$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dac5cea7-cd25-4a27-9b63-bd82366932b1/973479d0-5172-3d77-b14f-43290390a046.roa File: 973479d0-5172-3d77-b14f-43290390a046.roa (raw, json) Hash identifier: R0AFJJkK+a9cdDQPpeiwwiLbGXuezNHWFMGvlrcq+6Q= Subject key identifier: 39:1D:42:E6:A7:A1:F5:6A:C7:CB:7F:44:12:22:E0:2E:4C:F2:88:79 Certificate issuer: /CN=dac5cea7-cd25-4a27-9b63-bd82366932b1 Certificate serial: 010D0C9F4328584F0D6CD67C74E8DF7585906200 Authority key identifier: F8:90:52:1B:08:0F:56:22:0A:C1:68:0A:45:A1:58:77:CB:57:3E:5E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dac5cea7-cd25-4a27-9b63-bd82366932b1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dac5cea7-cd25-4a27-9b63-bd82366932b1/973479d0-5172-3d77-b14f-43290390a046.roa Signing time: Thu 03 Sep 2026 13:00:12 +0000 ROA not before: Thu 03 Sep 2026 13:00:12 +0000 ROA not after: Wed 02 Dec 2026 14:00:12 +0000 asID: 396502 IP address blocks: 23.172.64.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dac5cea7-cd25-4a27-9b63-bd82366932b1/dac5cea7-cd25-4a27-9b63-bd82366932b1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dac5cea7-cd25-4a27-9b63-bd82366932b1/dac5cea7-cd25-4a27-9b63-bd82366932b1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dac5cea7-cd25-4a27-9b63-bd82366932b1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0d:6c:d6:7c:74:e8:df:75:85:90:62:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dac5cea7-cd25-4a27-9b63-bd82366932b1 Validity Not Before: Sep 3 13:00:12 2026 GMT Not After : Dec 2 14:00:12 2026 GMT Subject: CN=118c2b69-4594-473d-bccb-5a01b3f82a79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:f5:66:cb:54:13:e0:3e:d5:74:47:ff:c6:a6: 92:86:48:eb:58:9a:1d:30:a0:26:89:c3:56:4f:ad: c5:de:c4:db:a3:1f:ad:89:3b:59:37:b2:6b:50:9a: 2b:8f:00:fc:96:d0:e3:29:8b:d7:8e:5e:0e:04:c4: 3d:79:e5:86:96:7e:a8:c5:c3:9c:49:de:68:b0:97: 4f:5d:94:8a:08:13:95:5e:4d:c3:b3:c3:5f:e3:8e: 0c:54:7b:73:07:51:21:fd:2f:02:0a:1b:c2:91:b9: 66:a5:4c:f0:78:00:41:57:70:79:78:0b:86:a2:15: cb:ae:d2:bf:1f:64:7d:35:5d:2b:53:92:e5:9f:29: 99:ab:9c:da:24:a5:c6:d6:ed:32:f8:2f:44:49:7c: 52:a1:11:98:da:da:5b:13:ab:9d:43:56:a6:57:99: 2d:17:dc:f4:98:19:f3:f7:3a:50:65:82:7d:a8:5d: 04:92:83:f8:52:e2:8a:cc:16:b8:e0:da:9d:0a:87: c8:7d:c5:0e:88:5c:26:80:af:eb:c1:3c:ee:fc:7e: 01:f6:35:c6:c9:ec:66:1d:2a:67:67:e7:aa:4d:b7: ee:38:1c:58:91:fe:b7:8b:15:8a:45:39:04:54:87: ff:a6:7a:a5:2e:8c:28:14:dd:3e:a6:56:a5:93:b5: 63:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:1D:42:E6:A7:A1:F5:6A:C7:CB:7F:44:12:22:E0:2E:4C:F2:88:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dac5cea7-cd25-4a27-9b63-bd82366932b1/973479d0-5172-3d77-b14f-43290390a046.