$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604a49f2-58d6-4709-bdaf-e7181b613801/23d825fa-abf4-3f5c-a138-dea5c5c747f7.roa File: 23d825fa-abf4-3f5c-a138-dea5c5c747f7.roa (raw, json) Hash identifier: KrWds2I1XbeNaVZZsIZIFMKEB3RC5B/0Tf1oEaldKfI= Subject key identifier: 9C:DB:BE:D0:07:AA:84:5D:5F:D3:FE:74:CE:12:CA:73:19:33:78:26 Certificate issuer: /CN=604a49f2-58d6-4709-bdaf-e7181b613801 Certificate serial: 010D0C9F4328584F498A587375228B1A6CA57280 Authority key identifier: 85:78:22:95:76:5B:FF:E6:81:20:3B:83:B0:3F:AC:B1:74:74:47:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604a49f2-58d6-4709-bdaf-e7181b613801.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604a49f2-58d6-4709-bdaf-e7181b613801/23d825fa-abf4-3f5c-a138-dea5c5c747f7.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 13886 IP address blocks: 65.75.205.0/24 maxlen: 24 65.75.206.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604a49f2-58d6-4709-bdaf-e7181b613801/604a49f2-58d6-4709-bdaf-e7181b613801.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604a49f2-58d6-4709-bdaf-e7181b613801/604a49f2-58d6-4709-bdaf-e7181b613801.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604a49f2-58d6-4709-bdaf-e7181b613801.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:8a:58:73:75:22:8b:1a:6c:a5:72:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=604a49f2-58d6-4709-bdaf-e7181b613801 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=8b2c600b-ca8f-45cd-a61a-ab7e719462dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:6e:de:2e:05:2b:13:d8:f6:52:43:3b:2c:c0: 54:bb:45:40:2b:88:51:53:b3:37:9b:f8:2e:98:f1: 89:97:9a:cc:92:02:30:3a:12:ec:06:f7:12:eb:b7: 7d:2a:e3:32:20:a6:9a:4b:ef:4c:bf:6b:6e:64:f8: 0c:ca:a0:a7:0b:21:c2:be:68:94:a3:39:91:72:89: 5d:2b:ac:be:64:5a:c5:e5:22:27:33:3e:83:ed:9f: c9:fb:a7:ec:fc:4c:43:ca:27:07:7d:99:81:36:b6: 3d:36:9e:cc:be:0d:90:f7:6f:09:2b:ef:4a:84:fc: c8:12:7e:d0:d4:75:ba:db:b2:b5:a1:57:9a:30:5c: 71:99:ed:94:7b:49:f9:13:e8:85:c4:40:02:1f:9d: 14:86:d6:7a:0d:5a:a8:21:7e:3c:a4:2f:9e:cf:18: 81:03:a0:49:66:28:45:a9:76:1c:6d:91:7b:2a:c6: a7:d9:b6:7f:f2:a3:ed:f0:11:2e:d5:f3:47:76:df: 7a:f7:8c:57:94:24:05:e7:93:a0:6f:98:33:06:b9: 69:70:8a:48:2e:50:15:09:df:16:94:07:28:79:7a: 42:b2:14:a8:15:65:af:4c:40:c0:de:ca:c8:8d:a9: 8d:b1:53:ad:50:9c:3c:20:33:4a:dc:fc:a7:7e:8b: d2:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:DB:BE:D0:07:AA:84:5D:5F:D3:FE:74:CE:12:CA:73:19:33:78:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604a49f2-58d6-4709-bdaf-e7181b613801/23d825fa-abf4-3f5c-a138-dea5c5c747f7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604a49f2-58d6-4709-bdaf-e7181b613801/604a49f2-58d6-4709-bdaf-e7181b613801.crl X509v3 Authority Key Identifier: keyid:85:78:22:95:76:5B:FF:E6:81:20:3B:83:B0:3F:AC:B1:74:74:47:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/604a49f2-58d6-4709-bdaf-e7181b613801.cer sbgp-ipAddrBlock: critical IPv4: 65.75.205.0-65.75.206.255 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:d1:63:17:a4:b5:e1:0c:89:8c:bb:09:c9:41:0e:2b:ba:b3: 02:c6:a3:75:41:0e:7c:76:09:16:15:93:f4:ad:ad:02:95:18: 98:bc:15:98:f6:ef:5b:8e:f6:c6:d8:4a:4e:d4:ad:6e:34:ae: a4:46:ea:aa:db:bf:8f:85:ef:52:55:b2:1d:3b:14:ae:1a:65: 52:c4:be:f9:df:61:fa:7a:4d:4c:75:85:35:a1:4c:b1:a3:42: 65:10:21:df:a2:12:77:7c:a9:0e:49:7a:70:a1:78:69:49:65: 12:e0:d1:1d:1e:c6:d4:d6:cd:06:c9:5d:84:28:20:9f:b7:ff: 72:c8:aa:44:4e:e2:92:64:55:33:46:0a:3a:2f:ec:63:32:99: 8c:03:48:c9:2d:04:8f:8a:97:6d:39:63:04:2f:01:43:3c:d9: 2a:02:7e:e7:87:1e:28:95:9f:33:00:31:07:61:77:4c:d1:85: 81:e5:39:f0:5f:83:ab:2f:15:57:ac:93:0c:4f:a1:aa:a7:de: a0:4c:06:58:0a:c3:8e:10:1d:18:28:bc:e8:27:44:1f:5a:7c: 5a:17:ce:bf:e6:93:ab:5c:75:bc:82:b2:6c:39:3d:6c:13:a5: d2:5c:2c:e6:7a:4c:19:de:f0:32:02:1a:c7:13:32:3d:dc:63: 89:4c:59:c2 -----BEGIN CERTIFICATE----- MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWE9JilhzdSKLGmylcoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjA0YTQ5ZjItNThkNi00NzA5LWJkYWYtZTcxODFiNjEz ODAxMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk OGIyYzYwMGItY2E4Zi00NWNkLWE2MWEtYWI3ZTcxOTQ2MmRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlG7eLgUrE9j2UkM7LMBUu0VAK4hRU7M3m/gu mPGJl5rMkgIwOhLsBvcS67d9KuMyIKaaS+9Mv2tuZPgMyqCnCyHCvmiUozmRcold K6y+ZFrF5SInMz6D7Z/J+6fs/ExDyicHfZmBNrY9Np7Mvg2Q928JK+9KhPzIEn7Q 1HW627K1oVeaMFxxme2Ue0n5E+iFxEACH50UhtZ6DVqoIX48pC+ezxiBA6BJZihF qXYcbZF7Ksan2bZ/8qPt8BEu1fNHdt9694xXlCQF55Ogb5gzBrlpcIpILlAVCd8W lAcoeXpCshSoFWWvTEDA3srIjamNsVOtUJw8IDNK3PynfovSewIDAQABo4IDXTCC A1kwHQYDVR0OBBYEFJzbvtAHqoRdX9P+dM4SynMZM3gmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82MDRh NDlmMi01OGQ2LTQ3MDktYmRhZi1lNzE4MWI2MTM4MDEvMjNkODI1ZmEtYWJmNC0z ZjVjLWExMzgtZGVhNWM1Yzc0N2Y3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNjA0YTQ5ZjItNThkNi00NzA5LWJk YWYtZTcxODFiNjEzODAxLzYwNGE0OWYyLTU4ZDYtNDcwOS1iZGFmLWU3MTgxYjYx MzgwMS5jcmwwHwYDVR0jBBgwFoAUhXgilXZb/+aBIDuDsD+ssXR0R3wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82MDRhNDlmMi01OGQ2LTQ3MDktYmRhZi1lNzE4 MWI2MTM4MDEuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBABBS80D BABBS84wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq hkiG9w0BAQsFAAOCAQEApNFjF6S14QyJjLsJyUEOK7qzAsajdUEOfHYJFhWT9K2t ApUYmLwVmPbvW472xthKTtStbjSupEbqqtu/j4XvUlWyHTsUrhplUsS++d9h+npN THWFNaFMsaNCZRAh36ISd3ypDkl6cKF4aUllEuDRHR7G1NbNBsldhCggn7f/csiq RE7ikmRVM0YKOi/sYzKZjANIyS0Ej4qXbTljBC8BQzzZKgJ+54ceKJWfMwAxB2F3 TNGFgeU58F+Dqy8VV6yTDE+hqqfeoEwGWArDjhAdGCi86CdEH1p8WhfOv+aTq1x1 vIKybDk9bBOl0lws5npMGd7wMgIaxxMyPdxjiUxZwg== -----END CERTIFICATE-----Generated at Fri Sep 25 18:50:05 2026 by rpki-client