$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0b61db8b-51d6-464c-9de9-6e0a7b6a3f5e/ad20c86a-0cdb-3038-930f-35b57b1e5885.roa File: ad20c86a-0cdb-3038-930f-35b57b1e5885.roa (raw, json) Hash identifier: PRSlLmuzJeU2D0Hu6Smh1fs6jckg3eKNlHelg6F8O6s= Subject key identifier: 24:5E:57:3B:6B:A4:DC:48:15:B4:49:11:18:08:4A:E0:1F:48:2E:47 Certificate issuer: /CN=0b61db8b-51d6-464c-9de9-6e0a7b6a3f5e Certificate serial: 010D0C9F4328584F31B7CD886A6B524B3C651210 Authority key identifier: 75:2D:2A:A1:9B:59:55:05:98:0B:6E:05:8C:DD:34:F5:FA:FE:32:4F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0b61db8b-51d6-464c-9de9-6e0a7b6a3f5e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0b61db8b-51d6-464c-9de9-6e0a7b6a3f5e/ad20c86a-0cdb-3038-930f-35b57b1e5885.roa Signing time: Wed 16 Sep 2026 13:00:12 +0000 ROA not before: Wed 16 Sep 2026 13:00:12 +0000 ROA not after: Tue 15 Dec 2026 14:00:12 +0000 asID: 40581 IP address blocks: 23.144.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0b61db8b-51d6-464c-9de9-6e0a7b6a3f5e/0b61db8b-51d6-464c-9de9-6e0a7b6a3f5e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0b61db8b-51d6-464c-9de9-6e0a7b6a3f5e/0b61db8b-51d6-464c-9de9-6e0a7b6a3f5e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0b61db8b-51d6-464c-9de9-6e0a7b6a3f5e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:31:b7:cd:88:6a:6b:52:4b:3c:65:12:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b61db8b-51d6-464c-9de9-6e0a7b6a3f5e Validity Not Before: Sep 16 13:00:12 2026 GMT Not After : Dec 15 14:00:12 2026 GMT Subject: CN=971c4959-ea74-4158-b337-0ccc4493d5c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:34:41:94:89:2d:75:d0:b8:39:0e:b8:e3:23: da:5a:bf:c3:29:0d:04:b9:0e:eb:2c:e7:50:86:73: 85:de:fa:94:d4:51:5f:bf:f3:db:aa:15:e7:ca:8c: c2:29:37:9d:4b:02:b0:da:34:8a:a3:9c:a2:ca:88: ae:6f:0e:72:2b:b0:80:a6:6e:f0:c5:63:3a:04:6c: 60:26:bb:aa:b2:7a:20:83:36:cc:e0:f5:79:5c:a8: e1:06:da:87:de:67:93:b3:bd:a0:4c:8f:75:f7:b8: 88:1a:a4:2a:22:06:f5:7a:9f:04:03:42:4a:17:2e: c3:90:de:06:35:6b:e2:cb:26:29:a8:0e:46:7b:36: 09:71:28:82:1c:16:14:97:1d:4f:cf:83:37:0f:e1: 42:b8:fa:58:00:30:80:dd:e4:26:b4:81:4c:64:e7: 1e:29:43:7f:55:9f:22:99:83:24:30:5d:98:2e:e4: 2f:84:cc:4e:33:de:80:0b:e7:7e:c4:4a:54:5b:78: d8:3f:39:4a:fb:87:78:bc:00:a6:2e:32:2c:b9:56: 90:93:11:58:b0:e4:7b:da:1a:7e:34:99:8c:54:8c: f8:38:d1:95:d0:97:79:cc:e5:56:32:6e:10:8e:65: c2:1b:97:0d:48:3a:8a:3d:40:47:7e:e9:8f:28:d9: 9f:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:5E:57:3B:6B:A4:DC:48:15:B4:49:11:18:08:4A:E0:1F:48:2E:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0b61db8b-51d6-464c-9de9-6e0a7b6a3f5e/ad20c86a-0cdb-3038-930f-35b57b1e5885.