$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/10c8bda0-3c91-4c6f-b928-28b77211b8d1/796457a9-5a46-3973-a18c-008402e30cc8.roa File: 796457a9-5a46-3973-a18c-008402e30cc8.roa (raw, json) Hash identifier: dtUPGmZCIhZmcj+ip91+08dkXQ4JjkTkMLz843khnvo= Subject key identifier: 1B:34:70:29:00:9C:33:88:5E:27:58:72:17:37:56:0B:B6:81:CA:37 Certificate issuer: /CN=10c8bda0-3c91-4c6f-b928-28b77211b8d1 Certificate serial: 010D0C9F4328584F5E62C4C4D06A1ECA035E00A0 Authority key identifier: 64:93:ED:72:BC:87:D7:E9:1D:75:2B:E2:1D:D8:D8:60:85:4F:AC:7E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/10c8bda0-3c91-4c6f-b928-28b77211b8d1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/10c8bda0-3c91-4c6f-b928-28b77211b8d1/796457a9-5a46-3973-a18c-008402e30cc8.roa Signing time: Fri 02 Oct 2026 13:00:13 +0000 ROA not before: Fri 02 Oct 2026 13:00:13 +0000 ROA not after: Thu 31 Dec 2026 14:00:13 +0000 asID: 59117 IP address blocks: 23.179.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/10c8bda0-3c91-4c6f-b928-28b77211b8d1/10c8bda0-3c91-4c6f-b928-28b77211b8d1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/10c8bda0-3c91-4c6f-b928-28b77211b8d1/10c8bda0-3c91-4c6f-b928-28b77211b8d1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/10c8bda0-3c91-4c6f-b928-28b77211b8d1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 Oct 2026 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5e:62:c4:c4:d0:6a:1e:ca:03:5e:00:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10c8bda0-3c91-4c6f-b928-28b77211b8d1 Validity Not Before: Oct 2 13:00:13 2026 GMT Not After : Dec 31 14:00:13 2026 GMT Subject: CN=0cb73e53-0a91-4fa1-8853-89fda905be2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:08:dd:d6:de:81:f2:24:c3:24:f0:ea:6e:f5: 19:3d:2b:db:80:22:5f:e7:3b:11:ca:d6:a5:d8:18: 7d:52:cd:e9:7f:97:58:80:5d:bf:07:29:09:f5:b7: 85:6f:78:f8:64:e5:9a:b1:ff:b5:d3:d8:00:fc:04: f8:4e:20:1e:2c:94:01:56:69:80:5f:f2:f4:dd:bd: 28:58:ac:e5:47:49:b1:58:2f:ec:de:16:48:b8:ec: 2c:6a:81:4b:09:dd:79:ae:b5:aa:4d:6d:06:24:2f: a3:40:46:63:27:ac:e4:2e:43:4f:0c:35:f1:df:49: 44:3a:6d:f0:68:c2:ae:bd:d1:0a:41:30:20:09:a2: 30:8e:b7:07:65:70:0d:91:34:47:f9:2f:b2:d0:ab: ff:3d:39:a1:8d:34:ff:4e:5b:6a:92:0a:e7:80:10: ba:76:31:34:55:20:a6:78:3c:1f:b1:4a:06:be:d9: 19:8b:b0:e6:5d:7b:5c:cd:e3:17:4d:20:45:ff:b1: 96:80:7f:bd:f7:17:22:3c:ba:61:22:b4:db:26:05: 85:87:2d:f4:83:93:d4:9e:88:32:13:10:c2:95:77: cd:9e:5e:5a:05:cf:b4:96:a9:9c:2c:e4:43:be:0c: d3:5f:e1:55:ce:50:30:cd:01:7f:52:22:72:dc:80: c3:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:34:70:29:00:9C:33:88:5E:27:58:72:17:37:56:0B:B6:81:CA:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/10c8bda0-3c91-4c6f-b928-28b77211b8d1/796457a9-5a46-3973-a18c-008402e30cc8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/10c8bda0-3c91-4c6f-b928-28b77211b8d1/10c8bda0-3c91-4c6f-b928-28b77211b8d1.crl X509v3 Authority Key Identifier: keyid:64:93:ED:72:BC:87:D7:E9:1D:75:2B:E2:1D:D8:D8:60:85:4F:AC:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/10c8bda0-3c91-4c6f-b928-28b77211b8d1.cer sbgp-ipAddrBlock: critical IPv4: 23.179.248.