$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5f4dc2ab-1e6e-4143-95f5-d63db0a7624b/802bfd1a-4325-38af-be6f-64950728b155.roa File: 802bfd1a-4325-38af-be6f-64950728b155.roa (raw, json) Hash identifier: fiTQ7nVB5q0eKurugsv3eR70Jm64GRqiUdj0wbbJqfw= Subject key identifier: A7:17:08:7B:2D:C9:D4:56:06:C8:A4:29:49:DF:C1:56:A5:8E:70:05 Certificate issuer: /CN=5f4dc2ab-1e6e-4143-95f5-d63db0a7624b Certificate serial: 010D0C9F4328584F7782F25F67FE5FC6635D74A0 Authority key identifier: 3F:69:1D:DC:7D:D3:C6:76:4C:53:4D:2B:50:0F:57:E9:64:74:F2:9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5f4dc2ab-1e6e-4143-95f5-d63db0a7624b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5f4dc2ab-1e6e-4143-95f5-d63db0a7624b/802bfd1a-4325-38af-be6f-64950728b155.roa Signing time: Sun 11 Oct 2026 13:00:12 +0000 ROA not before: Sun 11 Oct 2026 13:00:12 +0000 ROA not after: Sat 09 Jan 2027 14:00:12 +0000 asID: 13737 IP address blocks: 23.189.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5f4dc2ab-1e6e-4143-95f5-d63db0a7624b/5f4dc2ab-1e6e-4143-95f5-d63db0a7624b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5f4dc2ab-1e6e-4143-95f5-d63db0a7624b/5f4dc2ab-1e6e-4143-95f5-d63db0a7624b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5f4dc2ab-1e6e-4143-95f5-d63db0a7624b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 29 Oct 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:77:82:f2:5f:67:fe:5f:c6:63:5d:74:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5f4dc2ab-1e6e-4143-95f5-d63db0a7624b Validity Not Before: Oct 11 13:00:12 2026 GMT Not After : Jan 9 14:00:12 2027 GMT Subject: CN=e27fa0bb-a397-4d74-a1d6-81781bf5746e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:b8:12:f0:eb:27:3c:6c:49:76:d5:03:36:8d: eb:36:a2:69:a6:e2:41:04:c9:16:d1:a8:ad:8f:db: d7:93:04:5a:8d:3e:46:1d:04:ae:f7:9b:fd:78:9e: 28:15:87:8d:b7:f9:85:2c:9a:ed:70:9b:a4:0e:56: 84:ba:5b:a3:57:61:3a:ef:1f:ae:3a:89:a4:67:5d: 17:de:06:19:7b:6d:ef:0c:a5:c9:dd:30:a0:8f:9c: 21:98:f2:97:2e:31:ca:71:ff:58:ed:f7:46:3f:da: 80:67:2e:be:47:73:0b:35:e6:74:99:39:b5:ef:7f: b6:ef:85:66:80:a0:88:5c:ac:27:f1:4a:4c:92:fe: 7f:d3:81:5f:b7:bd:2f:89:a5:be:f3:2f:03:c0:58: 06:f2:b5:01:2e:41:99:7e:c8:9c:e0:31:b3:02:de: 3d:c0:ef:28:f9:99:0d:ea:7d:4e:fb:02:08:5d:e7: 41:87:68:0e:dd:a5:ff:07:ac:ca:55:79:30:5b:5a: 59:76:ae:ac:92:8b:4b:23:39:82:53:13:2d:f9:59: c7:f7:92:65:0f:dc:53:59:1e:c5:55:91:47:dd:66: 15:a6:e5:5e:16:f2:84:ef:98:45:a3:85:ca:83:8e: 9f:32:7f:05:d2:a3:cb:ff:ea:ed:2f:84:96:b7:2e: 37:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:17:08:7B:2D:C9:D4:56:06:C8:A4:29:49:DF:C1:56:A5:8E:70:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5f4dc2ab-1e6e-4143-95f5-d63db0a7624b/802bfd1a-4325-38af-be6f-64950728b155.