$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e22c59e-2904-4ea6-b044-0a9fac3946cc/417e92bb-4c1d-3357-a81f-2c732b428dd0.roa File: 417e92bb-4c1d-3357-a81f-2c732b428dd0.roa (raw, json) Hash identifier: dtDZabCumb+nALnqm46S2y2JeielLbNLY2XW+bxgko4= Subject key identifier: 6B:CE:62:D0:B9:B7:52:30:D6:4B:AB:99:87:87:29:E8:D2:F9:48:D1 Certificate issuer: /CN=5e22c59e-2904-4ea6-b044-0a9fac3946cc Certificate serial: 010D0C9F4328584F6678B26162433B2BF185CFD8 Authority key identifier: 54:0A:B5:F4:0E:EB:3F:FD:EA:F3:22:6E:E6:44:F6:EF:EB:CC:90:69 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e22c59e-2904-4ea6-b044-0a9fac3946cc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e22c59e-2904-4ea6-b044-0a9fac3946cc/417e92bb-4c1d-3357-a81f-2c732b428dd0.roa Signing time: Mon 05 Oct 2026 10:31:05 +0000 ROA not before: Mon 05 Oct 2026 10:31:05 +0000 ROA not after: Sun 03 Jan 2027 11:31:05 +0000 asID: 154859 IP address blocks: 23.129.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e22c59e-2904-4ea6-b044-0a9fac3946cc/5e22c59e-2904-4ea6-b044-0a9fac3946cc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e22c59e-2904-4ea6-b044-0a9fac3946cc/5e22c59e-2904-4ea6-b044-0a9fac3946cc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e22c59e-2904-4ea6-b044-0a9fac3946cc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 20 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:66:78:b2:61:62:43:3b:2b:f1:85:cf:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e22c59e-2904-4ea6-b044-0a9fac3946cc Validity Not Before: Oct 5 10:31:05 2026 GMT Not After : Jan 3 11:31:05 2027 GMT Subject: CN=fdebe22f-0873-4b0a-869a-a839fc7cd2af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:2c:14:b8:98:86:cf:85:64:05:a0:43:80:99: c9:25:db:bc:3a:be:cb:da:5a:57:3b:45:85:c8:c5: e8:78:96:b2:83:91:ae:8d:fb:ec:fc:f7:df:11:27: b0:95:12:e1:af:e6:23:4b:68:76:d4:3c:90:34:5a: a1:7e:fe:eb:67:84:82:b8:22:39:2b:81:38:78:63: 50:ff:bf:49:2d:0a:c0:50:bd:13:7a:38:15:99:ac: 94:69:3f:6a:c1:88:2a:1d:0a:aa:a2:fa:81:65:7a: dd:b8:73:25:78:3c:02:43:94:1e:ad:e1:ac:3f:e1: 40:36:ca:7a:00:d2:f0:ee:05:b7:bb:41:ca:ca:95: 24:51:4c:6d:9e:c8:00:68:5d:7d:88:4b:e4:e0:70: 37:e2:df:3a:63:f4:22:68:6d:18:65:7a:95:ee:2d: fd:28:5e:c6:08:ab:16:2b:08:b3:65:ab:85:91:55: be:3a:64:c0:6b:70:c6:ff:c4:c0:a5:93:24:8c:43: b0:0b:2d:90:44:c8:dc:b2:5e:94:3e:0d:53:36:49: fd:a7:2f:fd:50:01:79:bb:05:f3:90:a7:fe:44:b9: 25:9a:79:23:61:ec:9a:c0:1e:a3:6f:bb:df:64:2d: 65:f8:26:ee:17:04:d1:6a:4d:15:09:1a:37:0b:19: 5d:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:CE:62:D0:B9:B7:52:30:D6:4B:AB:99:87:87:29:E8:D2:F9:48:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e22c59e-2904-4ea6-b044-0a9fac3946cc/417e92bb-4c1d-3357-a81f-2c732b428dd0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e22c59e-2904-4ea6-b044-0a9fac3946cc/5e22c59e-2904-4ea6-b044-0a9fac3946cc.crl X509v3 Authority Key Identifier: keyid:54:0A:B5:F4:0E:EB:3F:FD:EA:F3:22:6E:E6:44:F6:EF:EB:CC:90:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5e22c59e-2904-4ea6-b044-0a9fac3946cc.cer sbgp-ipAddrBlock: critical IPv4: 23.129.68.