$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8698cf1c-6f2f-49f6-9a90-ce88a83b6f37/934ac425-340e-3407-9e69-6e3dc6e57157.roa File: 934ac425-340e-3407-9e69-6e3dc6e57157.roa (raw, json) Hash identifier: Id7IQJ0xLYOsSXzW5kVUncv8qmgtIKK8qumYYB/UQu4= Subject key identifier: 15:F2:8D:4E:09:E0:3E:A4:0A:A2:E1:68:88:15:D6:FB:F0:01:41:1D Certificate issuer: /CN=8698cf1c-6f2f-49f6-9a90-ce88a83b6f37 Certificate serial: 010D0C9F4328584F7A5027376A86AF25D6B91A80 Authority key identifier: A9:D4:C6:F9:E8:F9:E4:DB:86:27:DE:A3:E6:31:8B:49:AD:75:EC:EA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8698cf1c-6f2f-49f6-9a90-ce88a83b6f37.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8698cf1c-6f2f-49f6-9a90-ce88a83b6f37/934ac425-340e-3407-9e69-6e3dc6e57157.roa Signing time: Mon 12 Oct 2026 13:00:12 +0000 ROA not before: Mon 12 Oct 2026 13:00:12 +0000 ROA not after: Sun 10 Jan 2027 14:00:12 +0000 asID: 7029 IP address blocks: 23.142.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8698cf1c-6f2f-49f6-9a90-ce88a83b6f37/8698cf1c-6f2f-49f6-9a90-ce88a83b6f37.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8698cf1c-6f2f-49f6-9a90-ce88a83b6f37/8698cf1c-6f2f-49f6-9a90-ce88a83b6f37.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8698cf1c-6f2f-49f6-9a90-ce88a83b6f37.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 16 Oct 2026 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7a:50:27:37:6a:86:af:25:d6:b9:1a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8698cf1c-6f2f-49f6-9a90-ce88a83b6f37 Validity Not Before: Oct 12 13:00:12 2026 GMT Not After : Jan 10 14:00:12 2027 GMT Subject: CN=ec23264d-0e3f-4874-ab9c-e200be3bdb35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:6f:e6:c2:b0:43:b1:5b:ff:fa:20:44:1d:8e: ab:8b:3b:bf:7f:9d:9e:6d:dd:eb:f0:10:9a:01:d8: d2:06:c8:5b:c0:41:e8:b9:87:2e:26:c6:d4:4a:b2: 04:d1:76:af:11:c8:93:9a:79:26:c3:17:40:0f:c1: 0e:e0:ec:a7:5c:0d:1b:90:ee:cd:60:3d:66:29:44: 12:97:5e:7f:84:4b:22:15:f9:85:c1:54:34:8d:38: 49:2d:27:1b:51:a6:71:03:fc:71:69:d7:1c:77:84: 1c:7c:fb:bd:59:f4:73:3d:63:03:13:47:12:77:02: cb:70:6d:f8:d6:0a:bb:98:0c:ac:95:c6:4b:f3:01: 84:7c:47:86:b6:a4:41:c3:c5:bf:e2:95:11:37:83: d0:11:b8:c5:6e:ff:b1:ec:b9:f5:c4:b2:1e:3e:a0: d4:9e:d2:33:20:63:88:72:28:80:75:f3:84:35:48: 52:be:43:f0:08:b7:9d:22:94:58:0f:2c:6a:eb:97: bf:b2:e2:b4:da:28:65:aa:1a:1f:37:c5:a7:73:ef: 0c:dd:96:3e:14:11:a9:f4:42:f9:5e:89:c6:e2:4f: 68:d2:5a:cb:2a:5c:ac:59:96:e2:7f:a5:3d:67:6d: 36:54:f1:d8:6e:ff:6a:cf:23:23:ee:fb:9e:26:73: 36:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:F2:8D:4E:09:E0:3E:A4:0A:A2:E1:68:88:15:D6:FB:F0:01:41:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8698cf1c-6f2f-49f6-9a90-ce88a83b6f37/934ac425-340e-3407-9e69-6e3dc6e57157.