$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/d8958960-7904-44c7-b715-302b3487f322/2bc757b8-f8aa-32b6-8375-228863616620.roa File: 2bc757b8-f8aa-32b6-8375-228863616620.roa (raw, json) Hash identifier: BYBEgBkMHtnf0VIdEHzmaIeQPLh/qo+BkB/EFIcpE1A= Subject key identifier: FC:AA:64:B1:A6:39:5D:CE:0B:36:F7:E7:DF:2E:5F:41:D3:60:56:DE Certificate issuer: /CN=d8958960-7904-44c7-b715-302b3487f322 Certificate serial: 010D0C9F4328584F9FFDE0D28E9FADEED6006C00 Authority key identifier: AC:09:1A:36:2A:BD:2B:C4:0C:72:54:9A:2C:18:51:AC:74:D6:73:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/d8958960-7904-44c7-b715-302b3487f322.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/d8958960-7904-44c7-b715-302b3487f322/2bc757b8-f8aa-32b6-8375-228863616620.roa Signing time: Mon 26 Oct 2026 01:00:13 +0000 ROA not before: Mon 26 Oct 2026 01:00:13 +0000 ROA not after: Sun 24 Jan 2027 02:00:13 +0000 asID: 40065 IP address blocks: 23.160.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/d8958960-7904-44c7-b715-302b3487f322/d8958960-7904-44c7-b715-302b3487f322.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/d8958960-7904-44c7-b715-302b3487f322/d8958960-7904-44c7-b715-302b3487f322.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/d8958960-7904-44c7-b715-302b3487f322.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 30 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:9f:fd:e0:d2:8e:9f:ad:ee:d6:00:6c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d8958960-7904-44c7-b715-302b3487f322 Validity Not Before: Oct 26 01:00:13 2026 GMT Not After : Jan 24 02:00:13 2027 GMT Subject: CN=ecfa727a-b1f9-40ea-9f7e-4eda409ac803 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:f6:35:67:0b:7b:ed:e1:3b:7d:e1:6c:1f:22: b0:d8:c1:56:6e:2f:e8:d1:7f:b7:36:7b:42:4a:29: a4:82:c9:fd:10:76:dd:4d:ad:8f:e8:83:63:a6:aa: 65:f2:0f:e2:a7:2c:a3:a1:36:ba:3b:e9:f0:b8:e6: 02:53:20:95:70:46:37:a9:64:91:16:de:3c:d6:58: c1:23:82:c1:23:f8:f3:e5:ac:d0:c5:f3:a3:9b:62: 51:57:66:3a:40:d4:90:67:85:91:72:ae:7f:78:33: 65:bc:27:d9:d0:3e:31:cd:ee:99:fa:c6:39:23:9c: 2c:ae:08:8d:96:84:e9:ef:de:e9:bb:82:f2:6e:c6: db:11:53:b1:21:e1:62:9b:a7:81:a3:90:4a:a8:d4: 2a:0a:62:07:7c:29:48:b1:34:80:e7:20:5e:0e:59: af:3d:ac:bd:cc:97:ca:85:0b:8c:c8:0b:2d:44:21: 1b:96:0c:2d:ce:5b:7b:a1:73:20:0b:b1:23:6c:4b: b0:cd:c4:6d:74:54:07:1e:a8:82:20:24:ba:24:4a: 95:fd:cd:10:fb:d6:cd:6c:f7:90:39:77:95:71:fe: 8a:a5:a6:72:48:a2:1f:c5:41:26:92:bd:dc:5a:b0: 64:86:ce:56:92:0f:b1:ab:f1:f1:89:52:c3:d0:68: 4c:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:AA:64:B1:A6:39:5D:CE:0B:36:F7:E7:DF:2E:5F:41:D3:60:56:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/d8958960-7904-44c7-b715-302b3487f322/2bc757b8-f8aa-32b6-8375-228863616620.