$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/a37e441e-b7ae-40d3-bd59-be59ed3e5f11/d4cb8d5a-04f8-3315-a40a-1ba05991058f.roa File: d4cb8d5a-04f8-3315-a40a-1ba05991058f.roa (raw, json) Hash identifier: bW8p3+DvBP8b11eBJAjI8WIS2K3ZRjkXHPR7pSQR0YU= Subject key identifier: 30:A7:10:35:79:B3:9D:F6:69:97:45:3D:F5:51:14:67:1E:E6:FC:9D Certificate issuer: /CN=a37e441e-b7ae-40d3-bd59-be59ed3e5f11 Certificate serial: 010D0C9F4328584F7D1EF9F4D5F5EF2F34F95300 Authority key identifier: 25:C7:D9:15:33:AC:E3:AE:5D:C1:FA:4D:7C:1C:F4:6E:26:16:3B:5B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/a37e441e-b7ae-40d3-bd59-be59ed3e5f11.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/a37e441e-b7ae-40d3-bd59-be59ed3e5f11/d4cb8d5a-04f8-3315-a40a-1ba05991058f.roa Signing time: Tue 13 Oct 2026 13:13:54 +0000 ROA not before: Tue 13 Oct 2026 13:13:54 +0000 ROA not after: Mon 11 Jan 2027 14:13:54 +0000 asID: 403050 IP address blocks: 23.165.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/a37e441e-b7ae-40d3-bd59-be59ed3e5f11/a37e441e-b7ae-40d3-bd59-be59ed3e5f11.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/a37e441e-b7ae-40d3-bd59-be59ed3e5f11/a37e441e-b7ae-40d3-bd59-be59ed3e5f11.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/a37e441e-b7ae-40d3-bd59-be59ed3e5f11.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7d:1e:f9:f4:d5:f5:ef:2f:34:f9:53:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a37e441e-b7ae-40d3-bd59-be59ed3e5f11 Validity Not Before: Oct 13 13:13:54 2026 GMT Not After : Jan 11 14:13:54 2027 GMT Subject: CN=b7f21fc0-f17c-49f6-a9a6-21e30335d3d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:27:21:29:ef:4b:8b:b8:63:69:2d:72:8c:83: fa:67:04:1e:c3:77:cc:ab:5d:79:ba:ec:b0:c0:34: 0f:d6:98:54:a7:08:90:48:f4:a9:f8:95:fc:01:77: a4:d2:60:57:2c:ee:87:16:21:cf:00:ef:8f:05:44: bd:c0:91:d7:34:64:97:94:4e:6b:62:7d:51:c4:67: eb:ff:00:c4:16:5f:4c:54:9c:78:17:e5:ef:75:aa: bd:af:22:e2:55:9c:98:7d:93:b1:7b:0f:28:82:0a: bf:45:87:b8:fe:a2:f8:45:27:6e:0d:1d:f3:08:b7: 3e:f5:e2:48:f9:53:f3:14:45:b2:23:64:7f:cf:bd: 4e:41:bc:d7:90:30:b6:63:2f:04:03:bc:ca:bc:5a: 4d:4e:0f:00:02:71:fc:10:38:d2:2d:c4:d1:3b:93: 07:bc:5c:4d:19:b8:86:be:5f:e9:f8:e3:5a:26:b0: c1:9f:14:bf:41:51:52:6c:de:bb:e6:2c:f7:5d:b8: 04:68:46:fb:d4:e6:b4:9b:8c:e0:29:8f:9c:c6:eb: 9e:d6:6c:af:4d:a3:79:02:75:07:1e:f4:ec:d7:52: 91:84:7e:6d:9a:41:43:f7:3a:35:19:6b:90:53:26: a9:f4:c9:d7:b0:6e:a1:e2:dd:d2:69:81:dc:19:4e: fd:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:A7:10:35:79:B3:9D:F6:69:97:45:3D:F5:51:14:67:1E:E6:FC:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/a37e441e-b7ae-40d3-bd59-be59ed3e5f11/d4cb8d5a-04f8-3315-a40a-1ba05991058f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/a37e441e-b7ae-40d3-bd59-be59ed3e5f11/a37e441e-b7ae-40d3-bd59-be59ed3e5f11.crl X509v3 Authority Key Identifier: keyid:25:C7:D9:15:33:AC:E3:AE:5D:C1:FA:4D:7C:1C:F4:6E:26:16:3B:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/a37e441e-b7ae-40d3-bd59-be59ed3e5f11.cer sbgp-ipAddrBlock: critical IPv4: 23.165.