$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3dbd8306-91a8-46a2-828a-ece722fc4280/e772996c-8680-303b-91bd-6f3fe4986fab.roa File: e772996c-8680-303b-91bd-6f3fe4986fab.roa (raw, json) Hash identifier: r6TRlK0q8aofjVSkjjGdGlKFQyht5F6A01M6TiDyQQk= Subject key identifier: AA:BC:BA:AF:88:C0:3E:0C:46:22:92:51:06:E0:79:54:F1:3B:77:94 Certificate issuer: /CN=3dbd8306-91a8-46a2-828a-ece722fc4280 Certificate serial: 010D0C9F4328584F15CCEB16AB95CA73B7CB0430 Authority key identifier: 1D:60:0E:40:9D:B0:4D:ED:CB:11:04:48:13:9C:45:13:5A:66:EE:64 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3dbd8306-91a8-46a2-828a-ece722fc4280.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3dbd8306-91a8-46a2-828a-ece722fc4280/e772996c-8680-303b-91bd-6f3fe4986fab.roa Signing time: Sun 06 Sep 2026 13:00:12 +0000 ROA not before: Sun 06 Sep 2026 13:00:12 +0000 ROA not after: Sat 05 Dec 2026 14:00:12 +0000 asID: 395886 IP address blocks: 23.165.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3dbd8306-91a8-46a2-828a-ece722fc4280/3dbd8306-91a8-46a2-828a-ece722fc4280.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3dbd8306-91a8-46a2-828a-ece722fc4280/3dbd8306-91a8-46a2-828a-ece722fc4280.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3dbd8306-91a8-46a2-828a-ece722fc4280.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:15:cc:eb:16:ab:95:ca:73:b7:cb:04:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3dbd8306-91a8-46a2-828a-ece722fc4280 Validity Not Before: Sep 6 13:00:12 2026 GMT Not After : Dec 5 14:00:12 2026 GMT Subject: CN=17ee9c31-b6bd-4ca8-ba49-04c7e7c4d02e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:bb:50:5a:ef:fb:9a:14:77:c2:0d:7d:d2:b5: 96:55:5e:73:1b:3e:6b:e4:da:24:f3:db:a2:87:58: 5f:be:ea:52:d8:77:31:a9:7c:d7:bd:4c:d3:bd:ea: 4c:fe:a1:e4:bd:1c:21:8c:8e:1b:61:90:c4:32:b0: b4:06:37:b3:d4:be:bc:90:41:ec:1c:b8:dd:9d:61: e6:10:36:77:4b:d6:c0:88:de:fd:dc:df:5d:c1:61: ca:16:64:ac:ac:ea:e6:ad:01:6d:eb:d6:22:bb:8d: 79:68:18:b0:48:2d:4f:d2:f1:07:f6:2b:80:ec:58: d5:7a:d0:81:db:81:73:05:a7:90:5f:7d:b9:df:16: ce:d9:b0:11:2a:4c:d6:6c:bd:68:2a:83:49:84:7d: da:c9:17:df:bb:71:fb:94:4e:a5:45:6c:1c:26:8e: 5a:bb:53:9a:8f:87:bf:ee:eb:fd:58:12:86:e4:10: cd:d2:db:7c:a0:05:ef:54:a7:de:75:5e:95:41:87: 1f:78:f7:c4:a5:36:05:fd:07:ba:c8:4c:eb:7a:8f: 94:1d:d8:1e:7c:8c:b3:42:96:a8:39:72:34:b5:f6: c6:48:8d:68:04:4b:41:84:e3:53:c3:c9:e3:a1:a6: 1c:8b:c0:94:71:e3:0a:a0:1a:4a:8f:34:aa:6d:e6: 28:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:BC:BA:AF:88:C0:3E:0C:46:22:92:51:06:E0:79:54:F1:3B:77:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3dbd8306-91a8-46a2-828a-ece722fc4280/e772996c-8680-303b-91bd-6f3fe4986fab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3dbd8306-91a8-46a2-828a-ece722fc4280/3dbd8306-91a8-46a2-828a-ece722fc4280.crl X509v3 Authority Key Identifier: keyid:1D:60:0E:40:9D:B0:4D:ED:CB:11:04:48:13:9C:45:13:5A:66:EE:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3dbd8306-91a8-46a2-828a-ece722fc4280.cer sbgp-ipAddrBlock: critical IPv4: 23.165.40.