$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cbf89b78-1e86-4629-abdd-682f04ffb165/8b4fea1c-8e70-3ac8-8442-ec4413e86e5a.roa File: 8b4fea1c-8e70-3ac8-8442-ec4413e86e5a.roa (raw, json) Hash identifier: a8pytcpYSdXLRBF83CUAwwP1XQUiZBOmGm45evmoCCo= Subject key identifier: BA:42:C1:B3:05:E1:F2:C9:B6:20:CA:C8:51:CC:E1:05:5D:FE:25:B5 Certificate issuer: /CN=cbf89b78-1e86-4629-abdd-682f04ffb165 Certificate serial: 010D0C9F4328584FAB28A34BE346068F714F73C0 Authority key identifier: 84:7F:A2:E1:13:B7:DC:E8:49:19:47:08:83:0D:CA:2B:DA:A1:6D:DF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cbf89b78-1e86-4629-abdd-682f04ffb165.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cbf89b78-1e86-4629-abdd-682f04ffb165/8b4fea1c-8e70-3ac8-8442-ec4413e86e5a.roa Signing time: Fri 30 Oct 2026 01:00:13 +0000 ROA not before: Fri 30 Oct 2026 01:00:13 +0000 ROA not after: Thu 28 Jan 2027 02:00:13 +0000 asID: 13737 IP address blocks: 23.172.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cbf89b78-1e86-4629-abdd-682f04ffb165/cbf89b78-1e86-4629-abdd-682f04ffb165.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cbf89b78-1e86-4629-abdd-682f04ffb165/cbf89b78-1e86-4629-abdd-682f04ffb165.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cbf89b78-1e86-4629-abdd-682f04ffb165.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Nov 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:ab:28:a3:4b:e3:46:06:8f:71:4f:73:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cbf89b78-1e86-4629-abdd-682f04ffb165 Validity Not Before: Oct 30 01:00:13 2026 GMT Not After : Jan 28 02:00:13 2027 GMT Subject: CN=4fc3940a-8793-4eae-ae1f-20bfc74c346c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:60:2a:8f:0a:de:a1:39:a4:66:c8:d1:df:00: f9:d0:c5:36:7c:73:14:9d:a3:5f:a1:c8:0f:c5:da: 66:18:f1:c8:f4:cf:10:c2:40:e4:a2:b8:b3:7f:0b: 96:25:72:dc:b2:6c:98:4c:6b:af:3f:09:17:15:85: f8:e5:ae:60:ed:ff:46:54:ed:8a:e8:ff:bd:84:dc: f0:78:c0:8b:d9:cc:01:a7:ad:11:e0:5b:f2:05:28: 94:ba:a4:e5:57:95:28:2d:cb:68:38:a4:f7:88:27: cc:df:d9:9f:36:56:50:8c:50:e8:52:36:5a:af:4e: b2:1a:08:92:c6:67:24:36:57:c8:ac:2e:04:20:59: 05:d1:95:2b:e3:fd:54:ea:04:fa:87:ef:82:a4:02: 73:33:00:fe:ed:fe:85:16:c9:6e:9c:b1:0b:3c:da: a5:84:71:4d:88:7b:e4:a3:97:7a:66:0c:ca:4e:70: c0:ed:09:a6:cc:72:06:2b:e7:cc:5a:12:c0:8a:9c: 2b:33:41:84:41:de:d0:ff:28:c4:4c:ae:a0:fb:10: 5c:a5:5d:7f:d5:42:16:6e:52:ce:a3:a0:05:04:cd: e1:3e:3f:61:70:81:4e:71:b6:ae:22:96:59:cb:1e: e5:37:93:70:65:cd:2b:49:71:56:a6:25:1c:63:21: d7:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:42:C1:B3:05:E1:F2:C9:B6:20:CA:C8:51:CC:E1:05:5D:FE:25:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cbf89b78-1e86-4629-abdd-682f04ffb165/8b4fea1c-8e70-3ac8-8442-ec4413e86e5a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cbf89b78-1e86-4629-abdd-682f04ffb165/cbf89b78-1e86-4629-abdd-682f04ffb165.crl X509v3 Authority Key Identifier: keyid:84:7F:A2:E1:13:B7:DC:E8:49:19:47:08:83:0D:CA:2B:DA:A1:6D:DF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cbf89b78-1e86-4629-abdd-682f04ffb165.cer sbgp-ipAddrBlock: critical IPv4: 23.172.168.