$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/be69e7ae-469d-400e-8f2e-4ebfc1be0098/853d2761-430f-3406-8353-e291e87c8b19.roa File: 853d2761-430f-3406-8353-e291e87c8b19.roa (raw, json) Hash identifier: Nq3PC63ScXwC4ZlparkiDMWYZF9fZCl5spc6JAL82y0= Subject key identifier: 76:42:77:3F:05:90:AF:50:0C:68:CD:C8:F6:9A:FC:F3:0B:DB:D6:01 Certificate issuer: /CN=be69e7ae-469d-400e-8f2e-4ebfc1be0098 Certificate serial: 010D0C9F4328584F63F8230001861D774110C480 Authority key identifier: 10:44:A2:7F:5D:CB:7B:01:1A:9B:6D:EB:6D:47:3E:9F:B6:51:A5:84 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/be69e7ae-469d-400e-8f2e-4ebfc1be0098.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/be69e7ae-469d-400e-8f2e-4ebfc1be0098/853d2761-430f-3406-8353-e291e87c8b19.roa Signing time: Sun 04 Oct 2026 13:00:13 +0000 ROA not before: Sun 04 Oct 2026 13:00:13 +0000 ROA not after: Sat 02 Jan 2027 14:00:13 +0000 asID: 399935 IP address blocks: 23.168.216.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/be69e7ae-469d-400e-8f2e-4ebfc1be0098/be69e7ae-469d-400e-8f2e-4ebfc1be0098.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/be69e7ae-469d-400e-8f2e-4ebfc1be0098/be69e7ae-469d-400e-8f2e-4ebfc1be0098.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/be69e7ae-469d-400e-8f2e-4ebfc1be0098.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:63:f8:23:00:01:86:1d:77:41:10:c4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=be69e7ae-469d-400e-8f2e-4ebfc1be0098 Validity Not Before: Oct 4 13:00:13 2026 GMT Not After : Jan 2 14:00:13 2027 GMT Subject: CN=468a0ee1-5403-4fca-90d7-5f18c830461a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:c7:0a:60:b8:5e:0e:37:60:23:46:d2:95:b8: 3e:d9:f0:db:21:79:93:e3:7d:4c:7c:48:55:11:2b: 16:f9:79:0e:f5:73:50:90:b8:b0:7b:73:24:14:47: 0f:43:fb:ca:c5:e8:91:4e:d8:f0:44:91:cb:13:d8: 97:8d:46:a3:c9:06:b1:73:be:68:60:a0:a4:23:6d: bd:23:90:cc:60:83:f0:42:70:e3:34:ba:78:c9:a9: 97:db:bd:01:11:bb:fe:ea:70:b3:28:d5:3d:e2:ba: d0:54:24:ad:14:23:ad:0d:5f:7a:59:c9:be:ed:97: a5:6c:b7:8b:82:36:a5:7f:6d:06:02:eb:47:35:4e: 1f:e9:c3:9d:a2:36:56:2b:e0:19:c4:ad:47:38:37: b9:4d:82:16:2c:48:98:17:fa:4a:41:ad:e5:94:8d: 0b:f4:62:8a:78:30:9b:27:26:ed:a1:33:91:7a:62: 4c:e9:cf:c9:1c:05:e2:e2:d5:a5:01:00:69:d3:df: 28:19:5e:97:04:72:10:93:d9:69:82:0e:7b:2c:e7: 6b:7d:05:63:9e:86:d0:5c:e4:64:bc:76:3a:a9:55: f6:53:65:ab:28:3a:f1:5a:82:0d:f4:2f:f8:5f:70: ea:1e:87:25:b4:45:f8:a0:8d:e3:b4:b2:2c:7d:25: fe:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:42:77:3F:05:90:AF:50:0C:68:CD:C8:F6:9A:FC:F3:0B:DB:D6:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/be69e7ae-469d-400e-8f2e-4ebfc1be0098/853d2761-430f-3406-8353-e291e87c8b19.