$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9cfaab4b-7d49-43b7-80dd-84ab0ebeb214/33e98f4a-46f2-39d5-8f60-8120def084e3.roa File: 33e98f4a-46f2-39d5-8f60-8120def084e3.roa (raw, json) Hash identifier: lcQtIScXT/jv/pdX3Bv672h8gVX+ddXdpfFd9h+Qx84= Subject key identifier: 64:22:14:09:6C:06:C5:70:A7:E8:FB:F9:3A:B6:42:CB:2E:B4:35:99 Certificate issuer: /CN=9cfaab4b-7d49-43b7-80dd-84ab0ebeb214 Certificate serial: 010D0C9F4328584F1897C057CEE2B6BB46D9F800 Authority key identifier: 61:9D:D7:B9:B2:35:05:84:A5:AC:4A:5E:DB:81:0E:00:C6:38:24:2D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9cfaab4b-7d49-43b7-80dd-84ab0ebeb214.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9cfaab4b-7d49-43b7-80dd-84ab0ebeb214/33e98f4a-46f2-39d5-8f60-8120def084e3.roa Signing time: Mon 07 Sep 2026 13:00:12 +0000 ROA not before: Mon 07 Sep 2026 13:00:12 +0000 ROA not after: Sun 06 Dec 2026 14:00:12 +0000 asID: 30381 IP address blocks: 23.145.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9cfaab4b-7d49-43b7-80dd-84ab0ebeb214/9cfaab4b-7d49-43b7-80dd-84ab0ebeb214.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9cfaab4b-7d49-43b7-80dd-84ab0ebeb214/9cfaab4b-7d49-43b7-80dd-84ab0ebeb214.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9cfaab4b-7d49-43b7-80dd-84ab0ebeb214.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:18:97:c0:57:ce:e2:b6:bb:46:d9:f8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9cfaab4b-7d49-43b7-80dd-84ab0ebeb214 Validity Not Before: Sep 7 13:00:12 2026 GMT Not After : Dec 6 14:00:12 2026 GMT Subject: CN=611de416-dba0-4ec4-94ec-6b8aa8e5f760 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:44:e2:da:fe:28:fd:70:4d:a7:10:43:35:2b: 9b:f9:ff:45:07:2e:e6:bd:2c:53:b4:83:a4:a3:6e: 4e:7d:76:52:1e:ec:ce:04:8a:ca:80:16:eb:80:50: d9:c1:4c:93:b7:9a:f4:e8:6d:f2:94:ea:38:89:a3: d5:8b:1d:9a:94:f0:75:8d:ba:e8:e9:25:1c:3f:81: 60:7f:5c:77:eb:22:d5:b7:0d:ec:06:15:1c:c7:af: 1b:ed:8b:f3:ae:84:bf:ba:58:c1:6a:71:01:ee:d9: c2:3d:cf:5e:03:48:68:37:9b:94:98:bc:f1:3c:d2: aa:ef:32:4a:77:69:4a:5c:18:da:d7:d3:00:07:d3: a2:30:0d:48:65:96:d9:f9:87:ee:1f:d0:c3:54:69: b0:5e:a9:a3:83:07:37:d0:bd:82:f6:b0:75:c0:5f: 72:58:b0:af:c6:e3:a5:dd:a2:30:9b:d9:a5:b4:c3: c6:27:d8:c5:d9:35:53:0a:ce:85:59:85:28:09:60: 7d:ac:8c:c0:9d:e4:51:49:c9:24:2d:de:3d:95:23: 51:f0:38:32:f7:17:f2:19:03:65:56:7d:36:34:9a: 10:b3:94:3f:6e:c1:80:23:11:09:c6:23:d4:a0:27: e3:8c:20:bc:8e:1d:82:19:37:1c:d7:30:10:60:88: db:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:22:14:09:6C:06:C5:70:A7:E8:FB:F9:3A:B6:42:CB:2E:B4:35:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9cfaab4b-7d49-43b7-80dd-84ab0ebeb214/33e98f4a-46f2-39d5-8f60-8120def084e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9cfaab4b-7d49-43b7-80dd-84ab0ebeb214/9cfaab4b-7d49-43b7-80dd-84ab0ebeb214.crl X509v3 Authority Key Identifier: keyid:61:9D:D7:B9:B2:35:05:84:A5:AC:4A:5E:DB:81:0E:00:C6:38:24:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9cfaab4b-7d49-43b7-80dd-84ab0ebeb214.cer sbgp-ipAddrBlock: critical IPv4: 23.145.244.