$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ab557b41-b8ff-4aa9-b9ed-6defa9a6b572/57901a8d-3025-36c9-bed1-42964cd3980b.roa File: 57901a8d-3025-36c9-bed1-42964cd3980b.roa (raw, json) Hash identifier: qr28/E0+9b7lwyBi0mXk5FSfQuT+Fr0M7S2YAZKHdl4= Subject key identifier: DB:A9:3E:67:1D:EE:66:38:69:22:79:E4:67:53:E5:B9:58:E4:58:52 Certificate issuer: /CN=ab557b41-b8ff-4aa9-b9ed-6defa9a6b572 Certificate serial: 010D0C9F4328584F4C3D520591758A9756A6B040 Authority key identifier: 0E:B8:EA:77:8E:D2:C1:CA:DF:DD:32:63:8F:C4:2F:80:AA:91:56:4A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ab557b41-b8ff-4aa9-b9ed-6defa9a6b572.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ab557b41-b8ff-4aa9-b9ed-6defa9a6b572/57901a8d-3025-36c9-bed1-42964cd3980b.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 54785 IP address blocks: 23.160.104.0/24 maxlen: 24 2602:fa57::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ab557b41-b8ff-4aa9-b9ed-6defa9a6b572/ab557b41-b8ff-4aa9-b9ed-6defa9a6b572.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ab557b41-b8ff-4aa9-b9ed-6defa9a6b572/ab557b41-b8ff-4aa9-b9ed-6defa9a6b572.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ab557b41-b8ff-4aa9-b9ed-6defa9a6b572.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:52:05:91:75:8a:97:56:a6:b0:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab557b41-b8ff-4aa9-b9ed-6defa9a6b572 Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=d02a35b8-1f55-4917-9cd1-bc58be2bae57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:06:5f:79:8f:55:21:a6:ae:da:38:15:68:56: bd:d4:33:2e:e4:c5:34:8d:9a:94:49:b2:34:60:b3: 01:01:42:32:35:fd:2d:f7:87:00:2e:fa:00:3f:0d: 4a:63:3c:1f:c0:62:50:09:64:39:16:f6:a4:0e:7b: 2a:34:52:77:28:db:36:28:1e:10:ca:b4:44:22:d4: 91:5e:94:5e:d7:da:0d:dc:20:71:ab:48:8d:1f:ad: da:58:0c:6e:3b:2e:05:3d:22:6a:b5:a4:c0:e9:08: 9a:e2:d0:4a:06:1a:98:0e:87:a0:f3:55:69:06:e9: 9f:f8:f7:0d:4a:c4:06:e5:fa:2b:4c:05:72:3d:f8: 4a:cc:1b:29:ad:37:cd:36:81:e6:cf:2e:e0:b1:30: 5f:c8:b6:03:25:69:f0:f2:32:f1:98:eb:fd:04:d6: d5:5b:38:db:7f:21:bc:c3:d4:76:76:56:a0:fa:3a: d6:1e:1a:b5:4b:35:d1:bc:55:3b:40:e0:57:40:5c: 30:8b:8f:ac:36:7f:24:ea:cd:28:c4:c0:2e:ca:06: 64:43:d0:b8:a5:75:21:dd:7a:02:dd:bb:6a:b2:0e: c2:0e:68:96:c3:06:d3:1b:e3:00:ad:6c:ca:d4:99: e3:03:a5:de:f5:f3:1a:64:44:75:a5:fc:90:83:ce: 22:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:A9:3E:67:1D:EE:66:38:69:22:79:E4:67:53:E5:B9:58:E4:58:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ab557b41-b8ff-4aa9-b9ed-6defa9a6b572/57901a8d-3025-36c9-bed1-42964cd3980b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ab557b41-b8ff-4aa9-b9ed-6defa9a6b572/ab557b41-b8ff-4aa9-b9ed-6defa9a6b572.crl X509v3 Authority Key Identifier: keyid:0E:B8:EA:77:8E:D2:C1:CA:DF:DD:32:63:8F:C4:2F:80:AA:91:56:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ab557b41-b8ff-4aa9-b9ed-6defa9a6b572.cer sbgp-ipAddrBlock: critical IPv4: 23.160.104.0/24 IPv6: 2602:fa57::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:d3:e6:74:ae:06:62:0c:f8:66:2f:da:67:1f:b6:4f:e0:f8: 58:e7:5f:b2:24:a4:49:7e:15:67:78:5c:a9:3a:f8:a6:1e:84: d0:27:58:3d:32:04:4a:29:cd:36:9b:1c:cb:31:22:57:b8:b3: ab:17:64:19:18:d2:f8:5f:f6:21:04:9d:9e:ba:d1:d0:2d:2c: 83:09:1b:14:42:17:80:9e:a2:36:c6:d2:87:33:6d:f5:de:1e: 8f:86:48:91:06:28:61:02:70:8c:de:34:90:9d:a5:95:d9:fb: 63:c7:22:91:bb:62:4c:4e:97:5b:03:4d:37:e6:a2:2b:df:5b: 84:63:ed:42:ab:60:eb:4e:21:d7:51:ce:80:3a:21:cb:f8:e4: 37:c5:69:17:06:a0:57:b3:af:3f:6a:57:8b:08:a5:45:0c:42: 3a:1d:16:3d:bd:7c:c8:08:64:88:f9:37:a6:47:aa:16:dc:1e: ff:93:40:14:b5:13:39:a8:00:31:50:73:33:ce:c4:f1:cc:e6: 3a:ae:2e:6f:94:06:ef:2a:6a:5d:60:e2:80:0a:02:83:7a:4b: 73:b8:00:89:0c:98:47:26:f7:be:4e:14:1e:81:ff:1e:e7:91: 22:9a:5e:17:d2:8c:d7:76:27:a5:72:bb:f3:77:b1:76:88:34: 61:53:3c:bf -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE9MPVIFkXWKl1amsEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWI1NTdiNDEtYjhmZi00YWE5LWI5ZWQtNmRlZmE5YTZi NTcyMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk ZDAyYTM1YjgtMWY1NS00OTE3LTljZDEtYmM1OGJlMmJhZTU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhwZfeY9VIaau2jgVaFa91DMu5MU0jZqUSbI0 YLMBAUIyNf0t94cALvoAPw1KYzwfwGJQCWQ5FvakDnsqNFJ3KNs2KB4QyrREItSR XpRe19oN3CBxq0iNH63aWAxuOy4FPSJqtaTA6Qia4tBKBhqYDoeg81VpBumf+PcN SsQG5forTAVyPfhKzBsprTfNNoHmzy7gsTBfyLYDJWnw8jLxmOv9BNbVWzjbfyG8 w9R2dlag+jrWHhq1SzXRvFU7QOBXQFwwi4+sNn8k6s0oxMAuygZkQ9C4pXUh3XoC 3btqsg7CDmiWwwbTG+MArWzK1JnjA6Xe9fMaZER1pfyQg84iEwIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFNupPmcd7mY4aSJ55GdT5blY5FhSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9hYjU1 N2I0MS1iOGZmLTRhYTktYjllZC02ZGVmYTlhNmI1NzIvNTc5MDFhOGQtMzAyNS0z NmM5LWJlZDEtNDI5NjRjZDM5ODBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYWI1NTdiNDEtYjhmZi00YWE5LWI5 ZWQtNmRlZmE5YTZiNTcyL2FiNTU3YjQxLWI4ZmYtNGFhOS1iOWVkLTZkZWZhOWE2 YjU3Mi5jcmwwHwYDVR0jBBgwFoAUDrjqd47Swcrf3TJjj8QvgKqRVkowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9hYjU1N2I0MS1iOGZmLTRhYTktYjllZC02ZGVm YTlhNmI1NzIuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF6BoMA4E AgACMAgDBgAmAvpXADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBp0+Z0rgZiDPhmL9pnH7ZP4PhY51+yJKRJ fhVneFypOvimHoTQJ1g9MgRKKc02mxzLMSJXuLOrF2QZGNL4X/YhBJ2eutHQLSyD CRsUQheAnqI2xtKHM2313h6PhkiRBihhAnCM3jSQnaWV2ftjxyKRu2JMTpdbA003 5qIr31uEY+1Cq2DrTiHXUc6AOiHL+OQ3xWkXBqBXs68/aleLCKVFDEI6HRY9vXzI CGSI+TemR6oW3B7/k0AUtRM5qAAxUHMzzsTxzOY6ri5vlAbvKmpdYOKACgKDektz uACJDJhHJve+ThQegf8e55Eiml4X0ozXdielcrvzd7F2iDRhUzy/ -----END CERTIFICATE-----Generated at Mon Sep 28 20:02:36 2026 by rpki-client