$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/bde5c818-5173-403b-85bf-e2a79bcac9e1/0291f793-c216-380b-b0c7-acb53fea39ab.roa File: 0291f793-c216-380b-b0c7-acb53fea39ab.roa (raw, json) Hash identifier: TWYnzNDaAlRiM75ebqh5g0p2kNwdIlJ695MID2flAZY= Subject key identifier: F7:74:82:86:7B:7F:97:02:AB:71:D3:2D:87:2B:E1:4E:3F:4E:67:F2 Certificate issuer: /CN=bde5c818-5173-403b-85bf-e2a79bcac9e1 Certificate serial: 010D0C9F4328584F908E3ACA3EA630116147B000 Authority key identifier: 9D:81:6B:60:27:EF:FC:86:11:2B:8C:3A:93:23:76:B1:5B:D3:71:07 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/bde5c818-5173-403b-85bf-e2a79bcac9e1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/bde5c818-5173-403b-85bf-e2a79bcac9e1/0291f793-c216-380b-b0c7-acb53fea39ab.roa Signing time: Tue 20 Oct 2026 12:18:26 +0000 ROA not before: Tue 20 Oct 2026 12:18:26 +0000 ROA not after: Mon 18 Jan 2027 13:18:26 +0000 asID: 403028 IP address blocks: 23.166.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/bde5c818-5173-403b-85bf-e2a79bcac9e1/bde5c818-5173-403b-85bf-e2a79bcac9e1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/bde5c818-5173-403b-85bf-e2a79bcac9e1/bde5c818-5173-403b-85bf-e2a79bcac9e1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/bde5c818-5173-403b-85bf-e2a79bcac9e1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:90:8e:3a:ca:3e:a6:30:11:61:47:b0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bde5c818-5173-403b-85bf-e2a79bcac9e1 Validity Not Before: Oct 20 12:18:26 2026 GMT Not After : Jan 18 13:18:26 2027 GMT Subject: CN=9001eeb3-c67e-411f-b982-36c100ef2e1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:2d:48:23:fe:51:c1:4f:0e:87:42:1f:17:ef: 57:0c:73:38:27:03:f0:f9:88:1e:f1:7b:79:6e:34: e5:8f:89:a6:ad:87:39:22:92:9b:42:74:a5:5a:dc: fe:47:79:ca:26:17:16:c6:b6:c9:f6:b4:b7:74:05: d4:08:59:dc:e8:42:ba:71:4c:59:8f:4d:83:42:60: bc:6f:04:b7:9c:eb:3b:38:74:c8:37:a9:78:65:17: c3:e5:63:97:c2:75:2c:17:42:82:54:c3:d1:47:57: e6:a1:4b:7a:1d:9b:f4:59:00:85:70:0d:41:df:9c: 9c:ac:83:8a:6a:ae:35:b4:ae:9f:62:21:f2:ca:28: 2d:9f:05:ed:e5:0d:e5:36:6a:c7:a6:9e:4b:e6:60: 35:66:2e:18:cb:79:ab:29:01:5a:11:17:b7:98:32: 71:88:de:66:58:26:94:0f:bb:58:37:ca:8a:d1:ed: 90:f3:6a:1f:8f:ee:3e:a2:dc:df:28:bd:65:03:31: 17:20:b3:01:35:a9:4a:69:5e:d6:74:47:a7:33:a2: 8b:20:d5:f6:17:b1:0c:ba:43:d2:79:90:53:a6:97: 57:e7:42:92:95:c9:ab:26:e0:37:8e:f0:81:7f:93: 43:34:f8:57:6a:99:9f:13:b4:6e:31:f8:f8:96:46: cc:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:74:82:86:7B:7F:97:02:AB:71:D3:2D:87:2B:E1:4E:3F:4E:67:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/bde5c818-5173-403b-85bf-e2a79bcac9e1/0291f793-c216-380b-b0c7-acb53fea39ab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/bde5c818-5173-403b-85bf-e2a79bcac9e1/bde5c818-5173-403b-85bf-e2a79bcac9e1.crl X509v3 Authority Key Identifier: keyid:9D:81:6B:60:27:EF:FC:86:11:2B:8C:3A:93:23:76:B1:5B:D3:71:07 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/bde5c818-5173-403b-85bf-e2a79bcac9e1.cer sbgp-ipAddrBlock: critical IPv4: 23.166.4.