$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/24c31307-e10d-4537-aa7a-6bbf3692c5d6/cf3d3301-f945-35c4-9cb1-07fee82c2baa.roa File: cf3d3301-f945-35c4-9cb1-07fee82c2baa.roa (raw, json) Hash identifier: HIiFZPnDKeWD/5JOIPX1Tdbj2fdQw50BKQHqilIM/zg= Subject key identifier: 54:8E:77:28:40:11:28:D0:AF:89:EF:CA:36:16:A2:29:71:9C:33:2B Certificate issuer: /CN=24c31307-e10d-4537-aa7a-6bbf3692c5d6 Certificate serial: 010D0C9F4328584F331D2C8A78DBA1E59801FD40 Authority key identifier: 53:48:D6:8D:23:DE:C9:1F:62:B7:F0:97:56:05:53:9B:42:52:3B:9C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/24c31307-e10d-4537-aa7a-6bbf3692c5d6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/24c31307-e10d-4537-aa7a-6bbf3692c5d6/cf3d3301-f945-35c4-9cb1-07fee82c2baa.roa Signing time: Thu 17 Sep 2026 01:00:11 +0000 ROA not before: Thu 17 Sep 2026 01:00:11 +0000 ROA not after: Wed 16 Dec 2026 02:00:11 +0000 asID: 396533 IP address blocks: 170.149.228.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/24c31307-e10d-4537-aa7a-6bbf3692c5d6/24c31307-e10d-4537-aa7a-6bbf3692c5d6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/24c31307-e10d-4537-aa7a-6bbf3692c5d6/24c31307-e10d-4537-aa7a-6bbf3692c5d6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/24c31307-e10d-4537-aa7a-6bbf3692c5d6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:33:1d:2c:8a:78:db:a1:e5:98:01:fd:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24c31307-e10d-4537-aa7a-6bbf3692c5d6 Validity Not Before: Sep 17 01:00:11 2026 GMT Not After : Dec 16 02:00:11 2026 GMT Subject: CN=d060fb73-a2fd-4664-9ee1-933baa3e9d93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:59:b0:f2:7c:a4:0b:b9:e7:b5:95:87:00:33: ce:a7:d1:d4:ca:87:f2:15:4f:cc:a9:89:16:4a:bf: bc:a4:53:b6:cc:3d:0f:23:1e:57:55:f0:64:1f:00: 99:bc:62:9e:2d:71:4d:27:a5:29:d4:7b:9b:83:05: 2c:95:e3:30:d8:84:13:47:13:2d:c4:32:70:73:37: 0a:47:63:43:d1:31:9c:1a:49:39:cc:c3:5d:9e:34: ff:d4:83:4a:73:c7:08:79:a6:77:a6:7e:d6:ea:08: 78:36:fc:91:5c:d6:cc:13:33:ff:97:de:4d:1f:71: bc:26:9d:5a:c7:bb:97:31:98:bf:0d:3c:7e:36:c4: bf:b7:bd:88:9e:7f:cc:19:ce:78:1a:2d:c7:1d:fb: e9:8b:78:8f:d6:3f:45:3d:a4:b1:7d:05:c8:0d:c7: 36:7a:25:54:ba:9b:4d:7c:2d:7e:82:99:fd:70:35: a0:0e:8e:f8:9a:f9:ab:37:e9:f1:21:d5:f7:0f:4d: 1b:51:fc:28:06:e4:2e:a8:c0:d4:5e:81:7b:c5:5b: fc:40:b6:95:4b:b2:bf:b4:04:46:4f:9e:56:cf:ad: b6:69:59:2b:27:ba:9a:12:ea:6e:f5:c2:26:ca:c7: 61:47:72:65:39:9d:9e:fa:13:5b:68:26:6b:fa:90: 60:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:8E:77:28:40:11:28:D0:AF:89:EF:CA:36:16:A2:29:71:9C:33:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/24c31307-e10d-4537-aa7a-6bbf3692c5d6/cf3d3301-f945-35c4-9cb1-07fee82c2baa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/24c31307-e10d-4537-aa7a-6bbf3692c5d6/24c31307-e10d-4537-aa7a-6bbf3692c5d6.crl X509v3 Authority Key Identifier: keyid:53:48:D6:8D:23:DE:C9:1F:62:B7:F0:97:56:05:53:9B:42:52:3B:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/24c31307-e10d-4537-aa7a-6bbf3692c5d6.cer sbgp-ipAddrBlock: critical IPv4: 170.149.228.