$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/c9ebd617-8b50-4a3f-9afd-d677753a7e57/3b791117-de20-3729-b64e-bcbcd44e8d08.roa File: 3b791117-de20-3729-b64e-bcbcd44e8d08.roa (raw, json) Hash identifier: KxYAUG5rPDFE+NKjiVGW3z43PMPCeaMsypW+Wa4RaJk= Subject key identifier: 34:E7:8B:64:FC:B3:BA:A0:B7:2C:A1:C0:EB:30:65:3C:C3:3D:A6:A8 Certificate issuer: /CN=c9ebd617-8b50-4a3f-9afd-d677753a7e57 Certificate serial: 010D0C9F4328584F625ED6800C8B54AA4C81CBC0 Authority key identifier: FE:79:B8:04:F3:90:9C:9B:3C:99:19:80:32:A3:6A:B4:F5:C7:A2:05 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/c9ebd617-8b50-4a3f-9afd-d677753a7e57.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/c9ebd617-8b50-4a3f-9afd-d677753a7e57/3b791117-de20-3729-b64e-bcbcd44e8d08.roa Signing time: Sat 03 Oct 2026 23:15:45 +0000 ROA not before: Sat 03 Oct 2026 23:15:45 +0000 ROA not after: Sat 02 Jan 2027 00:15:45 +0000 asID: 26318 IP address blocks: 23.168.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/c9ebd617-8b50-4a3f-9afd-d677753a7e57/c9ebd617-8b50-4a3f-9afd-d677753a7e57.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/c9ebd617-8b50-4a3f-9afd-d677753a7e57/c9ebd617-8b50-4a3f-9afd-d677753a7e57.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/c9ebd617-8b50-4a3f-9afd-d677753a7e57.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 01 Nov 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:62:5e:d6:80:0c:8b:54:aa:4c:81:cb:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c9ebd617-8b50-4a3f-9afd-d677753a7e57 Validity Not Before: Oct 3 23:15:45 2026 GMT Not After : Jan 2 00:15:45 2027 GMT Subject: CN=a5c3b725-2660-4de5-afe2-7cee289edcc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:13:e5:a2:7a:6e:49:83:bc:82:d1:74:2d:0c: 7e:7f:47:b3:71:ea:0b:01:27:e8:ba:1f:e1:b6:20: da:21:f2:52:91:1e:45:70:68:ba:d2:41:46:61:6b: dc:1b:b0:45:45:fa:34:bd:77:d3:34:fd:e8:d7:36: 5c:e0:e9:1e:9b:5f:61:8f:e2:b2:64:8b:a1:4a:bd: b5:eb:c3:5b:c2:d0:19:14:a9:15:af:1c:3a:b5:c1: 56:eb:65:eb:f2:dc:7d:50:fd:dc:76:b2:94:be:4e: a6:17:af:e4:a5:ee:fe:bc:9b:de:91:5c:94:8f:97: 88:fd:5b:19:af:8b:58:28:a2:6d:44:45:fe:e3:3c: e8:41:53:44:1e:d7:e9:07:26:96:eb:df:0d:b7:8f: 87:ec:31:b7:e1:95:f8:88:03:4d:1f:59:76:a9:f4: 60:1f:b5:fe:c8:c1:ee:75:5d:01:3b:1b:24:ed:f6: 3c:74:87:de:c3:2d:42:fd:4c:59:dc:70:ba:71:36: 76:60:e1:77:81:01:67:d7:19:a3:c8:cd:12:31:fe: d0:cf:bb:06:83:18:97:5d:1b:a2:ea:ad:9a:81:63: e5:5d:34:4e:58:78:b5:7b:8c:67:20:a4:0b:90:0b: 96:29:b6:9b:5b:b6:b1:20:d0:77:9f:b2:2f:bc:b6: 7b:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:E7:8B:64:FC:B3:BA:A0:B7:2C:A1:C0:EB:30:65:3C:C3:3D:A6:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/c9ebd617-8b50-4a3f-9afd-d677753a7e57/3b791117-de20-3729-b64e-bcbcd44e8d08.