$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/41e38da5-de4f-400d-83ab-65ee2e2c2d24/14a619d0-4751-3dd0-8357-da775049c7ff.roa File: 14a619d0-4751-3dd0-8357-da775049c7ff.roa (raw, json) Hash identifier: kitRzB5KSPBt9ImYc6X5u6XU0kWNYdBq8fubnfni9BM= Subject key identifier: 73:6E:72:6A:D6:7A:76:1F:13:E6:90:01:00:87:53:E2:15:96:33:6E Certificate issuer: /CN=41e38da5-de4f-400d-83ab-65ee2e2c2d24 Certificate serial: 010D0C9F4328584F4975DC6A3E8DC1BAC5D6AC00 Authority key identifier: BF:79:16:BE:B7:8F:69:FB:FD:63:A6:BF:89:19:7D:9E:A8:F2:CA:B7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/41e38da5-de4f-400d-83ab-65ee2e2c2d24.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/41e38da5-de4f-400d-83ab-65ee2e2c2d24/14a619d0-4751-3dd0-8357-da775049c7ff.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 26554 IP address blocks: 65.23.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/41e38da5-de4f-400d-83ab-65ee2e2c2d24/41e38da5-de4f-400d-83ab-65ee2e2c2d24.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/41e38da5-de4f-400d-83ab-65ee2e2c2d24/41e38da5-de4f-400d-83ab-65ee2e2c2d24.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/41e38da5-de4f-400d-83ab-65ee2e2c2d24.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:75:dc:6a:3e:8d:c1:ba:c5:d6:ac:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41e38da5-de4f-400d-83ab-65ee2e2c2d24 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=d2c73138-0e4f-461a-aada-83c630f14d71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:9c:be:6f:4b:3c:c2:52:de:1e:07:31:f0:e6: 0a:b1:a4:4f:32:41:7b:b3:78:7b:f7:19:b8:b5:eb: fa:8e:c4:a1:e9:0c:df:76:f9:8b:f0:50:ab:91:6e: 99:18:ab:e1:8c:34:cb:43:4c:45:1f:3c:a5:55:ad: e4:c6:8a:ef:2f:ed:50:07:fe:a1:f7:84:d0:d0:83: 25:c8:97:6f:73:33:65:a6:87:d2:60:7d:98:13:80: 9d:72:eb:84:cd:20:fd:f6:37:3f:c1:dc:e6:02:55: 8f:c6:8c:e1:bf:8e:f0:d1:97:ca:5a:e7:1a:33:ae: b2:0e:8b:42:1b:45:88:6f:3a:7b:f1:16:1d:29:a6: 08:b5:67:37:67:ae:ba:fd:b0:8b:e5:22:dc:11:1f: 2c:fc:85:2b:d6:77:69:59:57:fe:01:d4:e0:26:c2: d6:90:e4:f6:00:2a:ee:45:d8:24:6e:67:40:d9:50: 44:17:ff:90:b6:a9:76:0c:8b:37:49:83:16:7a:a3: ed:3c:1a:76:89:fb:e1:42:a0:c8:6f:56:40:79:48: 02:07:6a:d5:f8:0e:2c:42:2b:fc:ee:7b:90:f0:05: 37:5f:29:64:21:70:1c:67:04:74:4e:e8:59:a4:57: 8f:f7:f0:f4:d7:23:96:1a:3d:2b:26:5b:39:0a:8d: d4:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:6E:72:6A:D6:7A:76:1F:13:E6:90:01:00:87:53:E2:15:96:33:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/41e38da5-de4f-400d-83ab-65ee2e2c2d24/14a619d0-4751-3dd0-8357-da775049c7ff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/41e38da5-de4f-400d-83ab-65ee2e2c2d24/41e38da5-de4f-400d-83ab-65ee2e2c2d24.crl X509v3 Authority Key Identifier: keyid:BF:79:16:BE:B7:8F:69:FB:FD:63:A6:BF:89:19:7D:9E:A8:F2:CA:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/41e38da5-de4f-400d-83ab-65ee2e2c2d24.cer sbgp-ipAddrBlock: critical IPv4: 65.23.88.