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:ea:0e:39:18:4c:9d:86:86:94:d1:c6:22:e0:9d:c9:2f:a4: 10:a5:05:9b:2c:9c:99:43:65:93:4f:11:af:94:5d:ea:32:48: 55:db:ac:cc:eb:56:3f:21:6d:eb:2b:69:50:85:06:05:67:62: 82:f5:4b:3a:a0:54:28:db:70:55:cd:c6:96:72:70:78:17:7b: 52:d2:83:2b:f3:70:49:01:5d:f1:f9:56:ff:c0:66:02:05:42: 7c:27:1a:69:bd:a5:41:a6:c1:39:4e:96:48:0e:8d:b8:8e:ed: d2:16:86:1e:44:5d:d2:eb:03:ac:6d:bc:70:d9:c3:6e:c4:d0: fa:11:89:fb:cc:2c:d8:9d:88:45:fe:49:4e:ce:44:50:21:bc: 46:d8:1a:3f:c2:53:95:aa:f8:fc:ac:16:36:2c:5e:b0:10:9b: b4:b8:60:84:7f:20:a1:c2:01:63:20:65:c1:42:87:6b:df:00: 6b:15:99:ef:ec:60:6b:5c:87:6e:a7:d5:5c:25:09:c7:39:f0: 1f:ad:39:4a:20:95:99:a8:43:38:c5:97:2c:ea:c6:e6:38:b4: 72:76:7d:46:ab:ec:ff:65:68:65:ed:fe:ee:64:9a:0c:1d:7a: a9:03:7a:9a:b4:b5:92:f0:5e:78:86:cb:69:9b:f5:40:89:f1: f4:3f:b0:d8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8VzOsWq5XKc7fLBDAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2RiZDgzMDYtOTFhOC00NmEyLTgyOGEtZWNlNzIyZmM0 MjgwMB4XDTI2MDkwNjEzMDAxMloXDTI2MTIwNTE0MDAxMlowLzEtMCsGA1UEAxMk MTdlZTljMzEtYjZiZC00Y2E4LWJhNDktMDRjN2U3YzRkMDJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAobtQWu/7mhR3wg190rWWVV5zGz5r5Nok89ui h1hfvupS2HcxqXzXvUzTvepM/qHkvRwhjI4bYZDEMrC0Bjez1L68kEHsHLjdnWHm EDZ3S9bAiN793N9dwWHKFmSsrOrmrQFt69Yiu415aBiwSC1P0vEH9iuA7FjVetCB 24FzBaeQX3253xbO2bARKkzWbL1oKoNJhH3ayRffu3H7lE6lRWwcJo5au1Oaj4e/ 7uv9WBKG5BDN0tt8oAXvVKfedV6VQYcfePfEpTYF/Qe6yEzreo+UHdgefIyzQpao OXI0tfbGSI1oBEtBhONTw8njoaYci8CUceMKoBpKjzSqbeYoyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKq8uq+IwD4MRiKSUQbgeVTxO3eUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8zZGJk ODMwNi05MWE4LTQ2YTItODI4YS1lY2U3MjJmYzQyODAvZTc3Mjk5NmMtODY4MC0z MDNiLTkxYmQtNmYzZmU0OTg2ZmFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvM2RiZDgzMDYtOTFhOC00NmEyLTgy OGEtZWNlNzIyZmM0MjgwLzNkYmQ4MzA2LTkxYTgtNDZhMi04MjhhLWVjZTcyMmZj NDI4MC5jcmwwHwYDVR0jBBgwFoAUHWAOQJ2wTe3LEQRIE5xFE1pm7mQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8zZGJkODMwNi05MWE4LTQ2YTItODI4YS1lY2U3 MjJmYzQyODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6UoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACTqDjkYTJ2GhpTRxiLgnckvpBClBZssnJlDZZNPEa+UXeoySFXbrMzr Vj8hbesraVCFBgVnYoL1SzqgVCjbcFXNxpZycHgXe1LSgyvzcEkBXfH5Vv/AZgIF QnwnGmm9pUGmwTlOlkgOjbiO7dIWhh5EXdLrA6xtvHDZw27E0PoRifvMLNidiEX+ SU7ORFAhvEbYGj/CU5Wq+PysFjYsXrAQm7S4YIR/IKHCAWMgZcFCh2vfAGsVme/s YGtch26n1VwlCcc58B+tOUoglZmoQzjFlyzqxuY4tHJ2fUar7P9laGXt/u5kmgwd eqkDepq0tZLwXniGy2mb9UCJ8fQ/sNg= -----END CERTIFICATE-----Generated at Mon Sep 21 17:22:52 2026 by rpki-client