$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5c5260f5-8262-4a34-b49c-e993dbadd1b1/0209baa9-389a-393c-b685-be2cd86201f7.roa File: 0209baa9-389a-393c-b685-be2cd86201f7.roa (raw, json) Hash identifier: 1V2XtUsWKDbCRgGSipPmhOvCy5f0Alx93RafyKCDoGI= Subject key identifier: 35:C9:78:04:43:16:1B:32:1A:73:93:E9:21:5D:E9:95:4D:F3:94:2B Certificate issuer: /CN=5c5260f5-8262-4a34-b49c-e993dbadd1b1 Certificate serial: 010D0C9F4328584F698D813CC92481807FA1BE00 Authority key identifier: 68:61:4A:21:BB:FB:DF:5B:84:00:F2:A0:40:DE:24:06:E3:EA:DF:53 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5c5260f5-8262-4a34-b49c-e993dbadd1b1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5c5260f5-8262-4a34-b49c-e993dbadd1b1/0209baa9-389a-393c-b685-be2cd86201f7.roa Signing time: Tue 06 Oct 2026 13:00:13 +0000 ROA not before: Tue 06 Oct 2026 13:00:13 +0000 ROA not after: Mon 04 Jan 2027 14:00:13 +0000 asID: 398310 IP address blocks: 23.157.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5c5260f5-8262-4a34-b49c-e993dbadd1b1/5c5260f5-8262-4a34-b49c-e993dbadd1b1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5c5260f5-8262-4a34-b49c-e993dbadd1b1/5c5260f5-8262-4a34-b49c-e993dbadd1b1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5c5260f5-8262-4a34-b49c-e993dbadd1b1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:69:8d:81:3c:c9:24:81:80:7f:a1:be:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5c5260f5-8262-4a34-b49c-e993dbadd1b1 Validity Not Before: Oct 6 13:00:13 2026 GMT Not After : Jan 4 14:00:13 2027 GMT Subject: CN=ff7a7223-5e10-423c-aca0-05056141e214 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:92:0a:e2:a7:8f:c5:72:d0:69:42:78:4c:c4: f4:61:a2:53:6b:ca:a4:f0:19:69:a3:e5:2f:b2:c2: d7:c3:93:55:fb:f1:4b:13:3b:53:11:e8:d2:46:69: 0d:d5:25:41:1b:53:24:ce:af:96:92:0a:e5:1a:28: bc:ff:38:d3:58:b6:18:0e:99:11:c1:b3:a5:00:b3: 31:f5:b6:18:14:6d:9c:6f:86:77:01:2f:dc:3d:8c: bc:4d:07:27:ae:16:ce:41:62:fb:a4:ca:51:8a:65: 61:a3:d1:d0:53:cb:6e:86:31:16:2a:52:fe:93:0b: 6a:f7:dc:f4:97:e7:f3:23:ed:39:16:30:a1:0d:01: 89:25:1a:04:d9:39:04:96:5d:82:f0:0c:be:9b:5e: f7:8a:ed:96:aa:4c:a2:ff:91:fa:ea:b1:93:77:89: 02:48:28:03:85:b3:b1:f9:ff:70:d9:0b:f5:6e:3a: 91:92:3c:8c:8c:db:e7:35:8e:ad:b0:40:ee:2f:a1: 07:c4:d6:1b:5d:05:dc:02:18:6d:ff:97:90:eb:86: ef:9c:e5:84:60:da:10:1e:0a:26:64:dc:d4:f7:46: b5:03:aa:63:cc:cb:c0:99:d3:22:c0:90:fa:57:38: 69:ea:fc:53:51:53:2c:c7:59:51:66:0e:a1:93:3d: 75:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:C9:78:04:43:16:1B:32:1A:73:93:E9:21:5D:E9:95:4D:F3:94:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5c5260f5-8262-4a34-b49c-e993dbadd1b1/0209baa9-389a-393c-b685-be2cd86201f7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5c5260f5-8262-4a34-b49c-e993dbadd1b1/5c5260f5-8262-4a34-b49c-e993dbadd1b1.crl X509v3 Authority Key Identifier: keyid:68:61:4A:21:BB:FB:DF:5B:84:00:F2:A0:40:DE:24:06:E3:EA:DF:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5c5260f5-8262-4a34-b49c-e993dbadd1b1.cer sbgp-ipAddrBlock: critical IPv4: 23.157.208.