$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/987bdf9f-7000-4d71-b90f-a12e26fdce76/b2c8219a-3f13-3fb9-b005-012508a27db0.roa File: b2c8219a-3f13-3fb9-b005-012508a27db0.roa (raw, json) Hash identifier: EJEp4n13tFiOMcSoRxtQoEJhCLWv/hH6ScuQpJuW9Ig= Subject key identifier: 11:94:EB:E9:65:F9:7A:70:71:5A:54:25:CC:25:27:29:05:5D:92:9C Certificate issuer: /CN=987bdf9f-7000-4d71-b90f-a12e26fdce76 Certificate serial: 010D0C9F4328584F4975B5D5B8B2073F0CB6A300 Authority key identifier: B5:BF:B6:1F:E4:C5:06:AA:37:BB:61:06:74:6F:A7:9E:F0:62:0F:2E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/987bdf9f-7000-4d71-b90f-a12e26fdce76.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/987bdf9f-7000-4d71-b90f-a12e26fdce76/b2c8219a-3f13-3fb9-b005-012508a27db0.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 8796 IP address blocks: 23.185.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/987bdf9f-7000-4d71-b90f-a12e26fdce76/987bdf9f-7000-4d71-b90f-a12e26fdce76.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/987bdf9f-7000-4d71-b90f-a12e26fdce76/987bdf9f-7000-4d71-b90f-a12e26fdce76.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/987bdf9f-7000-4d71-b90f-a12e26fdce76.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:75:b5:d5:b8:b2:07:3f:0c:b6:a3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=987bdf9f-7000-4d71-b90f-a12e26fdce76 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=4033d581-1c8e-42f6-94b1-020bc155da29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:9e:54:46:92:0e:17:a5:2c:0e:63:9e:76:41: a3:42:76:52:f0:3d:27:92:19:a3:7e:4c:b8:d7:fe: ea:65:61:e0:8c:73:cd:b6:d1:77:8a:28:53:e5:34: a2:ff:62:b0:89:e6:8e:5c:fb:bf:98:23:0a:cb:e5: 83:2d:69:df:af:ab:4d:74:9a:40:2e:29:a8:6e:9d: 9d:46:7d:e9:f5:08:c5:12:b7:8c:7b:50:bc:d3:62: 2a:c1:f6:7c:74:4f:e2:d9:13:8c:88:67:4d:13:c0: 43:e8:55:8d:33:19:f6:c2:74:38:f4:3e:a9:6c:88: cf:63:40:e2:59:3e:15:06:04:f2:6e:25:4c:ea:c1: e9:8e:50:f2:62:30:c7:66:dd:42:7f:de:4f:86:5d: c9:9d:00:ef:21:60:fc:bc:4f:73:4a:62:48:88:4d: 51:64:1a:e2:16:a4:83:7d:c7:bf:20:8c:a6:3e:51: 3f:37:b3:18:08:e8:7b:15:6d:64:28:c0:69:4d:f9: 83:2e:27:76:70:1a:f1:d5:01:ef:e5:c8:77:64:49: 53:03:9b:0a:19:b7:13:bd:06:ad:cd:72:a9:e0:4d: e7:88:2c:47:56:dd:50:e8:ba:f1:73:90:1d:49:a9: 74:c2:6a:fe:b5:98:0a:b8:5f:57:da:5f:43:77:c8: 67:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:94:EB:E9:65:F9:7A:70:71:5A:54:25:CC:25:27:29:05:5D:92:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/987bdf9f-7000-4d71-b90f-a12e26fdce76/b2c8219a-3f13-3fb9-b005-012508a27db0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/987bdf9f-7000-4d71-b90f-a12e26fdce76/987bdf9f-7000-4d71-b90f-a12e26fdce76.crl X509v3 Authority Key Identifier: keyid:B5:BF:B6:1F:E4:C5:06:AA:37:BB:61:06:74:6F:A7:9E:F0:62:0F:2E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/987bdf9f-7000-4d71-b90f-a12e26fdce76.cer sbgp-ipAddrBlock: critical IPv4: 23.185.168.