$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/448bf2c8-7f2b-4e2b-a653-1e89ed2ca8b6/2f160a0e-a123-3a72-99e1-d669496bd1e0.roa File: 2f160a0e-a123-3a72-99e1-d669496bd1e0.roa (raw, json) Hash identifier: QbvtrlusZkk57bEb6YEKBqro5/f/Ll0KmHW2Dod6kxM= Subject key identifier: 65:34:35:BC:F9:8C:F7:D2:71:BD:E9:F8:00:2E:B7:24:62:A1:67:9D Certificate issuer: /CN=448bf2c8-7f2b-4e2b-a653-1e89ed2ca8b6 Certificate serial: 010D0C9F4328584F49751511E6EDDBB69CA95738 Authority key identifier: 32:9C:D3:4D:64:2B:8A:AD:95:02:93:0D:6C:19:90:78:23:D6:69:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/448bf2c8-7f2b-4e2b-a653-1e89ed2ca8b6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/448bf2c8-7f2b-4e2b-a653-1e89ed2ca8b6/2f160a0e-a123-3a72-99e1-d669496bd1e0.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 25944 IP address blocks: 23.157.168.0/24 maxlen: 24 2602:814:d000::/44 maxlen: 44 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/448bf2c8-7f2b-4e2b-a653-1e89ed2ca8b6/448bf2c8-7f2b-4e2b-a653-1e89ed2ca8b6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/448bf2c8-7f2b-4e2b-a653-1e89ed2ca8b6/448bf2c8-7f2b-4e2b-a653-1e89ed2ca8b6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/448bf2c8-7f2b-4e2b-a653-1e89ed2ca8b6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:75:15:11:e6:ed:db:b6:9c:a9:57:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=448bf2c8-7f2b-4e2b-a653-1e89ed2ca8b6 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=475c6b02-de5a-4aff-9981-cde8caa8a5a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:29:53:39:fd:3b:fe:3f:95:66:1f:76:e1:18: d6:d1:ab:9f:c9:b5:7b:8c:da:23:97:52:fe:55:de: ba:5c:d0:86:fe:2f:0a:10:fd:2b:de:87:03:3f:4d: f5:59:d3:93:b8:46:5f:7c:1e:91:15:99:71:31:d5: 7b:a3:9d:bc:b7:16:6f:9e:37:77:5a:69:b4:20:38: 41:b9:36:57:75:ef:08:70:e2:3a:8e:cb:90:cc:1f: b6:f5:2b:c0:3f:9e:46:71:ca:88:6c:d7:f0:39:35: 15:4d:7f:8b:ff:ee:cb:f5:63:69:07:54:7f:f0:51: 1c:fe:e8:a4:8a:22:5d:0a:d3:78:a8:ec:81:6d:bd: aa:00:9f:1f:69:46:97:22:89:24:61:66:f6:ac:d3: 67:59:61:7f:16:04:36:21:bf:fa:3e:14:a4:9a:40: 58:c4:61:c6:c3:ef:c7:29:1e:c3:a0:30:bc:ba:c9: 3c:5a:50:d4:07:e3:c5:ca:89:2c:87:7c:e6:d9:bf: 03:4c:a7:93:0d:3d:07:0b:b9:60:a2:22:f1:67:7c: 24:d6:c9:f8:f4:10:09:6a:69:cb:2b:a9:da:8d:ae: 85:81:ff:8e:40:6b:66:1c:3d:cd:13:ff:7d:5b:c9: 42:68:36:85:9e:93:f1:00:96:5c:04:c0:44:0f:96: 54:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:34:35:BC:F9:8C:F7:D2:71:BD:E9:F8:00:2E:B7:24:62:A1:67:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/448bf2c8-7f2b-4e2b-a653-1e89ed2ca8b6/2f160a0e-a123-3a72-99e1-d669496bd1e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/448bf2c8-7f2b-4e2b-a653-1e89ed2ca8b6/448bf2c8-7f2b-4e2b-a653-1e89ed2ca8b6.crl X509v3 Authority Key Identifier: