$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/ea607b3b-0978-3010-b0fd-d677329f1af0.roa File: ea607b3b-0978-3010-b0fd-d677329f1af0.roa (raw, json) Hash identifier: uk/GVcnfiPcSCZqcl3+PH2dXHhfV15nI+1I5IBKkmLw= Subject key identifier: 4B:79:02:B6:A7:B5:DC:11:4B:82:28:98:41:1F:F6:9E:CF:2C:F8:90 Certificate issuer: /CN=b2959336-6afe-411c-b979-dac0a693f8c4 Certificate serial: 010D0C9F4328584F497696B6B060AA5E2D215500 Authority key identifier: 1C:52:30:32:FE:EB:5B:92:6D:5A:2E:35:E5:7C:80:3B:15:E0:32:73 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/ea607b3b-0978-3010-b0fd-d677329f1af0.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 11870 IP address blocks: 167.23.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/b2959336-6afe-411c-b979-dac0a693f8c4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/b2959336-6afe-411c-b979-dac0a693f8c4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 Oct 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:76:96:b6:b0:60:aa:5e:2d:21:55:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2959336-6afe-411c-b979-dac0a693f8c4 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=d03d4aba-9a08-4a39-bbda-9262f4ba3c40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:71:fd:44:1c:ae:49:72:4d:45:0a:52:f8:3d: 72:06:94:f4:22:70:c0:17:96:1a:78:13:d9:a1:3c: c6:a7:09:f9:27:dc:2c:79:b8:95:83:06:30:1b:c8: ce:e3:55:1f:89:49:4a:d9:17:4a:b2:54:58:f0:9b: 72:83:c8:0b:b1:a9:66:ef:10:f7:44:e7:37:95:e5: f9:84:09:4e:e6:1b:09:6a:1f:9b:a8:bb:94:fc:63: 39:3c:31:b2:49:b8:c8:94:0f:e1:bf:00:27:4f:1c: 14:5d:72:3a:d4:0d:b9:2f:d5:90:d7:86:c7:ef:4b: 8b:c0:20:8e:bf:21:06:8f:05:7b:81:05:58:c8:a4: e4:28:89:7f:e6:ce:47:e1:28:c4:fb:a6:d4:3a:88: 91:a1:aa:8b:e1:06:ee:3b:e2:a5:46:62:54:ac:a8: 1d:30:b1:8d:c1:af:41:e2:a5:6f:8a:ba:42:1b:34: bc:cd:a9:be:82:e7:ed:e6:81:9f:c0:e9:33:02:13: d8:44:73:1c:57:8d:c9:ec:c3:cb:2a:d1:b8:b1:d9: 7a:fe:c5:fc:eb:e2:ba:ce:ab:45:95:a5:11:a2:60: e0:8b:19:65:8a:30:71:e2:c9:ca:a2:ca:bb:4e:86: 49:22:18:0e:4a:7c:eb:2b:7d:81:ca:07:dd:07:37: 5d:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:79:02:B6:A7:B5:DC:11:4B:82:28:98:41:1F:F6:9E:CF:2C:F8:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/ea607b3b-0978-3010-b0fd-d677329f1af0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/b2959336-6afe-411c-b979-dac0a693f8c4.crl X509v3 Authority Key Identifier: keyid:1C:52:30:32:FE:EB:5B:92:6D:5A:2E:35:E5:7C:80:3B:15:E0:32:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4.cer sbgp-ipAddrBlock: critical IPv4: 167.23.