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8698cf1c-6f2f-49f6-9a90-ce88a83b6f37/8698cf1c-6f2f-49f6-9a90-ce88a83b6f37.crl X509v3 Authority Key Identifier: keyid:A9:D4:C6:F9:E8:F9:E4:DB:86:27:DE:A3:E6:31:8B:49:AD:75:EC:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8698cf1c-6f2f-49f6-9a90-ce88a83b6f37.cer sbgp-ipAddrBlock: critical IPv4: 23.142.252.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:ac:b1:c6:89:b1:c4:4f:7d:4f:28:08:bf:2b:25:33:3a:0f: df:2a:32:dd:9c:72:99:17:fc:26:88:da:67:06:4d:d1:f3:4c: fe:a3:16:1d:c4:b6:39:a8:e6:e5:b0:f8:30:6c:b8:22:ff:1b: ea:d2:49:5f:50:f2:62:3e:b5:b7:a5:58:0c:09:34:be:56:b9: 33:dc:69:a7:89:74:d6:0b:bd:2f:4b:01:54:1d:d2:26:ba:10: 37:6c:af:16:70:fd:3c:50:e5:65:2b:70:cc:ca:b8:13:00:12: 28:0c:31:4c:c7:ce:e8:8d:e8:a7:12:e0:7a:7c:3e:be:56:2b: 8c:04:59:be:11:48:1a:46:da:de:c2:31:ed:bd:77:82:29:c0: c2:b4:d1:d6:4c:61:55:9d:0f:54:1f:2f:08:b0:d6:29:e5:ca: 60:1d:63:b9:91:de:a3:f1:c9:d6:58:4c:41:b7:e1:5e:da:b5: 28:fe:13:2d:e8:67:b6:05:65:5e:17:3d:4e:4c:69:51:d7:2a: ee:61:7f:0a:fc:5d:72:14:71:30:73:fc:f8:a7:e9:50:2b:13: b1:25:d5:ad:a5:3e:19:6b:68:c1:87:1e:f0:b6:ff:c4:ca:c6: 90:1a:8b:88:58:1e:d9:8c:61:42:c6:95:be:fd:0f:4d:2c:4c: ee:4d:60:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE96UCc3aoavJda5GoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODY5OGNmMWMtNmYyZi00OWY2LTlhOTAtY2U4OGE4M2I2 ZjM3MB4XDTI2MTAxMjEzMDAxMloXDTI3MDExMDE0MDAxMlowLzEtMCsGA1UEAxMk ZWMyMzI2NGQtMGUzZi00ODc0LWFiOWMtZTIwMGJlM2JkYjM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgm/mwrBDsVv/+iBEHY6rizu/f52ebd3r8BCa AdjSBshbwEHouYcuJsbUSrIE0XavEciTmnkmwxdAD8EO4OynXA0bkO7NYD1mKUQS l15/hEsiFfmFwVQ0jThJLScbUaZxA/xxadccd4QcfPu9WfRzPWMDE0cSdwLLcG34 1gq7mAyslcZL8wGEfEeGtqRBw8W/4pURN4PQEbjFbv+x7Ln1xLIePqDUntIzIGOI ciiAdfOENUhSvkPwCLedIpRYDyxq65e/suK02ihlqhofN8Wnc+8M3ZY+FBGp9EL5 XonG4k9o0lrLKlysWZbif6U9Z202VPHYbv9qzyMj7vueJnM2hQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBXyjU4J4D6kCqLhaIgV1vvwAUEdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC84Njk4 Y2YxYy02ZjJmLTQ5ZjYtOWE5MC1jZTg4YTgzYjZmMzcvOTM0YWM0MjUtMzQwZS0z NDA3LTllNjktNmUzZGM2ZTU3MTU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvODY5OGNmMWMtNmYyZi00OWY2LTlh OTAtY2U4OGE4M2I2ZjM3Lzg2OThjZjFjLTZmMmYtNDlmNi05YTkwLWNlODhhODNi NmYzNy5jcmwwHwYDVR0jBBgwFoAUqdTG+ej55NuGJ96j5jGLSa117OowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC84Njk4Y2YxYy02ZjJmLTQ5ZjYtOWE5MC1jZTg4 YTgzYjZmMzcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF478MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE2sscaJscRPfU8oCL8rJTM6D98qMt2ccpkX/CaI2mcGTdHzTP6jFh3E tjmo5uWw+DBsuCL/G+rSSV9Q8mI+tbelWAwJNL5WuTPcaaeJdNYLvS9LAVQd0ia6 EDdsrxZw/TxQ5WUrcMzKuBMAEigMMUzHzuiN6KcS4Hp8Pr5WK4wEWb4RSBpG2t7C Me29d4IpwMK00dZMYVWdD1QfLwiw1inlymAdY7mR3qPxydZYTEG34V7atSj+Ey3o Z7YFZV4XPU5MaVHXKu5hfwr8XXIUcTBz/Pin6VArE7El1a2lPhlraMGHHvC2/8TK xpAai4hYHtmMYULGlb79D00sTO5NYNE= -----END CERTIFICATE-----Generated at Tue Oct 13 21:14:46 2026 by rpki-client