$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/97e60b77-17e3-4250-9bc8-b5e7664a320a/d629f1f0-0ccd-3c9d-9548-bf192cd32d44.roa File: d629f1f0-0ccd-3c9d-9548-bf192cd32d44.roa (raw, json) Hash identifier: l8/9nWP943NdxFUdufa+YkoWVWH267vOoOuy1idN/g8= Subject key identifier: D3:E7:1B:12:30:1B:ED:BB:EE:4B:68:FE:66:D0:B9:5C:9C:A4:66:66 Certificate issuer: /CN=97e60b77-17e3-4250-9bc8-b5e7664a320a Certificate serial: 010D0C9F4328584F45429298EA572A33C5CD5300 Authority key identifier: B8:3C:8A:BE:AA:A4:F3:7E:DF:5D:15:2A:04:3A:ED:6C:A1:84:B6:53 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/97e60b77-17e3-4250-9bc8-b5e7664a320a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/97e60b77-17e3-4250-9bc8-b5e7664a320a/d629f1f0-0ccd-3c9d-9548-bf192cd32d44.roa Signing time: Wed 23 Sep 2026 13:00:11 +0000 ROA not before: Wed 23 Sep 2026 13:00:11 +0000 ROA not after: Tue 22 Dec 2026 14:00:11 +0000 asID: 31799 IP address blocks: 23.138.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/97e60b77-17e3-4250-9bc8-b5e7664a320a/97e60b77-17e3-4250-9bc8-b5e7664a320a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/97e60b77-17e3-4250-9bc8-b5e7664a320a/97e60b77-17e3-4250-9bc8-b5e7664a320a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/97e60b77-17e3-4250-9bc8-b5e7664a320a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:45:42:92:98:ea:57:2a:33:c5:cd:53:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97e60b77-17e3-4250-9bc8-b5e7664a320a Validity Not Before: Sep 23 13:00:11 2026 GMT Not After : Dec 22 14:00:11 2026 GMT Subject: CN=3e375433-7d72-4442-8bd4-da13936a4872 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:4a:eb:d3:80:8f:a0:80:1b:e1:0e:26:a4:10: e1:0d:da:02:47:de:c2:96:8d:2d:3c:47:68:da:41: 09:37:fb:12:8b:51:4c:a5:c3:e4:80:05:1a:6d:a8: e9:df:83:50:c0:36:fb:5a:7c:b0:d5:0c:1f:53:3b: c4:41:cb:f2:d4:58:b9:d1:fd:73:39:69:23:5b:97: d0:b9:c7:ae:c8:f4:c0:96:3a:bd:ec:8e:0e:44:bc: a2:af:e3:8e:46:8a:bd:9c:7f:68:fd:d4:08:9c:6b: cd:2c:de:99:1b:26:aa:54:a7:a8:d8:cc:2b:0f:33: b8:50:f6:77:b0:84:54:90:3c:6c:f9:53:4f:2d:2a: 0b:17:d9:12:a3:49:cb:fe:e1:53:cd:94:a5:3c:0b: 30:c8:34:bc:89:17:f1:94:85:ec:40:f2:fe:5e:8f: e0:48:94:d6:e7:1d:03:b5:a8:af:98:af:a0:98:40: ce:80:62:39:e6:a1:94:44:e1:53:cb:9d:84:ae:42: 21:ea:47:a5:68:6c:9f:c8:f2:d8:cb:84:92:d0:cf: 56:12:4e:11:c5:1b:43:d7:a2:4d:f0:a3:2a:02:a6: fa:54:40:4d:a7:17:da:9a:73:7b:9d:6a:75:c3:9a: 82:96:01:82:ba:c8:63:9d:0e:20:88:7a:4e:5c:e8: 09:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:E7:1B:12:30:1B:ED:BB:EE:4B:68:FE:66:D0:B9:5C:9C:A4:66:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/97e60b77-17e3-4250-9bc8-b5e7664a320a/d629f1f0-0ccd-3c9d-9548-bf192cd32d44.