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/d8958960-7904-44c7-b715-302b3487f322/d8958960-7904-44c7-b715-302b3487f322.crl X509v3 Authority Key Identifier: keyid:AC:09:1A:36:2A:BD:2B:C4:0C:72:54:9A:2C:18:51:AC:74:D6:73:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/d8958960-7904-44c7-b715-302b3487f322.cer sbgp-ipAddrBlock: critical IPv4: 23.160.212.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bf:9f:34:df:c6:55:9a:24:60:c0:2c:7c:ad:f1:bf:e9:e3:c7: 57:ae:8a:52:cb:0e:0e:3c:a1:d6:ad:d4:da:70:62:62:cf:85: ec:e5:4e:41:8a:36:6b:7e:f7:aa:0c:6f:bc:3f:8b:8d:79:19: 1b:4a:a2:ad:75:40:e2:25:c2:30:ff:82:a7:95:88:62:c6:c8: a2:78:4f:d6:4d:85:6e:3e:29:4c:3c:53:6f:f5:31:a5:6e:69: 9a:02:f5:35:f6:6f:87:d7:48:56:d5:da:4f:5a:1f:ae:18:f2: d1:3a:ba:42:34:21:80:98:b4:b7:7b:45:42:cc:12:71:bc:bc: 70:b6:19:36:07:d3:3a:cb:20:b3:76:8a:14:38:b1:4f:9b:24: 74:ca:3b:ce:23:21:f6:9c:3d:d9:98:82:ef:af:5d:25:04:c7: 67:4a:bd:bc:36:d5:1a:30:43:7c:02:f2:a3:15:a9:06:0e:f0: 81:dc:20:9f:6f:24:8d:e3:08:12:8a:0a:b8:30:ae:05:4d:57: 70:09:7d:77:96:7f:f6:a5:69:54:27:17:7d:2a:90:d7:e4:8a: 54:c8:6b:62:7a:92:59:18:8f:1b:9d:63:43:29:87:d5:90:e6: e2:4a:70:1e:49:ea:2a:87:44:16:07:83:c4:b8:a8:bc:b6:76: 02:99:c2:03 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+f/eDSjp+t7tYAbAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDg5NTg5NjAtNzkwNC00NGM3LWI3MTUtMzAyYjM0ODdm MzIyMB4XDTI2MTAyNjAxMDAxM1oXDTI3MDEyNDAyMDAxM1owLzEtMCsGA1UEAxMk ZWNmYTcyN2EtYjFmOS00MGVhLTlmN2UtNGVkYTQwOWFjODAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvfY1Zwt77eE7feFsHyKw2MFWbi/o0X+3NntC Simkgsn9EHbdTa2P6INjpqpl8g/ipyyjoTa6O+nwuOYCUyCVcEY3qWSRFt481ljB I4LBI/jz5azQxfOjm2JRV2Y6QNSQZ4WRcq5/eDNlvCfZ0D4xze6Z+sY5I5wsrgiN loTp797pu4LybsbbEVOxIeFim6eBo5BKqNQqCmIHfClIsTSA5yBeDlmvPay9zJfK hQuMyAstRCEblgwtzlt7oXMgC7EjbEuwzcRtdFQHHqiCICS6JEqV/c0Q+9bNbPeQ OXeVcf6KpaZySKIfxUEmkr3cWrBkhs5Wkg+xq/HxiVLD0GhMmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPyqZLGmOV3OCzb3598uX0HTYFbeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9kODk1 ODk2MC03OTA0LTQ0YzctYjcxNS0zMDJiMzQ4N2YzMjIvMmJjNzU3YjgtZjhhYS0z MmI2LTgzNzUtMjI4ODYzNjE2NjIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvZDg5NTg5NjAtNzkwNC00NGM3LWI3 MTUtMzAyYjM0ODdmMzIyL2Q4OTU4OTYwLTc5MDQtNDRjNy1iNzE1LTMwMmIzNDg3 ZjMyMi5jcmwwHwYDVR0jBBgwFoAUrAkaNiq9K8QMclSaLBhRrHTWcwIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi9kODk1ODk2MC03OTA0LTQ0YzctYjcxNS0zMDJi MzQ4N2YzMjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6DUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL+fNN/GVZokYMAsfK3xv+njx1euilLLDg48odat1NpwYmLPhezlTkGK Nmt+96oMb7w/i415GRtKoq11QOIlwjD/gqeViGLGyKJ4T9ZNhW4+KUw8U2/1MaVu aZoC9TX2b4fXSFbV2k9aH64Y8tE6ukI0IYCYtLd7RULMEnG8vHC2GTYH0zrLILN2 ihQ4sU+bJHTKO84jIfacPdmYgu+vXSUEx2dKvbw21RowQ3wC8qMVqQYO8IHcIJ9v JI3jCBKKCrgwrgVNV3AJfXeWf/alaVQnF30qkNfkilTIa2J6klkYjxudY0Mph9WQ 5uJKcB5J6iqHRBYHg8S4qLy2dgKZwgM= -----END CERTIFICATE-----Generated at Thu Oct 29 06:10:02 2026 by rpki-client