$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b9b87434-00de-4d2f-a45d-abe1efe5ecfd/14f63f23-4dd6-39b4-bee1-1cf1a112b843.roa File: 14f63f23-4dd6-39b4-bee1-1cf1a112b843.roa (raw, json) Hash identifier: mHSO44y2YdDWxI2/bXB+vHxWPP4PENDnrRbS66bMKas= Subject key identifier: 52:8C:D7:5C:E5:DC:37:05:E2:CE:F9:60:29:8D:7B:A3:8A:91:AC:A0 Certificate issuer: /CN=b9b87434-00de-4d2f-a45d-abe1efe5ecfd Certificate serial: 010D0C9F4328584FA16331274774D748FBCC56C0 Authority key identifier: 67:BA:AB:82:D5:25:B6:AD:DE:AC:2E:FF:27:E5:85:9C:97:CE:3C:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b9b87434-00de-4d2f-a45d-abe1efe5ecfd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b9b87434-00de-4d2f-a45d-abe1efe5ecfd/14f63f23-4dd6-39b4-bee1-1cf1a112b843.roa Signing time: Mon 26 Oct 2026 13:00:14 +0000 ROA not before: Mon 26 Oct 2026 13:00:14 +0000 ROA not after: Sun 24 Jan 2027 14:00:14 +0000 asID: 40569 IP address blocks: 23.171.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b9b87434-00de-4d2f-a45d-abe1efe5ecfd/b9b87434-00de-4d2f-a45d-abe1efe5ecfd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b9b87434-00de-4d2f-a45d-abe1efe5ecfd/b9b87434-00de-4d2f-a45d-abe1efe5ecfd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b9b87434-00de-4d2f-a45d-abe1efe5ecfd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Nov 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:a1:63:31:27:47:74:d7:48:fb:cc:56:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b9b87434-00de-4d2f-a45d-abe1efe5ecfd Validity Not Before: Oct 26 13:00:14 2026 GMT Not After : Jan 24 14:00:14 2027 GMT Subject: CN=cb300770-b14e-4bf1-adc3-6a8750fbf55e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:5e:18:f3:11:04:96:fe:61:aa:b5:9e:9c:e2: 45:1e:4e:3e:98:d1:05:70:e5:5f:97:57:5c:0a:e5: 3d:93:75:ef:4a:c5:a5:21:0b:a5:a6:a7:09:c5:ea: 54:22:0f:d9:83:59:d6:21:2b:ec:8a:47:39:d0:53: df:a9:80:7a:c5:aa:5f:12:e5:f9:38:32:a7:6a:41: e2:d8:7d:3b:9a:1e:11:24:e3:6d:9e:a6:3f:20:24: e2:2b:13:6a:ec:93:8d:a2:03:81:f7:49:32:e6:79: 70:f3:b2:10:2f:94:65:fb:ee:f4:2c:80:7b:60:13: 39:05:84:4d:e2:58:64:5b:bc:cf:ed:0c:bf:86:18: 68:59:08:d5:ac:60:be:cf:2e:56:13:5d:af:7f:7f: 8f:46:52:b3:70:f0:b1:ef:97:08:67:60:ae:da:d0: 3f:2c:8d:88:61:9c:58:82:73:2c:45:84:35:a2:38: 48:de:fd:a4:57:d7:fa:03:92:e1:53:7b:11:ef:ba: 03:ec:0d:d6:11:a5:6d:54:e2:39:00:ba:43:e0:e5: b6:55:b6:b4:6a:45:1a:d3:f1:62:07:8e:a1:b7:cd: 7c:e2:43:94:c5:9b:12:e7:56:3c:36:7f:ac:66:1d: 5f:2c:e0:8f:04:fb:16:73:79:4b:5f:fe:c5:a3:bd: 2c:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:8C:D7:5C:E5:DC:37:05:E2:CE:F9:60:29:8D:7B:A3:8A:91:AC:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b9b87434-00de-4d2f-a45d-abe1efe5ecfd/14f63f23-4dd6-39b4-bee1-1cf1a112b843.