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:ab:ea:34:3d:85:75:2c:be:d3:15:b7:eb:6c:fa:ba:f5:39: cf:63:f9:df:d7:e6:75:cf:1a:97:76:b1:38:6a:77:38:cc:67: 33:2c:32:9b:0f:67:8b:4a:ec:5b:0c:3d:86:4b:c2:c4:a4:fb: 8f:ee:e4:32:2f:e6:b0:c7:05:a4:80:88:e0:d4:f0:22:c0:a4: cd:8c:50:34:90:58:de:30:d4:6b:ac:ac:ba:2a:16:b3:e0:fb: 61:68:33:b5:14:d1:18:cf:2e:4a:7b:51:40:90:3c:8c:f6:ed: 8f:bc:60:87:2f:f8:2a:b3:ac:78:ee:71:58:d2:38:3c:b2:c6: e5:fe:21:22:3c:09:e1:60:4a:d3:fe:76:17:f7:71:95:c1:74: 83:b4:41:dc:fa:91:e8:f6:68:43:6f:d4:48:a0:0d:4e:b8:69: b0:c9:d3:78:b0:8a:b6:4b:b5:d9:96:0a:31:f0:cc:f0:18:8e: f7:57:15:07:5b:13:f1:53:d0:0b:1c:68:c5:cb:af:1e:16:68: 30:b0:68:37:f5:97:5a:85:18:d5:8d:73:85:8c:db:fd:dd:fb: 98:ed:7a:4f:e5:72:6a:a8:6b:c4:a7:a1:26:de:30:0e:ca:57: 6c:8e:b9:a1:55:3d:aa:3b:d6:53:0b:81:25:b4:b5:b7:5f:a7: c2:33:ad:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JddxqPo3BusXWrAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDFlMzhkYTUtZGU0Zi00MDBkLTgzYWItNjVlZTJlMmMy ZDI0MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZDJjNzMxMzgtMGU0Zi00NjFhLWFhZGEtODNjNjMwZjE0ZDcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoJy+b0s8wlLeHgcx8OYKsaRPMkF7s3h79xm4 tev6jsSh6QzfdvmL8FCrkW6ZGKvhjDTLQ0xFHzylVa3kxorvL+1QB/6h94TQ0IMl yJdvczNlpofSYH2YE4CdcuuEzSD99jc/wdzmAlWPxozhv47w0ZfKWucaM66yDotC G0WIbzp78RYdKaYItWc3Z666/bCL5SLcER8s/IUr1ndpWVf+AdTgJsLWkOT2ACru RdgkbmdA2VBEF/+Qtql2DIs3SYMWeqPtPBp2ifvhQqDIb1ZAeUgCB2rV+A4sQiv8 7nuQ8AU3XylkIXAcZwR0TuhZpFeP9/D01yOWGj0rJls5Co3UrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHNucmrWenYfE+aQAQCHU+IVljNuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80MWUz OGRhNS1kZTRmLTQwMGQtODNhYi02NWVlMmUyYzJkMjQvMTRhNjE5ZDAtNDc1MS0z ZGQwLTgzNTctZGE3NzUwNDljN2ZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDFlMzhkYTUtZGU0Zi00MDBkLTgz YWItNjVlZTJlMmMyZDI0LzQxZTM4ZGE1LWRlNGYtNDAwZC04M2FiLTY1ZWUyZTJj MmQyNC5jcmwwHwYDVR0jBBgwFoAUv3kWvrePafv9Y6a/iRl9nqjyyrcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80MWUzOGRhNS1kZTRmLTQwMGQtODNhYi02NWVl MmUyYzJkMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRdYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHKr6jQ9hXUsvtMVt+ts+rr1Oc9j+d/X5nXPGpd2sThqdzjMZzMsMpsP Z4tK7FsMPYZLwsSk+4/u5DIv5rDHBaSAiODU8CLApM2MUDSQWN4w1GusrLoqFrPg +2FoM7UU0RjPLkp7UUCQPIz27Y+8YIcv+CqzrHjucVjSODyyxuX+ISI8CeFgStP+ dhf3cZXBdIO0Qdz6kej2aENv1EigDU64abDJ03iwirZLtdmWCjHwzPAYjvdXFQdb E/FT0AscaMXLrx4WaDCwaDf1l1qFGNWNc4WM2/3d+5jtek/lcmqoa8SnoSbeMA7K V2yOuaFVPao71lMLgSW0tbdfp8IzrQk= -----END CERTIFICATE-----Generated at Sat Sep 26 10:10:29 2026 by rpki-client