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:64:59:40:d9:00:10:38:b4:11:79:12:56:7e:62:72:18:51: 85:8f:f2:85:46:1f:40:81:9e:92:d8:61:c8:c8:03:f7:9b:09: 92:9b:e9:c2:82:fc:40:6f:ed:38:d2:0a:b2:66:85:46:01:4a: 8c:ba:bf:7a:28:93:94:c2:9a:83:21:14:ea:7a:24:0e:b4:13: d8:b7:94:81:cb:79:ed:e0:4c:b3:06:0f:84:8d:b0:5c:b5:50: 1b:6a:bd:f2:56:00:1e:9c:7b:75:b5:87:e0:1b:9b:d4:72:0b: e0:9c:a2:d8:50:6b:93:7e:8a:04:c2:a3:e7:d4:bc:e2:7d:ba: ef:f0:aa:d2:05:13:6d:80:49:6a:8a:ea:ff:09:e4:55:a3:a4: 12:fd:0a:67:69:98:06:a9:e2:7b:b4:dd:dc:4f:80:a3:11:bd: 08:0a:85:cd:19:5c:ff:e8:69:75:2b:ca:c4:ce:96:72:dd:d9: 46:91:e4:c8:c2:36:1d:db:81:b3:eb:49:cc:03:1e:f3:75:31: a4:cd:92:8f:87:65:98:42:00:f1:f1:eb:2d:93:0e:40:de:a4: be:8b:10:ba:5b:d2:1b:bf:34:d8:ae:ea:90:ab:32:eb:2e:0a: 26:76:5e:12:65:3c:97:92:c0:0c:fc:73:cd:47:4a:c9:1a:e3: 5b:e9:be:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8Yl8BXzuK2u0bZ+AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWNmYWFiNGItN2Q0OS00M2I3LTgwZGQtODRhYjBlYmVi MjE0MB4XDTI2MDkwNzEzMDAxMloXDTI2MTIwNjE0MDAxMlowLzEtMCsGA1UEAxMk NjExZGU0MTYtZGJhMC00ZWM0LTk0ZWMtNmI4YWE4ZTVmNzYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv0Ti2v4o/XBNpxBDNSub+f9FBy7mvSxTtIOk o25OfXZSHuzOBIrKgBbrgFDZwUyTt5r06G3ylOo4iaPVix2alPB1jbro6SUcP4Fg f1x36yLVtw3sBhUcx68b7YvzroS/uljBanEB7tnCPc9eA0hoN5uUmLzxPNKq7zJK d2lKXBja19MAB9OiMA1IZZbZ+YfuH9DDVGmwXqmjgwc30L2C9rB1wF9yWLCvxuOl 3aIwm9mltMPGJ9jF2TVTCs6FWYUoCWB9rIzAneRRSckkLd49lSNR8Dgy9xfyGQNl Vn02NJoQs5Q/bsGAIxEJxiPUoCfjjCC8jh2CGTcc1zAQYIjbYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGQiFAlsBsVwp+j7+Tq2QssutDWZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC85Y2Zh YWI0Yi03ZDQ5LTQzYjctODBkZC04NGFiMGViZWIyMTQvMzNlOThmNGEtNDZmMi0z OWQ1LThmNjAtODEyMGRlZjA4NGUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvOWNmYWFiNGItN2Q0OS00M2I3LTgw ZGQtODRhYjBlYmViMjE0LzljZmFhYjRiLTdkNDktNDNiNy04MGRkLTg0YWIwZWJl YjIxNC5jcmwwHwYDVR0jBBgwFoAUYZ3XubI1BYSlrEpe24EOAMY4JC0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC85Y2ZhYWI0Yi03ZDQ5LTQzYjctODBkZC04NGFi MGViZWIyMTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5H0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAENkWUDZABA4tBF5ElZ+YnIYUYWP8oVGH0CBnpLYYcjIA/ebCZKb6cKC /EBv7TjSCrJmhUYBSoy6v3ook5TCmoMhFOp6JA60E9i3lIHLee3gTLMGD4SNsFy1 UBtqvfJWAB6ce3W1h+Abm9RyC+CcothQa5N+igTCo+fUvOJ9uu/wqtIFE22ASWqK 6v8J5FWjpBL9CmdpmAap4nu03dxPgKMRvQgKhc0ZXP/oaXUrysTOlnLd2UaR5MjC Nh3bgbPrScwDHvN1MaTNko+HZZhCAPHx6y2TDkDepL6LELpb0hu/NNiu6pCrMusu CiZ2XhJlPJeSwAz8c81HSska41vpvg8= -----END CERTIFICATE-----Generated at Wed Sep 23 08:07:13 2026 by rpki-client