$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0858b07f-775e-4c05-ae48-d43b5d938b9b/e3fbc323-4091-322d-ba3c-0a48bf9677aa.roa File: e3fbc323-4091-322d-ba3c-0a48bf9677aa.roa (raw, json) Hash identifier: 1qBLHAZ2tQEsKv1t9PwZNSKCFKV8FzJFxxcIjQc0zl8= Subject key identifier: FC:1D:49:9B:CE:66:43:37:15:A0:74:A8:38:26:F1:A7:07:BE:F1:64 Certificate issuer: /CN=0858b07f-775e-4c05-ae48-d43b5d938b9b Certificate serial: 010D0C9F4328584F963866FD910CB83A304A51A0 Authority key identifier: CE:6F:A4:F4:B8:01:2C:D6:C6:EF:C6:32:4A:2D:8D:78:BC:1D:0D:8B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0858b07f-775e-4c05-ae48-d43b5d938b9b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0858b07f-775e-4c05-ae48-d43b5d938b9b/e3fbc323-4091-322d-ba3c-0a48bf9677aa.roa Signing time: Thu 22 Oct 2026 13:00:13 +0000 ROA not before: Thu 22 Oct 2026 13:00:13 +0000 ROA not after: Wed 20 Jan 2027 14:00:13 +0000 asID: 16509 IP address blocks: 165.125.32.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0858b07f-775e-4c05-ae48-d43b5d938b9b/0858b07f-775e-4c05-ae48-d43b5d938b9b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0858b07f-775e-4c05-ae48-d43b5d938b9b/0858b07f-775e-4c05-ae48-d43b5d938b9b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0858b07f-775e-4c05-ae48-d43b5d938b9b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 24 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:96:38:66:fd:91:0c:b8:3a:30:4a:51:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0858b07f-775e-4c05-ae48-d43b5d938b9b Validity Not Before: Oct 22 13:00:13 2026 GMT Not After : Jan 20 14:00:13 2027 GMT Subject: CN=ff1350b0-ab4b-4dcc-a296-cdc61f6deaa7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:6e:3d:d9:33:2f:91:b5:db:b6:e6:53:55:e0: de:ca:af:d0:b0:62:d6:66:ae:4b:f7:74:41:a4:b3: 22:30:ab:be:c2:4d:94:39:c9:95:98:fb:18:3b:32: c7:b9:62:57:50:9b:e4:a7:9b:97:8d:77:1e:e0:58: 19:95:24:9a:da:ae:3e:85:6c:97:48:e0:aa:b2:44: 29:73:fa:51:0b:6c:5f:6f:c1:56:ed:68:f8:70:42: 75:c5:67:4f:b7:88:ce:d6:3b:93:7f:7e:2d:bd:b4: 4c:f6:56:e1:c2:9a:cd:50:3f:fe:7c:16:b3:34:b3: 92:f2:70:6b:f3:f9:66:02:c3:de:ff:39:30:24:e0: 79:9c:f9:dc:80:01:6e:bf:08:04:ee:19:46:83:a4: f7:32:16:5b:cd:49:61:1d:68:09:c6:87:0b:ac:37: 88:00:f1:f4:40:6c:25:55:ed:1f:2e:88:af:d7:a2: a8:7b:24:04:f1:01:5a:2c:84:0d:2f:96:e1:cb:1a: 81:de:d8:74:4a:65:8d:7d:5d:cc:33:99:d3:c1:0c: 71:43:14:dd:f5:b5:f1:aa:eb:cc:b4:4f:1c:9e:fb: fe:94:04:d8:71:9c:30:9b:13:01:d4:27:8f:a3:ca: 26:2d:28:fa:34:e4:21:4f:2e:79:f6:3e:b2:2f:12: ee:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:1D:49:9B:CE:66:43:37:15:A0:74:A8:38:26:F1:A7:07:BE:F1:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0858b07f-775e-4c05-ae48-d43b5d938b9b/e3fbc323-4091-322d-ba3c-0a48bf9677aa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0858b07f-775e-4c05-ae48-d43b5d938b9b/0858b07f-775e-4c05-ae48-d43b5d938b9b.crl X509v3 Authority Key Identifier: keyid:CE:6F:A4:F4:B8:01:2C:D6:C6:EF:C6:32:4A:2D:8D:78:BC:1D:0D:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/0858b07f-775e-4c05-ae48-d43b5d938b9b.cer sbgp-ipAddrBlock: critical IPv4: 165.125.32.