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:10:21:2b:d5:18:46:ee:e2:65:ef:bd:3a:c0:1f:c8:91:9d: 94:59:dc:11:4f:6c:13:6a:9a:ba:a8:99:c5:02:6c:38:89:e1: 89:ac:27:8a:5f:af:0a:7b:ff:d0:22:e0:34:0a:98:a6:b9:83: 5b:21:29:19:49:d4:80:e3:d4:be:53:a4:7c:27:7c:aa:e9:31: 63:0e:55:67:2d:73:5e:cf:8a:42:92:4d:2a:77:c8:31:9e:f3: 47:ec:78:66:b8:c2:10:7e:2f:de:b1:cb:e7:95:47:33:a3:19: 02:c4:7f:6d:7b:38:dd:88:92:c2:d3:99:28:cd:00:95:f5:79: 45:22:3c:a3:20:03:56:f4:8e:37:0c:9f:d5:4b:19:b2:13:a3: 33:50:e0:c0:84:8e:ab:60:59:18:5f:7b:ee:e6:09:43:fc:ab: 16:cb:62:e2:dc:e0:8d:70:60:64:57:5c:ce:81:0e:4f:94:34: b6:cf:97:5f:f8:16:48:be:a6:82:ba:0d:25:ca:15:56:8f:d8: 4d:23:70:b2:88:6e:69:bd:b3:50:c2:e7:a7:51:ab:de:84:0d: e1:5f:91:74:a5:ee:59:50:f4:82:90:cd:31:dd:f3:f3:0e:50: 67:ca:95:14:73:a4:ce:fd:98:6d:cb:be:47:ca:db:f0:c4:1b: d6:5a:78:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8zHSyKeNuh5ZgB/UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjRjMzEzMDctZTEwZC00NTM3LWFhN2EtNmJiZjM2OTJj NWQ2MB4XDTI2MDkxNzAxMDAxMVoXDTI2MTIxNjAyMDAxMVowLzEtMCsGA1UEAxMk ZDA2MGZiNzMtYTJmZC00NjY0LTllZTEtOTMzYmFhM2U5ZDkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt1mw8nykC7nntZWHADPOp9HUyofyFU/MqYkW Sr+8pFO2zD0PIx5XVfBkHwCZvGKeLXFNJ6Up1HubgwUsleMw2IQTRxMtxDJwczcK R2ND0TGcGkk5zMNdnjT/1INKc8cIeaZ3pn7W6gh4NvyRXNbMEzP/l95NH3G8Jp1a x7uXMZi/DTx+NsS/t72Inn/MGc54Gi3HHfvpi3iP1j9FPaSxfQXIDcc2eiVUuptN fC1+gpn9cDWgDo74mvmrN+nxIdX3D00bUfwoBuQuqMDUXoF7xVv8QLaVS7K/tARG T55Wz622aVkrJ7qaEupu9cImysdhR3JlOZ2e+hNbaCZr+pBg8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFSOdyhAESjQr4nvyjYWoilxnDMrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8yNGMz MTMwNy1lMTBkLTQ1MzctYWE3YS02YmJmMzY5MmM1ZDYvY2YzZDMzMDEtZjk0NS0z NWM0LTljYjEtMDdmZWU4MmMyYmFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvMjRjMzEzMDctZTEwZC00NTM3LWFh N2EtNmJiZjM2OTJjNWQ2LzI0YzMxMzA3LWUxMGQtNDUzNy1hYTdhLTZiYmYzNjky YzVkNi5jcmwwHwYDVR0jBBgwFoAUU0jWjSPeyR9it/CXVgVTm0JSO5wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi8yNGMzMTMwNy1lMTBkLTQ1MzctYWE3YS02YmJm MzY5MmM1ZDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqpXkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAYQISvVGEbu4mXvvTrAH8iRnZRZ3BFPbBNqmrqomcUCbDiJ4YmsJ4pf rwp7/9Ai4DQKmKa5g1shKRlJ1IDj1L5TpHwnfKrpMWMOVWctc17PikKSTSp3yDGe 80fseGa4whB+L96xy+eVRzOjGQLEf217ON2IksLTmSjNAJX1eUUiPKMgA1b0jjcM n9VLGbITozNQ4MCEjqtgWRhfe+7mCUP8qxbLYuLc4I1wYGRXXM6BDk+UNLbPl1/4 Fki+poK6DSXKFVaP2E0jcLKIbmm9s1DC56dRq96EDeFfkXSl7llQ9IKQzTHd8/MO UGfKlRRzpM79mG3LvkfK2/DEG9ZaeHE= -----END CERTIFICATE-----Generated at Mon Sep 21 17:47:27 2026 by rpki-client