$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/1b65c1ee-034e-4bcd-bd01-5aeaddcac726/dea5f0fb-a5c6-34be-82dc-e693534b896e.roa File: dea5f0fb-a5c6-34be-82dc-e693534b896e.roa (raw, json) Hash identifier: xhaoF/jLPjgGQsJ4aWEFlZgOEuEhlKLRXwTjdZ7yFOM= Subject key identifier: A9:E3:25:2E:23:BC:DB:8A:DB:23:C5:DA:50:F7:91:A2:45:1C:54:FE Certificate issuer: /CN=1b65c1ee-034e-4bcd-bd01-5aeaddcac726 Certificate serial: 010D0C9F4328584F4C048CABB6620AF12628B580 Authority key identifier: A1:5A:39:74:DC:25:E4:19:0E:83:89:E6:74:BE:93:16:D4:19:59:5A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/1b65c1ee-034e-4bcd-bd01-5aeaddcac726.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/1b65c1ee-034e-4bcd-bd01-5aeaddcac726/dea5f0fb-a5c6-34be-82dc-e693534b896e.roa Signing time: Fri 25 Sep 2026 23:06:03 +0000 ROA not before: Fri 25 Sep 2026 23:06:03 +0000 ROA not after: Fri 25 Dec 2026 00:06:03 +0000 asID: 394012 IP address blocks: 23.165.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/1b65c1ee-034e-4bcd-bd01-5aeaddcac726/1b65c1ee-034e-4bcd-bd01-5aeaddcac726.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/1b65c1ee-034e-4bcd-bd01-5aeaddcac726/1b65c1ee-034e-4bcd-bd01-5aeaddcac726.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/1b65c1ee-034e-4bcd-bd01-5aeaddcac726.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:04:8c:ab:b6:62:0a:f1:26:28:b5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1b65c1ee-034e-4bcd-bd01-5aeaddcac726 Validity Not Before: Sep 25 23:06:03 2026 GMT Not After : Dec 25 00:06:03 2026 GMT Subject: CN=54161ce1-eacd-4bf7-943f-863442e80dfd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:6d:9d:3a:56:48:55:c2:cd:62:17:1a:fc:94: 31:0f:36:da:1a:98:0c:3a:69:f4:9a:ea:4a:90:ac: 2e:c4:1f:85:83:6c:59:31:af:ab:bf:87:3d:6a:da: 45:fa:76:aa:b3:c8:94:fc:c5:d0:cb:ab:f1:b3:9a: 5d:22:b6:3e:67:03:fd:cf:1e:70:11:44:a1:6a:a5: 84:93:f2:31:49:99:aa:4c:4b:73:13:90:db:aa:7a: d2:07:8c:54:29:c8:69:40:67:ec:e1:74:17:7f:bc: 99:73:a0:31:c6:da:36:89:92:92:70:3a:7d:3a:8e: c9:d5:12:69:6b:3b:76:67:7d:f8:77:c2:55:4e:95: df:ee:18:af:f7:de:0e:c2:c4:20:e5:70:7f:17:48: 79:b1:fa:12:5f:02:50:d5:c9:bc:e5:2f:47:13:79: 6d:94:8d:78:e2:e2:6c:fb:d7:46:1a:a4:55:30:31: 16:bc:b9:4b:5c:65:9f:a1:40:3e:79:5a:29:b9:69: 7d:86:f1:49:8f:80:9b:63:18:ee:e7:c6:1a:d2:d0: 93:f2:08:f5:44:27:b1:be:ab:65:f6:33:c8:a5:c8: 9e:26:c8:08:6a:48:2e:97:1a:04:35:bc:d9:7a:a3: 3e:ba:fd:81:53:76:73:9d:a1:2c:fa:6f:6c:8d:e9: 15:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:E3:25:2E:23:BC:DB:8A:DB:23:C5:DA:50:F7:91:A2:45:1C:54:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/1b65c1ee-034e-4bcd-bd01-5aeaddcac726/dea5f0fb-a5c6-34be-82dc-e693534b896e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/1b65c1ee-034e-4bcd-bd01-5aeaddcac726/1b65c1ee-034e-4bcd-bd01-5aeaddcac726.crl X509v3 Authority Key Identifier: keyid:A1:5A:39:74:DC:25:E4:19:0E:83:89:E6:74:BE:93:16:D4:19:59:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/1b65c1ee-034e-4bcd-bd01-5aeaddcac726.cer sbgp-ipAddrBlock: critical IPv4: 23.165.96.