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/97e60b77-17e3-4250-9bc8-b5e7664a320a/97e60b77-17e3-4250-9bc8-b5e7664a320a.crl X509v3 Authority Key Identifier: keyid:B8:3C:8A:BE:AA:A4:F3:7E:DF:5D:15:2A:04:3A:ED:6C:A1:84:B6:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/97e60b77-17e3-4250-9bc8-b5e7664a320a.cer sbgp-ipAddrBlock: critical IPv4: 23.138.144.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:d7:87:da:3a:76:82:2b:94:44:08:1c:6f:06:08:dc:bf:08: 62:b2:99:db:77:dd:61:1d:9c:67:cf:a2:ef:cd:6a:44:c6:f4: 74:82:ed:22:0d:35:75:05:4f:95:ef:d8:49:bb:0b:11:9d:ff: b3:38:ee:36:08:41:63:02:e9:4c:60:03:f4:bd:01:4a:0a:4c: fd:6b:a5:19:c1:31:8c:24:45:79:08:44:d4:81:07:7f:e4:6e: aa:59:48:82:9d:b2:58:f5:35:82:06:b1:f8:78:e5:df:92:78: 03:b7:59:78:9f:7a:1d:1e:f8:df:1d:86:56:16:c9:e2:f5:f6: 61:cd:4e:98:4f:55:92:86:57:b0:31:65:20:16:ee:f0:f0:4b: b6:d9:75:d1:fd:4e:02:8d:08:d8:8e:bf:4c:1a:64:90:cb:b6: 04:ff:22:39:77:fd:01:fe:46:1f:13:2b:81:8d:1c:6c:26:9d: 15:a8:31:32:e8:16:69:4c:f5:74:63:55:68:f3:56:47:c2:62: 92:8f:5b:fd:37:3e:34:b5:92:6d:71:f4:5f:59:51:24:15:01: 8b:0d:8d:22:ec:e1:49:2a:82:be:46:39:85:37:a0:30:6f:12: 79:55:fd:ac:ac:9a:0a:0b:3f:59:4e:03:5e:d5:ba:91:be:8b: 25:ed:78:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9FQpKY6lcqM8XNUwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTdlNjBiNzctMTdlMy00MjUwLTliYzgtYjVlNzY2NGEz MjBhMB4XDTI2MDkyMzEzMDAxMVoXDTI2MTIyMjE0MDAxMVowLzEtMCsGA1UEAxMk M2UzNzU0MzMtN2Q3Mi00NDQyLThiZDQtZGExMzkzNmE0ODcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm0rr04CPoIAb4Q4mpBDhDdoCR97Clo0tPEdo 2kEJN/sSi1FMpcPkgAUabajp34NQwDb7Wnyw1QwfUzvEQcvy1Fi50f1zOWkjW5fQ uceuyPTAljq97I4ORLyir+OORoq9nH9o/dQInGvNLN6ZGyaqVKeo2MwrDzO4UPZ3 sIRUkDxs+VNPLSoLF9kSo0nL/uFTzZSlPAswyDS8iRfxlIXsQPL+Xo/gSJTW5x0D taivmK+gmEDOgGI55qGUROFTy52ErkIh6kelaGyfyPLYy4SS0M9WEk4RxRtD16JN 8KMqAqb6VEBNpxfamnN7nWp1w5qClgGCushjnQ4giHpOXOgJqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNPnGxIwG+277kto/mbQuVycpGZmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85N2U2 MGI3Ny0xN2UzLTQyNTAtOWJjOC1iNWU3NjY0YTMyMGEvZDYyOWYxZjAtMGNjZC0z YzlkLTk1NDgtYmYxOTJjZDMyZDQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOTdlNjBiNzctMTdlMy00MjUwLTli YzgtYjVlNzY2NGEzMjBhLzk3ZTYwYjc3LTE3ZTMtNDI1MC05YmM4LWI1ZTc2NjRh MzIwYS5jcmwwHwYDVR0jBBgwFoAUuDyKvqqk837fXRUqBDrtbKGEtlMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85N2U2MGI3Ny0xN2UzLTQyNTAtOWJjOC1iNWU3 NjY0YTMyMGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4qQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEfXh9o6doIrlEQIHG8GCNy/CGKymdt33WEdnGfPou/NakTG9HSC7SIN NXUFT5Xv2Em7CxGd/7M47jYIQWMC6UxgA/S9AUoKTP1rpRnBMYwkRXkIRNSBB3/k bqpZSIKdslj1NYIGsfh45d+SeAO3WXifeh0e+N8dhlYWyeL19mHNTphPVZKGV7Ax ZSAW7vDwS7bZddH9TgKNCNiOv0waZJDLtgT/Ijl3/QH+Rh8TK4GNHGwmnRWoMTLo FmlM9XRjVWjzVkfCYpKPW/03PjS1km1x9F9ZUSQVAYsNjSLs4Ukqgr5GOYU3oDBv EnlV/aysmgoLP1lOA17VupG+iyXtePM= -----END CERTIFICATE-----Generated at Mon Sep 28 21:13:36 2026 by rpki-client