$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cb8bbc7d-40a8-45a5-8a9a-95c05453c635/f68f5a1a-81da-3371-99d7-e4f38db07770.roa File: f68f5a1a-81da-3371-99d7-e4f38db07770.roa (raw, json) Hash identifier: 3B24Cv3lKisC55uvetjMALJ+XqFjtF1NmWudmKYZbZE= Subject key identifier: 8D:96:6C:A8:C9:E1:76:8E:58:00:F2:4F:CF:30:A8:61:75:5E:59:4E Certificate issuer: /CN=cb8bbc7d-40a8-45a5-8a9a-95c05453c635 Certificate serial: 010D0C9F4328584F92085CA9AD2CD93480676F40 Authority key identifier: D9:1E:B3:B5:38:2F:DD:6F:7E:EF:22:B6:0A:9C:15:26:FA:8C:A4:5F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cb8bbc7d-40a8-45a5-8a9a-95c05453c635.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cb8bbc7d-40a8-45a5-8a9a-95c05453c635/f68f5a1a-81da-3371-99d7-e4f38db07770.roa Signing time: Wed 21 Oct 2026 01:00:12 +0000 ROA not before: Wed 21 Oct 2026 01:00:12 +0000 ROA not after: Tue 19 Jan 2027 02:00:12 +0000 asID: 20020 IP address blocks: 23.164.8.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cb8bbc7d-40a8-45a5-8a9a-95c05453c635/cb8bbc7d-40a8-45a5-8a9a-95c05453c635.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cb8bbc7d-40a8-45a5-8a9a-95c05453c635/cb8bbc7d-40a8-45a5-8a9a-95c05453c635.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cb8bbc7d-40a8-45a5-8a9a-95c05453c635.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:92:08:5c:a9:ad:2c:d9:34:80:67:6f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb8bbc7d-40a8-45a5-8a9a-95c05453c635 Validity Not Before: Oct 21 01:00:12 2026 GMT Not After : Jan 19 02:00:12 2027 GMT Subject: CN=623445a0-5e41-4dcc-8221-114e53415b6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:58:1b:5c:b1:28:fb:44:fe:2d:90:e4:5a:34: aa:18:7b:31:5e:f6:94:74:22:5c:9c:59:3f:a3:ed: 02:16:76:34:6b:f3:0d:88:d3:e4:fd:23:96:c6:8c: e9:a7:44:b9:44:38:8e:1a:6a:71:09:53:b0:50:90: 41:4c:53:9b:be:b8:b4:b1:17:83:e3:ec:a0:da:f5: 8e:6b:e0:88:4b:3f:65:02:76:10:44:55:50:f2:52: 54:cb:36:a0:3e:7d:ca:bc:93:9f:a6:c4:96:5b:b0: 10:6c:54:61:ce:ee:ba:c9:f6:0a:a2:88:6c:1a:67: e9:6b:4b:86:69:f6:e6:02:10:e0:6e:0e:84:07:67: 16:f0:0f:b6:92:d7:0d:02:e1:d2:24:52:78:8f:63: 94:fb:fd:10:54:c5:ac:9f:48:f8:68:e7:f1:36:d8: 3f:1e:14:e4:63:7d:18:09:af:ac:d5:4a:9e:f2:02: 10:02:a2:e9:7d:37:75:2b:d0:72:b1:a2:f1:87:c3: 10:86:27:67:53:66:f0:cb:e2:00:1f:43:c1:f1:00: f0:da:4a:5b:39:b3:46:da:ad:f6:8a:bb:e4:27:db: 72:b0:9e:b2:76:d0:6f:10:0e:59:b6:76:ed:a1:fd: a3:20:de:a5:08:cb:b3:63:1e:32:87:8a:0c:91:d1: 5c:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:96:6C:A8:C9:E1:76:8E:58:00:F2:4F:CF:30:A8:61:75:5E:59:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cb8bbc7d-40a8-45a5-8a9a-95c05453c635/f68f5a1a-81da-3371-99d7-e4f38db07770.