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:f3:dc:59:83:01:41:d3:95:88:67:f2:2c:37:81:59:64:6a: 29:51:0f:18:a8:bb:79:a2:ce:81:fe:68:1a:b4:f3:1d:da:e7: 2c:af:6c:9a:cd:ca:e4:16:7b:3b:14:56:f9:a9:23:fd:a3:56: ff:fe:79:59:83:e1:cd:f4:01:0d:99:a6:53:0f:45:61:dc:9b: cd:fb:3f:6d:8b:29:9e:15:d9:a6:ad:a1:01:1d:d1:f3:b1:d8: 61:21:c7:23:13:b4:10:7c:bb:e8:3e:cb:cb:87:45:54:52:be: 2e:bc:24:7e:5d:fa:fd:f7:59:d3:e7:ce:45:d8:77:28:d5:42: 61:d9:38:57:64:c0:41:b6:d8:d5:72:cf:37:27:2d:3c:12:b2: 63:e4:76:f0:cb:7a:8e:fb:5c:ed:13:aa:1c:dc:e9:7e:24:d7: 5d:4f:bb:a5:41:21:85:34:ba:a2:b7:f0:32:e5:10:50:b4:e3: db:fd:ad:92:fd:26:64:3d:49:8f:91:0c:84:04:f3:e6:8b:9a: 44:87:b8:01:08:29:ec:e1:62:41:95:1a:7d:1e:f7:d8:30:5b: ee:8b:28:f0:b1:bc:17:bb:6e:52:1e:c0:d7:aa:47:bf:66:43: cc:b8:ea:d3:b1:f0:51:45:d5:f8:ec:36:33:ec:71:88:db:88: 5f:26:88:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9meLJhYkM7K/GFz9gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWUyMmM1OWUtMjkwNC00ZWE2LWIwNDQtMGE5ZmFjMzk0 NmNjMB4XDTI2MTAwNTEwMzEwNVoXDTI3MDEwMzExMzEwNVowLzEtMCsGA1UEAxMk ZmRlYmUyMmYtMDg3My00YjBhLTg2OWEtYTgzOWZjN2NkMmFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyywUuJiGz4VkBaBDgJnJJdu8Or7L2lpXO0WF yMXoeJayg5Gujfvs/PffESewlRLhr+YjS2h21DyQNFqhfv7rZ4SCuCI5K4E4eGNQ /79JLQrAUL0TejgVmayUaT9qwYgqHQqqovqBZXrduHMleDwCQ5QereGsP+FANsp6 ANLw7gW3u0HKypUkUUxtnsgAaF19iEvk4HA34t86Y/QiaG0YZXqV7i39KF7GCKsW KwizZauFkVW+OmTAa3DG/8TApZMkjEOwCy2QRMjcsl6UPg1TNkn9py/9UAF5uwXz kKf+RLklmnkjYeyawB6jb7vfZC1l+CbuFwTRak0VCRo3CxldvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGvOYtC5t1Iw1kurmYeHKejS+UjRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS81ZTIy YzU5ZS0yOTA0LTRlYTYtYjA0NC0wYTlmYWMzOTQ2Y2MvNDE3ZTkyYmItNGMxZC0z MzU3LWE4MWYtMmM3MzJiNDI4ZGQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNWUyMmM1OWUtMjkwNC00ZWE2LWIw NDQtMGE5ZmFjMzk0NmNjLzVlMjJjNTllLTI5MDQtNGVhNi1iMDQ0LTBhOWZhYzM5 NDZjYy5jcmwwHwYDVR0jBBgwFoAUVAq19A7rP/3q8yJu5kT27+vMkGkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS81ZTIyYzU5ZS0yOTA0LTRlYTYtYjA0NC0wYTlm YWMzOTQ2Y2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4FEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIjz3FmDAUHTlYhn8iw3gVlkailRDxiou3mizoH+aBq08x3a5yyvbJrN yuQWezsUVvmpI/2jVv/+eVmD4c30AQ2ZplMPRWHcm837P22LKZ4V2aatoQEd0fOx 2GEhxyMTtBB8u+g+y8uHRVRSvi68JH5d+v33WdPnzkXYdyjVQmHZOFdkwEG22NVy zzcnLTwSsmPkdvDLeo77XO0Tqhzc6X4k111Pu6VBIYU0uqK38DLlEFC049v9rZL9 JmQ9SY+RDIQE8+aLmkSHuAEIKezhYkGVGn0e99gwW+6LKPCxvBe7blIewNeqR79m Q8y46tOx8FFF1fjsNjPscYjbiF8miHA= -----END CERTIFICATE-----Generated at Sun Oct 18 13:57:18 2026 by rpki-client