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:42:9f:47:b2:d6:9a:e2:93:16:f9:e0:00:85:b3:89:1c:8e: d4:35:91:90:5f:9c:d8:c8:f1:2b:fe:b6:be:1b:22:55:aa:9f: 46:ff:6c:c2:77:2c:3c:b2:89:f9:20:a2:b3:62:92:e9:9a:79: dc:0a:cb:d3:ae:85:e4:42:7a:e1:74:9c:c0:39:d8:23:23:f5: 30:cd:4e:f6:b6:a3:91:71:5d:51:99:76:81:26:75:cb:44:23: c1:81:77:b7:4b:5e:54:01:af:bf:6f:c1:13:96:27:33:8e:7a: 2f:f3:10:6a:e4:50:6e:fc:1f:52:b5:46:9b:08:9a:aa:d3:c9: 5d:3b:9f:f3:73:04:f0:6f:54:41:25:73:39:f2:c3:f9:16:b2: b0:25:c2:fe:5e:f9:34:58:7f:fc:c5:ab:f2:ae:45:88:be:94: f6:27:10:4a:8a:c0:32:16:05:be:6d:3a:5f:00:28:5a:22:79: 51:29:56:98:e7:84:9e:4e:67:bf:a4:05:5a:6a:39:96:93:37: c7:10:b9:2c:57:0c:71:74:d2:fb:1a:33:8c:18:b2:08:89:d5: bd:69:94:4b:d2:78:02:df:50:e7:75:f1:ca:3c:78:d1:ca:b1: 01:89:f6:4f:1b:b8:4f:48:a6:5b:ac:0c:84:0e:84:39:e9:5e: 7c:aa:f5:ef -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdbXVuLIHPwy2owAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg3YmRmOWYtNzAwMC00ZDcxLWI5MGYtYTEyZTI2ZmRj ZTc2MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NDAzM2Q1ODEtMWM4ZS00MmY2LTk0YjEtMDIwYmMxNTVkYTI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqJ5URpIOF6UsDmOedkGjQnZS8D0nkhmjfky4 1/7qZWHgjHPNttF3iihT5TSi/2KwieaOXPu/mCMKy+WDLWnfr6tNdJpALimobp2d Rn3p9QjFEreMe1C802IqwfZ8dE/i2ROMiGdNE8BD6FWNMxn2wnQ49D6pbIjPY0Di WT4VBgTybiVM6sHpjlDyYjDHZt1Cf95Phl3JnQDvIWD8vE9zSmJIiE1RZBriFqSD fce/IIymPlE/N7MYCOh7FW1kKMBpTfmDLid2cBrx1QHv5ch3ZElTA5sKGbcTvQat zXKp4E3niCxHVt1Q6Lrxc5AdSal0wmr+tZgKuF9X2l9Dd8hndQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBGU6+ll+XpwcVpUJcwlJykFXZKcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS85ODdi ZGY5Zi03MDAwLTRkNzEtYjkwZi1hMTJlMjZmZGNlNzYvYjJjODIxOWEtM2YxMy0z ZmI5LWIwMDUtMDEyNTA4YTI3ZGIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOTg3YmRmOWYtNzAwMC00ZDcxLWI5 MGYtYTEyZTI2ZmRjZTc2Lzk4N2JkZjlmLTcwMDAtNGQ3MS1iOTBmLWExMmUyNmZk Y2U3Ni5jcmwwHwYDVR0jBBgwFoAUtb+2H+TFBqo3u2EGdG+nnvBiDy4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS85ODdiZGY5Zi03MDAwLTRkNzEtYjkwZi1hMTJl MjZmZGNlNzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF7moMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADFCn0ey1prikxb54ACFs4kcjtQ1kZBfnNjI8Sv+tr4bIlWqn0b/bMJ3 LDyyifkgorNikumaedwKy9OuheRCeuF0nMA52CMj9TDNTva2o5FxXVGZdoEmdctE I8GBd7dLXlQBr79vwROWJzOOei/zEGrkUG78H1K1RpsImqrTyV07n/NzBPBvVEEl cznyw/kWsrAlwv5e+TRYf/zFq/KuRYi+lPYnEEqKwDIWBb5tOl8AKFoieVEpVpjn hJ5OZ7+kBVpqOZaTN8cQuSxXDHF00vsaM4wYsgiJ1b1plEvSeALfUOd18co8eNHK sQGJ9k8buE9IplusDIQOhDnpXnyq9e8= -----END CERTIFICATE-----Generated at Sat Oct 24 10:42:07 2026 by rpki-client