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5f4dc2ab-1e6e-4143-95f5-d63db0a7624b/5f4dc2ab-1e6e-4143-95f5-d63db0a7624b.crl X509v3 Authority Key Identifier: keyid:3F:69:1D:DC:7D:D3:C6:76:4C:53:4D:2B:50:0F:57:E9:64:74:F2:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5f4dc2ab-1e6e-4143-95f5-d63db0a7624b.cer sbgp-ipAddrBlock: critical IPv4: 23.189.168.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:79:60:6d:39:1e:29:06:e4:33:34:74:19:28:51:12:f1:11: 23:b1:23:36:e2:af:62:2d:f1:7b:2f:f6:3a:75:c7:65:f3:94: a0:b5:fa:68:4d:96:92:be:db:ae:91:d7:9d:2a:81:45:f4:25: 11:88:55:96:8d:40:eb:da:9e:3b:08:31:ec:e3:51:bb:86:b8: c7:86:43:40:c5:35:b7:88:02:38:c3:02:75:9d:17:76:67:d4: 6a:4f:af:0d:a4:e3:87:ec:85:65:cf:72:9f:0a:ac:7b:45:66: 0a:50:7a:3e:3a:42:49:cf:f0:ff:c1:b5:cb:23:44:e2:70:97: 6c:f7:5f:4a:d9:ee:85:53:1e:34:8d:b4:6a:7f:d5:38:40:aa: 6b:59:af:bd:03:f0:87:d6:1d:1c:22:ce:a4:ff:35:74:2d:b8: ea:f8:08:8e:45:ee:89:c6:64:81:57:81:8c:8c:ee:f4:2c:19: 02:df:fc:88:83:56:aa:51:fb:cd:f8:33:d8:04:bb:61:87:d7: 94:a5:55:14:90:04:d8:98:88:68:5d:2b:ff:a2:c9:f8:0e:5e: bf:20:6d:9f:cb:2f:cd:63:9d:ee:67:11:9e:aa:b7:10:b2:f4: 57:9e:e6:05:dc:6a:88:7d:1e:bb:83:c4:9b:34:f5:98:cf:1f: b8:e5:3e:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE93gvJfZ/5fxmNddKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWY0ZGMyYWItMWU2ZS00MTQzLTk1ZjUtZDYzZGIwYTc2 MjRiMB4XDTI2MTAxMTEzMDAxMloXDTI3MDEwOTE0MDAxMlowLzEtMCsGA1UEAxMk ZTI3ZmEwYmItYTM5Ny00ZDc0LWExZDYtODE3ODFiZjU3NDZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAobgS8OsnPGxJdtUDNo3rNqJppuJBBMkW0ait j9vXkwRajT5GHQSu95v9eJ4oFYeNt/mFLJrtcJukDlaEulujV2E67x+uOomkZ10X 3gYZe23vDKXJ3TCgj5whmPKXLjHKcf9Y7fdGP9qAZy6+R3MLNeZ0mTm173+274Vm gKCIXKwn8UpMkv5/04Fft70viaW+8y8DwFgG8rUBLkGZfsic4DGzAt49wO8o+ZkN 6n1O+wIIXedBh2gO3aX/B6zKVXkwW1pZdq6skotLIzmCUxMt+VnH95JlD9xTWR7F VZFH3WYVpuVeFvKE75hFo4XKg46fMn8F0qPL/+rtL4SWty43hQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKcXCHstydRWBsikKUnfwValjnAFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS81ZjRk YzJhYi0xZTZlLTQxNDMtOTVmNS1kNjNkYjBhNzYyNGIvODAyYmZkMWEtNDMyNS0z OGFmLWJlNmYtNjQ5NTA3MjhiMTU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNWY0ZGMyYWItMWU2ZS00MTQzLTk1 ZjUtZDYzZGIwYTc2MjRiLzVmNGRjMmFiLTFlNmUtNDE0My05NWY1LWQ2M2RiMGE3 NjI0Yi5jcmwwHwYDVR0jBBgwFoAUP2kd3H3TxnZMU00rUA9X6WR08p4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS81ZjRkYzJhYi0xZTZlLTQxNDMtOTVmNS1kNjNk YjBhNzYyNGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF72oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG55YG05HikG5DM0dBkoURLxESOxIzbir2It8Xsv9jp1x2XzlKC1+mhN lpK+266R150qgUX0JRGIVZaNQOvanjsIMezjUbuGuMeGQ0DFNbeIAjjDAnWdF3Zn 1GpPrw2k44fshWXPcp8KrHtFZgpQej46QknP8P/BtcsjROJwl2z3X0rZ7oVTHjSN tGp/1ThAqmtZr70D8IfWHRwizqT/NXQtuOr4CI5F7onGZIFXgYyM7vQsGQLf/IiD VqpR+834M9gEu2GH15SlVRSQBNiYiGhdK/+iyfgOXr8gbZ/LL81jne5nEZ6qtxCy 9Fee5gXcaoh9HruDxJs09ZjPH7jlPgk= -----END CERTIFICATE-----Generated at Wed Oct 28 14:19:05 2026 by rpki-client