$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0ec83038-2e5d-4e80-bbab-04a564f27a8e/c3242f2f-2725-387d-86b3-692a1cce6abb.roa File: c3242f2f-2725-387d-86b3-692a1cce6abb.roa (raw, json) Hash identifier: vf8eIn5iEGbnZDkYvrzGN7IGsf4sCrrDZP9weFHU++c= Subject key identifier: 00:B3:C9:F6:B3:C0:A2:08:1B:97:7C:AA:2A:CE:0C:5C:8D:28:D4:9A Certificate issuer: /CN=0ec83038-2e5d-4e80-bbab-04a564f27a8e Certificate serial: 010D0C9F4328584F614790DCB7BB605DCDD6CBC0 Authority key identifier: 97:B3:74:F4:AE:94:8F:F1:41:95:23:1E:65:9B:33:C2:DF:C2:D1:01 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0ec83038-2e5d-4e80-bbab-04a564f27a8e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0ec83038-2e5d-4e80-bbab-04a564f27a8e/c3242f2f-2725-387d-86b3-692a1cce6abb.roa Signing time: Sat 03 Oct 2026 13:53:03 +0000 ROA not before: Sat 03 Oct 2026 13:53:03 +0000 ROA not after: Fri 01 Jan 2027 14:53:03 +0000 asID: 402761 IP address blocks: 23.165.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0ec83038-2e5d-4e80-bbab-04a564f27a8e/0ec83038-2e5d-4e80-bbab-04a564f27a8e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0ec83038-2e5d-4e80-bbab-04a564f27a8e/0ec83038-2e5d-4e80-bbab-04a564f27a8e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0ec83038-2e5d-4e80-bbab-04a564f27a8e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:61:47:90:dc:b7:bb:60:5d:cd:d6:cb:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ec83038-2e5d-4e80-bbab-04a564f27a8e Validity Not Before: Oct 3 13:53:03 2026 GMT Not After : Jan 1 14:53:03 2027 GMT Subject: CN=9da9a8bc-fffe-4b8d-8c6f-781e9a069c88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:66:37:52:a6:02:4f:d7:de:7b:eb:37:b1:2d: b9:d5:c4:4c:0f:85:0c:b3:78:7b:0a:ce:79:4b:b5: 89:4a:70:ff:58:26:45:0f:38:24:28:b5:7f:c3:84: 7e:dd:ff:32:ae:29:91:14:69:0b:9c:3a:6f:34:93: 26:81:f6:3c:34:12:bd:9c:d0:b3:b5:e8:fe:cb:9a: 9d:88:c2:64:f0:b8:20:98:57:0c:80:97:62:98:c9: 11:c3:e2:94:a0:e2:24:a5:c5:a2:52:19:9f:e6:6b: ad:13:65:20:a6:30:ec:f1:d0:46:5f:ef:aa:2d:0e: f5:b3:58:25:61:45:79:a8:b6:da:ec:e4:64:50:3b: d2:d4:8f:d7:3f:7f:43:e1:77:0e:42:9b:c3:3a:8e: f0:e1:ff:39:04:7b:51:cb:4a:fc:56:35:aa:be:7c: dc:fd:95:28:11:5e:a1:f6:d1:9b:da:18:e6:70:bf: b6:11:eb:74:c6:d5:f7:1c:07:45:c0:fa:c4:53:1e: d3:af:e5:db:0b:01:e4:d7:92:f9:53:b4:a5:51:02: a2:48:1c:66:31:ae:c1:e8:ac:55:6f:1f:18:5a:27: 2a:be:f1:0d:c0:58:79:43:34:e2:af:b7:58:fc:b2: a2:a7:92:ff:c5:5b:c7:dc:11:05:fb:50:77:dd:a5: 83:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:B3:C9:F6:B3:C0:A2:08:1B:97:7C:AA:2A:CE:0C:5C:8D:28:D4:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0ec83038-2e5d-4e80-bbab-04a564f27a8e/c3242f2f-2725-387d-86b3-692a1cce6abb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0ec83038-2e5d-4e80-bbab-04a564f27a8e/0ec83038-2e5d-4e80-bbab-04a564f27a8e.crl X509v3 Authority Key Identifier: keyid:97:B3:74:F4:AE:94:8F:F1:41:95:23:1E:65:9B:33:C2:DF:C2:D1:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0ec83038-2e5d-4e80-bbab-04a564f27a8e.cer sbgp-ipAddrBlock: critical IPv4: 23.165.