$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a431902-5d61-4220-a913-af4f21f3413d/81971457-da63-315b-a46b-b1f35234d76e.roa File: 81971457-da63-315b-a46b-b1f35234d76e.roa (raw, json) Hash identifier: i7/p2JylxVqU6EJPrD0COu98HpJOvwxQSECnMUWXQu8= Subject key identifier: E1:40:07:7E:AE:B9:C8:70:94:64:DF:BC:85:D8:A7:53:5B:7D:34:66 Certificate issuer: /CN=5a431902-5d61-4220-a913-af4f21f3413d Certificate serial: 010D0C9F4328584F119D15A655C23576D7886580 Authority key identifier: 9C:3E:74:C1:EB:97:89:46:37:ED:C9:94:44:43:32:C7:60:EA:08:16 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a431902-5d61-4220-a913-af4f21f3413d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a431902-5d61-4220-a913-af4f21f3413d/81971457-da63-315b-a46b-b1f35234d76e.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 3214 IP address blocks: 23.165.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a431902-5d61-4220-a913-af4f21f3413d/5a431902-5d61-4220-a913-af4f21f3413d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a431902-5d61-4220-a913-af4f21f3413d/5a431902-5d61-4220-a913-af4f21f3413d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a431902-5d61-4220-a913-af4f21f3413d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:9d:15:a6:55:c2:35:76:d7:88:65:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a431902-5d61-4220-a913-af4f21f3413d Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=13ad523c-991a-4eaa-bcd4-34cbabd1f8f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:69:c3:f9:33:b8:24:61:f1:4c:7c:b1:c0:a4: 80:68:66:4c:5b:98:f6:0b:04:9c:84:7e:9d:2e:d4: 0e:18:f7:fc:12:51:87:f9:7b:3f:00:f1:92:0c:cf: 05:d9:46:8a:b6:a6:c5:5e:4b:b3:d1:e7:c1:ad:95: 36:a4:af:76:c7:4d:f4:55:a7:39:c2:c1:5a:9d:49: c7:dc:e3:16:a8:0f:bc:c1:2d:61:cc:ed:f5:da:98: db:91:32:da:f7:98:24:3b:1b:8c:c9:22:7a:96:c6: 80:b8:46:98:de:92:fd:89:0b:a4:b7:7f:f5:84:1d: f4:60:91:80:2d:2b:7d:56:66:b6:bf:ea:c0:1c:a1: 0f:59:08:ea:e0:21:de:0b:28:c4:49:e4:42:3b:cb: 5e:ea:c1:b8:d6:cb:30:31:a4:28:73:be:24:e3:ae: d1:b3:b5:94:f5:87:33:6e:64:2e:c1:75:a3:5a:89: 46:db:d1:7b:61:98:ec:64:30:84:ab:d2:99:ee:92: 2b:5c:a5:06:c7:cb:0e:c4:f2:76:cd:22:51:e3:75: 2a:a3:93:5a:f7:9e:eb:c2:a1:09:36:4f:4e:54:55: e9:7e:34:d8:13:c9:4c:32:37:5d:83:22:33:db:6e: 9b:e5:17:1a:65:56:c7:57:04:c0:c3:26:2d:fa:13: 19:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:40:07:7E:AE:B9:C8:70:94:64:DF:BC:85:D8:A7:53:5B:7D:34:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a431902-5d61-4220-a913-af4f21f3413d/81971457-da63-315b-a46b-b1f35234d76e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a431902-5d61-4220-a913-af4f21f3413d/5a431902-5d61-4220-a913-af4f21f3413d.crl X509v3 Authority Key Identifier: keyid:9C:3E:74:C1:EB:97:89:46:37:ED:C9:94:44:43:32:C7:60:EA:08:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5a431902-5d61-4220-a913-af4f21f3413d.cer sbgp-ipAddrBlock: critical IPv4: 23.165.200.