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:1b:d7:e9:0c:ee:80:03:33:a2:40:b8:0d:51:f1:f9:c3:6b: e0:5e:d8:75:2e:da:2c:12:98:69:90:fc:bc:a9:3a:22:45:f0: 88:0f:e4:79:0d:cf:fd:4f:25:98:69:2a:73:55:66:a7:47:ea: be:ff:67:27:9b:23:96:db:8a:8f:62:8d:d0:0d:01:70:1c:58: 36:13:19:b2:50:27:62:ea:64:39:2c:0a:96:43:b2:86:20:09: f7:12:e5:be:40:91:5d:ec:43:eb:36:ac:06:6f:0e:c0:5a:aa: 49:78:9f:82:37:85:b5:45:6c:28:73:e1:e6:29:85:9f:d6:12: 19:9f:61:5e:84:94:5d:63:71:20:8a:b3:2b:70:0e:bd:76:6b: 6e:e2:94:af:80:29:e3:38:ba:4f:ad:ed:bf:0f:18:37:2c:cd: 7e:c9:2d:cb:26:3b:48:c0:ec:a2:3a:65:d5:9e:7d:b2:fb:a3: 1f:18:b6:fe:88:f5:05:80:47:5d:bc:37:8b:c0:fe:7a:ef:7d: 29:04:3c:f8:3b:47:79:f7:2d:53:8d:5a:6f:2d:cf:87:39:d6: 8b:ae:21:55:3f:c6:1b:2a:03:66:b7:60:2a:cf:34:75:ec:e2: 9a:69:f9:2b:03:53:b9:0e:ef:09:3d:e7:e5:22:a0:88:83:39: 0b:ad:83:36 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+QjjrKPqYwEWFHsAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmRlNWM4MTgtNTE3My00MDNiLTg1YmYtZTJhNzliY2Fj OWUxMB4XDTI2MTAyMDEyMTgyNloXDTI3MDExODEzMTgyNlowLzEtMCsGA1UEAxMk OTAwMWVlYjMtYzY3ZS00MTFmLWI5ODItMzZjMTAwZWYyZTFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAni1II/5RwU8Oh0IfF+9XDHM4JwPw+Yge8Xt5 bjTlj4mmrYc5IpKbQnSlWtz+R3nKJhcWxrbJ9rS3dAXUCFnc6EK6cUxZj02DQmC8 bwS3nOs7OHTIN6l4ZRfD5WOXwnUsF0KCVMPRR1fmoUt6HZv0WQCFcA1B35ycrIOK aq41tK6fYiHyyigtnwXt5Q3lNmrHpp5L5mA1Zi4Yy3mrKQFaERe3mDJxiN5mWCaU D7tYN8qK0e2Q82ofj+4+otzfKL1lAzEXILMBNalKaV7WdEenM6KLINX2F7EMukPS eZBTppdX50KSlcmrJuA3jvCBf5NDNPhXapmfE7RuMfj4lkbMPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPd0goZ7f5cCq3HTLYcr4U4/TmfyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS9iZGU1 YzgxOC01MTczLTQwM2ItODViZi1lMmE3OWJjYWM5ZTEvMDI5MWY3OTMtYzIxNi0z ODBiLWIwYzctYWNiNTNmZWEzOWFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wZGZlNThmMi1l ZGZlLTQ2MTktODZiZC1kZWYyY2EzYWQ5MTkvYmRlNWM4MTgtNTE3My00MDNiLTg1 YmYtZTJhNzliY2FjOWUxL2JkZTVjODE4LTUxNzMtNDAzYi04NWJmLWUyYTc5YmNh YzllMS5jcmwwHwYDVR0jBBgwFoAUnYFrYCfv/IYRK4w6kyN2sVvTcQcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYx OS04NmJkLWRlZjJjYTNhZDkxOS9iZGU1YzgxOC01MTczLTQwM2ItODViZi1lMmE3 OWJjYWM5ZTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6YEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADsb1+kM7oADM6JAuA1R8fnDa+Be2HUu2iwSmGmQ/LypOiJF8IgP5HkN z/1PJZhpKnNVZqdH6r7/ZyebI5bbio9ijdANAXAcWDYTGbJQJ2LqZDksCpZDsoYg CfcS5b5AkV3sQ+s2rAZvDsBaqkl4n4I3hbVFbChz4eYphZ/WEhmfYV6ElF1jcSCK sytwDr12a27ilK+AKeM4uk+t7b8PGDcszX7JLcsmO0jA7KI6ZdWefbL7ox8Ytv6I 9QWAR128N4vA/nrvfSkEPPg7R3n3LVONWm8tz4c51ouuIVU/xhsqA2a3YCrPNHXs 4ppp+SsDU7kO7wk95+UioIiDOQutgzY= -----END CERTIFICATE-----Generated at Wed Nov 4 14:27:46 2026 by rpki-client