$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/2b912811-d626-4e45-a350-af51a34145a6/4ed08cf3-37d2-3c66-954e-395ccf721b32.roa File: 4ed08cf3-37d2-3c66-954e-395ccf721b32.roa (raw, json) Hash identifier: BdRHR8v+chFQYIbrlF4trKB9TDOCaFACoUVfS7Jafs0= Subject key identifier: 1C:7B:BD:1D:D5:8A:E0:FB:9A:9B:E7:F4:97:8F:1F:E1:3C:6A:A7:43 Certificate issuer: /CN=2b912811-d626-4e45-a350-af51a34145a6 Certificate serial: 010D0C9F4328584F8D285BED2D646D7EF1468040 Authority key identifier: 71:82:9A:64:87:B4:E5:2B:34:0C:37:DD:D1:21:9E:A8:0F:37:6E:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/2b912811-d626-4e45-a350-af51a34145a6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/2b912811-d626-4e45-a350-af51a34145a6/4ed08cf3-37d2-3c66-954e-395ccf721b32.roa Signing time: Mon 19 Oct 2026 07:05:45 +0000 ROA not before: Mon 19 Oct 2026 07:05:45 +0000 ROA not after: Sun 17 Jan 2027 08:05:45 +0000 asID: 7361 IP address blocks: 23.165.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/2b912811-d626-4e45-a350-af51a34145a6/2b912811-d626-4e45-a350-af51a34145a6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/2b912811-d626-4e45-a350-af51a34145a6/2b912811-d626-4e45-a350-af51a34145a6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/2b912811-d626-4e45-a350-af51a34145a6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Nov 2026 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:8d:28:5b:ed:2d:64:6d:7e:f1:46:80:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b912811-d626-4e45-a350-af51a34145a6 Validity Not Before: Oct 19 07:05:45 2026 GMT Not After : Jan 17 08:05:45 2027 GMT Subject: CN=49e5645e-0510-4510-8772-d06c443d9c04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:1f:f1:66:47:3a:8f:9d:7b:18:e5:d0:3a:4c: 27:83:33:37:e8:70:74:9f:2e:e8:0a:b6:ad:25:ee: 07:14:a1:e9:f1:e4:42:5b:da:3c:a1:b3:73:15:f5: fc:ba:63:f7:49:66:ae:6c:e1:5f:0f:63:c9:5b:b7: a4:5e:19:e3:ae:66:ac:07:9a:ad:12:4b:66:f0:18: 31:8a:d1:78:16:3f:ec:b1:c7:67:0e:33:db:25:ae: 34:4b:9d:ce:ea:68:5c:33:a6:e1:b9:3d:9f:f8:7b: fc:cd:26:df:f9:d5:ca:9c:d5:01:a7:b7:82:ec:0f: 67:54:59:8a:c5:8b:7b:d8:dd:b9:20:85:a0:d6:08: 98:6a:25:32:71:47:6d:80:be:fa:b2:cb:cc:85:f8: c1:7a:55:a9:e8:a5:a1:5b:f6:c0:e5:cf:9a:87:0f: dc:5e:2b:26:33:19:78:0a:90:9e:74:54:08:64:58: e8:b5:85:90:91:7f:d4:64:53:ff:f7:c2:f1:eb:f5: 3c:73:aa:cf:7b:2a:07:5e:ae:6c:95:eb:27:77:63: 65:98:59:f6:cb:59:44:48:54:8e:8c:a3:6f:96:47: 25:a5:ee:0a:20:a7:cd:22:fc:f8:1a:27:42:e7:f4: 58:7e:9c:76:b8:6c:69:0a:9d:f5:1c:69:b2:00:bb: 50:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:7B:BD:1D:D5:8A:E0:FB:9A:9B:E7:F4:97:8F:1F:E1:3C:6A:A7:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/2b912811-d626-4e45-a350-af51a34145a6/4ed08cf3-37d2-3c66-954e-395ccf721b32.