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:cd:c3:71:97:7d:b7:c2:ae:d1:8e:00:b5:d7:64:55:0e:af: 39:d6:8e:ca:2b:48:73:73:67:d0:ac:7d:6f:8d:d0:2d:3c:9c: f4:f2:25:66:8c:68:49:36:32:a3:77:d0:11:77:c9:9c:aa:48: 21:85:3e:37:46:a7:03:a7:58:ca:a7:85:1b:2c:c7:f0:81:78: e3:f7:d2:ac:59:ee:98:3f:e2:ec:48:15:2f:f2:e8:75:f9:39: 63:ff:91:11:bf:c8:63:dd:d5:34:40:64:34:3d:55:4c:fb:5b: 1d:8d:24:89:f2:90:60:e8:7b:b2:1c:1e:ce:db:28:3a:0a:ea: 1c:10:42:f3:55:ce:f3:61:4f:3e:92:68:7a:de:4a:6c:a1:e3: fe:5a:23:61:c2:64:25:0c:f1:00:70:9a:73:e4:11:61:44:53: fb:d2:32:0c:be:6a:76:61:cb:bd:36:d7:8e:85:eb:ec:dc:99: 51:e1:e1:27:41:d5:76:17:e7:57:98:b8:8b:a9:19:c6:7b:bb: bb:4d:87:92:c9:96:0b:fa:47:a7:88:fa:c6:f6:0a:0c:f3:3c: 39:f2:12:97:9d:87:66:c1:39:8e:f0:66:ea:27:45:76:91:96: 10:9e:12:67:e5:55:8c:d9:a3:d3:b6:1f:40:7c:b2:19:56:44: 19:68:81:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8RnRWmVcI1dteIZYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWE0MzE5MDItNWQ2MS00MjIwLWE5MTMtYWY0ZjIxZjM0 MTNkMB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk MTNhZDUyM2MtOTkxYS00ZWFhLWJjZDQtMzRjYmFiZDFmOGYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtmnD+TO4JGHxTHyxwKSAaGZMW5j2CwSchH6d LtQOGPf8ElGH+Xs/APGSDM8F2UaKtqbFXkuz0efBrZU2pK92x030Vac5wsFanUnH 3OMWqA+8wS1hzO312pjbkTLa95gkOxuMySJ6lsaAuEaY3pL9iQukt3/1hB30YJGA LSt9Vma2v+rAHKEPWQjq4CHeCyjESeRCO8te6sG41sswMaQoc74k467Rs7WU9Ycz bmQuwXWjWolG29F7YZjsZDCEq9KZ7pIrXKUGx8sOxPJ2zSJR43Uqo5Na957rwqEJ Nk9OVFXpfjTYE8lMMjddgyIz226b5RcaZVbHVwTAwyYt+hMZ/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOFAB36uuchwlGTfvIXYp1NbfTRmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy81YTQz MTkwMi01ZDYxLTQyMjAtYTkxMy1hZjRmMjFmMzQxM2QvODE5NzE0NTctZGE2My0z MTViLWE0NmItYjFmMzUyMzRkNzZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNWE0MzE5MDItNWQ2MS00MjIwLWE5 MTMtYWY0ZjIxZjM0MTNkLzVhNDMxOTAyLTVkNjEtNDIyMC1hOTEzLWFmNGYyMWYz NDEzZC5jcmwwHwYDVR0jBBgwFoAUnD50weuXiUY37cmUREMyx2DqCBYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy81YTQzMTkwMi01ZDYxLTQyMjAtYTkxMy1hZjRm MjFmMzQxM2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6XIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJTNw3GXfbfCrtGOALXXZFUOrznWjsorSHNzZ9CsfW+N0C08nPTyJWaM aEk2MqN30BF3yZyqSCGFPjdGpwOnWMqnhRssx/CBeOP30qxZ7pg/4uxIFS/y6HX5 OWP/kRG/yGPd1TRAZDQ9VUz7Wx2NJInykGDoe7IcHs7bKDoK6hwQQvNVzvNhTz6S aHreSmyh4/5aI2HCZCUM8QBwmnPkEWFEU/vSMgy+anZhy702146F6+zcmVHh4SdB 1XYX51eYuIupGcZ7u7tNh5LJlgv6R6eI+sb2CgzzPDnyEpedh2bBOY7wZuonRXaR lhCeEmflVYzZo9O2H0B8shlWRBlogSc= -----END CERTIFICATE-----Generated at Thu Sep 10 17:40:16 2026 by rpki-client