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:75:07:41:cd:bd:b4:25:f3:30:34:61:80:b9:7a:10:c1:ad: 33:bb:79:da:c7:d3:d2:7e:32:a7:9b:34:e2:f3:ab:68:08:f6: 21:1c:49:20:83:63:ea:1e:8e:98:2d:2e:4e:1e:59:0f:5e:e0: 49:c8:6a:89:46:ba:72:79:80:b7:e9:93:83:0a:14:e7:1f:d8: b8:54:29:b5:85:5b:fb:30:6b:ad:f9:f3:c9:52:63:92:8e:56: b1:8b:db:3e:92:89:9a:3e:01:9d:56:75:93:77:fa:3b:7a:cc: 61:94:45:3a:85:50:2b:6d:b7:d2:69:d4:38:db:9a:de:51:41: 46:0c:f8:b9:dd:00:7b:87:7e:51:08:52:77:74:58:d8:f7:6c: 36:29:e7:57:93:e4:d2:da:98:99:08:7b:32:b6:83:f3:a0:f2: 80:58:51:1f:e4:6c:e7:d4:a6:97:ac:0a:67:8b:38:69:a5:a2: e7:d8:01:5c:de:28:7b:2b:37:f9:32:7d:4d:a9:51:72:ef:92: 43:7e:72:48:50:5e:07:96:c2:3c:9f:86:89:a1:39:d6:20:a3: 82:0e:2c:ed:1f:f4:f3:22:a4:00:d0:ae:25:87:bc:04:22:fd: 21:d1:3e:7a:cd:c8:a1:47:e8:b2:cc:13:e3:55:a3:0d:d5:e2: 1b:2b:30:7a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jdpa2sGCqXi0hVQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjI5NTkzMzYtNmFmZS00MTFjLWI5NzktZGFjMGE2OTNm OGM0MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZDAzZDRhYmEtOWEwOC00YTM5LWJiZGEtOTI2MmY0YmEzYzQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgnH9RByuSXJNRQpS+D1yBpT0InDAF5YaeBPZ oTzGpwn5J9wsebiVgwYwG8jO41UfiUlK2RdKslRY8Jtyg8gLsalm7xD3ROc3leX5 hAlO5hsJah+bqLuU/GM5PDGySbjIlA/hvwAnTxwUXXI61A25L9WQ14bH70uLwCCO vyEGjwV7gQVYyKTkKIl/5s5H4SjE+6bUOoiRoaqL4QbuO+KlRmJUrKgdMLGNwa9B 4qVvirpCGzS8zam+guft5oGfwOkzAhPYRHMcV43J7MPLKtG4sdl6/sX86+K6zqtF laURomDgixllijBx4snKosq7ToZJIhgOSnzrK32BygfdBzddSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEt5ArantdwRS4IomEEf9p7PLPiQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iMjk1 OTMzNi02YWZlLTQxMWMtYjk3OS1kYWMwYTY5M2Y4YzQvZWE2MDdiM2ItMDk3OC0z MDEwLWIwZmQtZDY3NzMyOWYxYWYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYjI5NTkzMzYtNmFmZS00MTFjLWI5 NzktZGFjMGE2OTNmOGM0L2IyOTU5MzM2LTZhZmUtNDExYy1iOTc5LWRhYzBhNjkz ZjhjNC5jcmwwHwYDVR0jBBgwFoAUHFIwMv7rW5JtWi415XyAOxXgMnMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9iMjk1OTMzNi02YWZlLTQxMWMtYjk3OS1kYWMw YTY5M2Y4YzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApxcUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHV1B0HNvbQl8zA0YYC5ehDBrTO7edrH09J+MqebNOLzq2gI9iEcSSCD Y+oejpgtLk4eWQ9e4EnIaolGunJ5gLfpk4MKFOcf2LhUKbWFW/swa63588lSY5KO VrGL2z6SiZo+AZ1WdZN3+jt6zGGURTqFUCttt9Jp1Djbmt5RQUYM+LndAHuHflEI Und0WNj3bDYp51eT5NLamJkIezK2g/Og8oBYUR/kbOfUppesCmeLOGmloufYAVze KHsrN/kyfU2pUXLvkkN+ckhQXgeWwjyfhomhOdYgo4IOLO0f9PMipADQriWHvAQi /SHRPnrNyKFH6LLME+NVow3V4hsrMHo= -----END CERTIFICATE-----Generated at Thu Oct 8 15:53:56 2026 by rpki-client