$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/467861ee-0aa8-4688-af94-7d540e2ddc56/09c08d2e-de43-37bd-ad1b-1356bceb680f.roa File: 09c08d2e-de43-37bd-ad1b-1356bceb680f.roa (raw, json) Hash identifier: 771iPeqZXlXIVrpy66Bd8ov3MQXbLyXWAmI8c9MAI2k= Subject key identifier: 48:75:6F:A6:FC:2E:B5:0E:40:EE:12:0F:9F:29:AE:78:21:14:FD:15 Certificate issuer: /CN=467861ee-0aa8-4688-af94-7d540e2ddc56 Certificate serial: 010D0C9F4328584F024218265836F2394BE27CA0 Authority key identifier: 13:2F:0E:EA:62:B5:B7:C7:AA:EF:09:D5:3E:54:5B:4D:53:FA:FD:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/467861ee-0aa8-4688-af94-7d540e2ddc56.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/467861ee-0aa8-4688-af94-7d540e2ddc56/09c08d2e-de43-37bd-ad1b-1356bceb680f.roa Signing time: Sun 30 Aug 2026 13:00:11 +0000 ROA not before: Sun 30 Aug 2026 13:00:11 +0000 ROA not after: Sat 28 Nov 2026 14:00:11 +0000 asID: 400529 IP address blocks: 23.161.169.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/467861ee-0aa8-4688-af94-7d540e2ddc56/467861ee-0aa8-4688-af94-7d540e2ddc56.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/467861ee-0aa8-4688-af94-7d540e2ddc56/467861ee-0aa8-4688-af94-7d540e2ddc56.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/467861ee-0aa8-4688-af94-7d540e2ddc56.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:02:42:18:26:58:36:f2:39:4b:e2:7c:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=467861ee-0aa8-4688-af94-7d540e2ddc56 Validity Not Before: Aug 30 13:00:11 2026 GMT Not After : Nov 28 14:00:11 2026 GMT Subject: CN=94d5c449-ea68-46fb-a8f4-d29e33851487 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:42:7d:b1:62:91:db:cd:d1:73:f1:64:8b:0d: 41:56:8e:5d:21:15:78:d2:1f:bc:07:4d:b2:3f:a6: 19:b0:02:f0:ab:27:dd:98:f6:02:b0:a2:65:46:17: 30:25:81:b5:ad:fc:66:b5:a4:4c:37:04:61:04:8b: ac:27:99:b9:d7:a3:e1:2c:38:af:ef:be:b6:ad:1e: bc:00:e8:af:20:89:93:a2:51:65:00:fe:3e:f4:a8: f3:84:6a:fb:f5:cf:33:fb:ab:a6:c0:13:f5:b4:ba: 8e:84:c5:90:fb:94:88:f7:94:c4:fd:0b:14:ab:a2: 83:f7:20:91:04:d1:88:a7:72:7c:42:91:ce:e2:4d: b6:e4:b2:35:7d:84:42:ec:8c:fa:f7:3f:40:c1:e9: 1c:f0:d5:81:8b:c1:66:50:bc:0d:ee:64:b2:04:75: fd:09:e8:79:66:67:20:58:97:e2:5e:79:09:56:0d: ab:6a:85:ac:17:ea:aa:52:ac:3b:74:7e:8c:5f:cc: da:9f:70:e4:a2:dc:1e:27:93:3c:12:06:d1:6d:b6: 02:16:82:e3:4f:fe:a3:52:dd:eb:6a:5d:0b:96:fd: 70:55:1e:1c:6c:28:a4:a3:25:4d:d0:59:4e:45:4e: 09:7e:00:ab:5c:5d:77:b2:64:0a:db:ce:ea:56:88: da:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:75:6F:A6:FC:2E:B5:0E:40:EE:12:0F:9F:29:AE:78:21:14:FD:15 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/467861ee-0aa8-4688-af94-7d540e2ddc56/09c08d2e-de43-37bd-ad1b-1356bceb680f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/467861ee-0aa8-4688-af94-7d540e2ddc56/467861ee-0aa8-4688-af94-7d540e2ddc56.crl X509v3 Authority Key Identifier: keyid:13:2F:0E:EA:62:B5:B7:C7:AA:EF:09:D5:3E:54:5B:4D:53:FA:FD:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/467861ee-0aa8-4688-af94-7d540e2ddc56.cer sbgp-ipAddrBlock: critical IPv4: 23.161.169.