$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/1368c5a4-3541-351f-b8ad-667c678eb189.roa File: 1368c5a4-3541-351f-b8ad-667c678eb189.roa (raw, json) Hash identifier: lAcF7ia/jaskCh14TtwG8Pcgos9mUf7GJUlvllQNTlw= Subject key identifier: 7E:88:0C:16:BE:64:88:54:2B:92:9E:F3:12:6E:5A:38:0E:3C:8D:97 Certificate issuer: /CN=23ddb57b-8888-40f4-bf17-518b6a50512d Certificate serial: 010D0C9F4328584FAF588D624F396D8BBF798340 Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/1368c5a4-3541-351f-b8ad-667c678eb189.roa Signing time: Sat 31 Oct 2026 13:00:13 +0000 ROA not before: Sat 31 Oct 2026 13:00:13 +0000 ROA not after: Fri 29 Jan 2027 14:00:13 +0000 asID: 3356 IP address blocks: 69.44.104.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Nov 2026 10:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:af:58:8d:62:4f:39:6d:8b:bf:79:83:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d Validity Not Before: Oct 31 13:00:13 2026 GMT Not After : Jan 29 14:00:13 2027 GMT Subject: CN=1cd9ca58-9a58-47ff-abe9-ea1fe3ae02b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:19:9f:4f:61:fe:a5:c0:fb:37:cf:30:e4:f8: 18:a1:21:92:50:92:67:64:83:19:4a:6e:e3:2b:9d: a9:0e:30:0a:ec:e6:1d:32:4d:1c:75:d3:12:fd:0e: 1c:ff:63:c1:dd:a6:9f:55:40:6f:bb:70:cf:6e:49: 00:84:84:3e:31:ff:80:83:79:44:91:54:c3:78:a7: a7:9c:de:43:89:e1:e6:bb:fd:33:fd:27:91:4a:3c: 95:d4:2c:17:84:e9:de:9a:91:1f:fa:42:5f:bc:4c: 2b:90:36:1d:a6:69:a0:97:40:55:9e:41:ce:b3:29: a6:28:c4:1e:18:c5:0b:2a:1e:20:28:63:f7:4d:f0: a3:2f:cc:f7:28:b0:6f:86:c9:0a:b8:61:02:19:32: 33:dc:f2:9c:b1:8b:c3:b1:ae:ca:92:9f:07:85:d4: 88:4a:16:e2:9d:6e:75:78:47:8a:0f:da:8d:9b:85: 3c:cb:40:73:23:c9:77:5f:54:18:ae:f5:9e:a9:da: 29:68:43:69:9a:41:09:3c:ca:4e:44:cb:5c:58:49: 62:a5:2c:4a:0e:30:49:1e:87:e5:a1:fa:7d:a1:89: b4:af:32:e3:a7:df:e0:01:f1:65:be:62:a1:70:f4: 9b:7c:31:78:14:6e:e8:53:fa:78:b2:8d:9f:a1:1a: 9d:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:88:0C:16:BE:64:88:54:2B:92:9E:F3:12:6E:5A:38:0E:3C:8D:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/1368c5a4-3541-351f-b8ad-667c678eb189.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl X509v3 Authority Key Identifier: keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer sbgp-ipAddrBlock: critical IPv4: 69.44.104.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:9a:3a:09:6b:aa:ed:01:c6:b7:03:d2:3f:34:4e:ee:af:91: 7c:7d:3f:69:b0:5a:74:8c:97:7c:22:f9:f6:a7:bc:17:fb:ec: 2c:ea:6a:46:1f:59:36:91:52:fb:e7:52:b2:c5:db:b4:53:b8: 7d:0e:50:c0:e6:cb:7a:8f:f2:37:1a:4e:eb:4f:b0:0b:b3:ec: d6:7f:11:60:82:67:21:a6:43:38:1c:c7:1c:14:ef:6a:24:77: d7:ea:5c:ff:fc:85:8a:c5:a8:fd:82:06:cf:b4:4b:66:24:65: 36:09:11:bf:fb:1d:f8:9a:93:0e:bd:4c:33:a4:89:d6:44:66: 21:74:9e:05:8a:58:f0:12:c1:c6:3e:aa:2f:fa:f7:a4:60:9f: b6:b4:77:eb:41:fc:e5:f0:07:37:50:f1:3b:5b:30:b0:a3:0d: 8a:74:4f:2f:b8:0a:43:23:35:aa:0a:64:8d:83:52:dc:bb:3e: 64:ad:9a:8a:9f:5b:98:92:62:b8:85:67:ef:18:33:03:e9:0b: c6:27:fd:05:e7:b3:02:7c:b7:87:67:be:f7:e4:d8:fd:d4:d0: e2:ac:61:b1:2d:2c:a7:18:13:fb:d6:d8:84:dc:6f:40:4f:59: 3b:b1:91:be:bc:d8:ee:74:d5:bd:ce:f7:ad:b2:cf:e8:a3:0f: a8:7e:4d:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+vWI1iTzlti795g0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1 MTJkMB4XDTI2MTAzMTEzMDAxM1oXDTI3MDEyOTE0MDAxM1owLzEtMCsGA1UEAxMk MWNkOWNhNTgtOWE1OC00N2ZmLWFiZTktZWExZmUzYWUwMmIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAihmfT2H+pcD7N88w5PgYoSGSUJJnZIMZSm7j K52pDjAK7OYdMk0cddMS/Q4c/2PB3aafVUBvu3DPbkkAhIQ+Mf+Ag3lEkVTDeKen nN5DieHmu/0z/SeRSjyV1CwXhOnempEf+kJfvEwrkDYdpmmgl0BVnkHOsymmKMQe GMULKh4gKGP3TfCjL8z3KLBvhskKuGECGTIz3PKcsYvDsa7Kkp8HhdSIShbinW51 eEeKD9qNm4U8y0BzI8l3X1QYrvWeqdopaENpmkEJPMpORMtcWElipSxKDjBJHofl ofp9oYm0rzLjp9/gAfFlvmKhcPSbfDF4FG7oU/p4so2foRqduQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH6IDBa+ZIhUK5Ke8xJuWjgOPI2XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvMTM2OGM1YTQtMzU0MS0z NTFmLWI4YWQtNjY3YzY3OGViMTg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi NmE1MDUxMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRSxoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACyaOglrqu0BxrcD0j80Tu6vkXx9P2mwWnSMl3wi+fanvBf77CzqakYf WTaRUvvnUrLF27RTuH0OUMDmy3qP8jcaTutPsAuz7NZ/EWCCZyGmQzgcxxwU72ok d9fqXP/8hYrFqP2CBs+0S2YkZTYJEb/7Hfiakw69TDOkidZEZiF0ngWKWPASwcY+ qi/696Rgn7a0d+tB/OXwBzdQ8TtbMLCjDYp0Ty+4CkMjNaoKZI2DUty7PmStmoqf W5iSYriFZ+8YMwPpC8Yn/QXnswJ8t4dnvvfk2P3U0OKsYbEtLKcYE/vW2ITcb0BP WTuxkb682O501b3O962yz+ijD6h+TRE= -----END CERTIFICATE-----Generated at Mon Nov 2 07:30:57 2026 by rpki-client