU= -----END CERTIFICATE-----Generated at Thu Oct 15 03:55:07 2026 by rpki-client