$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bfcded43-2d76-428f-b7f1-3042af66f969/aa399e70-b9e1-39f8-af5f-669c59a46e20.roa File: aa399e70-b9e1-39f8-af5f-669c59a46e20.roa (raw, json) Hash identifier: KIWb6NyZxNYQJnBLtS27GDIe+ZdDricZpFRDoe6ShsY= Subject key identifier: B1:B8:D8:21:46:2A:70:A4:19:E3:53:09:64:DA:02:A5:1A:0C:9C:C2 Certificate issuer: /CN=bfcded43-2d76-428f-b7f1-3042af66f969 Certificate serial: 010D0C9F4328584F612D5F078D23E75737D68880 Authority key identifier: E5:80:74:93:4A:D6:00:AE:DC:44:7A:A6:7D:10:61:9A:31:85:E3:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bfcded43-2d76-428f-b7f1-3042af66f969.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bfcded43-2d76-428f-b7f1-3042af66f969/aa399e70-b9e1-39f8-af5f-669c59a46e20.roa Signing time: Sat 03 Oct 2026 13:00:13 +0000 ROA not before: Sat 03 Oct 2026 13:00:13 +0000 ROA not after: Fri 01 Jan 2027 14:00:13 +0000 asID: 398357 IP address blocks: 23.175.48.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bfcded43-2d76-428f-b7f1-3042af66f969/bfcded43-2d76-428f-b7f1-3042af66f969.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bfcded43-2d76-428f-b7f1-3042af66f969/bfcded43-2d76-428f-b7f1-3042af66f969.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bfcded43-2d76-428f-b7f1-3042af66f969.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 22 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:61:2d:5f:07:8d:23:e7:57:37:d6:88:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bfcded43-2d76-428f-b7f1-3042af66f969 Validity Not Before: Oct 3 13:00:13 2026 GMT Not After : Jan 1 14:00:13 2027 GMT Subject: CN=c79ee3a7-3a2f-46af-aad2-c7494dcfb9d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:e8:f6:65:0e:a9:24:70:00:be:ae:10:da:0c: c9:93:c8:eb:fd:00:a6:3a:8e:6b:9c:ad:c5:1d:ed: 0c:72:4d:b6:3a:7f:17:9a:75:68:60:c0:31:03:11: b4:94:62:de:5f:96:45:a2:8a:d1:35:09:76:df:76: 33:a8:d5:97:05:58:51:50:85:91:c1:70:d6:c0:3d: 3b:55:b2:81:b9:fd:6e:e1:55:85:b6:92:c8:2a:a6: e8:21:e5:07:69:f6:8c:ea:4a:ee:0d:68:54:13:5a: 5c:ea:f7:16:92:d8:12:0c:ac:2e:41:32:42:1f:5a: e3:18:49:02:72:eb:b5:64:01:8b:18:36:e9:3f:df: 97:d9:27:bd:09:7e:75:5e:34:9b:6b:79:09:ee:7d: 0f:6a:88:61:5b:e4:7d:ad:29:53:62:52:4a:34:8c: 2a:ce:c5:30:28:6c:4c:48:09:bf:d2:a4:72:c0:e7: 7e:ce:6c:c0:c2:8d:af:af:4b:77:38:bb:73:e6:1a: 23:b0:6d:7a:0b:38:73:c4:2a:34:8d:08:97:a8:35: e7:d3:5f:a4:1b:f9:09:a1:5f:1e:5b:a0:7c:c3:78: 3d:60:7a:e6:3a:fb:a7:54:f7:dd:19:2b:7f:3c:1e: ce:ff:51:d7:86:1f:77:c9:c4:99:07:fb:d8:cf:cb: 85:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:B8:D8:21:46:2A:70:A4:19:E3:53:09:64:DA:02:A5:1A:0C:9C:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bfcded43-2d76-428f-b7f1-3042af66f969/aa399e70-b9e1-39f8-af5f-669c59a46e20.