$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ba6485f1-e40b-4764-bddf-7af6c9e42f13/d6aade65-68bc-374b-9b32-f20fa407e06f.roa File: d6aade65-68bc-374b-9b32-f20fa407e06f.roa (raw, json) Hash identifier: DpRnbdmEGzkH9goESF0aDbpL1yiiCfBFmz8Y2FS576Y= Subject key identifier: 15:4A:92:76:D4:87:BF:C7:B7:87:D5:0C:79:6F:D8:37:84:74:E6:64 Certificate issuer: /CN=ba6485f1-e40b-4764-bddf-7af6c9e42f13 Certificate serial: 010D0C9F4328584F66F72594965AED189DF2D1CA Authority key identifier: DE:E7:E6:AD:A5:37:58:29:4C:C4:80:FB:B7:81:88:1D:CE:4D:6C:4A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ba6485f1-e40b-4764-bddf-7af6c9e42f13.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ba6485f1-e40b-4764-bddf-7af6c9e42f13/d6aade65-68bc-374b-9b32-f20fa407e06f.roa Signing time: Mon 05 Oct 2026 14:45:52 +0000 ROA not before: Mon 05 Oct 2026 14:45:52 +0000 ROA not after: Sun 03 Jan 2027 15:45:52 +0000 asID: 401144 IP address blocks: 23.165.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ba6485f1-e40b-4764-bddf-7af6c9e42f13/ba6485f1-e40b-4764-bddf-7af6c9e42f13.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ba6485f1-e40b-4764-bddf-7af6c9e42f13/ba6485f1-e40b-4764-bddf-7af6c9e42f13.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ba6485f1-e40b-4764-bddf-7af6c9e42f13.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:66:f7:25:94:96:5a:ed:18:9d:f2:d1:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba6485f1-e40b-4764-bddf-7af6c9e42f13 Validity Not Before: Oct 5 14:45:52 2026 GMT Not After : Jan 3 15:45:52 2027 GMT Subject: CN=2fd0b3a0-95f5-4b5f-a2aa-c1ce32701848 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:ca:f6:be:9e:db:1e:7e:9e:34:a6:98:66:66: 2e:47:db:b6:93:30:80:ec:70:24:b1:8c:16:f9:1f: f6:91:08:18:58:37:6c:56:13:13:9d:28:bc:0f:08: 61:b4:9a:33:58:30:de:c5:d7:1d:43:d6:32:d0:68: 1f:0f:7a:71:09:fb:fd:0f:dc:d5:cf:1c:ca:37:e6: 0a:cb:20:ba:1a:31:54:ca:57:20:2a:5b:83:0c:58: 72:dc:e4:bf:a8:ec:a2:75:7c:0a:dc:97:fe:94:fd: b5:61:b6:b1:df:fa:34:cc:8c:ff:5a:f4:e1:65:02: 3d:71:28:c2:25:e9:d7:bb:18:74:31:7d:23:52:64: c2:02:1c:54:f5:2f:c6:c9:ce:43:1e:c6:fe:c8:d2: c7:c5:e4:23:87:78:ea:45:c6:17:e1:c6:af:c9:c2: 73:8d:90:02:ec:35:72:fc:6e:83:a3:08:0e:de:eb: 14:44:14:cf:8a:10:d9:bc:62:59:30:14:4b:fd:79: be:b2:c3:88:58:15:dd:b4:b9:eb:b5:fb:bf:3e:7c: 5a:70:ee:8f:e8:78:ff:85:01:cb:5f:11:03:1e:46: b1:ad:4c:09:c2:7b:a5:9e:3d:e7:07:d1:d9:65:98: 68:f2:d6:97:17:5f:7b:06:24:6b:12:76:b6:c7:10: ba:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:4A:92:76:D4:87:BF:C7:B7:87:D5:0C:79:6F:D8:37:84:74:E6:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ba6485f1-e40b-4764-bddf-7af6c9e42f13/d6aade65-68bc-374b-9b32-f20fa407e06f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ba6485f1-e40b-4764-bddf-7af6c9e42f13/ba6485f1-e40b-4764-bddf-7af6c9e42f13.crl X509v3 Authority Key Identifier: keyid:DE:E7:E6:AD:A5:37:58:29:4C:C4:80:FB:B7:81:88:1D:CE:4D:6C:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/ba6485f1-e40b-4764-bddf-7af6c9e42f13.cer sbgp-ipAddrBlock: critical IPv4: 23.165.68.