$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2/80cef7a6-536c-3c05-aa86-d2e95cc1e2f2.roa File: 80cef7a6-536c-3c05-aa86-d2e95cc1e2f2.roa (raw, json) Hash identifier: 6MSW0kUSdikJPT9g5wCbBdMexhuFllb36Ol7EVQNSpY= Subject key identifier: 80:F4:79:EA:FF:6C:E3:03:B0:06:CA:3C:4B:F5:74:C6:D9:37:FE:A6 Certificate issuer: /CN=3d2279d8-2ed5-4745-9231-9dbd10bbb1a2 Certificate serial: 010D0C9F4328584F498979DAE0B10879CD8164C0 Authority key identifier: 49:BE:C9:98:C8:3E:AE:3F:DD:EA:5C:BD:3A:ED:CA:38:82:81:1E:6E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2/80cef7a6-536c-3c05-aa86-d2e95cc1e2f2.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 63008 IP address blocks: 23.169.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:89:79:da:e0:b1:08:79:cd:81:64:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d2279d8-2ed5-4745-9231-9dbd10bbb1a2 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=d299a1df-7403-4b3a-84ad-91232cb9d533 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:90:dd:df:cb:bc:16:d5:bc:ae:c9:bb:c8:41: 5d:18:39:a8:b9:33:70:29:75:d4:0d:93:59:5a:7c: bc:59:a4:99:04:8b:93:52:ab:5c:11:20:75:a3:3b: 4e:54:c4:de:04:47:e6:14:46:0c:40:f6:23:dd:13: a0:82:3f:0d:81:37:47:3b:78:6d:cc:35:3c:3e:14: 68:88:77:93:21:75:a8:a8:31:3d:e1:dc:28:cf:49: 1e:a2:64:71:62:52:2d:ce:68:27:13:2e:13:57:8c: 68:62:dd:46:ca:1f:9c:cd:6c:75:cd:60:a5:e9:e4: 0e:40:f8:d0:a1:64:83:b6:27:a8:ac:54:87:dd:4e: cf:63:be:a8:2d:5c:75:c6:4b:5b:7a:dc:b4:52:3b: 59:00:67:fd:bb:5b:f4:07:10:47:9f:e5:16:5a:90: 8b:87:4c:ab:f2:c2:65:70:59:cd:c9:f7:49:95:a5: 16:a9:01:73:52:75:86:8d:08:64:f6:d5:c1:f6:42: 6b:40:03:a6:9f:16:7b:7a:9d:85:e5:75:d6:15:60: 18:40:4a:04:36:0a:a0:bc:79:de:e9:32:54:56:85: c0:ae:56:a8:13:47:8c:a2:a3:33:4b:4d:32:3c:06: f8:6c:4e:79:65:7a:f1:0d:71:16:b0:51:c0:ed:73: a7:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:F4:79:EA:FF:6C:E3:03:B0:06:CA:3C:4B:F5:74:C6:D9:37:FE:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2/80cef7a6-536c-3c05-aa86-d2e95cc1e2f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2.crl X509v3 Authority Key Identifier: keyid:49:BE:C9:98:C8:3E:AE:3F:DD:EA:5C:BD:3A:ED:CA:38:82:81:1E:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3d2279d8-2ed5-4745-9231-9dbd10bbb1a2.cer sbgp-ipAddrBlock: critical IPv4: 23.169.168.