$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8765e137-e0cd-4574-8e57-7cf87cfec9de/afec4958-f90c-324d-8365-1b0c02b836a3.roa File: afec4958-f90c-324d-8365-1b0c02b836a3.roa (raw, json) Hash identifier: rgpudZnaRKu8w4eLPCqUq7TVEg2DLLKXdlRlclqCNmg= Subject key identifier: 94:E7:06:62:BF:A9:4F:35:E6:FA:76:81:D6:DE:CA:90:2C:7C:29:33 Certificate issuer: /CN=8765e137-e0cd-4574-8e57-7cf87cfec9de Certificate serial: 010D0C9F4328584F4975ADE8146BC1E478FCBA00 Authority key identifier: 01:12:D7:23:A4:71:90:CE:2A:E0:6E:19:7F:91:6C:84:0B:EB:E8:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8765e137-e0cd-4574-8e57-7cf87cfec9de.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8765e137-e0cd-4574-8e57-7cf87cfec9de/afec4958-f90c-324d-8365-1b0c02b836a3.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 14618 IP address blocks: 168.100.165.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8765e137-e0cd-4574-8e57-7cf87cfec9de/8765e137-e0cd-4574-8e57-7cf87cfec9de.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8765e137-e0cd-4574-8e57-7cf87cfec9de/8765e137-e0cd-4574-8e57-7cf87cfec9de.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8765e137-e0cd-4574-8e57-7cf87cfec9de.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:75:ad:e8:14:6b:c1:e4:78:fc:ba:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8765e137-e0cd-4574-8e57-7cf87cfec9de Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=db44ff27-389f-4ebe-8cc7-e2adcb70c955 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:5c:93:90:4f:f2:6d:61:db:02:ee:c3:7e:78: 47:42:8f:a5:bc:92:fe:16:23:47:ed:58:8b:e6:ef: 4e:d5:15:04:bc:5a:b9:f8:87:4a:6d:b4:6f:f5:05: 0e:2f:81:b9:59:71:7d:24:7e:d5:01:3a:62:cb:69: dd:63:a9:c8:b9:12:61:f8:81:42:36:cc:f9:f5:b5: 36:5d:26:e2:9c:ea:1e:78:a5:c1:62:48:a4:67:23: 03:46:6c:04:1b:03:99:8f:c4:94:19:dd:70:1b:04: 36:dc:93:71:75:ec:5d:63:77:2c:17:fb:79:98:2b: 88:23:6b:a0:99:e0:0a:62:d2:8b:c7:7c:71:07:52: be:05:fa:a9:ee:4f:88:26:31:26:f3:49:8b:3c:db: ba:bd:6f:d0:3c:0d:6e:51:1b:c6:02:c7:df:ef:7e: 66:56:8f:92:26:c6:c3:54:fa:f4:4e:17:93:3d:63: 0f:72:d4:99:81:8f:12:95:29:87:8a:77:e9:ba:2e: c5:d2:89:aa:ba:74:5f:98:d4:71:dd:99:3a:8e:b8: af:b2:41:03:4b:f1:5f:26:6a:a7:bd:35:dd:18:0a: ab:b1:1a:a0:83:2c:cc:2f:3e:64:29:1a:08:7b:a8: b0:51:39:1c:d3:f0:c1:9d:91:35:4a:00:fb:23:37: d5:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:E7:06:62:BF:A9:4F:35:E6:FA:76:81:D6:DE:CA:90:2C:7C:29:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8765e137-e0cd-4574-8e57-7cf87cfec9de/afec4958-f90c-324d-8365-1b0c02b836a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8765e137-e0cd-4574-8e57-7cf87cfec9de/8765e137-e0cd-4574-8e57-7cf87cfec9de.crl X509v3 Authority Key Identifier: keyid:01:12:D7:23:A4:71:90:CE:2A:E0:6E:19:7F:91:6C:84:0B:EB:E8:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8765e137-e0cd-4574-8e57-7cf87cfec9de.cer sbgp-ipAddrBlock: critical IPv4: 168.100.165.