$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/14618cc8-9232-4da8-8bf5-dcc0386e13c4/bd2f992d-6e4a-3230-8636-0526743d0a78.roa File: bd2f992d-6e4a-3230-8636-0526743d0a78.roa (raw, json) Hash identifier: QZnjSvKwMKgHv5c//ayoZYtoeQhsf0SWk//3SrH5fmM= Subject key identifier: 72:85:C4:4E:7C:9D:11:C3:BD:61:FD:0C:5D:36:D0:83:F0:7C:3C:2B Certificate issuer: /CN=14618cc8-9232-4da8-8bf5-dcc0386e13c4 Certificate serial: 010D0C9F4328584F03A79209471BF4433FD428A0 Authority key identifier: 96:22:F5:84:82:2C:B9:22:17:C9:F8:1C:1D:50:E1:A4:08:8F:63:23 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/14618cc8-9232-4da8-8bf5-dcc0386e13c4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/14618cc8-9232-4da8-8bf5-dcc0386e13c4/bd2f992d-6e4a-3230-8636-0526743d0a78.roa Signing time: Mon 31 Aug 2026 01:00:12 +0000 ROA not before: Mon 31 Aug 2026 01:00:12 +0000 ROA not after: Sun 29 Nov 2026 02:00:12 +0000 asID: 399646 IP address blocks: 23.165.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/14618cc8-9232-4da8-8bf5-dcc0386e13c4/14618cc8-9232-4da8-8bf5-dcc0386e13c4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/14618cc8-9232-4da8-8bf5-dcc0386e13c4/14618cc8-9232-4da8-8bf5-dcc0386e13c4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/14618cc8-9232-4da8-8bf5-dcc0386e13c4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:03:a7:92:09:47:1b:f4:43:3f:d4:28:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14618cc8-9232-4da8-8bf5-dcc0386e13c4 Validity Not Before: Aug 31 01:00:12 2026 GMT Not After : Nov 29 02:00:12 2026 GMT Subject: CN=9e5aa9d2-6728-440a-8d30-da4f0a77ca03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:95:53:08:8c:e2:64:c7:45:0f:7a:52:94:84: ca:18:2a:1d:5d:30:a1:af:55:43:f6:64:59:6c:91: 2a:72:13:07:9e:39:66:84:0a:9a:84:60:03:9b:b2: a5:3e:70:f9:d7:be:da:c2:c2:d2:16:4d:23:fe:75: 40:5b:6e:50:bf:3a:bb:30:fa:64:46:c4:d0:0d:d1: b5:29:56:8b:a7:cb:b2:7d:22:3e:0f:46:80:1b:15: 78:a9:23:58:53:2f:cf:f5:03:0c:4e:0b:ea:b5:ec: a1:5e:37:36:e0:a2:25:f3:6e:7d:6f:b5:02:74:29: bc:09:ef:48:ab:0d:56:e4:26:36:28:6d:75:e7:fa: c7:0d:1d:7a:6c:3f:8c:69:45:dc:b5:93:a1:87:ac: ed:56:6a:3e:fc:53:f0:ba:90:a8:1b:32:51:4a:89: e4:fc:2e:d8:89:d9:26:e9:d6:88:7c:c6:0d:af:94: 64:6f:2d:83:42:a3:b0:7f:b6:3c:ad:a2:f2:9b:e2: ad:25:ad:2c:58:65:b1:0b:d6:a4:75:24:34:71:f4: 1e:ba:1e:dd:37:a1:73:3d:6b:a9:e0:79:5c:b6:55: 67:c9:57:0f:79:6a:f7:30:67:86:ae:e3:e2:0b:a0: eb:a5:c7:00:83:ce:0c:d3:c0:c8:6c:32:75:60:b3: 18:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:85:C4:4E:7C:9D:11:C3:BD:61:FD:0C:5D:36:D0:83:F0:7C:3C:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/14618cc8-9232-4da8-8bf5-dcc0386e13c4/bd2f992d-6e4a-3230-8636-0526743d0a78.