$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b654eb63-1bbb-47cc-8fc3-f45a9b2a69a7/3eb42a5a-0fa5-3564-a10d-1674d389315c.roa File: 3eb42a5a-0fa5-3564-a10d-1674d389315c.roa (raw, json) Hash identifier: LmXXhK3qyOgZKCs+MjN4HvbVoIDGfBUA2HUqtU5OHww= Subject key identifier: 7F:8B:F1:58:EA:7F:4C:13:3E:2B:80:DE:33:F2:7D:53:97:0A:9A:E5 Certificate issuer: /CN=b654eb63-1bbb-47cc-8fc3-f45a9b2a69a7 Certificate serial: 010D0C9F4328584F7BB2FE80A028D1FAE0FAAF61 Authority key identifier: 6C:59:DF:4F:1E:39:6F:89:97:D1:38:C1:0D:8B:81:BC:54:BC:EB:C3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b654eb63-1bbb-47cc-8fc3-f45a9b2a69a7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b654eb63-1bbb-47cc-8fc3-f45a9b2a69a7/3eb42a5a-0fa5-3564-a10d-1674d389315c.roa Signing time: Tue 13 Oct 2026 01:00:14 +0000 ROA not before: Tue 13 Oct 2026 01:00:14 +0000 ROA not after: Mon 11 Jan 2027 02:00:14 +0000 asID: 40343 IP address blocks: 23.168.64.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b654eb63-1bbb-47cc-8fc3-f45a9b2a69a7/b654eb63-1bbb-47cc-8fc3-f45a9b2a69a7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b654eb63-1bbb-47cc-8fc3-f45a9b2a69a7/b654eb63-1bbb-47cc-8fc3-f45a9b2a69a7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b654eb63-1bbb-47cc-8fc3-f45a9b2a69a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 16 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7b:b2:fe:80:a0:28:d1:fa:e0:fa:af:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b654eb63-1bbb-47cc-8fc3-f45a9b2a69a7 Validity Not Before: Oct 13 01:00:14 2026 GMT Not After : Jan 11 02:00:14 2027 GMT Subject: CN=55ca9bf5-33dc-4735-a619-4e92ad3f16d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:7e:87:37:d9:f3:bf:17:31:56:28:f6:39:50: ec:e6:c6:1a:04:f1:22:9b:a6:dc:74:93:b0:ca:cc: 05:01:3f:62:1f:c9:3f:ee:13:21:9d:77:cf:38:7f: dd:52:e2:6d:20:30:4c:a7:10:00:c7:37:05:3e:36: 5a:7c:9e:3d:29:44:13:80:9e:4b:ca:60:af:6f:77: 3e:e8:f5:f1:98:ba:86:a8:e8:2e:61:52:03:68:0f: d0:8f:61:49:43:d7:47:6c:6b:90:7e:72:90:79:11: 47:1c:05:59:cd:ec:2d:0b:db:af:3c:09:f1:5a:0f: d5:41:0c:b7:09:a7:54:f9:2d:55:b0:ac:31:35:a1: 50:26:f0:99:ce:18:aa:da:e9:27:b1:4e:0b:6c:a2: dc:e9:74:6d:27:cb:9d:a8:e2:1e:24:bf:65:7f:d5: d1:cb:04:62:4c:05:53:94:e8:92:b9:aa:7b:64:10: 24:c3:fa:97:20:b8:55:93:a0:6a:05:95:be:23:bf: 16:6c:96:b6:89:a2:2a:bc:8f:36:17:bd:35:1d:dd: 3c:f2:e4:07:ed:12:89:c3:6e:47:65:c2:49:f2:00: 7d:ea:3d:1a:3e:86:66:c2:7a:38:11:58:84:6d:e0: 02:26:f4:e4:3c:00:2d:cb:cc:67:af:f6:3b:9d:79: af:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:8B:F1:58:EA:7F:4C:13:3E:2B:80:DE:33:F2:7D:53:97:0A:9A:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b654eb63-1bbb-47cc-8fc3-f45a9b2a69a7/3eb42a5a-0fa5-3564-a10d-1674d389315c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b654eb63-1bbb-47cc-8fc3-f45a9b2a69a7/b654eb63-1bbb-47cc-8fc3-f45a9b2a69a7.crl X509v3 Authority Key Identifier: keyid:6C:59:DF:4F:1E:39:6F:89:97:D1:38:C1:0D:8B:81:BC:54:BC:EB:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b654eb63-1bbb-47cc-8fc3-f45a9b2a69a7.cer sbgp-ipAddrBlock: critical IPv4: 23.168.64.