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:fe:23:72:d4:b8:d4:cd:83:56:9f:5b:46:73:29:16:c5:2b: 0e:4e:88:30:10:54:b4:3a:db:5b:c4:f1:bf:af:0a:0f:c4:22: ed:a4:4e:09:f0:41:a3:a1:8c:8f:99:5b:35:28:52:0a:43:84: 92:de:f7:58:37:4f:f7:cf:6f:7b:48:7f:7e:b6:57:fa:f8:c1: c3:f8:c7:e6:61:1b:33:41:44:93:b0:ec:1d:2a:07:03:42:e9: 4e:84:89:93:ba:c0:93:08:aa:c4:a6:17:27:eb:87:67:fc:b9: 8d:1c:ab:08:2d:35:be:66:28:87:57:f0:b7:f6:77:e6:a2:e5: 04:63:5f:94:1b:19:38:32:24:53:2f:f7:6f:f5:75:cd:b5:49: 30:00:d5:6b:64:2b:5e:81:82:b1:7b:c9:1c:93:c1:ed:dc:3c: 2e:80:29:a1:be:25:8e:23:9b:83:e0:3e:62:86:20:52:bb:93: 50:37:20:5e:d4:47:2a:e7:73:40:b4:2b:3d:4c:cb:54:95:bc: 9c:97:b5:53:d5:c4:68:23:64:20:06:68:a9:2b:f9:1f:b8:5f: 20:70:64:45:dc:46:b7:ce:64:07:c7:67:b5:07:57:81:99:c6: 6e:0c:64:de:87:35:f7:82:9e:cd:fb:da:bb:a7:68:1d:83:eb: a2:bd:73:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jda3oFGvB5Hj8ugAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODc2NWUxMzctZTBjZC00NTc0LThlNTctN2NmODdjZmVj OWRlMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZGI0NGZmMjctMzg5Zi00ZWJlLThjYzctZTJhZGNiNzBjOTU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgFyTkE/ybWHbAu7DfnhHQo+lvJL+FiNH7ViL 5u9O1RUEvFq5+IdKbbRv9QUOL4G5WXF9JH7VATpiy2ndY6nIuRJh+IFCNsz59bU2 XSbinOoeeKXBYkikZyMDRmwEGwOZj8SUGd1wGwQ23JNxdexdY3csF/t5mCuII2ug meAKYtKLx3xxB1K+Bfqp7k+IJjEm80mLPNu6vW/QPA1uURvGAsff735mVo+SJsbD VPr0TheTPWMPctSZgY8SlSmHinfpui7F0omqunRfmNRx3Zk6jrivskEDS/FfJmqn vTXdGAqrsRqggyzMLz5kKRoIe6iwUTkc0/DBnZE1SgD7IzfVrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJTnBmK/qU815vp2gdbeypAsfCkzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NzY1 ZTEzNy1lMGNkLTQ1NzQtOGU1Ny03Y2Y4N2NmZWM5ZGUvYWZlYzQ5NTgtZjkwYy0z MjRkLTgzNjUtMWIwYzAyYjgzNmEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvODc2NWUxMzctZTBjZC00NTc0LThl NTctN2NmODdjZmVjOWRlLzg3NjVlMTM3LWUwY2QtNDU3NC04ZTU3LTdjZjg3Y2Zl YzlkZS5jcmwwHwYDVR0jBBgwFoAUARLXI6RxkM4q4G4Zf5FshAvr6M8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84NzY1ZTEzNy1lMGNkLTQ1NzQtOGU1Ny03Y2Y4 N2NmZWM5ZGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqGSlMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJz+I3LUuNTNg1afW0ZzKRbFKw5OiDAQVLQ621vE8b+vCg/EIu2kTgnw QaOhjI+ZWzUoUgpDhJLe91g3T/fPb3tIf362V/r4wcP4x+ZhGzNBRJOw7B0qBwNC 6U6EiZO6wJMIqsSmFyfrh2f8uY0cqwgtNb5mKIdX8Lf2d+ai5QRjX5QbGTgyJFMv 92/1dc21STAA1WtkK16BgrF7yRyTwe3cPC6AKaG+JY4jm4PgPmKGIFK7k1A3IF7U Ryrnc0C0Kz1My1SVvJyXtVPVxGgjZCAGaKkr+R+4XyBwZEXcRrfOZAfHZ7UHV4GZ xm4MZN6HNfeCns372runaB2D66K9c/s= -----END CERTIFICATE-----Generated at Sun Sep 27 00:18:15 2026 by rpki-client