$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/391a6c01-da6c-449a-9b50-ba54fb84039a/da93378e-6d07-3a1e-98f7-6ec0063c7938.roa File: da93378e-6d07-3a1e-98f7-6ec0063c7938.roa (raw, json) Hash identifier: C/vxAdNJ6og5MxrYtGbLY9yDmyliURRs95IMgbUNUhE= Subject key identifier: 0C:44:13:14:88:D4:F5:E3:20:84:7A:8A:B0:D4:26:D0:1C:14:2D:BC Certificate issuer: /CN=391a6c01-da6c-449a-9b50-ba54fb84039a Certificate serial: 010D0C9F4328584F2EED191EC7EC5F1B2A614B60 Authority key identifier: D3:63:8B:CF:99:D0:7E:60:81:29:4F:D1:01:8B:61:6B:82:6E:60:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/391a6c01-da6c-449a-9b50-ba54fb84039a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/391a6c01-da6c-449a-9b50-ba54fb84039a/da93378e-6d07-3a1e-98f7-6ec0063c7938.roa Signing time: Tue 15 Sep 2026 13:00:12 +0000 ROA not before: Tue 15 Sep 2026 13:00:12 +0000 ROA not after: Mon 14 Dec 2026 14:00:12 +0000 asID: 211392 IP address blocks: 23.145.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/391a6c01-da6c-449a-9b50-ba54fb84039a/391a6c01-da6c-449a-9b50-ba54fb84039a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/391a6c01-da6c-449a-9b50-ba54fb84039a/391a6c01-da6c-449a-9b50-ba54fb84039a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/391a6c01-da6c-449a-9b50-ba54fb84039a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:2e:ed:19:1e:c7:ec:5f:1b:2a:61:4b:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=391a6c01-da6c-449a-9b50-ba54fb84039a Validity Not Before: Sep 15 13:00:12 2026 GMT Not After : Dec 14 14:00:12 2026 GMT Subject: CN=01aebccb-76cd-44f3-b456-fd9ebaaf20ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:ad:75:9d:64:4e:0a:4e:b5:48:6c:0c:34:98: 72:da:34:11:ed:ba:73:d8:19:67:e6:76:4a:ab:de: e3:d4:c0:3a:33:2a:8c:c6:a4:a6:73:b8:8c:ed:82: e0:33:11:e1:a2:49:c2:7a:70:25:0b:8f:96:77:48: 53:d3:fb:71:a5:8a:57:80:9a:eb:0e:25:21:12:e9: dc:4c:15:8c:b5:bc:16:a4:51:87:99:c5:14:1d:81: 6e:23:1e:f4:7b:67:ca:cd:1f:98:c1:b6:ec:77:fa: 55:0b:b5:87:ce:8c:96:b8:31:9c:11:e8:71:f2:ab: 73:a2:7c:34:98:f4:50:f6:6b:a4:c9:46:d2:65:15: 96:37:ec:88:a2:ba:3d:19:58:e7:b7:70:70:be:da: a9:b9:b5:19:ba:c0:69:3b:1a:23:1b:dc:b0:75:42: 34:3e:9e:e2:66:de:4d:b4:48:63:40:67:79:8d:bc: 49:22:1d:0c:6f:3b:ec:01:ae:d0:f7:88:93:b6:ae: 76:00:4f:23:56:21:c7:4b:60:fa:4a:2f:05:91:7b: 40:d0:d8:0e:4f:2d:b7:71:9c:3e:b3:8b:37:bb:0b: 15:71:10:8f:c7:6f:30:7c:fc:9b:d6:8f:bd:ed:73: fb:55:05:fe:ca:c5:6f:b4:4c:5e:db:a1:76:fd:af: 3b:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:44:13:14:88:D4:F5:E3:20:84:7A:8A:B0:D4:26:D0:1C:14:2D:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/391a6c01-da6c-449a-9b50-ba54fb84039a/da93378e-6d07-3a1e-98f7-6ec0063c7938.