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:c2:e8:df:9a:23:04:0e:a8:0f:0e:63:d0:d0:70:fd:28:7b: 27:79:54:08:c5:9c:83:ed:f1:98:21:ec:00:82:bc:f9:4c:db: c5:ca:cb:75:a7:d9:80:22:55:10:0c:4a:65:ce:57:26:81:90: d6:58:1a:dd:c8:9d:5a:c0:72:dd:13:0c:06:8a:d6:a6:2a:75: 73:b9:09:a3:18:c1:2a:bc:82:1a:c7:e6:38:49:a9:35:00:6e: 76:a4:7c:20:ff:1d:0b:c2:d0:77:a4:32:ad:ba:7c:e0:1c:3b: 7b:e3:b1:da:b1:61:de:fb:ee:1c:09:48:98:9a:7a:68:c7:d8: 6b:da:51:58:a0:53:ba:df:37:97:28:0d:08:f7:d8:f5:2f:ac: 8f:93:6a:24:b8:c6:19:98:05:a5:41:be:cd:e9:a2:28:e3:92: 0d:02:3f:6e:ca:a4:e4:35:1b:9b:6a:db:82:fa:33:71:2b:08: 06:b8:f6:45:05:b3:ae:df:7c:9d:7c:e8:92:7e:68:c0:7e:51: 78:8b:ea:78:b7:7c:ae:96:90:ef:8e:a9:e8:c5:c4:9a:b7:dc: f6:c0:ef:9f:08:d2:ea:0b:72:36:6e:8c:5b:80:89:47:8c:9f: d3:57:95:67:91:c5:c8:57:3b:0d:35:0c:4a:fa:bc:37:33:24: 39:90:ba:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8CQhgmWDbyOUvifKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDY3ODYxZWUtMGFhOC00Njg4LWFmOTQtN2Q1NDBlMmRk YzU2MB4XDTI2MDgzMDEzMDAxMVoXDTI2MTEyODE0MDAxMVowLzEtMCsGA1UEAxMk OTRkNWM0NDktZWE2OC00NmZiLWE4ZjQtZDI5ZTMzODUxNDg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhkJ9sWKR283Rc/Fkiw1BVo5dIRV40h+8B02y P6YZsALwqyfdmPYCsKJlRhcwJYG1rfxmtaRMNwRhBIusJ5m516PhLDiv7762rR68 AOivIImTolFlAP4+9KjzhGr79c8z+6umwBP1tLqOhMWQ+5SI95TE/QsUq6KD9yCR BNGIp3J8QpHO4k225LI1fYRC7Iz69z9Awekc8NWBi8FmULwN7mSyBHX9Ceh5Zmcg WJfiXnkJVg2raoWsF+qqUqw7dH6MX8zan3DkotweJ5M8EgbRbbYCFoLjT/6jUt3r al0Llv1wVR4cbCikoyVN0FlORU4JfgCrXF13smQK287qVojaAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEh1b6b8LrUOQO4SD58prnghFP0VMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS80Njc4 NjFlZS0wYWE4LTQ2ODgtYWY5NC03ZDU0MGUyZGRjNTYvMDljMDhkMmUtZGU0My0z N2JkLWFkMWItMTM1NmJjZWI2ODBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNDY3ODYxZWUtMGFhOC00Njg4LWFm OTQtN2Q1NDBlMmRkYzU2LzQ2Nzg2MWVlLTBhYTgtNDY4OC1hZjk0LTdkNTQwZTJk ZGM1Ni5jcmwwHwYDVR0jBBgwFoAUEy8O6mK1t8eq7wnVPlRbTVP6/U0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS80Njc4NjFlZS0wYWE4LTQ2ODgtYWY5NC03ZDU0 MGUyZGRjNTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6GpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFTC6N+aIwQOqA8OY9DQcP0oeyd5VAjFnIPt8Zgh7ACCvPlM28XKy3Wn 2YAiVRAMSmXOVyaBkNZYGt3InVrAct0TDAaK1qYqdXO5CaMYwSq8ghrH5jhJqTUA bnakfCD/HQvC0HekMq26fOAcO3vjsdqxYd777hwJSJiaemjH2GvaUVigU7rfN5co DQj32PUvrI+TaiS4xhmYBaVBvs3poijjkg0CP27KpOQ1G5tq24L6M3ErCAa49kUF s67ffJ186JJ+aMB+UXiL6ni3fK6WkO+OqejFxJq33PbA758I0uoLcjZujFuAiUeM n9NXlWeRxchXOw01DEr6vDczJDmQuis= -----END CERTIFICATE-----Generated at Tue Sep 22 07:18:15 2026 by rpki-client