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:61:82:4d:39:7a:a2:1e:ab:21:0c:15:79:d6:87:e2:00:9d: 86:79:c1:a9:20:eb:00:51:44:af:60:cd:e4:b0:2e:14:0f:ba: e6:27:3c:a9:34:c5:44:bb:d8:8a:e9:ac:2c:02:0b:7e:24:46: 81:17:f3:16:f3:09:73:44:d0:9b:56:5f:4a:9f:38:45:77:fe: ef:b0:8f:8b:fd:09:8e:ad:95:6a:2f:e2:cd:69:c0:3a:f3:56: 17:4b:94:42:83:8b:36:e5:01:94:5f:4e:f4:ba:38:99:30:46: 1d:4d:f7:30:08:5a:81:ca:58:03:c2:23:91:bd:5a:81:2f:57: 1f:e8:6e:03:21:fe:dc:3d:b5:d3:50:95:73:c4:ea:39:1f:16: 43:f0:a4:cf:78:79:cf:1f:22:a0:1b:54:17:8c:9c:3a:aa:7d: c9:0a:31:b9:cb:8c:ad:ab:63:15:3c:a4:8e:d5:af:cb:2e:72: 99:f5:c9:c2:b2:0b:72:1d:47:d4:ae:8d:5b:04:cb:8a:5f:9c: 6e:6a:56:73:f5:33:d7:fd:07:fb:7e:ee:3e:7c:81:c7:1d:96: 81:f2:48:69:ab:f8:46:50:6e:23:f4:1d:50:c0:4e:db:e4:01: d5:cb:26:29:72:b6:ce:26:7c:c2:4f:ae:f7:06:34:44:87:48: fd:0c:41:74 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JiXna4LEIec2BZMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2QyMjc5ZDgtMmVkNS00NzQ1LTkyMzEtOWRiZDEwYmJi MWEyMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZDI5OWExZGYtNzQwMy00YjNhLTg0YWQtOTEyMzJjYjlkNTMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu5Dd38u8FtW8rsm7yEFdGDmouTNwKXXUDZNZ Wny8WaSZBIuTUqtcESB1oztOVMTeBEfmFEYMQPYj3ROggj8NgTdHO3htzDU8PhRo iHeTIXWoqDE94dwoz0keomRxYlItzmgnEy4TV4xoYt1Gyh+czWx1zWCl6eQOQPjQ oWSDtieorFSH3U7PY76oLVx1xktbety0UjtZAGf9u1v0BxBHn+UWWpCLh0yr8sJl cFnNyfdJlaUWqQFzUnWGjQhk9tXB9kJrQAOmnxZ7ep2F5XXWFWAYQEoENgqgvHne 6TJUVoXArlaoE0eMoqMzS00yPAb4bE55ZXrxDXEWsFHA7XOnKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFID0eer/bOMDsAbKPEv1dMbZN/6mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8zZDIy NzlkOC0yZWQ1LTQ3NDUtOTIzMS05ZGJkMTBiYmIxYTIvODBjZWY3YTYtNTM2Yy0z YzA1LWFhODYtZDJlOTVjYzFlMmYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvM2QyMjc5ZDgtMmVkNS00NzQ1LTky MzEtOWRiZDEwYmJiMWEyLzNkMjI3OWQ4LTJlZDUtNDc0NS05MjMxLTlkYmQxMGJi YjFhMi5jcmwwHwYDVR0jBBgwFoAUSb7JmMg+rj/d6ly9Ou3KOIKBHm4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8zZDIyNzlkOC0yZWQ1LTQ3NDUtOTIzMS05ZGJk MTBiYmIxYTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6moMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC5hgk05eqIeqyEMFXnWh+IAnYZ5wakg6wBRRK9gzeSwLhQPuuYnPKk0 xUS72IrprCwCC34kRoEX8xbzCXNE0JtWX0qfOEV3/u+wj4v9CY6tlWov4s1pwDrz VhdLlEKDizblAZRfTvS6OJkwRh1N9zAIWoHKWAPCI5G9WoEvVx/obgMh/tw9tdNQ lXPE6jkfFkPwpM94ec8fIqAbVBeMnDqqfckKMbnLjK2rYxU8pI7Vr8sucpn1ycKy C3IdR9SujVsEy4pfnG5qVnP1M9f9B/t+7j58gccdloHySGmr+EZQbiP0HVDATtvk AdXLJilyts4mfMJPrvcGNESHSP0MQXQ= -----END CERTIFICATE-----Generated at Sun Sep 27 14:52:39 2026 by rpki-client