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/391a6c01-da6c-449a-9b50-ba54fb84039a/391a6c01-da6c-449a-9b50-ba54fb84039a.crl X509v3 Authority Key Identifier: keyid:D3:63:8B:CF:99:D0:7E:60:81:29:4F:D1:01:8B:61:6B:82:6E:60:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/391a6c01-da6c-449a-9b50-ba54fb84039a.cer sbgp-ipAddrBlock: critical IPv4: 23.145.232.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:4a:12:72:b3:e5:b5:b5:70:0c:39:a5:76:2c:7e:7c:b4:11: f2:b4:3d:4f:5d:e1:91:9f:db:52:1b:90:0e:44:28:69:e1:85: cc:ce:02:af:60:14:d8:e6:51:d3:8c:e2:11:4c:0f:70:f5:7a: 97:50:d1:3a:0a:cb:c1:5f:c3:70:7e:70:dc:42:d5:c3:d8:a0: d9:77:26:1d:73:6e:38:d3:9e:93:9f:6d:0c:1d:85:f4:7c:e6: 1a:76:78:8e:e2:02:09:d5:9a:cd:39:ab:f4:30:8b:80:f8:7d: 63:1a:e0:47:b0:ef:36:e3:69:eb:fa:83:ed:2a:08:ae:71:e6: dd:c8:c8:ec:6c:7f:14:5e:8a:f7:c7:b6:5c:0d:cf:54:19:7d: fc:09:b0:ae:69:6d:6f:6c:4b:f1:4d:2c:bd:7c:9c:d8:27:d4: d1:88:13:e6:5c:09:63:73:5b:aa:24:df:d7:4f:19:6e:62:54: 1b:30:e9:8b:4c:a9:f6:12:f2:99:c5:ba:ec:b9:e0:e7:00:a4: 44:7a:e7:1c:2a:ea:00:8a:98:d3:a3:59:d5:f3:e4:c5:8a:be: d5:b7:30:5d:fe:dc:d3:fc:1f:c3:a2:3c:18:67:f2:de:50:20: bf:6b:4b:60:62:8c:2d:53:a1:fd:fa:42:ca:5f:1e:09:12:93: 24:23:1e:19 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8u7Rkex+xfGyphS2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzkxYTZjMDEtZGE2Yy00NDlhLTliNTAtYmE1NGZiODQw MzlhMB4XDTI2MDkxNTEzMDAxMloXDTI2MTIxNDE0MDAxMlowLzEtMCsGA1UEAxMk MDFhZWJjY2ItNzZjZC00NGYzLWI0NTYtZmQ5ZWJhYWYyMGVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqa11nWROCk61SGwMNJhy2jQR7bpz2Bln5nZK q97j1MA6MyqMxqSmc7iM7YLgMxHhoknCenAlC4+Wd0hT0/txpYpXgJrrDiUhEunc TBWMtbwWpFGHmcUUHYFuIx70e2fKzR+Ywbbsd/pVC7WHzoyWuDGcEehx8qtzonw0 mPRQ9mukyUbSZRWWN+yIoro9GVjnt3BwvtqpubUZusBpOxojG9ywdUI0Pp7iZt5N tEhjQGd5jbxJIh0MbzvsAa7Q94iTtq52AE8jViHHS2D6Si8FkXtA0NgOTy23cZw+ s4s3uwsVcRCPx28wfPyb1o+97XP7VQX+ysVvtExe26F2/a87pQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAxEExSI1PXjIIR6irDUJtAcFC28MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8zOTFh NmMwMS1kYTZjLTQ0OWEtOWI1MC1iYTU0ZmI4NDAzOWEvZGE5MzM3OGUtNmQwNy0z YTFlLTk4ZjctNmVjMDA2M2M3OTM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMzkxYTZjMDEtZGE2Yy00NDlhLTli NTAtYmE1NGZiODQwMzlhLzM5MWE2YzAxLWRhNmMtNDQ5YS05YjUwLWJhNTRmYjg0 MDM5YS5jcmwwHwYDVR0jBBgwFoAU02OLz5nQfmCBKU/RAYtha4JuYHgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8zOTFhNmMwMS1kYTZjLTQ0OWEtOWI1MC1iYTU0 ZmI4NDAzOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5HoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHtKEnKz5bW1cAw5pXYsfny0EfK0PU9d4ZGf21IbkA5EKGnhhczOAq9g FNjmUdOM4hFMD3D1epdQ0ToKy8Ffw3B+cNxC1cPYoNl3Jh1zbjjTnpOfbQwdhfR8 5hp2eI7iAgnVms05q/Qwi4D4fWMa4Eew7zbjaev6g+0qCK5x5t3IyOxsfxReivfH tlwNz1QZffwJsK5pbW9sS/FNLL18nNgn1NGIE+ZcCWNzW6ok39dPGW5iVBsw6YtM qfYS8pnFuuy54OcApER65xwq6gCKmNOjWdXz5MWKvtW3MF3+3NP8H8OiPBhn8t5Q IL9rS2BijC1Tof36QspfHgkSkyQjHhk= -----END CERTIFICATE-----Generated at Sun Sep 20 18:52:47 2026 by rpki-client