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:ca:5f:e1:4c:a9:ed:7b:fb:7e:43:02:56:b5:32:f9:31:42: 58:89:f0:a6:0a:aa:c8:76:43:65:df:41:9c:df:04:c1:d3:33: 2f:63:cb:12:80:a2:f3:13:e3:f6:7e:db:61:b0:74:2d:42:91: 7c:21:0c:5f:11:49:ac:5b:14:ad:16:26:33:7f:94:2b:2e:fc: a1:49:c2:4a:f4:76:a0:95:a7:c9:c3:e5:aa:b7:3d:e0:99:01: 45:4d:50:b6:c8:b2:b6:c4:09:4d:0b:0d:f3:cb:1f:64:c9:b3: 80:40:1d:4c:b8:32:ab:85:d0:59:8c:dc:2e:f8:9c:9e:a6:5f: 91:c9:d5:8a:5f:ac:fd:02:6d:73:e7:73:03:61:59:b7:09:55: f9:02:3e:56:62:b9:43:9f:b2:16:c4:a3:07:d4:5b:6f:22:9f: 24:80:71:ec:c5:c1:fd:e2:18:95:06:4f:94:76:1b:ac:62:97: 86:eb:66:bd:48:dd:f1:7e:24:88:8e:0f:98:67:50:9e:70:c2: 39:1a:94:94:b9:dc:0a:b9:5f:e6:7f:43:37:70:09:bd:4b:46: e0:ae:61:06:69:85:b2:f1:a4:36:48:c8:47:22:b7:fa:93:b6: 5f:9c:64:5f:e9:49:b4:10:fe:0f:6d:bd:0e:8d:d9:bf:6a:ac: 18:33:ab:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MBIyrtmIK8SYotYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWI2NWMxZWUtMDM0ZS00YmNkLWJkMDEtNWFlYWRkY2Fj NzI2MB4XDTI2MDkyNTIzMDYwM1oXDTI2MTIyNTAwMDYwM1owLzEtMCsGA1UEAxMk NTQxNjFjZTEtZWFjZC00YmY3LTk0M2YtODYzNDQyZTgwZGZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvG2dOlZIVcLNYhca/JQxDzbaGpgMOmn0mupK kKwuxB+Fg2xZMa+rv4c9atpF+naqs8iU/MXQy6vxs5pdIrY+ZwP9zx5wEUShaqWE k/IxSZmqTEtzE5DbqnrSB4xUKchpQGfs4XQXf7yZc6Axxto2iZKScDp9Oo7J1RJp azt2Z334d8JVTpXf7hiv994OwsQg5XB/F0h5sfoSXwJQ1cm85S9HE3ltlI144uJs +9dGGqRVMDEWvLlLXGWfoUA+eVopuWl9hvFJj4CbYxju58Ya0tCT8gj1RCexvqtl 9jPIpcieJsgIakgulxoENbzZeqM+uv2BU3ZznaEs+m9sjekVYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKnjJS4jvNuK2yPF2lD3kaJFHFT+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi8xYjY1 YzFlZS0wMzRlLTRiY2QtYmQwMS01YWVhZGRjYWM3MjYvZGVhNWYwZmItYTVjNi0z NGJlLTgyZGMtZTY5MzUzNGI4OTZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82MTVmZTFkZC1k ODI5LTRjODctYjJjYy01Njg5MzgxYTNjNDIvMWI2NWMxZWUtMDM0ZS00YmNkLWJk MDEtNWFlYWRkY2FjNzI2LzFiNjVjMWVlLTAzNGUtNGJjZC1iZDAxLTVhZWFkZGNh YzcyNi5jcmwwHwYDVR0jBBgwFoAUoVo5dNwl5BkOg4nmdL6TFtQZWVowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4 Ny1iMmNjLTU2ODkzODFhM2M0Mi8xYjY1YzFlZS0wMzRlLTRiY2QtYmQwMS01YWVh ZGRjYWM3MjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6VgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACTKX+FMqe17+35DAla1MvkxQliJ8KYKqsh2Q2XfQZzfBMHTMy9jyxKA ovMT4/Z+22GwdC1CkXwhDF8RSaxbFK0WJjN/lCsu/KFJwkr0dqCVp8nD5aq3PeCZ AUVNULbIsrbECU0LDfPLH2TJs4BAHUy4MquF0FmM3C74nJ6mX5HJ1YpfrP0CbXPn cwNhWbcJVfkCPlZiuUOfshbEowfUW28inySAcezFwf3iGJUGT5R2G6xil4brZr1I 3fF+JIiOD5hnUJ5wwjkalJS53Aq5X+Z/QzdwCb1LRuCuYQZphbLxpDZIyEcit/qT tl+cZF/pSbQQ/g9tvQ6N2b9qrBgzqyE= -----END CERTIFICATE-----Generated at Tue Sep 29 00:56:34 2026 by rpki-client