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:d1:22:91:0d:d1:f2:95:a6:89:91:12:1b:0c:5b:f4:81:34: 1a:47:bf:0c:8c:8d:31:75:b6:ba:34:94:42:6f:fd:3d:f2:e8: 47:7c:df:72:48:f9:6d:bf:d2:03:03:dc:44:1b:09:43:3f:61: e0:cf:3f:28:db:ca:55:ec:db:17:38:13:95:a0:6d:d1:1f:69: c4:fe:e6:36:cb:21:4d:3e:aa:fd:d9:5f:37:61:45:f9:56:ed: 69:43:e5:7c:52:61:71:99:a9:f8:66:eb:ea:76:79:38:66:33: b9:18:8c:39:bf:80:71:13:f8:6f:75:7a:07:8d:88:dc:52:20: 4f:77:7a:08:83:43:2f:16:6c:ad:2a:ae:29:9a:e0:c8:1f:af: a4:b1:bd:c3:0a:01:a5:23:11:31:5e:70:d0:ba:64:56:29:78: 1a:4a:7f:b3:13:0b:88:5c:9c:6f:8a:9d:68:56:28:97:cf:12: 19:06:c5:2b:50:8b:ba:e6:81:cd:2a:b0:5d:b7:2d:ee:99:b8: b0:6e:0f:03:eb:c7:09:8d:f2:b0:67:ed:81:89:7a:47:54:00: 52:0a:5e:e7:97:68:69:1e:5d:49:68:53:77:37:a5:aa:39:63: 37:9a:60:41:62:e8:e6:1e:fe:69:77:0e:63:8e:9b:6c:8b:48: 3d:05:35:6b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9m9yWUllrtGJ3y0cowDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmE2NDg1ZjEtZTQwYi00NzY0LWJkZGYtN2FmNmM5ZTQy ZjEzMB4XDTI2MTAwNTE0NDU1MloXDTI3MDEwMzE1NDU1MlowLzEtMCsGA1UEAxMk MmZkMGIzYTAtOTVmNS00YjVmLWEyYWEtYzFjZTMyNzAxODQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlcr2vp7bHn6eNKaYZmYuR9u2kzCA7HAksYwW +R/2kQgYWDdsVhMTnSi8DwhhtJozWDDexdcdQ9Yy0GgfD3pxCfv9D9zVzxzKN+YK yyC6GjFUylcgKluDDFhy3OS/qOyidXwK3Jf+lP21Ybax3/o0zIz/WvThZQI9cSjC JenXuxh0MX0jUmTCAhxU9S/Gyc5DHsb+yNLHxeQjh3jqRcYX4cavycJzjZAC7DVy /G6DowgO3usURBTPihDZvGJZMBRL/Xm+ssOIWBXdtLnrtfu/PnxacO6P6Hj/hQHL XxEDHkaxrUwJwnulnj3nB9HZZZho8taXF197BiRrEna2xxC6SwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBVKknbUh7/Ht4fVDHlv2DeEdOZkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9iYTY0 ODVmMS1lNDBiLTQ3NjQtYmRkZi03YWY2YzllNDJmMTMvZDZhYWRlNjUtNjhiYy0z NzRiLTliMzItZjIwZmE0MDdlMDZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvYmE2NDg1ZjEtZTQwYi00NzY0LWJk ZGYtN2FmNmM5ZTQyZjEzL2JhNjQ4NWYxLWU0MGItNDc2NC1iZGRmLTdhZjZjOWU0 MmYxMy5jcmwwHwYDVR0jBBgwFoAU3ufmraU3WClMxID7t4GIHc5NbEowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS9iYTY0ODVmMS1lNDBiLTQ3NjQtYmRkZi03YWY2 YzllNDJmMTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6VEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE3RIpEN0fKVpomREhsMW/SBNBpHvwyMjTF1tro0lEJv/T3y6Ed833JI +W2/0gMD3EQbCUM/YeDPPyjbylXs2xc4E5WgbdEfacT+5jbLIU0+qv3ZXzdhRflW 7WlD5XxSYXGZqfhm6+p2eThmM7kYjDm/gHET+G91egeNiNxSIE93egiDQy8WbK0q rima4Mgfr6SxvcMKAaUjETFecNC6ZFYpeBpKf7MTC4hcnG+KnWhWKJfPEhkGxStQ i7rmgc0qsF23Le6ZuLBuDwPrxwmN8rBn7YGJekdUAFIKXueXaGkeXUloU3c3pao5 YzeaYEFi6OYe/ml3DmOOm2yLSD0FNWs= -----END CERTIFICATE-----Generated at Sun Nov 15 21:46:17 2026 by rpki-client