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cb8bbc7d-40a8-45a5-8a9a-95c05453c635/cb8bbc7d-40a8-45a5-8a9a-95c05453c635.crl X509v3 Authority Key Identifier: keyid:D9:1E:B3:B5:38:2F:DD:6F:7E:EF:22:B6:0A:9C:15:26:FA:8C:A4:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/cb8bbc7d-40a8-45a5-8a9a-95c05453c635.cer sbgp-ipAddrBlock: critical IPv4: 23.164.8.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:67:e5:a1:c8:7d:cc:02:97:8b:74:59:91:41:e1:a5:98:e5: 15:f3:61:a9:48:8a:ad:fe:ee:9f:38:57:96:5e:bd:fe:b8:fc: 24:c5:a5:d9:a3:df:7f:d5:b3:31:4e:f4:09:17:87:b8:60:59: dc:35:11:b7:62:48:ef:dd:2d:1c:9c:f7:7e:d7:1c:3f:40:dc: 92:6b:9c:82:6c:2f:21:6a:67:8e:28:3c:15:03:50:51:07:b1: 9f:66:8b:8b:f0:45:ea:fe:9f:5f:9f:45:6b:0f:c1:24:e8:22: 56:16:2c:af:89:7c:29:d6:70:a5:8b:d0:55:a9:0f:b1:f8:79: be:67:51:27:60:d2:a8:7e:d5:5b:c1:20:93:76:38:34:b1:45: ad:d6:62:2f:bf:ed:25:e8:38:e8:18:53:16:50:d6:f8:bf:1b: 9d:90:e5:2b:c8:e1:53:a0:16:17:37:f5:a6:5f:33:94:85:ff: 70:f6:98:81:35:37:81:4f:a3:0e:b4:2a:7f:50:1e:c4:58:3d: 9d:87:ab:57:71:72:65:b9:73:e5:bd:5b:33:ee:6b:0f:df:39: a4:ce:cc:f8:56:3f:27:69:f6:e6:4c:f9:b9:2c:ac:5b:4a:b7: 5d:ad:4b:19:19:62:97:7e:88:48:33:79:9d:69:36:e1:b5:61: 5a:8e:64:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+SCFyprSzZNIBnb0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2I4YmJjN2QtNDBhOC00NWE1LThhOWEtOTVjMDU0NTNj NjM1MB4XDTI2MTAyMTAxMDAxMloXDTI3MDExOTAyMDAxMlowLzEtMCsGA1UEAxMk NjIzNDQ1YTAtNWU0MS00ZGNjLTgyMjEtMTE0ZTUzNDE1YjZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjlgbXLEo+0T+LZDkWjSqGHsxXvaUdCJcnFk/ o+0CFnY0a/MNiNPk/SOWxozpp0S5RDiOGmpxCVOwUJBBTFObvri0sReD4+yg2vWO a+CISz9lAnYQRFVQ8lJUyzagPn3KvJOfpsSWW7AQbFRhzu66yfYKoohsGmfpa0uG afbmAhDgbg6EB2cW8A+2ktcNAuHSJFJ4j2OU+/0QVMWsn0j4aOfxNtg/HhTkY30Y Ca+s1Uqe8gIQAqLpfTd1K9BysaLxh8MQhidnU2bwy+IAH0PB8QDw2kpbObNG2q32 irvkJ9tysJ6ydtBvEA5Ztnbtof2jIN6lCMuzYx4yh4oMkdFcFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI2WbKjJ4XaOWADyT88wqGF1XllOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9jYjhi YmM3ZC00MGE4LTQ1YTUtOGE5YS05NWMwNTQ1M2M2MzUvZjY4ZjVhMWEtODFkYS0z MzcxLTk5ZDctZTRmMzhkYjA3NzcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvY2I4YmJjN2QtNDBhOC00NWE1LThh OWEtOTVjMDU0NTNjNjM1L2NiOGJiYzdkLTQwYTgtNDVhNS04YTlhLTk1YzA1NDUz YzYzNS5jcmwwHwYDVR0jBBgwFoAU2R6ztTgv3W9+7yK2CpwVJvqMpF8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9jYjhiYmM3ZC00MGE4LTQ1YTUtOGE5YS05NWMw NTQ1M2M2MzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6QIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACNn5aHIfcwCl4t0WZFB4aWY5RXzYalIiq3+7p84V5Zevf64/CTFpdmj 33/VszFO9AkXh7hgWdw1EbdiSO/dLRyc937XHD9A3JJrnIJsLyFqZ44oPBUDUFEH sZ9mi4vwRer+n1+fRWsPwSToIlYWLK+JfCnWcKWL0FWpD7H4eb5nUSdg0qh+1VvB IJN2ODSxRa3WYi+/7SXoOOgYUxZQ1vi/G52Q5SvI4VOgFhc39aZfM5SF/3D2mIE1 N4FPow60Kn9QHsRYPZ2Hq1dxcmW5c+W9WzPuaw/fOaTOzPhWPydp9uZM+bksrFtK t12tSxkZYpd+iEgzeZ1pNuG1YVqOZFE= -----END CERTIFICATE-----Generated at Sun Nov 15 17:11:01 2026 by rpki-client