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b9b87434-00de-4d2f-a45d-abe1efe5ecfd/b9b87434-00de-4d2f-a45d-abe1efe5ecfd.crl X509v3 Authority Key Identifier: keyid:67:BA:AB:82:D5:25:B6:AD:DE:AC:2E:FF:27:E5:85:9C:97:CE:3C:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b9b87434-00de-4d2f-a45d-abe1efe5ecfd.cer sbgp-ipAddrBlock: critical IPv4: 23.171.168.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:82:0d:50:a8:cf:f0:a5:55:6a:fd:e6:03:96:4c:26:ad:07: ae:84:82:e1:0a:b7:b3:21:c1:44:f9:1b:bc:20:e6:a4:60:30: 2d:c9:08:93:fc:a7:85:e4:fa:78:88:c9:ec:d3:bd:ef:8b:9b: 06:ff:f7:6c:dd:62:37:ed:7e:68:77:ff:3f:aa:1a:c4:ae:c5: 81:32:0d:77:aa:da:e7:4c:9f:bb:f2:1b:7a:2c:74:99:25:d2: 58:ef:50:fa:18:ec:52:af:40:6f:01:20:0f:e0:f5:5d:2a:2d: 42:2e:19:32:5e:9d:68:40:6e:b6:03:57:91:50:f3:6f:bd:94: e0:31:03:91:92:7e:ef:69:72:53:20:d4:46:00:0b:10:1f:2c: 46:63:9b:e6:22:4c:b1:05:af:f5:3c:56:c1:4b:e6:23:bc:71: d4:3d:74:74:de:1a:11:d9:7e:75:6a:3e:ed:3d:a3:f0:60:64: 80:01:be:23:6c:b1:53:bb:98:a8:e9:35:54:6b:9b:92:5d:85: ad:dc:d6:db:b9:8c:66:71:36:b8:d7:e6:ed:4c:05:84:ab:1f: a2:ec:ea:02:7a:c7:f2:97:99:d0:9e:a4:84:b4:80:d3:e0:ed: 3f:9f:86:0d:56:ad:88:6b:30:d7:ae:5c:d2:e4:56:4a:46:25: 66:ef:35:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+hYzEnR3TXSPvMVsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjliODc0MzQtMDBkZS00ZDJmLWE0NWQtYWJlMWVmZTVl Y2ZkMB4XDTI2MTAyNjEzMDAxNFoXDTI3MDEyNDE0MDAxNFowLzEtMCsGA1UEAxMk Y2IzMDA3NzAtYjE0ZS00YmYxLWFkYzMtNmE4NzUwZmJmNTVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp14Y8xEElv5hqrWenOJFHk4+mNEFcOVfl1dc CuU9k3XvSsWlIQulpqcJxepUIg/Zg1nWISvsikc50FPfqYB6xapfEuX5ODKnakHi 2H07mh4RJONtnqY/ICTiKxNq7JONogOB90ky5nlw87IQL5Rl++70LIB7YBM5BYRN 4lhkW7zP7Qy/hhhoWQjVrGC+zy5WE12vf3+PRlKzcPCx75cIZ2Cu2tA/LI2IYZxY gnMsRYQ1ojhI3v2kV9f6A5LhU3sR77oD7A3WEaVtVOI5ALpD4OW2Vba0akUa0/Fi B46ht8184kOUxZsS51Y8Nn+sZh1fLOCPBPsWc3lLX/7Fo70skQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFKM11zl3DcF4s75YCmNe6OKkaygMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iOWI4 NzQzNC0wMGRlLTRkMmYtYTQ1ZC1hYmUxZWZlNWVjZmQvMTRmNjNmMjMtNGRkNi0z OWI0LWJlZTEtMWNmMWExMTJiODQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYjliODc0MzQtMDBkZS00ZDJmLWE0 NWQtYWJlMWVmZTVlY2ZkL2I5Yjg3NDM0LTAwZGUtNGQyZi1hNDVkLWFiZTFlZmU1 ZWNmZC5jcmwwHwYDVR0jBBgwFoAUZ7qrgtUltq3erC7/J+WFnJfOPGswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9iOWI4NzQzNC0wMGRlLTRkMmYtYTQ1ZC1hYmUx ZWZlNWVjZmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6uoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEaCDVCoz/ClVWr95gOWTCatB66EguEKt7MhwUT5G7wg5qRgMC3JCJP8 p4Xk+niIyezTve+Lmwb/92zdYjftfmh3/z+qGsSuxYEyDXeq2udMn7vyG3osdJkl 0ljvUPoY7FKvQG8BIA/g9V0qLUIuGTJenWhAbrYDV5FQ82+9lOAxA5GSfu9pclMg 1EYACxAfLEZjm+YiTLEFr/U8VsFL5iO8cdQ9dHTeGhHZfnVqPu09o/BgZIABviNs sVO7mKjpNVRrm5Jdha3c1tu5jGZxNrjX5u1MBYSrH6Ls6gJ6x/KXmdCepIS0gNPg 7T+fhg1WrYhrMNeuXNLkVkpGJWbvNdA= -----END CERTIFICATE-----Generated at Tue Nov 3 03:51:20 2026 by rpki-client