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:c8:b2:41:d6:bc:10:bb:8b:8f:e6:9c:f5:e3:7b:d0:b1:8d: 1a:0a:c3:ae:3c:b5:97:70:17:16:b2:d7:46:c9:78:3d:24:d4: 1b:df:e3:6a:0d:17:e9:64:41:e6:dd:f1:a6:51:40:89:30:0c: b4:21:19:65:eb:e1:94:2e:40:46:bf:de:91:3a:47:27:5d:9c: 98:c5:7a:3d:d8:f1:e0:e2:7b:4d:51:95:19:2e:57:e2:6d:6a: 96:54:f8:cc:c5:b9:39:64:ee:fa:db:5a:0b:36:13:e0:af:3d: e5:7c:a5:17:52:6d:9d:62:41:43:2f:90:ab:ef:31:54:8c:f8: f9:0a:7a:34:80:00:20:cb:7a:03:52:00:20:e7:39:61:8e:54: e5:0b:32:cb:d5:d0:1a:2e:75:4c:89:db:f6:d8:44:30:d7:4b: 7a:f0:20:42:7e:81:37:05:5f:8a:bc:5e:8c:0e:aa:8b:21:d0: 1a:c1:8d:2c:f7:78:48:70:40:a2:b7:b9:3d:b6:5e:ec:8e:43: 47:a4:34:8d:ce:e6:c4:97:c5:39:87:f6:cb:4d:d9:91:cc:a4: f3:94:22:43:78:77:bb:e2:8d:50:97:b9:a3:24:9c:5c:f7:e0: 95:ce:d6:7e:54:c7:24:b0:df:c4:8e:57:d2:9c:b8:e3:02:82: 08:5b:9d:2c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9hR5Dct7tgXc3Wy8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGVjODMwMzgtMmU1ZC00ZTgwLWJiYWItMDRhNTY0ZjI3 YThlMB4XDTI2MTAwMzEzNTMwM1oXDTI3MDEwMTE0NTMwM1owLzEtMCsGA1UEAxMk OWRhOWE4YmMtZmZmZS00YjhkLThjNmYtNzgxZTlhMDY5Yzg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtWY3UqYCT9fee+s3sS251cRMD4UMs3h7Cs55 S7WJSnD/WCZFDzgkKLV/w4R+3f8yrimRFGkLnDpvNJMmgfY8NBK9nNCztej+y5qd iMJk8LggmFcMgJdimMkRw+KUoOIkpcWiUhmf5mutE2UgpjDs8dBGX++qLQ71s1gl YUV5qLba7ORkUDvS1I/XP39D4XcOQpvDOo7w4f85BHtRy0r8VjWqvnzc/ZUoEV6h 9tGb2hjmcL+2Eet0xtX3HAdFwPrEUx7Tr+XbCwHk15L5U7SlUQKiSBxmMa7B6KxV bx8YWicqvvENwFh5QzTir7dY/LKip5L/xVvH3BEF+1B33aWDIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFACzyfazwKIIG5d8qirODFyNKNSaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8wZWM4 MzAzOC0yZTVkLTRlODAtYmJhYi0wNGE1NjRmMjdhOGUvYzMyNDJmMmYtMjcyNS0z ODdkLTg2YjMtNjkyYTFjY2U2YWJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wZGZlNThmMi1l ZGZlLTQ2MTktODZiZC1kZWYyY2EzYWQ5MTkvMGVjODMwMzgtMmU1ZC00ZTgwLWJi YWItMDRhNTY0ZjI3YThlLzBlYzgzMDM4LTJlNWQtNGU4MC1iYmFiLTA0YTU2NGYy N2E4ZS5jcmwwHwYDVR0jBBgwFoAUl7N09K6Uj/FBlSMeZZszwt/C0QEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYx OS04NmJkLWRlZjJjYTNhZDkxOS8wZWM4MzAzOC0yZTVkLTRlODAtYmJhYi0wNGE1 NjRmMjdhOGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6UUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGPIskHWvBC7i4/mnPXje9CxjRoKw648tZdwFxay10bJeD0k1Bvf42oN F+lkQebd8aZRQIkwDLQhGWXr4ZQuQEa/3pE6RyddnJjFej3Y8eDie01RlRkuV+Jt apZU+MzFuTlk7vrbWgs2E+CvPeV8pRdSbZ1iQUMvkKvvMVSM+PkKejSAACDLegNS ACDnOWGOVOULMsvV0BoudUyJ2/bYRDDXS3rwIEJ+gTcFX4q8XowOqosh0BrBjSz3 eEhwQKK3uT22XuyOQ0ekNI3O5sSXxTmH9stN2ZHMpPOUIkN4d7vijVCXuaMknFz3 4JXO1n5UxySw38SOV9KcuOMCgghbnSw= -----END CERTIFICATE-----Generated at Mon Nov 2 13:03:36 2026 by rpki-client