$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287/acbe72f7-662c-38c1-9456-6c364257e132.roa File: acbe72f7-662c-38c1-9456-6c364257e132.roa (raw, json) Hash identifier: gH1fc9I/ND0xpCQbvY8FYAmOZRy8ogfP8FHx/Dkkvnc= Subject key identifier: 83:F2:09:57:9F:25:AD:1A:83:B4:FC:63:4D:EF:79:6C:9E:AD:44:04 Certificate issuer: /CN=1fc85ba4-8d72-48ed-a166-a76dc2f04287 Certificate serial: 010D0C9F4328584FA42DC929C2C99BB61F758980 Authority key identifier: 11:BC:5D:01:E6:C9:1B:FB:7F:23:E5:D2:22:91:D6:B4:28:A4:92:09 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287/acbe72f7-662c-38c1-9456-6c364257e132.roa Signing time: Tue 27 Oct 2026 13:00:13 +0000 ROA not before: Tue 27 Oct 2026 13:00:13 +0000 ROA not after: Mon 25 Jan 2027 14:00:13 +0000 asID: 18779 IP address blocks: 23.239.161.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287/1fc85ba4-8d72-48ed-a166-a76dc2f04287.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287/1fc85ba4-8d72-48ed-a166-a76dc2f04287.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 29 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:a4:2d:c9:29:c2:c9:9b:b6:1f:75:89:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1fc85ba4-8d72-48ed-a166-a76dc2f04287 Validity Not Before: Oct 27 13:00:13 2026 GMT Not After : Jan 25 14:00:13 2027 GMT Subject: CN=d083d807-e902-40dc-b604-6211707e30ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:a5:be:4f:d8:d0:32:9c:c1:d7:0a:5c:4f:a1: 89:14:5b:65:4e:93:b3:77:ec:5f:6b:db:72:ea:c2: d7:8f:29:ae:5b:3a:4b:ea:b4:fc:72:7e:cc:8b:de: de:a7:26:b0:ad:df:19:c5:a4:21:6f:85:ec:8a:7d: c1:6c:cf:fe:6e:ff:df:73:d0:df:7e:7a:67:04:d6: eb:c3:a6:9e:bf:cb:19:82:15:af:48:a3:a5:90:81: d9:bc:5f:b6:a1:bb:3e:7b:4b:fa:74:2a:82:ef:78: 0a:c7:23:e9:0f:67:b5:08:a4:5a:7e:6d:42:a4:90: 3b:da:04:3a:38:03:16:b6:db:69:23:e5:3e:f8:2b: c7:af:59:00:5a:db:a5:76:9d:b1:40:7b:9f:8c:6a: 9e:6a:e2:4d:4e:fe:e7:44:99:5d:0a:1d:f3:38:14: b4:7a:79:1a:86:65:78:8a:6f:43:08:d8:1b:e5:e2: da:82:c2:49:8b:23:d4:2d:55:99:b9:45:59:b3:92: 72:32:de:e1:c9:d0:e7:90:3b:24:05:6a:68:e2:f9: 84:5f:70:54:09:28:34:25:da:2e:4a:26:30:23:86: 31:47:40:38:91:c4:cf:a4:24:6c:0c:97:67:6e:d3: b8:2f:d5:89:04:4c:dc:ba:ec:84:01:bb:53:c0:d9: e0:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:F2:09:57:9F:25:AD:1A:83:B4:FC:63:4D:EF:79:6C:9E:AD:44:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287/acbe72f7-662c-38c1-9456-6c364257e132.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287/1fc85ba4-8d72-48ed-a166-a76dc2f04287.crl X509v3 Authority Key Identifier: keyid:11:BC:5D:01:E6:C9:1B:FB:7F:23:E5:D2:22:91:D6:B4:28:A4:92:09 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1fc85ba4-8d72-48ed-a166-a76dc2f04287.cer sbgp-ipAddrBlock: critical IPv4: 23.239.161.