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/2b912811-d626-4e45-a350-af51a34145a6/2b912811-d626-4e45-a350-af51a34145a6.crl X509v3 Authority Key Identifier: keyid:71:82:9A:64:87:B4:E5:2B:34:0C:37:DD:D1:21:9E:A8:0F:37:6E:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/2b912811-d626-4e45-a350-af51a34145a6.cer sbgp-ipAddrBlock: critical IPv4: 23.165.132.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:d9:96:b8:d8:4e:bf:d3:04:2e:db:3c:03:8a:39:2e:90:0a: 66:e3:74:dd:58:a6:b5:f8:05:0a:40:da:2f:f1:99:cd:96:55: 79:4f:43:b2:7d:ec:4a:32:03:7c:3a:9d:45:15:d0:8e:b7:89: 9c:9b:50:ed:43:2b:a1:0b:72:6f:76:16:cb:ab:a6:ee:55:43: 03:80:38:e3:ed:01:56:3c:64:e7:dd:de:1e:9d:5b:f5:42:5c: 89:78:75:41:34:ab:02:45:c1:ee:56:43:7a:b7:c7:9b:a8:f0: 0d:1f:4a:5e:8b:6f:16:f5:53:88:22:97:22:2c:74:3f:42:ef: fb:62:ee:7d:fc:b7:03:89:8a:1a:3b:3b:4d:99:35:bf:67:8c: c4:16:06:15:07:ae:05:c7:4b:38:eb:aa:1b:1e:4e:42:3e:f9: 2c:9a:e9:92:92:f4:5a:cd:1c:ec:c6:6c:b7:b4:99:24:3a:2f: b7:6c:31:c7:b3:8c:48:da:9f:3e:53:cc:32:36:ee:88:a1:83: 51:f5:13:e5:d3:78:bf:c9:92:5a:09:45:05:6e:47:c3:86:11: d9:44:03:ba:af:11:d5:ad:57:12:83:b6:f3:15:90:0f:a0:50: 96:57:98:c7:ac:a5:d0:df:9c:16:a2:c4:46:a4:00:21:5d:bd: 4c:c2:1f:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+NKFvtLWRtfvFGgEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmI5MTI4MTEtZDYyNi00ZTQ1LWEzNTAtYWY1MWEzNDE0 NWE2MB4XDTI2MTAxOTA3MDU0NVoXDTI3MDExNzA4MDU0NVowLzEtMCsGA1UEAxMk NDllNTY0NWUtMDUxMC00NTEwLTg3NzItZDA2YzQ0M2Q5YzA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAih/xZkc6j517GOXQOkwngzM36HB0ny7oCrat Je4HFKHp8eRCW9o8obNzFfX8umP3SWaubOFfD2PJW7ekXhnjrmasB5qtEktm8Bgx itF4Fj/sscdnDjPbJa40S53O6mhcM6bhuT2f+Hv8zSbf+dXKnNUBp7eC7A9nVFmK xYt72N25IIWg1giYaiUycUdtgL76ssvMhfjBelWp6KWhW/bA5c+ahw/cXismMxl4 CpCedFQIZFjotYWQkX/UZFP/98Lx6/U8c6rPeyoHXq5slesnd2NlmFn2y1lESFSO jKNvlkclpe4KIKfNIvz4GidC5/RYfpx2uGxpCp31HGmyALtQ+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBx7vR3ViuD7mpvn9JePH+E8aqdDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS8yYjkx MjgxMS1kNjI2LTRlNDUtYTM1MC1hZjUxYTM0MTQ1YTYvNGVkMDhjZjMtMzdkMi0z YzY2LTk1NGUtMzk1Y2NmNzIxYjMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wZGZlNThmMi1l ZGZlLTQ2MTktODZiZC1kZWYyY2EzYWQ5MTkvMmI5MTI4MTEtZDYyNi00ZTQ1LWEz NTAtYWY1MWEzNDE0NWE2LzJiOTEyODExLWQ2MjYtNGU0NS1hMzUwLWFmNTFhMzQx NDVhNi5jcmwwHwYDVR0jBBgwFoAUcYKaZIe05Ss0DDfd0SGeqA83bo8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYx OS04NmJkLWRlZjJjYTNhZDkxOS8yYjkxMjgxMS1kNjI2LTRlNDUtYTM1MC1hZjUx YTM0MTQ1YTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6WEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG/ZlrjYTr/TBC7bPAOKOS6QCmbjdN1YprX4BQpA2i/xmc2WVXlPQ7J9 7EoyA3w6nUUV0I63iZybUO1DK6ELcm92Fsurpu5VQwOAOOPtAVY8ZOfd3h6dW/VC XIl4dUE0qwJFwe5WQ3q3x5uo8A0fSl6Lbxb1U4gilyIsdD9C7/ti7n38twOJiho7 O02ZNb9njMQWBhUHrgXHSzjrqhseTkI++Sya6ZKS9FrNHOzGbLe0mSQ6L7dsMcez jEjanz5TzDI27oihg1H1E+XTeL/JkloJRQVuR8OGEdlEA7qvEdWtVxKDtvMVkA+g UJZXmMespdDfnBaixEakACFdvUzCH50= -----END CERTIFICATE-----Generated at Mon Nov 2 16:48:49 2026 by rpki-client