$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6dfff02f-dae5-4c2d-82e0-ead9ff605625/41b4cbed-46ca-3e9d-abe2-bae0682b1e94.roa File: 41b4cbed-46ca-3e9d-abe2-bae0682b1e94.roa (raw, json) Hash identifier: TOIJu9uoRojtURnnNgDhKVpzoYF/C8J7QwQiqQz1R0w= Subject key identifier: B4:96:66:02:A0:84:78:B7:B1:B0:7F:5E:D6:CE:23:3B:18:4A:44:A6 Certificate issuer: /CN=6dfff02f-dae5-4c2d-82e0-ead9ff605625 Certificate serial: 010D0C9F4328584F46A7F15F537E7919F4ECD140 Authority key identifier: 32:E9:92:02:61:D0:1C:9F:93:4D:4C:55:2C:89:7A:F0:C5:CF:E6:56 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6dfff02f-dae5-4c2d-82e0-ead9ff605625.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6dfff02f-dae5-4c2d-82e0-ead9ff605625/41b4cbed-46ca-3e9d-abe2-bae0682b1e94.roa Signing time: Thu 24 Sep 2026 01:00:12 +0000 ROA not before: Thu 24 Sep 2026 01:00:12 +0000 ROA not after: Wed 23 Dec 2026 02:00:12 +0000 asID: 400639 IP address blocks: 23.160.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6dfff02f-dae5-4c2d-82e0-ead9ff605625/6dfff02f-dae5-4c2d-82e0-ead9ff605625.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6dfff02f-dae5-4c2d-82e0-ead9ff605625/6dfff02f-dae5-4c2d-82e0-ead9ff605625.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6dfff02f-dae5-4c2d-82e0-ead9ff605625.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:46:a7:f1:5f:53:7e:79:19:f4:ec:d1:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6dfff02f-dae5-4c2d-82e0-ead9ff605625 Validity Not Before: Sep 24 01:00:12 2026 GMT Not After : Dec 23 02:00:12 2026 GMT Subject: CN=1956ec34-93c6-42d6-8dff-108438cfa693 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:16:8c:19:6a:83:79:54:8e:2e:1e:1f:01:c2: b1:4c:5b:8a:dc:90:07:b5:2e:7e:04:02:14:5a:76: 6d:3c:d3:1f:62:23:61:8a:82:62:22:ae:77:4c:b0: 07:23:16:f3:a6:62:5c:43:61:91:f3:d2:b1:52:93: fd:19:8c:3e:7f:95:e4:82:60:f6:da:62:aa:48:a7: dc:cf:8b:f0:4d:ee:f0:28:ba:84:1f:be:e2:c8:6f: db:5d:0e:be:39:93:bf:a0:30:ab:86:d8:82:d0:db: 96:ec:81:9e:f1:75:31:71:9d:e4:a1:d3:dd:c1:cb: 24:6f:c2:4b:c4:94:c5:52:e6:dd:72:5d:79:1f:38: f3:09:10:31:98:1c:96:00:4d:f1:37:03:c7:39:c8: 9b:c5:9c:45:c4:84:0a:8e:11:2d:bb:6c:b5:51:09: db:c7:5a:18:33:21:22:28:a3:63:39:34:69:36:0b: 0f:90:05:52:e7:f3:2b:75:d8:2a:28:e1:8e:93:87: a4:9f:1d:75:9f:ed:5d:8c:f1:15:50:23:43:e7:97: ed:f6:7b:29:82:d5:92:55:23:89:35:22:ea:7d:22: 67:58:2b:1b:b2:43:aa:0f:86:a2:52:a5:a2:df:0c: bc:70:32:b6:8e:05:83:83:db:2f:e1:e8:c7:b2:4e: ea:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:96:66:02:A0:84:78:B7:B1:B0:7F:5E:D6:CE:23:3B:18:4A:44:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6dfff02f-dae5-4c2d-82e0-ead9ff605625/41b4cbed-46ca-3e9d-abe2-bae0682b1e94.