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bfcded43-2d76-428f-b7f1-3042af66f969/bfcded43-2d76-428f-b7f1-3042af66f969.crl X509v3 Authority Key Identifier: keyid:E5:80:74:93:4A:D6:00:AE:DC:44:7A:A6:7D:10:61:9A:31:85:E3:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/bfcded43-2d76-428f-b7f1-3042af66f969.cer sbgp-ipAddrBlock: critical IPv4: 23.175.48.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:2b:10:27:dc:82:08:ff:ac:89:82:7c:24:9b:d9:59:b3:67: 87:51:b5:c1:a3:95:b8:b9:a6:2c:ba:00:42:58:24:90:c2:24: 55:d3:b3:a6:d9:b2:97:6c:fe:65:a2:9b:e3:04:97:26:01:f0: e3:de:90:e6:a6:ce:5a:49:7f:bc:bb:89:40:8c:27:1a:47:6a: 12:4d:91:4d:f9:a1:ea:67:dc:1c:6a:ce:9f:e7:dc:f1:13:ad: 6d:dd:e7:8b:6a:27:03:4d:1e:07:0c:71:44:cc:f4:2a:c8:db: 8d:eb:0a:f6:9e:31:01:ea:f1:33:69:d2:ff:2d:f2:f3:3b:ec: 95:47:ce:50:23:7b:54:cb:28:88:f6:db:7a:7b:df:f3:da:f4: 5f:de:89:09:ef:04:5f:59:c9:01:6b:39:38:5f:03:f6:22:d4: 8c:00:55:be:8f:fc:e6:c8:f2:cc:80:dd:51:93:81:8b:c8:41: 36:57:6b:03:e8:93:e5:d3:61:26:60:60:ab:9a:6e:37:4e:75: 82:10:7c:b1:85:47:35:e5:43:09:8e:c5:bf:fc:a2:5a:1a:ff: 2c:34:08:15:aa:f2:25:49:68:9a:d4:20:ff:62:d5:07:fd:79: 94:8e:18:de:cc:32:24:e5:98:9c:f2:1c:08:ab:96:a4:a7:e6: 9d:be:61:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9hLV8HjSPnVzfWiIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmZjZGVkNDMtMmQ3Ni00MjhmLWI3ZjEtMzA0MmFmNjZm OTY5MB4XDTI2MTAwMzEzMDAxM1oXDTI3MDEwMTE0MDAxM1owLzEtMCsGA1UEAxMk Yzc5ZWUzYTctM2EyZi00NmFmLWFhZDItYzc0OTRkY2ZiOWQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ej2ZQ6pJHAAvq4Q2gzJk8jr/QCmOo5rnK3F He0Mck22On8XmnVoYMAxAxG0lGLeX5ZFoorRNQl233YzqNWXBVhRUIWRwXDWwD07 VbKBuf1u4VWFtpLIKqboIeUHafaM6kruDWhUE1pc6vcWktgSDKwuQTJCH1rjGEkC cuu1ZAGLGDbpP9+X2Se9CX51XjSba3kJ7n0PaohhW+R9rSlTYlJKNIwqzsUwKGxM SAm/0qRywOd+zmzAwo2vr0t3OLtz5hojsG16CzhzxCo0jQiXqDXn01+kG/kJoV8e W6B8w3g9YHrmOvunVPfdGSt/PB7O/1HXhh93ycSZB/vYz8uFyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLG42CFGKnCkGeNTCWTaAqUaDJzCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9iZmNk ZWQ0My0yZDc2LTQyOGYtYjdmMS0zMDQyYWY2NmY5NjkvYWEzOTllNzAtYjllMS0z OWY4LWFmNWYtNjY5YzU5YTQ2ZTIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYmZjZGVkNDMtMmQ3Ni00MjhmLWI3 ZjEtMzA0MmFmNjZmOTY5L2JmY2RlZDQzLTJkNzYtNDI4Zi1iN2YxLTMwNDJhZjY2 Zjk2OS5jcmwwHwYDVR0jBBgwFoAU5YB0k0rWAK7cRHqmfRBhmjGF42swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9iZmNkZWQ0My0yZDc2LTQyOGYtYjdmMS0zMDQy YWY2NmY5NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF68wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADYrECfcggj/rImCfCSb2VmzZ4dRtcGjlbi5piy6AEJYJJDCJFXTs6bZ spds/mWim+MElyYB8OPekOamzlpJf7y7iUCMJxpHahJNkU35oepn3Bxqzp/n3PET rW3d54tqJwNNHgcMcUTM9CrI243rCvaeMQHq8TNp0v8t8vM77JVHzlAje1TLKIj2 23p73/Pa9F/eiQnvBF9ZyQFrOThfA/Yi1IwAVb6P/ObI8syA3VGTgYvIQTZXawPo k+XTYSZgYKuabjdOdYIQfLGFRzXlQwmOxb/8oloa/yw0CBWq8iVJaJrUIP9i1Qf9 eZSOGN7MMiTlmJzyHAirlqSn5p2+YTI= -----END CERTIFICATE-----Generated at Wed Oct 21 15:23:45 2026 by rpki-client