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0b61db8b-51d6-464c-9de9-6e0a7b6a3f5e/0b61db8b-51d6-464c-9de9-6e0a7b6a3f5e.crl X509v3 Authority Key Identifier: keyid:75:2D:2A:A1:9B:59:55:05:98:0B:6E:05:8C:DD:34:F5:FA:FE:32:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0b61db8b-51d6-464c-9de9-6e0a7b6a3f5e.cer sbgp-ipAddrBlock: critical IPv4: 23.144.148.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:3d:49:61:c2:fd:9e:75:14:37:22:b7:d4:da:31:e3:d4:11: ed:00:46:d1:af:81:d9:27:f4:cc:ca:f2:8f:1e:f2:e8:a8:14: f7:ee:88:0f:6a:f8:ed:b0:36:dd:a9:e9:fc:80:9b:52:67:3b: 41:52:44:fd:2b:f2:37:0c:8a:29:ce:b4:91:cd:97:aa:ee:7d: 1d:b4:94:1b:8a:f6:40:4f:76:13:1f:05:4a:a1:f2:f6:bc:16: f1:87:78:77:6b:83:e6:d3:25:b9:df:92:16:85:40:f1:cf:0f: 09:4c:e2:b1:4f:0b:89:00:be:99:a4:7b:20:49:30:0a:5c:92: ba:71:cc:6b:80:64:73:47:44:71:d4:61:62:21:5f:10:ee:a5: 7c:f0:d2:9c:4d:98:cf:c8:97:21:4c:50:73:37:cc:9d:e4:53: 8c:00:45:cf:ea:12:ba:a4:0f:37:99:6e:0f:70:a7:de:02:06: 73:e5:02:46:8d:cc:7a:37:b0:c6:a9:dd:12:54:f7:29:e9:a3: 50:e5:2b:2d:1d:d1:24:14:37:25:61:0f:fb:81:6e:a2:26:01: cd:b7:82:f5:81:78:17:bf:87:03:20:b6:b1:ed:21:6b:4c:ab: 02:6b:5a:d1:4d:bf:a9:f6:a2:fa:0e:7f:6c:9d:7a:6c:8b:17: 75:10:da:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8xt82IamtSSzxlEhAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGI2MWRiOGItNTFkNi00NjRjLTlkZTktNmUwYTdiNmEz ZjVlMB4XDTI2MDkxNjEzMDAxMloXDTI2MTIxNTE0MDAxMlowLzEtMCsGA1UEAxMk OTcxYzQ5NTktZWE3NC00MTU4LWIzMzctMGNjYzQ0OTNkNWMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtzRBlIktddC4OQ644yPaWr/DKQ0EuQ7rLOdQ hnOF3vqU1FFfv/PbqhXnyozCKTedSwKw2jSKo5yiyoiubw5yK7CApm7wxWM6BGxg JruqsnoggzbM4PV5XKjhBtqH3meTs72gTI9197iIGqQqIgb1ep8EA0JKFy7DkN4G NWviyyYpqA5GezYJcSiCHBYUlx1Pz4M3D+FCuPpYADCA3eQmtIFMZOceKUN/VZ8i mYMkMF2YLuQvhMxOM96AC+d+xEpUW3jYPzlK+4d4vACmLjIsuVaQkxFYsOR72hp+ NJmMVIz4ONGV0Jd5zOVWMm4QjmXCG5cNSDqKPUBHfumPKNmfLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCReVztrpNxIFbRJERgISuAfSC5HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8wYjYx ZGI4Yi01MWQ2LTQ2NGMtOWRlOS02ZTBhN2I2YTNmNWUvYWQyMGM4NmEtMGNkYi0z MDM4LTkzMGYtMzViNTdiMWU1ODg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMGI2MWRiOGItNTFkNi00NjRjLTlk ZTktNmUwYTdiNmEzZjVlLzBiNjFkYjhiLTUxZDYtNDY0Yy05ZGU5LTZlMGE3YjZh M2Y1ZS5jcmwwHwYDVR0jBBgwFoAUdS0qoZtZVQWYC24FjN009fr+Mk8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8wYjYxZGI4Yi01MWQ2LTQ2NGMtOWRlOS02ZTBh N2I2YTNmNWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5CUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIo9SWHC/Z51FDcit9TaMePUEe0ARtGvgdkn9MzK8o8e8uioFPfuiA9q +O2wNt2p6fyAm1JnO0FSRP0r8jcMiinOtJHNl6rufR20lBuK9kBPdhMfBUqh8va8 FvGHeHdrg+bTJbnfkhaFQPHPDwlM4rFPC4kAvpmkeyBJMApckrpxzGuAZHNHRHHU YWIhXxDupXzw0pxNmM/IlyFMUHM3zJ3kU4wARc/qErqkDzeZbg9wp94CBnPlAkaN zHo3sMap3RJU9ynpo1DlKy0d0SQUNyVhD/uBbqImAc23gvWBeBe/hwMgtrHtIWtM qwJrWtFNv6n2ovoOf2ydemyLF3UQ2nA= -----END CERTIFICATE-----Generated at Tue Sep 29 02:38:59 2026 by rpki-client