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:15:cb:3d:50:ab:4c:12:09:f5:d6:60:f5:78:59:49:61:66: 96:39:e9:ae:6c:4e:47:1a:d6:14:db:ff:c1:f9:17:fb:e3:55: c2:6d:e6:59:b6:5d:dc:17:6d:59:b6:f2:d6:15:40:e1:d7:7d: 62:f8:5c:04:7f:e3:67:8f:93:01:00:36:10:5d:39:1b:e7:cd: c3:6a:4d:d1:90:db:f8:cf:50:91:95:7f:f2:da:03:0d:86:00: f5:68:e1:2a:d5:f2:cd:66:32:f7:50:a9:49:5d:d0:e0:62:25: 89:1b:85:d5:2f:95:fb:17:22:85:65:ec:81:0e:1a:ae:6d:86: 8a:81:76:5d:9f:a5:96:66:10:00:2e:98:30:ca:e4:c1:21:dd: c4:f8:37:1c:af:ad:ab:03:ea:27:c1:9a:97:15:8d:f5:7f:c9: e7:69:7c:af:6d:30:4d:03:bc:e5:a7:25:13:b0:da:3c:cf:2e: 8c:83:85:9b:d3:94:a7:f3:bb:46:50:de:a8:d3:03:09:e9:09: 5f:f0:f5:d7:c7:e2:1c:09:e2:88:50:7e:44:db:ca:81:cb:1a: 92:01:9d:6a:a2:22:55:78:0c:e7:7e:3d:a3:39:2d:30:91:b1: 35:e8:18:f5:41:a2:58:1e:96:70:b5:be:bd:ae:e9:e3:98:48: 88:4a:ae:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE97sv6AoCjR+uD6r2EwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjY1NGViNjMtMWJiYi00N2NjLThmYzMtZjQ1YTliMmE2 OWE3MB4XDTI2MTAxMzAxMDAxNFoXDTI3MDExMTAyMDAxNFowLzEtMCsGA1UEAxMk NTVjYTliZjUtMzNkYy00NzM1LWE2MTktNGU5MmFkM2YxNmQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3H6HN9nzvxcxVij2OVDs5sYaBPEim6bcdJOw yswFAT9iH8k/7hMhnXfPOH/dUuJtIDBMpxAAxzcFPjZafJ49KUQTgJ5LymCvb3c+ 6PXxmLqGqOguYVIDaA/Qj2FJQ9dHbGuQfnKQeRFHHAVZzewtC9uvPAnxWg/VQQy3 CadU+S1VsKwxNaFQJvCZzhiq2uknsU4LbKLc6XRtJ8udqOIeJL9lf9XRywRiTAVT lOiSuap7ZBAkw/qXILhVk6BqBZW+I78WbJa2iaIqvI82F701Hd088uQH7RKJw25H ZcJJ8gB96j0aPoZmwno4EViEbeACJvTkPAAty8xnr/Y7nXmvOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH+L8Vjqf0wTPiuA3jPyfVOXCprlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9iNjU0 ZWI2My0xYmJiLTQ3Y2MtOGZjMy1mNDVhOWIyYTY5YTcvM2ViNDJhNWEtMGZhNS0z NTY0LWExMGQtMTY3NGQzODkzMTVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYjY1NGViNjMtMWJiYi00N2NjLThm YzMtZjQ1YTliMmE2OWE3L2I2NTRlYjYzLTFiYmItNDdjYy04ZmMzLWY0NWE5YjJh NjlhNy5jcmwwHwYDVR0jBBgwFoAUbFnfTx45b4mX0TjBDYuBvFS868MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9iNjU0ZWI2My0xYmJiLTQ3Y2MtOGZjMy1mNDVh OWIyYTY5YTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6hAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABsVyz1Qq0wSCfXWYPV4WUlhZpY56a5sTkca1hTb/8H5F/vjVcJt5lm2 XdwXbVm28tYVQOHXfWL4XAR/42ePkwEANhBdORvnzcNqTdGQ2/jPUJGVf/LaAw2G APVo4SrV8s1mMvdQqUld0OBiJYkbhdUvlfsXIoVl7IEOGq5thoqBdl2fpZZmEAAu mDDK5MEh3cT4NxyvrasD6ifBmpcVjfV/yedpfK9tME0DvOWnJROw2jzPLoyDhZvT lKfzu0ZQ3qjTAwnpCV/w9dfH4hwJ4ohQfkTbyoHLGpIBnWqiIlV4DOd+PaM5LTCR sTXoGPVBolgelnC1vr2u6eOYSIhKrkM= -----END CERTIFICATE-----Generated at Wed Oct 14 18:48:27 2026 by rpki-client