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dac5cea7-cd25-4a27-9b63-bd82366932b1/dac5cea7-cd25-4a27-9b63-bd82366932b1.crl X509v3 Authority Key Identifier: keyid:F8:90:52:1B:08:0F:56:22:0A:C1:68:0A:45:A1:58:77:CB:57:3E:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/dac5cea7-cd25-4a27-9b63-bd82366932b1.cer sbgp-ipAddrBlock: critical IPv4: 23.172.64.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:ec:70:c9:8c:c5:5d:03:c1:57:58:bc:bd:27:92:7c:0f:ef: 55:99:74:8f:55:c1:88:bd:e5:81:0a:de:02:c7:01:f9:1e:61: 3e:43:52:5e:0a:2c:fe:d4:60:81:8a:fd:62:7c:40:9d:5a:28: 8d:14:2f:9f:c7:0c:bc:f1:07:fd:46:bc:95:66:fd:91:a7:5f: 6a:e4:c0:a8:d8:c3:59:07:12:cd:51:50:ad:93:99:c2:3d:f9: 81:ef:59:7c:69:b0:36:e8:5c:47:30:d7:12:4b:c2:f8:b6:c3: 78:01:63:7e:38:bd:a0:4c:b7:27:d4:76:95:9a:58:a1:2f:8a: 3e:94:e2:6e:61:ce:33:a8:ca:fa:36:ec:77:f2:55:92:49:8c: ed:71:b9:f2:e7:dc:67:11:8a:ca:2b:ca:4e:97:f6:49:6f:c3: c9:92:14:8e:50:00:06:d4:6a:cf:1d:23:27:f4:0c:5f:97:ac: 44:94:5a:2d:3c:f2:37:aa:05:ec:3a:a5:34:74:6f:59:e1:71: 52:20:65:b5:69:f0:c9:d3:c3:8a:f7:7d:72:58:da:88:b3:88: 88:56:1a:22:f6:9b:ea:23:1e:bb:f5:fb:2f:dc:29:5e:49:2d: e8:d5:4c:21:17:97:d2:93:a5:c2:60:50:6c:ba:a9:8d:0b:4e: 5f:74:f8:16 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8NbNZ8dOjfdYWQYgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGFjNWNlYTctY2QyNS00YTI3LTliNjMtYmQ4MjM2Njkz MmIxMB4XDTI2MDkwMzEzMDAxMloXDTI2MTIwMjE0MDAxMlowLzEtMCsGA1UEAxMk MTE4YzJiNjktNDU5NC00NzNkLWJjY2ItNWEwMWIzZjgyYTc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnvVmy1QT4D7VdEf/xqaShkjrWJodMKAmicNW T63F3sTbox+tiTtZN7JrUJorjwD8ltDjKYvXjl4OBMQ9eeWGln6oxcOcSd5osJdP XZSKCBOVXk3Ds8Nf444MVHtzB1Eh/S8CChvCkblmpUzweABBV3B5eAuGohXLrtK/ H2R9NV0rU5LlnymZq5zaJKXG1u0y+C9ESXxSoRGY2tpbE6udQ1amV5ktF9z0mBnz 9zpQZYJ9qF0EkoP4UuKKzBa44NqdCofIfcUOiFwmgK/rwTzu/H4B9jXGyexmHSpn Z+eqTbfuOBxYkf63ixWKRTkEVIf/pnqlLowoFN0+plalk7VjkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDkdQuanofVqx8t/RBIi4C5M8oh5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9kYWM1 Y2VhNy1jZDI1LTRhMjctOWI2My1iZDgyMzY2OTMyYjEvOTczNDc5ZDAtNTE3Mi0z ZDc3LWIxNGYtNDMyOTAzOTBhMDQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZGFjNWNlYTctY2QyNS00YTI3LTli NjMtYmQ4MjM2NjkzMmIxL2RhYzVjZWE3LWNkMjUtNGEyNy05YjYzLWJkODIzNjY5 MzJiMS5jcmwwHwYDVR0jBBgwFoAU+JBSGwgPViIKwWgKRaFYd8tXPl4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9kYWM1Y2VhNy1jZDI1LTRhMjctOWI2My1iZDgy MzY2OTMyYjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6xAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAATscMmMxV0DwVdYvL0nknwP71WZdI9VwYi95YEK3gLHAfkeYT5DUl4K LP7UYIGK/WJ8QJ1aKI0UL5/HDLzxB/1GvJVm/ZGnX2rkwKjYw1kHEs1RUK2TmcI9 +YHvWXxpsDboXEcw1xJLwvi2w3gBY344vaBMtyfUdpWaWKEvij6U4m5hzjOoyvo2 7HfyVZJJjO1xufLn3GcRisoryk6X9klvw8mSFI5QAAbUas8dIyf0DF+XrESUWi08 8jeqBew6pTR0b1nhcVIgZbVp8MnTw4r3fXJY2oiziIhWGiL2m+ojHrv1+y/cKV5J LejVTCEXl9KTpcJgUGy6qY0LTl90+BY= -----END CERTIFICATE-----Generated at Sun Oct 11 05:49:10 2026 by rpki-client