keyid:32:9C:D3:4D:64:2B:8A:AD:95:02:93:0D:6C:19:90:78:23:D6:69:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/448bf2c8-7f2b-4e2b-a653-1e89ed2ca8b6.cer sbgp-ipAddrBlock: critical IPv4: 23.157.168.0/24 IPv6: 2602:814:d000::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:49:fe:c2:ed:a1:dc:ae:52:b6:98:f3:12:ba:d3:4a:2e:09: fd:59:9a:5a:44:b6:62:ba:d4:ec:65:c0:a3:87:a4:bb:ed:42: 27:ab:c1:cf:fe:06:98:f4:3f:5a:76:7e:98:8b:a6:eb:35:bc: 72:f7:76:37:c9:f0:4b:a2:b4:91:1e:5a:45:5d:69:5c:25:d1: 64:32:f2:3f:f1:b6:e9:79:02:9f:72:ec:b6:a6:48:99:76:e6: 55:7f:4c:72:20:56:d4:33:96:6c:dd:a1:e1:08:54:73:4f:67: 82:4b:fe:1b:f3:ba:1b:9d:33:c1:1b:17:21:ba:c3:41:d0:90: ef:be:ff:35:17:5f:b7:2f:d7:d2:14:32:87:9a:eb:24:bb:0f: 73:66:65:c0:6a:e6:e5:87:e8:1d:e8:49:fe:02:a2:59:43:d0: 77:7f:d2:7a:68:aa:1b:9d:a3:f8:5a:71:b4:a7:89:ad:3a:3a: 9a:60:16:e8:5d:de:8b:01:f9:39:54:ca:15:bb:fe:22:c0:1c: ed:b2:2b:9e:1c:b9:8d:d9:ea:a3:7e:6a:06:fa:b0:0f:1b:0a: 4f:1c:19:fa:42:a3:83:18:0b:b8:88:60:e6:c6:8d:86:fd:ac: c4:63:da:9f:d6:22:b3:ad:92:46:71:60:e6:5e:35:5b:71:30: 0b:47:aa:ea -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWE9JdRUR5u3btpypVzgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDQ4YmYyYzgtN2YyYi00ZTJiLWE2NTMtMWU4OWVkMmNh OGI2MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NDc1YzZiMDItZGU1YS00YWZmLTk5ODEtY2RlOGNhYThhNWE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArClTOf07/j+VZh924RjW0aufybV7jNojl1L+ Vd66XNCG/i8KEP0r3ocDP031WdOTuEZffB6RFZlxMdV7o528txZvnjd3Wmm0IDhB uTZXde8IcOI6jsuQzB+29SvAP55GccqIbNfwOTUVTX+L/+7L9WNpB1R/8FEc/uik iiJdCtN4qOyBbb2qAJ8faUaXIokkYWb2rNNnWWF/FgQ2Ib/6PhSkmkBYxGHGw+/H KR7DoDC8usk8WlDUB+PFyoksh3zm2b8DTKeTDT0HC7lgoiLxZ3wk1sn49BAJamnL K6naja6Fgf+OQGtmHD3NE/99W8lCaDaFnpPxAJZcBMBED5ZUWwIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFGU0Nbz5jPfScb3p+AAutyRioWedMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80NDhi ZjJjOC03ZjJiLTRlMmItYTY1My0xZTg5ZWQyY2E4YjYvMmYxNjBhMGUtYTEyMy0z YTcyLTk5ZTEtZDY2OTQ5NmJkMWUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNDQ4YmYyYzgtN2YyYi00ZTJiLWE2 NTMtMWU4OWVkMmNhOGI2LzQ0OGJmMmM4LTdmMmItNGUyYi1hNjUzLTFlODllZDJj YThiNi5jcmwwHwYDVR0jBBgwFoAUMpzTTWQriq2VApMNbBmQeCPWaY0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi80NDhiZjJjOC03ZjJiLTRlMmItYTY1My0xZTg5 ZWQyY2E4YjYuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAF52oMA8E AgACMAkDBwQmAggU0AAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAG0n+wu2h3K5StpjzErrTSi4J/VmaWkS2 YrrU7GXAo4eku+1CJ6vBz/4GmPQ/WnZ+mIum6zW8cvd2N8nwS6K0kR5aRV1pXCXR ZDLyP/G26XkCn3LstqZImXbmVX9MciBW1DOWbN2h4QhUc09ngkv+G/O6G50zwRsX IbrDQdCQ777/NRdfty/X0hQyh5rrJLsPc2ZlwGrm5YfoHehJ/gKiWUPQd3/Semiq G52j+FpxtKeJrTo6mmAW6F3eiwH5OVTKFbv+IsAc7bIrnhy5jdnqo35qBvqwDxsK TxwZ+kKjgxgLuIhg5saNhv2sxGPan9Yis62SRnFg5l41W3EwC0eq6g== -----END CERTIFICATE-----Generated at Tue Oct 13 08:13:55 2026 by rpki-client