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:9c:1f:f9:26:d7:c0:1d:6c:4e:6e:67:b2:02:8b:0b:47:9e: 25:a1:7d:8e:98:56:93:2a:f9:9c:ef:5b:fc:31:d8:6d:b2:7d: 95:91:39:8f:84:31:de:ab:5a:a7:95:6c:76:c5:f6:cd:2c:c8: db:89:1c:3e:6e:d4:59:54:78:8b:5d:d1:55:09:cc:d4:54:1b: 31:dc:30:a0:1c:b6:c2:e0:d5:b2:43:3d:fc:5e:94:ba:29:e8: 69:ea:f4:f4:ae:96:d4:77:61:06:9e:2f:0d:46:2e:34:f1:90: fe:ed:f8:64:1d:de:f2:bf:38:1a:0f:a3:60:69:3a:79:13:88: a7:b3:00:f0:38:8a:97:82:b6:40:06:7b:05:61:16:96:f2:d9: 2b:73:a2:0f:34:2a:13:75:9f:47:38:13:d5:17:50:87:0a:50: 40:05:8e:f6:a1:3f:0f:40:3b:7b:58:e9:f6:bb:d7:f0:dd:67: e4:e5:75:6b:60:97:a4:84:cf:c0:55:e4:36:e4:2f:ee:53:fc: 6f:f6:ea:6c:92:a1:5e:17:03:7f:33:88:80:98:2e:9e:6b:8e: bc:fc:32:61:ac:67:8e:21:ec:91:6b:89:93:12:cc:03:71:9f: f5:70:48:15:d9:90:46:5d:df:ff:18:80:b7:b5:28:e0:69:de: 53:67:fe:ee -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE99Hvn01fXvLzT5UwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTM3ZTQ0MWUtYjdhZS00MGQzLWJkNTktYmU1OWVkM2U1 ZjExMB4XDTI2MTAxMzEzMTM1NFoXDTI3MDExMTE0MTM1NFowLzEtMCsGA1UEAxMk YjdmMjFmYzAtZjE3Yy00OWY2LWE5YTYtMjFlMzAzMzVkM2Q5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqSchKe9Li7hjaS1yjIP6ZwQew3fMq115uuyw wDQP1phUpwiQSPSp+JX8AXek0mBXLO6HFiHPAO+PBUS9wJHXNGSXlE5rYn1RxGfr /wDEFl9MVJx4F+Xvdaq9ryLiVZyYfZOxew8oggq/RYe4/qL4RSduDR3zCLc+9eJI +VPzFEWyI2R/z71OQbzXkDC2Yy8EA7zKvFpNTg8AAnH8EDjSLcTRO5MHvFxNGbiG vl/p+ONaJrDBnxS/QVFSbN675iz3XbgEaEb71Oa0m4zgKY+cxuue1myvTaN5AnUH HvTs11KRhH5tmkFD9zo1GWuQUyap9MnXsG6h4t3SaYHcGU79pQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDCnEDV5s532aZdFPfVRFGce5vydMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS9hMzdl NDQxZS1iN2FlLTQwZDMtYmQ1OS1iZTU5ZWQzZTVmMTEvZDRjYjhkNWEtMDRmOC0z MzE1LWE0MGEtMWJhMDU5OTEwNThmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wZGZlNThmMi1l ZGZlLTQ2MTktODZiZC1kZWYyY2EzYWQ5MTkvYTM3ZTQ0MWUtYjdhZS00MGQzLWJk NTktYmU1OWVkM2U1ZjExL2EzN2U0NDFlLWI3YWUtNDBkMy1iZDU5LWJlNTllZDNl NWYxMS5jcmwwHwYDVR0jBBgwFoAUJcfZFTOs465dwfpNfBz0biYWO1swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYx OS04NmJkLWRlZjJjYTNhZDkxOS9hMzdlNDQxZS1iN2FlLTQwZDMtYmQ1OS1iZTU5 ZWQzZTVmMTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6XcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHmcH/km18AdbE5uZ7ICiwtHniWhfY6YVpMq+ZzvW/wx2G2yfZWROY+E Md6rWqeVbHbF9s0syNuJHD5u1FlUeItd0VUJzNRUGzHcMKActsLg1bJDPfxelLop 6Gnq9PSultR3YQaeLw1GLjTxkP7t+GQd3vK/OBoPo2BpOnkTiKezAPA4ipeCtkAG ewVhFpby2Stzog80KhN1n0c4E9UXUIcKUEAFjvahPw9AO3tY6fa71/DdZ+TldWtg l6SEz8BV5DbkL+5T/G/26mySoV4XA38ziICYLp5rjrz8MmGsZ44h7JFriZMSzANx n/VwSBXZkEZd3/8YgLe1KOBp3lNn/u4= -----END CERTIFICATE-----Generated at Wed Nov 4 14:26:38 2026 by rpki-client