$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/743065a1-7855-4be2-941a-23bce4898410/0050983a-0db3-3529-a4a6-e31fdd013725.roa File: 0050983a-0db3-3529-a4a6-e31fdd013725.roa (raw, json) Hash identifier: kuAKlsbr5M+OzWgnn8ZjZ4iDAICFm5LFOtZOm/MBuIg= Subject key identifier: 17:20:D5:AC:91:A6:30:BA:43:FF:4D:C6:23:8F:9B:4E:F9:05:A6:6D Certificate issuer: /CN=743065a1-7855-4be2-941a-23bce4898410 Certificate serial: 010D0C9F4328584F2EED1911C81D92E147E47A80 Authority key identifier: 1D:E0:AD:EE:8D:77:87:A8:E1:04:5F:81:3B:C9:D9:7C:58:5B:11:1C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/743065a1-7855-4be2-941a-23bce4898410.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/743065a1-7855-4be2-941a-23bce4898410/0050983a-0db3-3529-a4a6-e31fdd013725.roa Signing time: Tue 15 Sep 2026 13:00:12 +0000 ROA not before: Tue 15 Sep 2026 13:00:12 +0000 ROA not after: Mon 14 Dec 2026 14:00:12 +0000 asID: 211392 IP address blocks: 23.145.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/743065a1-7855-4be2-941a-23bce4898410/743065a1-7855-4be2-941a-23bce4898410.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/743065a1-7855-4be2-941a-23bce4898410/743065a1-7855-4be2-941a-23bce4898410.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/743065a1-7855-4be2-941a-23bce4898410.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:2e:ed:19:11:c8:1d:92:e1:47:e4:7a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=743065a1-7855-4be2-941a-23bce4898410 Validity Not Before: Sep 15 13:00:12 2026 GMT Not After : Dec 14 14:00:12 2026 GMT Subject: CN=19537406-7b83-4ba2-b3a2-d58f31cd410d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:f2:29:f1:51:a0:dd:65:90:3b:02:fd:60:bb: 3b:95:4d:01:2c:f6:f4:ed:48:2d:da:f9:c9:b4:9c: 7d:f5:ae:1a:f0:dd:af:46:fb:8d:27:81:5d:99:f3: 7c:bf:1e:44:8b:1e:74:d2:2e:64:b3:b0:b3:81:98: 0e:d5:25:f6:b3:fa:14:9b:fa:37:33:59:ca:43:60: 35:45:e9:d5:b0:f7:e0:92:84:db:0d:f4:11:f4:77: 46:ab:63:65:f6:52:eb:ce:b8:34:71:a7:c2:eb:02: ee:42:ad:8e:12:e1:62:75:15:00:f0:a4:45:78:3f: 58:66:85:76:8b:e9:c1:61:f3:ee:30:9c:d0:22:1f: cc:50:0b:7e:07:cb:23:8b:7b:e4:e1:27:e2:d5:95: 4e:51:89:f7:a3:4c:e5:a6:bf:a6:41:7d:46:c9:25: 63:8a:47:83:51:d4:5e:37:d5:0f:09:86:65:49:0a: 05:37:b7:bd:d2:9c:50:f6:94:cf:40:d7:17:d5:1d: b9:be:35:e8:7c:76:07:75:3d:31:df:52:ff:55:bb: 32:64:b8:e1:c9:9d:40:45:84:6d:e0:a3:20:74:dd: 5a:06:4b:3b:1c:e2:d2:aa:c7:25:7f:88:4d:48:fd: d9:3f:68:df:49:8a:94:00:bd:9a:af:79:c1:f4:9e: f0:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:20:D5:AC:91:A6:30:BA:43:FF:4D:C6:23:8F:9B:4E:F9:05:A6:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/743065a1-7855-4be2-941a-23bce4898410/0050983a-0db3-3529-a4a6-e31fdd013725.