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:bf:3a:23:dc:95:58:eb:cb:26:50:67:44:76:3f:4c:5d:ef: 45:2b:64:02:0a:7f:5f:7d:ef:94:56:d2:ab:7b:9d:07:83:06: 9b:15:65:4b:97:65:6e:68:10:2c:1b:79:96:3c:ae:d6:19:5d: 99:d4:e2:17:fc:15:3f:cf:d2:85:96:2b:8b:3d:88:c9:46:97: 0e:e2:ec:64:da:f2:23:67:d6:52:f4:53:77:85:94:e0:79:33: 8b:22:07:d0:f9:e8:32:68:07:d6:69:7c:7c:fb:52:68:d6:36: 35:67:49:eb:7e:ff:1d:82:63:3e:c6:bc:95:51:74:ed:86:00: 11:11:76:24:3d:8a:e1:72:8e:d1:89:9f:75:4a:31:17:32:73: 69:cd:59:35:df:39:22:d0:62:cb:95:b0:0a:e9:90:36:3c:d9: ab:95:1e:d4:d2:ba:ed:00:f1:f3:15:de:35:66:92:9c:0e:b3: d4:74:83:21:07:ce:e6:0e:50:97:d7:4c:af:df:41:4a:23:55: 78:38:dc:19:5e:e3:61:18:00:fa:28:dc:af:9e:01:47:27:76: ab:d3:ce:51:9f:e6:3f:bb:cf:71:16:a9:52:e8:81:32:47:39: 75:b6:80:8f:41:e4:f4:70:25:50:7d:4b:58:d7:1c:8d:de:12: 60:9a:70:0e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+rKKNL40YGj3FPc8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2JmODliNzgtMWU4Ni00NjI5LWFiZGQtNjgyZjA0ZmZi MTY1MB4XDTI2MTAzMDAxMDAxM1oXDTI3MDEyODAyMDAxM1owLzEtMCsGA1UEAxMk NGZjMzk0MGEtODc5My00ZWFlLWFlMWYtMjBiZmM3NGMzNDZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0mAqjwreoTmkZsjR3wD50MU2fHMUnaNfocgP xdpmGPHI9M8QwkDkorizfwuWJXLcsmyYTGuvPwkXFYX45a5g7f9GVO2K6P+9hNzw eMCL2cwBp60R4FvyBSiUuqTlV5UoLctoOKT3iCfM39mfNlZQjFDoUjZar06yGgiS xmckNlfIrC4EIFkF0ZUr4/1U6gT6h++CpAJzMwD+7f6FFslunLELPNqlhHFNiHvk o5d6ZgzKTnDA7QmmzHIGK+fMWhLAipwrM0GEQd7Q/yjETK6g+xBcpV1/1UIWblLO o6AFBM3hPj9hcIFOcbauIpZZyx7lN5NwZc0rSXFWpiUcYyHX0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLpCwbMF4fLJtiDKyFHM4QVd/iW1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9jYmY4 OWI3OC0xZTg2LTQ2MjktYWJkZC02ODJmMDRmZmIxNjUvOGI0ZmVhMWMtOGU3MC0z YWM4LTg0NDItZWM0NDEzZTg2ZTVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvY2JmODliNzgtMWU4Ni00NjI5LWFi ZGQtNjgyZjA0ZmZiMTY1L2NiZjg5Yjc4LTFlODYtNDYyOS1hYmRkLTY4MmYwNGZm YjE2NS5jcmwwHwYDVR0jBBgwFoAUhH+i4RO33OhJGUcIgw3KK9qhbd8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9jYmY4OWI3OC0xZTg2LTQ2MjktYWJkZC02ODJm MDRmZmIxNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6yoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACm/OiPclVjryyZQZ0R2P0xd70UrZAIKf19975RW0qt7nQeDBpsVZUuX ZW5oECwbeZY8rtYZXZnU4hf8FT/P0oWWK4s9iMlGlw7i7GTa8iNn1lL0U3eFlOB5 M4siB9D56DJoB9ZpfHz7UmjWNjVnSet+/x2CYz7GvJVRdO2GABERdiQ9iuFyjtGJ n3VKMRcyc2nNWTXfOSLQYsuVsArpkDY82auVHtTSuu0A8fMV3jVmkpwOs9R0gyEH zuYOUJfXTK/fQUojVXg43Ble42EYAPoo3K+eAUcndqvTzlGf5j+7z3EWqVLogTJH OXW2gI9B5PRwJVB9S1jXHI3eEmCacA4= -----END CERTIFICATE-----Generated at Thu Nov 5 07:34:15 2026 by rpki-client