$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c85f3b2c-c391-49e3-a3a5-ea430235cc6b/eb089c1b-c5cb-3caa-a868-952fc11242db.roa File: eb089c1b-c5cb-3caa-a868-952fc11242db.roa (raw, json) Hash identifier: 3+OA5gy4OtEHJPN28225lhnxyPjwim0P4K6O9LSLF2M= Subject key identifier: 50:2C:42:39:F0:5C:86:A2:73:8E:5C:E4:58:30:78:DF:47:62:4E:D7 Certificate issuer: /CN=c85f3b2c-c391-49e3-a3a5-ea430235cc6b Certificate serial: 010D0C9F4328584FB3A66836A3BE0E863EAA9000 Authority key identifier: C2:DF:64:13:C2:71:06:45:4E:F0:7E:E8:47:99:22:CE:62:E4:86:9B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c85f3b2c-c391-49e3-a3a5-ea430235cc6b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c85f3b2c-c391-49e3-a3a5-ea430235cc6b/eb089c1b-c5cb-3caa-a868-952fc11242db.roa Signing time: Mon 02 Nov 2026 02:00:13 +0000 ROA not before: Mon 02 Nov 2026 02:00:13 +0000 ROA not after: Sun 31 Jan 2027 02:00:13 +0000 asID: 393444 IP address blocks: 23.165.48.0/24 maxlen: 24 2602:fd1c::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c85f3b2c-c391-49e3-a3a5-ea430235cc6b/c85f3b2c-c391-49e3-a3a5-ea430235cc6b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c85f3b2c-c391-49e3-a3a5-ea430235cc6b/c85f3b2c-c391-49e3-a3a5-ea430235cc6b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c85f3b2c-c391-49e3-a3a5-ea430235cc6b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Nov 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:b3:a6:68:36:a3:be:0e:86:3e:aa:90:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c85f3b2c-c391-49e3-a3a5-ea430235cc6b Validity Not Before: Nov 2 02:00:13 2026 GMT Not After : Jan 31 02:00:13 2027 GMT Subject: CN=60efea97-2631-41a9-93c3-c1b52368a131 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:9f:f4:de:7b:ba:80:de:6b:dd:f3:b8:54:00: 38:d6:7e:8d:17:00:e4:7a:a6:f7:e7:d3:d0:b7:22: ca:6d:d7:49:ad:32:04:8f:99:2c:6f:66:6e:4b:b6: d2:e6:b7:22:71:fd:16:2a:23:7e:5f:af:91:44:98: b1:b0:d5:e5:a8:03:41:72:c7:23:dd:b4:9e:c5:24: 04:c2:ea:2d:ea:41:dc:30:b7:ad:32:93:fe:73:0e: 3e:67:e2:89:21:7d:fd:de:7c:fa:87:b9:c0:b4:c9: 79:9f:37:a9:ee:4c:fb:44:62:75:86:18:29:22:53: 1a:9a:66:43:16:85:0d:61:df:ac:fe:7d:59:ba:72: 15:57:19:3a:66:09:15:6e:f8:58:5c:b3:b8:7c:56: c0:54:17:f6:66:d6:d4:df:3e:ef:5d:66:23:8c:c7: ab:79:ad:74:2c:69:3b:dd:c0:3e:57:1b:b6:0f:4a: 4f:ac:5d:c7:8a:05:3f:95:8d:04:89:45:f3:54:da: 61:3f:9a:3c:01:84:e4:85:e7:9c:92:9b:f3:98:f2: 44:56:04:e4:b7:1e:8f:ab:44:d8:30:37:6e:52:e2: 12:93:7e:05:94:3a:70:80:83:9a:4c:9e:b1:a5:66: 1b:7b:03:29:f2:00:91:25:22:dc:d2:fd:c5:31:01: e8:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:2C:42:39:F0:5C:86:A2:73:8E:5C:E4:58:30:78:DF:47:62:4E:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c85f3b2c-c391-49e3-a3a5-ea430235cc6b/eb089c1b-c5cb-3caa-a868-952fc11242db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c85f3b2c-c391-49e3-a3a5-ea430235cc6b/c85f3b2c-c391-49e3-a3a5-ea430235cc6b.crl