$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9/07f6b5d0-e80a-344b-a252-2129c64d94b1.roa File: 07f6b5d0-e80a-344b-a252-2129c64d94b1.roa (raw, json) Hash identifier: 1eJyPkLmsCIUfnq4EMBFRosy+j3vxn9SHsTZMO22s68= Subject key identifier: EC:90:5D:52:D3:65:E1:D4:17:13:63:F5:5A:C9:2A:90:BC:48:3F:A1 Certificate issuer: /CN=8c2a8d95-0290-4218-9b08-d157e5f127f9 Certificate serial: 010D0C9F4328584F6F23132443114C82D36A21BC Authority key identifier: D9:14:6A:25:0B:CC:BD:BE:46:97:7E:E1:6E:9A:B5:D6:32:82:E9:9F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9/07f6b5d0-e80a-344b-a252-2129c64d94b1.roa Signing time: Thu 08 Oct 2026 13:00:12 +0000 ROA not before: Thu 08 Oct 2026 13:00:12 +0000 ROA not after: Wed 06 Jan 2027 14:00:12 +0000 asID: 46733 IP address blocks: 23.165.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9/8c2a8d95-0290-4218-9b08-d157e5f127f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9/8c2a8d95-0290-4218-9b08-d157e5f127f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:6f:23:13:24:43:11:4c:82:d3:6a:21:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c2a8d95-0290-4218-9b08-d157e5f127f9 Validity Not Before: Oct 8 13:00:12 2026 GMT Not After : Jan 6 14:00:12 2027 GMT Subject: CN=1e7789d8-a73b-433d-a481-4d6c8315b7b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:64:8f:42:f6:df:45:27:ea:2d:e8:38:20:1c: 44:2b:1c:f8:af:60:1d:be:5b:98:bc:bc:b6:17:db: 0b:f5:b4:86:0d:d7:c3:dd:10:bc:8c:24:5b:95:6d: 2d:ce:1a:c8:2f:1e:7a:06:20:a6:70:7e:69:fb:88: 7f:0d:fc:18:87:6c:79:0b:19:4b:f2:36:96:bf:28: ee:45:c0:af:8f:85:69:e1:e1:0b:1d:5e:be:49:39: 7e:a2:94:87:95:d8:8f:da:ba:a0:99:22:ff:82:e5: 1d:dc:24:8c:17:b1:80:ef:67:78:5c:45:6b:bb:00: 59:5e:b5:f5:cb:2d:2b:91:1b:fe:0d:d2:23:53:fb: 9f:e8:a8:e5:c3:c4:f1:89:46:5c:b6:77:5b:88:0b: a5:91:e7:85:e3:c3:0c:54:28:c1:ae:fc:f4:1d:e4: 35:59:7b:68:b3:5a:b0:26:74:d2:1e:3d:84:66:10: f5:1b:5f:bd:fe:b0:94:41:0d:ed:0b:0e:86:e5:2b: 1b:11:0c:8e:64:a8:18:e6:4b:6a:15:dc:41:07:d8: a4:24:a6:3d:bc:e7:e2:e3:4e:b1:e3:d4:63:e1:76: 98:67:0b:4e:c7:10:73:ab:44:a2:53:ac:d0:c8:93: 91:76:a5:01:c3:6d:fe:70:1f:d3:a2:8e:14:34:b2: 1c:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:90:5D:52:D3:65:E1:D4:17:13:63:F5:5A:C9:2A:90:BC:48:3F:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9/07f6b5d0-e80a-344b-a252-2129c64d94b1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9/8c2a8d95-0290-4218-9b08-d157e5f127f9.crl X509v3 Authority Key Identifier: keyid:D9:14:6A:25:0B:CC:BD:BE:46:97:7E:E1:6E:9A:B5:D6:32:82:E9:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9.cer sbgp-ipAddrBlock: critical IPv4: 23.165.136.