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:95:74:45:b8:3a:57:d2:3f:1a:f1:d6:85:4d:fb:df:91:5b: aa:82:0e:3e:3e:87:cc:53:fe:a9:0d:03:c3:48:2b:51:b1:15: 38:3e:0b:1f:1b:64:72:65:82:bd:2e:65:2a:39:e2:49:df:a2: b0:a2:73:d3:b5:4b:be:6b:e3:8f:69:59:40:f7:61:f9:fe:74: 9a:f2:74:22:07:60:b1:57:05:11:f8:d2:27:ec:02:4f:2d:13: 17:b5:2b:0c:17:37:dd:52:26:b5:a9:8a:81:87:d4:5d:9d:6c: 2f:68:41:b8:bd:9e:ca:ba:fa:96:fe:3d:70:13:57:8e:b4:d5: d0:ab:68:1c:6f:d4:3f:f3:89:08:b1:a8:63:1a:20:0e:03:69: 50:be:27:08:57:a0:b9:c3:12:2e:bd:4f:fb:88:ed:b4:f5:28: 63:12:7d:e9:f6:18:b3:60:2c:90:e9:a6:4d:5d:e9:de:3d:31: 94:31:0d:da:97:4f:32:5a:14:ec:b5:9e:70:28:e5:35:ad:da: 0e:38:bc:5d:c9:d0:bf:b1:9e:8d:d4:7a:46:93:7e:9a:d8:fa: 01:34:d4:b8:a1:ad:e2:76:f2:56:dc:86:8a:7f:8f:04:de:ea: 6c:27:d8:3c:d5:0f:03:06:39:1d:62:17:92:64:1e:7a:e6:c2: 25:d8:27:dc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9pjYE8ySSBgH+hvgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWM1MjYwZjUtODI2Mi00YTM0LWI0OWMtZTk5M2RiYWRk MWIxMB4XDTI2MTAwNjEzMDAxM1oXDTI3MDEwNDE0MDAxM1owLzEtMCsGA1UEAxMk ZmY3YTcyMjMtNWUxMC00MjNjLWFjYTAtMDUwNTYxNDFlMjE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyJIK4qePxXLQaUJ4TMT0YaJTa8qk8Blpo+Uv ssLXw5NV+/FLEztTEejSRmkN1SVBG1Mkzq+WkgrlGii8/zjTWLYYDpkRwbOlALMx 9bYYFG2cb4Z3AS/cPYy8TQcnrhbOQWL7pMpRimVho9HQU8tuhjEWKlL+kwtq99z0 l+fzI+05FjChDQGJJRoE2TkEll2C8Ay+m173iu2Wqkyi/5H66rGTd4kCSCgDhbOx +f9w2Qv1bjqRkjyMjNvnNY6tsEDuL6EHxNYbXQXcAhht/5eQ64bvnOWEYNoQHgom ZNzU90a1A6pjzMvAmdMiwJD6Vzhp6vxTUVMsx1lRZg6hkz116QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDXJeARDFhsyGnOT6SFd6ZVN85QrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy81YzUy NjBmNS04MjYyLTRhMzQtYjQ5Yy1lOTkzZGJhZGQxYjEvMDIwOWJhYTktMzg5YS0z OTNjLWI2ODUtYmUyY2Q4NjIwMWY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNWM1MjYwZjUtODI2Mi00YTM0LWI0 OWMtZTk5M2RiYWRkMWIxLzVjNTI2MGY1LTgyNjItNGEzNC1iNDljLWU5OTNkYmFk ZDFiMS5jcmwwHwYDVR0jBBgwFoAUaGFKIbv731uEAPKgQN4kBuPq31MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy81YzUyNjBmNS04MjYyLTRhMzQtYjQ5Yy1lOTkz ZGJhZGQxYjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF53QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADuVdEW4OlfSPxrx1oVN+9+RW6qCDj4+h8xT/qkNA8NIK1GxFTg+Cx8b ZHJlgr0uZSo54knforCic9O1S75r449pWUD3Yfn+dJrydCIHYLFXBRH40ifsAk8t Exe1KwwXN91SJrWpioGH1F2dbC9oQbi9nsq6+pb+PXATV4601dCraBxv1D/ziQix qGMaIA4DaVC+JwhXoLnDEi69T/uI7bT1KGMSfen2GLNgLJDppk1d6d49MZQxDdqX TzJaFOy1nnAo5TWt2g44vF3J0L+xno3UekaTfprY+gE01LihreJ28lbchop/jwTe 6mwn2DzVDwMGOR1iF5JkHnrmwiXYJ9w= -----END CERTIFICATE-----Generated at Tue Oct 13 14:15:01 2026 by rpki-client