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/14618cc8-9232-4da8-8bf5-dcc0386e13c4/14618cc8-9232-4da8-8bf5-dcc0386e13c4.crl X509v3 Authority Key Identifier: keyid:96:22:F5:84:82:2C:B9:22:17:C9:F8:1C:1D:50:E1:A4:08:8F:63:23 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/14618cc8-9232-4da8-8bf5-dcc0386e13c4.cer sbgp-ipAddrBlock: critical IPv4: 23.165.104.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:c0:29:d3:64:fc:51:9b:5e:4e:a2:27:fd:06:6a:d2:7f:4d: 50:25:82:d9:2d:73:63:46:6c:ea:ef:dc:2d:10:46:ed:5b:d8: 19:88:b9:a6:42:b8:12:45:7c:71:f0:df:9f:60:42:87:3f:ae: 8a:eb:e8:5d:a9:c4:80:5c:b1:30:0f:6c:6f:02:c2:31:8b:b1: 15:90:4d:7a:ea:e0:f7:06:38:ab:bc:cd:36:67:9c:61:7b:ec: a9:cc:1a:01:77:bd:28:21:9d:1f:61:e9:90:94:c1:88:1d:50: 1b:a4:0e:a3:45:96:be:8d:f8:3d:cc:e4:cb:d8:3f:4a:1d:ba: 79:5b:3e:4c:df:2d:56:dd:85:e4:1a:e5:79:a5:3b:58:cc:10: 1f:dc:6d:01:64:09:9e:4e:b0:17:be:a6:9b:ae:46:27:6f:51: 28:44:5d:7d:bb:68:97:d4:2d:1b:c6:ec:dc:a2:d2:fd:a0:9b: 23:50:16:e5:b0:64:f1:87:50:12:74:76:db:3a:d3:4b:21:45: 4f:9f:4d:0b:f6:8d:f7:e7:91:52:01:35:59:c7:0f:bc:13:24: 48:a5:de:e4:65:c7:49:98:57:63:56:7a:68:32:3d:af:96:08: 34:55:5d:db:e4:19:2f:e2:16:ea:e8:c2:db:0a:0c:59:3a:36: 78:44:0c:c8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8Dp5IJRxv0Qz/UKKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTQ2MThjYzgtOTIzMi00ZGE4LThiZjUtZGNjMDM4NmUx M2M0MB4XDTI2MDgzMTAxMDAxMloXDTI2MTEyOTAyMDAxMlowLzEtMCsGA1UEAxMk OWU1YWE5ZDItNjcyOC00NDBhLThkMzAtZGE0ZjBhNzdjYTAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAopVTCIziZMdFD3pSlITKGCodXTChr1VD9mRZ bJEqchMHnjlmhAqahGADm7KlPnD5177awsLSFk0j/nVAW25Qvzq7MPpkRsTQDdG1 KVaLp8uyfSI+D0aAGxV4qSNYUy/P9QMMTgvqteyhXjc24KIl8259b7UCdCm8Ce9I qw1W5CY2KG115/rHDR16bD+MaUXctZOhh6ztVmo+/FPwupCoGzJRSonk/C7Yidkm 6daIfMYNr5Rkby2DQqOwf7Y8raLym+KtJa0sWGWxC9akdSQ0cfQeuh7dN6FzPWup 4HlctlVnyVcPeWr3MGeGruPiC6DrpccAg84M08DIbDJ1YLMYLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHKFxE58nRHDvWH9DF020IPwfDwrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8xNDYx OGNjOC05MjMyLTRkYTgtOGJmNS1kY2MwMzg2ZTEzYzQvYmQyZjk5MmQtNmU0YS0z MjMwLTg2MzYtMDUyNjc0M2QwYTc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMTQ2MThjYzgtOTIzMi00ZGE4LThi ZjUtZGNjMDM4NmUxM2M0LzE0NjE4Y2M4LTkyMzItNGRhOC04YmY1LWRjYzAzODZl MTNjNC5jcmwwHwYDVR0jBBgwFoAUliL1hIIsuSIXyfgcHVDhpAiPYyMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8xNDYxOGNjOC05MjMyLTRkYTgtOGJmNS1kY2Mw Mzg2ZTEzYzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6VoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKjAKdNk/FGbXk6iJ/0GatJ/TVAlgtktc2NGbOrv3C0QRu1b2BmIuaZC uBJFfHHw359gQoc/rorr6F2pxIBcsTAPbG8CwjGLsRWQTXrq4PcGOKu8zTZnnGF7 7KnMGgF3vSghnR9h6ZCUwYgdUBukDqNFlr6N+D3M5MvYP0odunlbPkzfLVbdheQa 5XmlO1jMEB/cbQFkCZ5OsBe+ppuuRidvUShEXX27aJfULRvG7Nyi0v2gmyNQFuWw ZPGHUBJ0dts600shRU+fTQv2jffnkVIBNVnHD7wTJEil3uRlx0mYV2NWemgyPa+W CDRVXdvkGS/iFurowtsKDFk6NnhEDMg= -----END CERTIFICATE-----Generated at Fri Sep 11 09:27:59 2026 by rpki-client