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:02:36:03:92:60:db:a5:2d:13:cd:74:ca:a6:61:52:22:db: 54:8e:54:7a:1e:b3:ea:05:7e:bb:27:02:c5:fd:13:0f:8b:92: 75:95:7d:c4:25:cc:51:26:24:c4:6e:33:bb:db:6c:f6:bd:ba: a8:1c:13:46:50:55:bf:0a:51:d4:b2:87:a9:17:01:00:93:d4: 00:44:7c:e6:c1:a2:48:8a:b5:19:b0:a0:d9:bc:39:c4:05:0c: 07:7e:bc:61:dd:78:d9:0d:c2:e0:99:7c:51:d0:9b:61:2d:b2: c5:f4:f6:aa:96:d2:2a:c0:ae:68:31:c8:47:0b:59:c2:f6:ac: 53:04:41:dd:b8:a0:e1:60:6e:d3:25:ba:6f:d4:cd:6a:82:29: 39:fe:83:91:91:ef:1f:b6:c4:00:0b:1e:4e:2e:94:b2:a3:01: f4:15:fe:6a:15:6f:cd:31:a7:84:1b:4e:fe:97:7b:44:00:dd: 3e:2d:f3:8b:5b:82:56:bb:79:41:4d:54:bd:1a:fc:05:d8:3e: 01:ed:96:1e:01:2a:81:46:fd:ed:cd:8a:46:a8:b6:ba:42:38: fc:3a:89:4e:a8:9d:4e:7a:96:30:ef:68:90:5b:e8:db:4c:80: e0:32:af:5f:23:f6:77:c0:ba:ba:0a:29:fb:47:7b:26:e2:fc: de:93:57:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+kLckpwsmbth91iYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWZjODViYTQtOGQ3Mi00OGVkLWExNjYtYTc2ZGMyZjA0 Mjg3MB4XDTI2MTAyNzEzMDAxM1oXDTI3MDEyNTE0MDAxM1owLzEtMCsGA1UEAxMk ZDA4M2Q4MDctZTkwMi00MGRjLWI2MDQtNjIxMTcwN2UzMGNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiaW+T9jQMpzB1wpcT6GJFFtlTpOzd+xfa9ty 6sLXjymuWzpL6rT8cn7Mi97epyawrd8ZxaQhb4Xsin3BbM/+bv/fc9DffnpnBNbr w6aev8sZghWvSKOlkIHZvF+2obs+e0v6dCqC73gKxyPpD2e1CKRafm1CpJA72gQ6 OAMWtttpI+U++CvHr1kAWtuldp2xQHufjGqeauJNTv7nRJldCh3zOBS0enkahmV4 im9DCNgb5eLagsJJiyPULVWZuUVZs5JyMt7hydDnkDskBWpo4vmEX3BUCSg0Jdou SiYwI4YxR0A4kcTPpCRsDJdnbtO4L9WJBEzcuuyEAbtTwNngjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIPyCVefJa0ag7T8Y03veWyerUQEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xZmM4 NWJhNC04ZDcyLTQ4ZWQtYTE2Ni1hNzZkYzJmMDQyODcvYWNiZTcyZjctNjYyYy0z OGMxLTk0NTYtNmMzNjQyNTdlMTMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMWZjODViYTQtOGQ3Mi00OGVkLWEx NjYtYTc2ZGMyZjA0Mjg3LzFmYzg1YmE0LThkNzItNDhlZC1hMTY2LWE3NmRjMmYw NDI4Ny5jcmwwHwYDVR0jBBgwFoAUEbxdAebJG/t/I+XSIpHWtCikkgkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8xZmM4NWJhNC04ZDcyLTQ4ZWQtYTE2Ni1hNzZk YzJmMDQyODcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF++hMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADACNgOSYNulLRPNdMqmYVIi21SOVHoes+oFfrsnAsX9Ew+LknWVfcQl zFEmJMRuM7vbbPa9uqgcE0ZQVb8KUdSyh6kXAQCT1ABEfObBokiKtRmwoNm8OcQF DAd+vGHdeNkNwuCZfFHQm2EtssX09qqW0irArmgxyEcLWcL2rFMEQd24oOFgbtMl um/UzWqCKTn+g5GR7x+2xAALHk4ulLKjAfQV/moVb80xp4QbTv6Xe0QA3T4t84tb gla7eUFNVL0a/AXYPgHtlh4BKoFG/e3NikaotrpCOPw6iU6onU56ljDvaJBb6NtM gOAyr18j9nfAuroKKftHeybi/N6TV/g= -----END CERTIFICATE-----Generated at Wed Oct 28 21:30:23 2026 by rpki-client