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:23:74:4f:c0:56:92:92:73:05:a2:27:79:1c:d5:31:03:15: 1b:6a:d3:75:48:fe:7e:cd:93:46:69:a5:64:9d:2b:8b:10:f9: 98:38:8a:ef:2f:1d:01:5c:c5:94:a3:78:2c:46:4b:ff:71:34: 61:1b:90:19:9f:02:33:08:60:32:5c:34:16:cb:45:37:bd:0e: 56:2b:fc:08:da:51:e8:46:0d:30:74:9e:d2:0b:f6:cf:52:90: 8d:df:3c:8e:0c:24:96:56:92:ad:21:cd:35:af:48:fb:da:11: 1f:d5:d2:8c:7d:75:0d:15:4d:dd:25:f3:ea:a1:ef:d4:c6:91: 3f:5a:d4:17:1d:e9:01:4d:3a:6e:96:6b:1b:3f:3a:ed:0c:43: 09:5f:43:89:1b:c1:db:93:6e:37:70:d6:e5:69:4f:fa:a3:89: 9d:c9:a7:7a:58:e7:55:90:9d:13:10:ba:dd:a7:9c:cd:47:ac: fe:99:e4:cd:ae:7f:68:e1:72:d0:71:43:cd:8d:21:b4:2d:bd: 87:1e:61:31:09:ea:55:3b:f6:a9:46:59:d6:cc:7c:1a:2a:fb: 27:ee:3e:6d:18:d1:e3:ee:50:58:9a:6c:6c:b4:db:c3:b4:57: a5:8b:f8:e0:3d:72:a7:c3:4c:c9:f3:77:29:47:2b:09:0e:d3: 9d:b0:7c:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9vIxMkQxFMgtNqIbwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGMyYThkOTUtMDI5MC00MjE4LTliMDgtZDE1N2U1ZjEy N2Y5MB4XDTI2MTAwODEzMDAxMloXDTI3MDEwNjE0MDAxMlowLzEtMCsGA1UEAxMk MWU3Nzg5ZDgtYTczYi00MzNkLWE0ODEtNGQ2YzgzMTViN2I3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgGSPQvbfRSfqLeg4IBxEKxz4r2AdvluYvLy2 F9sL9bSGDdfD3RC8jCRblW0tzhrILx56BiCmcH5p+4h/DfwYh2x5CxlL8jaWvyju RcCvj4Vp4eELHV6+STl+opSHldiP2rqgmSL/guUd3CSMF7GA72d4XEVruwBZXrX1 yy0rkRv+DdIjU/uf6Kjlw8TxiUZctndbiAulkeeF48MMVCjBrvz0HeQ1WXtos1qw JnTSHj2EZhD1G1+9/rCUQQ3tCw6G5SsbEQyOZKgY5ktqFdxBB9ikJKY9vOfi406x 49Rj4XaYZwtOxxBzq0SiU6zQyJORdqUBw23+cB/Too4UNLIcOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOyQXVLTZeHUFxNj9VrJKpC8SD+hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84YzJh OGQ5NS0wMjkwLTQyMTgtOWIwOC1kMTU3ZTVmMTI3ZjkvMDdmNmI1ZDAtZTgwYS0z NDRiLWEyNTItMjEyOWM2NGQ5NGIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvOGMyYThkOTUtMDI5MC00MjE4LTli MDgtZDE1N2U1ZjEyN2Y5LzhjMmE4ZDk1LTAyOTAtNDIxOC05YjA4LWQxNTdlNWYx MjdmOS5jcmwwHwYDVR0jBBgwFoAU2RRqJQvMvb5Gl37hbpq11jKC6Z8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy84YzJhOGQ5NS0wMjkwLTQyMTgtOWIwOC1kMTU3 ZTVmMTI3ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6WIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGYjdE/AVpKScwWiJ3kc1TEDFRtq03VI/n7Nk0ZppWSdK4sQ+Zg4iu8v HQFcxZSjeCxGS/9xNGEbkBmfAjMIYDJcNBbLRTe9DlYr/AjaUehGDTB0ntIL9s9S kI3fPI4MJJZWkq0hzTWvSPvaER/V0ox9dQ0VTd0l8+qh79TGkT9a1Bcd6QFNOm6W axs/Ou0MQwlfQ4kbwduTbjdw1uVpT/qjiZ3Jp3pY51WQnRMQut2nnM1HrP6Z5M2u f2jhctBxQ82NIbQtvYceYTEJ6lU79qlGWdbMfBoq+yfuPm0Y0ePuUFiabGy028O0 V6WL+OA9cqfDTMnzdylHKwkO052wfOM= -----END CERTIFICATE-----Generated at Sun Oct 11 16:54:11 2026 by rpki-client