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/c9ebd617-8b50-4a3f-9afd-d677753a7e57/c9ebd617-8b50-4a3f-9afd-d677753a7e57.crl X509v3 Authority Key Identifier: keyid:FE:79:B8:04:F3:90:9C:9B:3C:99:19:80:32:A3:6A:B4:F5:C7:A2:05 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/c9ebd617-8b50-4a3f-9afd-d677753a7e57.cer sbgp-ipAddrBlock: critical IPv4: 23.168.40.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:e9:e0:d5:9b:5e:6a:b1:99:d4:ed:18:c0:8d:49:1a:38:36: 58:8e:fa:21:fe:51:89:ef:da:b6:9c:bd:74:17:98:e5:7d:06: 73:13:a5:a9:b4:71:71:7e:45:da:a5:18:cd:93:b4:8d:cd:0f: d7:9a:6b:86:6a:1c:9a:25:33:d7:95:13:7f:11:5f:61:e8:df: ec:43:7d:72:a2:8f:d1:ad:5f:8d:e7:a3:df:3c:b7:d4:12:8f: 48:1a:09:2a:f2:73:a6:54:4e:f0:45:c4:7a:fb:b0:1d:cd:82: 6b:80:4a:72:f6:b9:0a:55:df:7d:3b:03:fb:d1:05:c1:7b:1e: 62:87:04:1d:4b:c8:48:6f:87:2c:d0:63:27:06:a6:71:3e:ab: da:30:c2:35:c9:5a:aa:d1:d3:7e:c3:33:18:c4:b9:72:05:b5: 39:86:22:3f:65:12:39:39:51:a6:50:42:2f:30:00:53:86:fd: 1d:01:84:34:28:14:b3:6f:9f:30:a5:41:be:0e:83:8c:92:f4: 9d:20:51:0b:43:18:cb:ab:de:07:23:ed:b0:04:e2:eb:07:39: ad:59:b2:18:70:c0:6a:33:27:27:02:52:b6:fd:c4:9d:61:81: b8:53:ed:c1:84:12:96:9a:97:0e:a1:7e:f2:76:01:10:94:63: 59:92:bd:12 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9iXtaADItUqkyBy8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzllYmQ2MTctOGI1MC00YTNmLTlhZmQtZDY3Nzc1M2E3 ZTU3MB4XDTI2MTAwMzIzMTU0NVoXDTI3MDEwMjAwMTU0NVowLzEtMCsGA1UEAxMk YTVjM2I3MjUtMjY2MC00ZGU1LWFmZTItN2NlZTI4OWVkY2M4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtRPlonpuSYO8gtF0LQx+f0ezceoLASfouh/h tiDaIfJSkR5FcGi60kFGYWvcG7BFRfo0vXfTNP3o1zZc4Okem19hj+KyZIuhSr21 68NbwtAZFKkVrxw6tcFW62Xr8tx9UP3cdrKUvk6mF6/kpe7+vJvekVyUj5eI/VsZ r4tYKKJtREX+4zzoQVNEHtfpByaW698Nt4+H7DG34ZX4iANNH1l2qfRgH7X+yMHu dV0BOxsk7fY8dIfewy1C/UxZ3HC6cTZ2YOF3gQFn1xmjyM0SMf7Qz7sGgxiXXRui 6q2agWPlXTROWHi1e4xnIKQLkAuWKbabW7axINB3n7IvvLZ7YQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDTni2T8s7qgtyyhwOswZTzDPaaoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS9jOWVi ZDYxNy04YjUwLTRhM2YtOWFmZC1kNjc3NzUzYTdlNTcvM2I3OTExMTctZGUyMC0z NzI5LWI2NGUtYmNiY2Q0NGU4ZDA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wZGZlNThmMi1l ZGZlLTQ2MTktODZiZC1kZWYyY2EzYWQ5MTkvYzllYmQ2MTctOGI1MC00YTNmLTlh ZmQtZDY3Nzc1M2E3ZTU3L2M5ZWJkNjE3LThiNTAtNGEzZi05YWZkLWQ2Nzc3NTNh N2U1Ny5jcmwwHwYDVR0jBBgwFoAU/nm4BPOQnJs8mRmAMqNqtPXHogUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYx OS04NmJkLWRlZjJjYTNhZDkxOS9jOWViZDYxNy04YjUwLTRhM2YtOWFmZC1kNjc3 NzUzYTdlNTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6goMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB7p4NWbXmqxmdTtGMCNSRo4NliO+iH+UYnv2racvXQXmOV9BnMTpam0 cXF+RdqlGM2TtI3ND9eaa4ZqHJolM9eVE38RX2Ho3+xDfXKij9GtX43no988t9QS j0gaCSryc6ZUTvBFxHr7sB3NgmuASnL2uQpV3307A/vRBcF7HmKHBB1LyEhvhyzQ YycGpnE+q9owwjXJWqrR037DMxjEuXIFtTmGIj9lEjk5UaZQQi8wAFOG/R0BhDQo FLNvnzClQb4Og4yS9J0gUQtDGMur3gcj7bAE4usHOa1ZshhwwGozJycCUrb9xJ1h gbhT7cGEEpaalw6hfvJ2ARCUY1mSvRI= -----END CERTIFICATE-----Generated at Fri Oct 30 10:15:11 2026 by rpki-client