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6dfff02f-dae5-4c2d-82e0-ead9ff605625/6dfff02f-dae5-4c2d-82e0-ead9ff605625.crl X509v3 Authority Key Identifier: keyid:32:E9:92:02:61:D0:1C:9F:93:4D:4C:55:2C:89:7A:F0:C5:CF:E6:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6dfff02f-dae5-4c2d-82e0-ead9ff605625.cer sbgp-ipAddrBlock: critical IPv4: 23.160.124.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:94:0d:6f:6f:66:b0:06:db:6b:ec:8a:f0:2a:3a:30:d7:bd: 83:98:98:6b:f6:96:82:ef:5f:2e:43:b5:65:e9:1a:9b:43:82: cc:07:da:cd:3f:d1:b4:6b:7a:ba:e2:b0:7e:dd:a9:1a:6d:70: aa:7a:ad:f4:ad:96:0f:7d:d5:fd:62:fd:64:1f:51:dc:8e:91: 14:a7:a9:c8:4c:41:a8:29:cb:68:37:f0:4c:e7:34:ef:86:3e: be:d6:a7:f6:9c:4b:cc:00:b2:18:84:18:66:6f:49:8c:bd:e7: 29:03:70:d5:a1:45:aa:7b:03:b4:db:be:dc:3d:32:16:a4:a2: c2:a4:56:7e:44:3d:93:c5:1b:d3:db:2a:4d:0f:6c:6e:b1:b2: d4:e5:99:eb:7f:21:de:4e:75:6b:e3:9f:65:a7:95:33:9e:4a: dd:50:3a:15:e3:c6:e4:fb:73:7c:18:12:2f:fd:d6:01:2e:82: df:3b:bc:a8:a1:f4:db:b3:86:05:82:01:dd:bc:d4:0d:c5:bc: aa:a4:00:6d:9b:00:f3:a8:07:95:59:9a:65:46:1b:32:19:cd: c2:43:95:2f:39:40:31:9e:31:f8:74:02:7a:a3:98:ca:6e:a9: b4:44:0d:a5:6a:31:1f:36:ac:6f:d3:5a:6c:eb:9f:04:16:ff: ce:0c:2b:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Gp/FfU355GfTs0UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmRmZmYwMmYtZGFlNS00YzJkLTgyZTAtZWFkOWZmNjA1 NjI1MB4XDTI2MDkyNDAxMDAxMloXDTI2MTIyMzAyMDAxMlowLzEtMCsGA1UEAxMk MTk1NmVjMzQtOTNjNi00MmQ2LThkZmYtMTA4NDM4Y2ZhNjkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsBaMGWqDeVSOLh4fAcKxTFuK3JAHtS5+BAIU WnZtPNMfYiNhioJiIq53TLAHIxbzpmJcQ2GR89KxUpP9GYw+f5XkgmD22mKqSKfc z4vwTe7wKLqEH77iyG/bXQ6+OZO/oDCrhtiC0NuW7IGe8XUxcZ3kodPdwcskb8JL xJTFUubdcl15HzjzCRAxmByWAE3xNwPHOcibxZxFxIQKjhEtu2y1UQnbx1oYMyEi KKNjOTRpNgsPkAVS5/MrddgqKOGOk4eknx11n+1djPEVUCND55ft9nspgtWSVSOJ NSLqfSJnWCsbskOqD4aiUqWi3wy8cDK2jgWDg9sv4ejHsk7qawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLSWZgKghHi3sbB/XtbOIzsYSkSmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy82ZGZm ZjAyZi1kYWU1LTRjMmQtODJlMC1lYWQ5ZmY2MDU2MjUvNDFiNGNiZWQtNDZjYS0z ZTlkLWFiZTItYmFlMDY4MmIxZTk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvNmRmZmYwMmYtZGFlNS00YzJkLTgy ZTAtZWFkOWZmNjA1NjI1LzZkZmZmMDJmLWRhZTUtNGMyZC04MmUwLWVhZDlmZjYw NTYyNS5jcmwwHwYDVR0jBBgwFoAUMumSAmHQHJ+TTUxVLIl68MXP5lYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy82ZGZmZjAyZi1kYWU1LTRjMmQtODJlMC1lYWQ5 ZmY2MDU2MjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6B8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACuUDW9vZrAG22vsivAqOjDXvYOYmGv2loLvXy5DtWXpGptDgswH2s0/ 0bRrerrisH7dqRptcKp6rfStlg991f1i/WQfUdyOkRSnqchMQagpy2g38EznNO+G Pr7Wp/acS8wAshiEGGZvSYy95ykDcNWhRap7A7Tbvtw9MhakosKkVn5EPZPFG9Pb Kk0PbG6xstTlmet/Id5OdWvjn2WnlTOeSt1QOhXjxuT7c3wYEi/91gEugt87vKih 9NuzhgWCAd281A3FvKqkAG2bAPOoB5VZmmVGGzIZzcJDlS85QDGeMfh0AnqjmMpu qbREDaVqMR82rG/TWmzrnwQW/84MK4A= -----END CERTIFICATE-----Generated at Sat Sep 26 21:38:17 2026 by rpki-client