$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2aa95afe-52d3-3896-b3f0-61c81484c4de.roa File: 2aa95afe-52d3-3896-b3f0-61c81484c4de.roa (raw, json) Hash identifier: KHzYDAb5nETukWSNHFyqO8ojC8KIQyxXTl13X1e9p1w= Subject key identifier: FA:2E:07:3C:0B:EA:13:2C:CA:BA:66:81:C6:29:83:F5:00:2C:D7:65 Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Certificate serial: 010D0C9F4328584F4987A9A374DD945F6C4A64C8 Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2aa95afe-52d3-3896-b3f0-61c81484c4de.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 209604 IP address blocks: 23.26.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:87:a9:a3:74:dd:94:5f:6c:4a:64:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=f0df47f1-a258-463b-a3d9-3b7230405d3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:3f:9c:5c:9e:1e:d3:44:49:a7:c5:2c:47:4a: f6:38:42:3d:c4:db:5c:93:c3:15:f0:74:7b:7e:e4: 5b:e7:1e:f5:7b:9f:85:a1:4e:4d:73:c6:71:3d:7a: 34:a0:53:0e:14:5b:35:d8:13:11:b3:47:50:be:68: 40:b5:ba:ec:05:60:04:ca:55:e7:82:31:9c:56:f0: 0b:81:e2:f3:12:4c:b9:33:03:44:b4:3b:db:3c:13: bc:3b:62:bf:f7:cc:77:6f:0d:cc:90:46:c3:d3:98: be:69:81:17:f0:65:ce:da:b0:e5:4f:19:55:55:ae: 3f:c2:19:40:3b:be:62:f0:47:6d:50:17:1d:30:53: d9:aa:22:16:ff:bb:24:39:9a:05:d2:4b:c1:18:ab: fc:84:18:b4:1f:6f:c4:cf:42:e8:2a:c4:01:96:77: 08:07:bc:ff:17:dd:d9:74:f1:77:1d:d6:27:dd:b9: a7:11:bb:39:31:8d:9e:a9:9d:b8:6c:33:32:ac:78: c7:fe:ec:02:7c:70:29:01:d1:49:8f:7c:fd:f9:ff: 79:72:42:c0:f9:89:12:dd:d7:dc:ad:34:fa:bb:b6: d8:1a:bf:e6:06:2c:0d:3f:d8:6e:09:90:e1:12:d5: ec:ba:97:19:64:41:3d:f8:f0:2c:73:6e:75:ed:ed: 2b:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:2E:07:3C:0B:EA:13:2C:CA:BA:66:81:C6:29:83:F5:00:2C:D7:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/2aa95afe-52d3-3896-b3f0-61c81484c4de.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl X509v3 Authority Key Identifier: keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer sbgp-ipAddrBlock: critical IPv4: 23.26.203.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:d9:db:64:f2:e0:2b:b2:81:8d:6e:dd:a8:8e:c8:6a:d4:66: bb:33:93:a7:c2:fe:6e:01:d0:6e:5d:04:f3:d8:7a:0b:45:9a: 1e:bb:cd:a7:ab:02:0e:b1:90:3d:35:c6:b5:fd:5a:68:b1:45: c4:22:bf:0d:5f:e3:ac:83:aa:23:5d:8c:94:d0:ea:e4:12:4e: 70:8c:8d:94:85:be:b9:92:67:7c:00:56:46:4c:0c:df:5c:82: 17:09:37:45:af:29:2e:91:c6:6f:ef:e4:92:f1:f7:c5:a2:fa: a7:40:33:49:db:30:fe:8e:21:64:57:fc:52:df:fa:db:8a:7a: bd:a8:11:51:82:b9:15:fd:b4:c8:14:57:fe:10:11:ec:44:57: 27:6f:d4:3f:dd:3e:ad:d5:67:dc:8d:4a:d0:84:6d:35:d8:5c: bf:78:2b:84:30:6b:c5:46:88:66:fb:bc:2e:e2:38:5e:54:0d: de:8b:ee:39:b9:fb:02:f6:f3:19:55:5a:75:0b:d2:3e:37:dc: 19:05:3e:20:44:82:6e:8d:16:b6:82:7d:db:13:af:be:10:2a: 79:9b:11:96:68:d4:f8:30:c1:5e:1c:5a:bc:90:7a:9d:22:39: 24:55:15:09:e3:52:b2:bd:9f:93:4a:a3:c4:51:f7:39:2f:a3: 79:99:aa:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jh6mjdN2UX2xKZMgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjZkZWEyYTUtODM3ZC00NmQ4LThmOGUtOTQ0N2VjZTIw YzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZjBkZjQ3ZjEtYTI1OC00NjNiLWEzZDktM2I3MjMwNDA1ZDNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoT+cXJ4e00RJp8UsR0r2OEI9xNtck8MV8HR7 fuRb5x71e5+FoU5Nc8ZxPXo0oFMOFFs12BMRs0dQvmhAtbrsBWAEylXngjGcVvAL geLzEky5MwNEtDvbPBO8O2K/98x3bw3MkEbD05i+aYEX8GXO2rDlTxlVVa4/whlA O75i8EdtUBcdMFPZqiIW/7skOZoF0kvBGKv8hBi0H2/Ez0LoKsQBlncIB7z/F93Z dPF3HdYn3bmnEbs5MY2eqZ24bDMyrHjH/uwCfHApAdFJj3z9+f95ckLA+YkS3dfc rTT6u7bYGr/mBiwNP9huCZDhEtXsupcZZEE9+PAsc2517e0rHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPouBzwL6hMsyrpmgcYpg/UALNdlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRl YTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3ZWNlMjBjMDkvMmFhOTVhZmUtNTJkMy0z ODk2LWIzZjAtNjFjODE0ODRjNGRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjZkZWEyYTUtODM3ZC00NmQ4LThm OGUtOTQ0N2VjZTIwYzA5LzY2ZGVhMmE1LTgzN2QtNDZkOC04ZjhlLTk0NDdlY2Uy MGMwOS5jcmwwHwYDVR0jBBgwFoAUw4ati/QZSzWUJJuQup2AEcIIcckwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82NmRlYTJhNS04MzdkLTQ2ZDgtOGY4ZS05NDQ3 ZWNlMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFxrLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAArZ22Ty4CuygY1u3aiOyGrUZrszk6fC/m4B0G5dBPPYegtFmh67zaer Ag6xkD01xrX9WmixRcQivw1f46yDqiNdjJTQ6uQSTnCMjZSFvrmSZ3wAVkZMDN9c ghcJN0WvKS6Rxm/v5JLx98Wi+qdAM0nbMP6OIWRX/FLf+tuKer2oEVGCuRX9tMgU V/4QEexEVydv1D/dPq3VZ9yNStCEbTXYXL94K4Qwa8VGiGb7vC7iOF5UDd6L7jm5 +wL28xlVWnUL0j433BkFPiBEgm6NFraCfdsTr74QKnmbEZZo1PgwwV4cWryQep0i OSRVFQnjUrK9n5NKo8RR9zkvo3mZqoQ= -----END CERTIFICATE-----Generated at Sat Oct 24 15:45:56 2026 by rpki-client