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:38:c3:ac:d4:a4:cb:06:a2:0f:bf:ca:c0:cf:76:1e:1e:79: 68:59:4f:61:8b:10:93:7c:27:81:65:ec:5b:81:b2:1e:77:29: 51:87:ea:70:b0:ba:77:05:71:f8:b5:78:f4:4b:62:48:ee:49: ba:44:bc:90:06:bc:9e:aa:98:83:28:14:ea:db:63:48:23:ff: 64:51:51:8c:4c:b7:99:39:33:3a:68:4a:eb:f4:67:bb:39:6b: de:a1:e7:d4:d0:30:00:df:f7:f8:a9:98:77:d8:a6:da:c7:3a: 1a:c1:12:64:3e:2c:84:cf:0a:ef:7c:15:b2:2a:6b:92:f1:1f: 7a:25:44:60:ab:dc:98:ae:d9:9f:76:2b:e2:51:50:9c:3a:b3: c1:38:47:1e:3f:fc:78:2a:4a:d9:af:53:eb:3d:05:99:e0:37: 70:7c:bd:95:ad:d9:5c:37:ec:c2:24:96:25:ff:6d:46:7d:58: 19:d3:cd:ca:c2:09:0f:c7:b4:41:59:d1:c5:c6:d2:ac:fa:69: 19:46:f5:78:f1:4e:02:fa:d9:2f:92:a3:d6:10:09:e4:fb:5d: 9d:9a:ba:b5:f3:b0:ad:d4:e0:af:9f:42:12:cf:5f:e4:07:05: 09:b8:30:1e:34:3a:08:c7:a7:72:b6:b1:95:5c:cc:89:fb:db: 0a:a9:69:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9eYsTE0GoeygNeAKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTBjOGJkYTAtM2M5MS00YzZmLWI5MjgtMjhiNzcyMTFi OGQxMB4XDTI2MTAwMjEzMDAxM1oXDTI2MTIzMTE0MDAxM1owLzEtMCsGA1UEAxMk MGNiNzNlNTMtMGE5MS00ZmExLTg4NTMtODlmZGE5MDViZTJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArAjd1t6B8iTDJPDqbvUZPSvbgCJf5zsRytal 2Bh9Us3pf5dYgF2/BykJ9beFb3j4ZOWasf+109gA/AT4TiAeLJQBVmmAX/L03b0o WKzlR0mxWC/s3hZIuOwsaoFLCd15rrWqTW0GJC+jQEZjJ6zkLkNPDDXx30lEOm3w aMKuvdEKQTAgCaIwjrcHZXANkTRH+S+y0Kv/PTmhjTT/TltqkgrngBC6djE0VSCm eDwfsUoGvtkZi7DmXXtczeMXTSBF/7GWgH+99xciPLphIrTbJgWFhy30g5PUnogy ExDClXfNnl5aBc+0lqmcLORDvgzTX+FVzlAwzQF/UiJy3IDDlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBs0cCkAnDOIXidYchc3Vgu2gco3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8xMGM4 YmRhMC0zYzkxLTRjNmYtYjkyOC0yOGI3NzIxMWI4ZDEvNzk2NDU3YTktNWE0Ni0z OTczLWExOGMtMDA4NDAyZTMwY2M4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMTBjOGJkYTAtM2M5MS00YzZmLWI5 MjgtMjhiNzcyMTFiOGQxLzEwYzhiZGEwLTNjOTEtNGM2Zi1iOTI4LTI4Yjc3MjEx YjhkMS5jcmwwHwYDVR0jBBgwFoAUZJPtcryH1+kddSviHdjYYIVPrH4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS8xMGM4YmRhMC0zYzkxLTRjNmYtYjkyOC0yOGI3 NzIxMWI4ZDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF7P4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ04w6zUpMsGog+/ysDPdh4eeWhZT2GLEJN8J4Fl7FuBsh53KVGH6nCw uncFcfi1ePRLYkjuSbpEvJAGvJ6qmIMoFOrbY0gj/2RRUYxMt5k5MzpoSuv0Z7s5 a96h59TQMADf9/ipmHfYptrHOhrBEmQ+LITPCu98FbIqa5LxH3olRGCr3Jiu2Z92 K+JRUJw6s8E4Rx4//HgqStmvU+s9BZngN3B8vZWt2Vw37MIkliX/bUZ9WBnTzcrC CQ/HtEFZ0cXG0qz6aRlG9XjxTgL62S+So9YQCeT7XZ2aurXzsK3U4K+fQhLPX+QH BQm4MB40OgjHp3K2sZVczIn72wqpaYk= -----END CERTIFICATE-----Generated at Thu Oct 8 10:28:45 2026 by rpki-client