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/be69e7ae-469d-400e-8f2e-4ebfc1be0098/be69e7ae-469d-400e-8f2e-4ebfc1be0098.crl X509v3 Authority Key Identifier: keyid:10:44:A2:7F:5D:CB:7B:01:1A:9B:6D:EB:6D:47:3E:9F:B6:51:A5:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/be69e7ae-469d-400e-8f2e-4ebfc1be0098.cer sbgp-ipAddrBlock: critical IPv4: 23.168.216.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:2f:ad:a3:3e:b6:56:d3:ed:28:4d:d6:25:71:79:f9:fb:15: 17:3b:14:5b:09:df:9b:97:1d:41:cb:6f:8f:44:a4:26:55:0c: 9e:bc:1b:11:73:d6:25:13:65:69:7f:14:49:28:28:b8:3a:40: b8:aa:41:f1:b4:fd:d7:cd:2c:90:27:1c:08:79:87:9e:c5:32: 60:2b:96:b5:a9:21:7a:f4:12:12:08:64:3e:14:f5:ca:72:f6: 12:31:65:ff:92:6e:f4:6d:3c:dc:38:2d:7b:d1:6f:a7:ad:ea: fd:c8:81:ea:8e:06:92:78:0f:29:fa:0d:b2:cd:97:90:a2:54: 25:d8:46:5c:b3:43:6f:2e:b5:03:22:99:5f:58:05:51:ae:55: ba:4e:62:b0:23:e5:97:b4:70:cd:99:23:92:c1:dd:16:59:42: 55:b0:1d:94:25:b4:2e:e6:8d:f0:bc:e8:ff:6d:64:ad:84:b9: 06:60:b5:58:a5:bc:44:99:e7:10:be:03:45:30:a3:69:0b:69: 5a:f4:1b:d4:8b:9f:3e:f1:2a:7e:b0:7c:46:40:bf:9a:47:ca: 7c:f1:2d:d3:ad:ab:13:67:3a:94:5b:a9:b1:6a:e8:16:fa:74: 5a:52:18:ee:a9:dc:c7:cd:72:7d:04:69:7f:bf:72:6e:60:2f: 33:9e:3b:eb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9j+CMAAYYdd0EQxIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmU2OWU3YWUtNDY5ZC00MDBlLThmMmUtNGViZmMxYmUw MDk4MB4XDTI2MTAwNDEzMDAxM1oXDTI3MDEwMjE0MDAxM1owLzEtMCsGA1UEAxMk NDY4YTBlZTEtNTQwMy00ZmNhLTkwZDctNWYxOGM4MzA0NjFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzccKYLheDjdgI0bSlbg+2fDbIXmT431MfEhV ESsW+XkO9XNQkLiwe3MkFEcPQ/vKxeiRTtjwRJHLE9iXjUajyQaxc75oYKCkI229 I5DMYIPwQnDjNLp4yamX270BEbv+6nCzKNU94rrQVCStFCOtDV96Wcm+7ZelbLeL gjalf20GAutHNU4f6cOdojZWK+AZxK1HODe5TYIWLEiYF/pKQa3llI0L9GKKeDCb JybtoTORemJM6c/JHAXi4tWlAQBp098oGV6XBHIQk9lpgg57LOdrfQVjnobQXORk vHY6qVX2U2WrKDrxWoIN9C/4X3DqHocltEX4oI3jtLIsfSX+fQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHZCdz8FkK9QDGjNyPaa/PML29YBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9iZTY5 ZTdhZS00NjlkLTQwMGUtOGYyZS00ZWJmYzFiZTAwOTgvODUzZDI3NjEtNDMwZi0z NDA2LTgzNTMtZTI5MWU4N2M4YjE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYmU2OWU3YWUtNDY5ZC00MDBlLThm MmUtNGViZmMxYmUwMDk4L2JlNjllN2FlLTQ2OWQtNDAwZS04ZjJlLTRlYmZjMWJl MDA5OC5jcmwwHwYDVR0jBBgwFoAUEESif13LewEam23rbUc+n7ZRpYQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9iZTY5ZTdhZS00NjlkLTQwMGUtOGYyZS00ZWJm YzFiZTAwOTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6jYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFUvraM+tlbT7ShN1iVxefn7FRc7FFsJ35uXHUHLb49EpCZVDJ68GxFz 1iUTZWl/FEkoKLg6QLiqQfG0/dfNLJAnHAh5h57FMmArlrWpIXr0EhIIZD4U9cpy 9hIxZf+SbvRtPNw4LXvRb6et6v3IgeqOBpJ4Dyn6DbLNl5CiVCXYRlyzQ28utQMi mV9YBVGuVbpOYrAj5Ze0cM2ZI5LB3RZZQlWwHZQltC7mjfC86P9tZK2EuQZgtVil vESZ5xC+A0Uwo2kLaVr0G9SLnz7xKn6wfEZAv5pHynzxLdOtqxNnOpRbqbFq6Bb6 dFpSGO6p3MfNcn0EaX+/cm5gLzOeO+s= -----END CERTIFICATE-----Generated at Tue Oct 13 00:55:33 2026 by rpki-client