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/743065a1-7855-4be2-941a-23bce4898410/743065a1-7855-4be2-941a-23bce4898410.crl X509v3 Authority Key Identifier: keyid:1D:E0:AD:EE:8D:77:87:A8:E1:04:5F:81:3B:C9:D9:7C:58:5B:11:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/743065a1-7855-4be2-941a-23bce4898410.cer sbgp-ipAddrBlock: critical IPv4: 23.145.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:d9:9b:24:01:97:af:16:0f:a5:4b:f9:98:3a:5a:30:21:41: 9c:12:85:37:a9:69:72:56:7b:3a:2d:a7:73:de:cd:94:3b:07: 17:a5:be:fd:5d:b6:9b:69:43:d7:b8:20:48:8e:8c:f1:5f:c6: f7:8b:91:51:8b:bb:39:eb:e0:21:b6:5f:dc:b4:75:21:02:2b: f0:00:07:4d:5c:d6:b0:62:de:1f:14:13:fc:91:6d:b2:ed:b4: 02:b2:13:83:6d:7b:84:33:26:e5:97:fc:0f:17:44:3e:1b:9c: 20:4a:0d:5b:4a:80:91:72:b7:f0:cd:02:9a:95:8d:cb:6e:e6: f6:5e:5d:fc:74:9a:92:2e:1d:71:f6:07:b3:27:08:a7:63:5e: 6e:ce:97:d0:78:21:00:3b:ff:8e:d9:c0:4a:51:74:5f:cd:90: cf:fd:cb:ab:5d:dc:26:d1:53:d8:38:ca:e8:bf:82:76:77:a8: 2c:c4:2a:3c:55:af:4b:70:b2:b6:e6:9b:12:c8:3c:a6:e2:77: 08:70:bc:5d:e1:d9:89:be:ef:ae:07:50:a2:f0:33:75:3c:86: 6c:71:92:18:74:93:54:e6:6c:39:31:57:2a:15:57:ea:af:ba: 8e:42:12:9a:2d:3d:82:b5:fe:6b:e9:39:bb:f4:03:2d:30:4d: 78:5b:d7:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8u7RkRyB2S4UfkeoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQzMDY1YTEtNzg1NS00YmUyLTk0MWEtMjNiY2U0ODk4 NDEwMB4XDTI2MDkxNTEzMDAxMloXDTI2MTIxNDE0MDAxMlowLzEtMCsGA1UEAxMk MTk1Mzc0MDYtN2I4My00YmEyLWIzYTItZDU4ZjMxY2Q0MTBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2/Ip8VGg3WWQOwL9YLs7lU0BLPb07Ugt2vnJ tJx99a4a8N2vRvuNJ4FdmfN8vx5Eix500i5ks7CzgZgO1SX2s/oUm/o3M1nKQ2A1 RenVsPfgkoTbDfQR9HdGq2Nl9lLrzrg0cafC6wLuQq2OEuFidRUA8KRFeD9YZoV2 i+nBYfPuMJzQIh/MUAt+B8sji3vk4Sfi1ZVOUYn3o0zlpr+mQX1GySVjikeDUdRe N9UPCYZlSQoFN7e90pxQ9pTPQNcX1R25vjXofHYHdT0x31L/VbsyZLjhyZ1ARYRt 4KMgdN1aBks7HOLSqsclf4hNSP3ZP2jfSYqUAL2ar3nB9J7wPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBcg1ayRpjC6Q/9NxiOPm075BaZtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83NDMw NjVhMS03ODU1LTRiZTItOTQxYS0yM2JjZTQ4OTg0MTAvMDA1MDk4M2EtMGRiMy0z NTI5LWE0YTYtZTMxZmRkMDEzNzI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNzQzMDY1YTEtNzg1NS00YmUyLTk0 MWEtMjNiY2U0ODk4NDEwLzc0MzA2NWExLTc4NTUtNGJlMi05NDFhLTIzYmNlNDg5 ODQxMC5jcmwwHwYDVR0jBBgwFoAUHeCt7o13h6jhBF+BO8nZfFhbERwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83NDMwNjVhMS03ODU1LTRiZTItOTQxYS0yM2Jj ZTQ4OTg0MTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5GYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABvZmyQBl68WD6VL+Zg6WjAhQZwShTepaXJWezotp3PezZQ7Bxelvv1d tptpQ9e4IEiOjPFfxveLkVGLuznr4CG2X9y0dSECK/AAB01c1rBi3h8UE/yRbbLt tAKyE4Nte4QzJuWX/A8XRD4bnCBKDVtKgJFyt/DNApqVjctu5vZeXfx0mpIuHXH2 B7MnCKdjXm7Ol9B4IQA7/47ZwEpRdF/NkM/9y6td3CbRU9g4yui/gnZ3qCzEKjxV r0twsrbmmxLIPKbidwhwvF3h2Ym+764HUKLwM3U8hmxxkhh0k1TmbDkxVyoVV+qv uo5CEpotPYK1/mvpObv0Ay0wTXhb10E= -----END CERTIFICATE-----Generated at Sun Oct 11 03:23:16 2026 by rpki-client