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:d8:e6:e7:22:14:23:83:25:81:93:6b:3b:02:fc:8d:ea:83: d9:03:ce:3b:8c:f4:ca:ce:20:cb:6f:72:f7:70:65:f3:ca:e5: 6c:ae:f0:d3:32:bf:11:fb:bb:87:e4:a5:6a:d2:34:64:3c:6e: 65:4c:d3:a2:5f:1c:0c:7d:39:52:7c:6b:4c:6f:06:a8:c7:5c: 92:65:d3:f7:8e:87:82:44:52:28:51:b1:c8:9d:ca:5d:aa:a5: 70:89:a8:5d:2a:ad:8f:3c:1e:a2:2e:28:d2:55:19:5a:2e:72: 52:11:8e:72:a2:ff:ac:25:3e:70:a8:bd:ee:f6:2c:55:70:28: 31:99:d8:43:8d:cb:7d:23:78:0a:c9:79:d3:f9:fb:33:c6:52: c7:cc:6a:d7:79:c6:7b:0a:09:16:08:43:b8:18:54:c5:01:70: 86:cc:6a:bd:55:fd:aa:dc:2d:91:ea:c1:eb:62:a7:19:eb:cc: d1:91:c6:cb:81:c2:a3:03:ac:a6:3a:ac:d0:ff:69:7b:79:fa: 98:61:b5:c5:43:46:a1:7f:23:b2:11:06:9b:fc:a2:18:b1:e3: e0:2d:85:09:b9:7f:f5:7b:de:6a:c0:f0:1b:03:c1:6a:b4:ed: 13:ef:5c:af:42:a7:dc:1f:e5:73:22:89:18:c5:07:98:2d:a3: 96:bd:e0:e5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+WOGb9kQy4OjBKUaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDg1OGIwN2YtNzc1ZS00YzA1LWFlNDgtZDQzYjVkOTM4 YjliMB4XDTI2MTAyMjEzMDAxM1oXDTI3MDEyMDE0MDAxM1owLzEtMCsGA1UEAxMk ZmYxMzUwYjAtYWI0Yi00ZGNjLWEyOTYtY2RjNjFmNmRlYWE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxG492TMvkbXbtuZTVeDeyq/QsGLWZq5L93RB pLMiMKu+wk2UOcmVmPsYOzLHuWJXUJvkp5uXjXce4FgZlSSa2q4+hWyXSOCqskQp c/pRC2xfb8FW7Wj4cEJ1xWdPt4jO1juTf34tvbRM9lbhwprNUD/+fBazNLOS8nBr 8/lmAsPe/zkwJOB5nPncgAFuvwgE7hlGg6T3MhZbzUlhHWgJxocLrDeIAPH0QGwl Ve0fLoiv16KoeyQE8QFaLIQNL5bhyxqB3th0SmWNfV3MM5nTwQxxQxTd9bXxquvM tE8cnvv+lATYcZwwmxMB1CePo8omLSj6NOQhTy559j6yLxLu+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPwdSZvOZkM3FaB0qDgm8acHvvFkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8wODU4 YjA3Zi03NzVlLTRjMDUtYWU0OC1kNDNiNWQ5MzhiOWIvZTNmYmMzMjMtNDA5MS0z MjJkLWJhM2MtMGE0OGJmOTY3N2FhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMDg1OGIwN2YtNzc1ZS00YzA1LWFl NDgtZDQzYjVkOTM4YjliLzA4NThiMDdmLTc3NWUtNGMwNS1hZTQ4LWQ0M2I1ZDkz OGI5Yi5jcmwwHwYDVR0jBBgwFoAUzm+k9LgBLNbG78YySi2NeLwdDYswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8wODU4YjA3Zi03NzVlLTRjMDUtYWU0OC1kNDNi NWQ5MzhiOWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDpX0gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGPY5uciFCODJYGTazsC/I3qg9kDzjuM9MrOIMtvcvdwZfPK5Wyu8NMy vxH7u4fkpWrSNGQ8bmVM06JfHAx9OVJ8a0xvBqjHXJJl0/eOh4JEUihRscidyl2q pXCJqF0qrY88HqIuKNJVGVouclIRjnKi/6wlPnCove72LFVwKDGZ2EONy30jeArJ edP5+zPGUsfMatd5xnsKCRYIQ7gYVMUBcIbMar1V/arcLZHqwetipxnrzNGRxsuB wqMDrKY6rND/aXt5+phhtcVDRqF/I7IRBpv8ohix4+AthQm5f/V73mrA8BsDwWq0 7RPvXK9Cp9wf5XMiiRjFB5gto5a94OU= -----END CERTIFICATE-----Generated at Fri Oct 23 11:44:17 2026 by rpki-client