X509v3 Authority Key Identifier: keyid:C2:DF:64:13:C2:71:06:45:4E:F0:7E:E8:47:99:22:CE:62:E4:86:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c85f3b2c-c391-49e3-a3a5-ea430235cc6b.cer sbgp-ipAddrBlock: critical IPv4: 23.165.48.0/24 IPv6: 2602:fd1c::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:8f:08:07:89:36:da:de:cb:46:2d:7e:0b:49:e9:ae:17:07: 53:11:25:8c:f5:5b:88:99:08:5b:0d:18:79:5e:34:09:a3:d0: 5e:1d:81:34:1c:71:62:96:97:f2:b4:b5:76:e5:0b:2d:58:53: 38:5f:ea:1a:d4:ea:55:4e:92:56:8f:01:26:d8:73:53:36:c5: 11:4f:8f:e2:11:c2:82:ba:da:14:e7:e6:09:18:35:a5:d6:fa: 04:ac:ee:fd:6d:2d:77:d5:ca:9d:de:45:9a:5a:a5:b9:55:19: ca:78:21:50:4b:d9:a6:f8:9c:f0:b3:06:29:92:e8:f0:1f:c8: a8:10:29:48:81:a3:73:34:af:c0:19:90:d8:19:c9:40:ef:07: 50:34:0c:fc:0b:1f:c2:99:46:79:e2:4e:c0:1d:75:58:f4:be: b8:bd:37:03:36:0e:a2:82:94:2d:8a:07:8a:b9:66:55:58:f9: 5d:c3:a1:03:b8:87:de:6d:4b:b9:6f:f0:7b:22:f7:23:d9:f4: ab:48:55:9c:a1:c4:23:be:f5:a9:7b:3c:fb:df:97:ed:82:73: 8a:87:7c:44:e2:2b:3b:24:42:ba:bb:67:d4:41:f5:77:b5:3f: 7e:25:5e:44:9e:a4:ff:f9:a6:7a:2e:85:0c:52:54:dd:e9:19: d1:ce:59:a5 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE+zpmg2o74Ohj6qkAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzg1ZjNiMmMtYzM5MS00OWUzLWEzYTUtZWE0MzAyMzVj YzZiMB4XDTI2MTEwMjAyMDAxM1oXDTI3MDEzMTAyMDAxM1owLzEtMCsGA1UEAxMk NjBlZmVhOTctMjYzMS00MWE5LTkzYzMtYzFiNTIzNjhhMTMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApZ/03nu6gN5r3fO4VAA41n6NFwDkeqb359PQ tyLKbddJrTIEj5ksb2ZuS7bS5rcicf0WKiN+X6+RRJixsNXlqANBcscj3bSexSQE wuot6kHcMLetMpP+cw4+Z+KJIX393nz6h7nAtMl5nzep7kz7RGJ1hhgpIlMammZD FoUNYd+s/n1ZunIVVxk6ZgkVbvhYXLO4fFbAVBf2ZtbU3z7vXWYjjMerea10LGk7 3cA+Vxu2D0pPrF3HigU/lY0EiUXzVNphP5o8AYTkheeckpvzmPJEVgTktx6Pq0TY MDduUuISk34FlDpwgIOaTJ6xpWYbewMp8gCRJSLc0v3FMQHorQIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFFAsQjnwXIaic45c5FgweN9HYk7XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jODVm M2IyYy1jMzkxLTQ5ZTMtYTNhNS1lYTQzMDIzNWNjNmIvZWIwODljMWItYzVjYi0z Y2FhLWE4NjgtOTUyZmMxMTI0MmRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYzg1ZjNiMmMtYzM5MS00OWUzLWEz YTUtZWE0MzAyMzVjYzZiL2M4NWYzYjJjLWMzOTEtNDllMy1hM2E1LWVhNDMwMjM1 Y2M2Yi5jcmwwHwYDVR0jBBgwFoAUwt9kE8JxBkVO8H7oR5kizmLkhpswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9jODVmM2IyYy1jMzkxLTQ5ZTMtYTNhNS1lYTQz MDIzNWNjNmIuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF6UwMA4E AgACMAgDBgQmAv0cADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCdjwgHiTba3stGLX4LSemuFwdTESWM9VuI mQhbDRh5XjQJo9BeHYE0HHFilpfytLV25QstWFM4X+oa1OpVTpJWjwEm2HNTNsUR T4/iEcKCutoU5+YJGDWl1voErO79bS131cqd3kWaWqW5VRnKeCFQS9mm+JzwswYp kujwH8ioEClIgaNzNK/AGZDYGclA7wdQNAz8Cx/CmUZ54k7AHXVY9L64vTcDNg6i gpQtigeKuWZVWPldw6EDuIfebUu5b/B7Ivcj2fSrSFWcocQjvvWpezz735ftgnOK h3xE4is7JEK6u2fUQfV3tT9+JV5EnqT/+aZ6LoUMUlTd6RnRzlml -----END CERTIFICATE-----Generated at Tue Nov 3 22:55:13 2026 by rpki-client