$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/be69e7ae-469d-400e-8f2e-4ebfc1be0098/853d2761-430f-3406-8353-e291e87c8b19.roa File: 853d2761-430f-3406-8353-e291e87c8b19.roa (raw, json) Hash identifier: sNeftZsoeySmcYkcZs3ppq0vndeDD2DUdoPyFvd+iT4= Subject key identifier: 0A:31:51:38:BE:7A:92:BF:CF:E9:69:EE:41:17:89:79:51:37:F1:16 Certificate issuer: /CN=be69e7ae-469d-400e-8f2e-4ebfc1be0098 Certificate serial: 010D0C9F4328584C602BF4F1CC5EF1635EC82C00 Authority key identifier: 10:44:A2:7F:5D:CB:7B:01:1A:9B:6D:EB:6D:47:3E:9F:B6:51:A5:84 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/be69e7ae-469d-400e-8f2e-4ebfc1be0098.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/be69e7ae-469d-400e-8f2e-4ebfc1be0098/853d2761-430f-3406-8353-e291e87c8b19.roa Signing time: Thu 01 Jan 2026 02:00:31 +0000 ROA not before: Thu 01 Jan 2026 02:00:31 +0000 ROA not after: Wed 01 Apr 2026 01:00:31 +0000 asID: 399935 IP address blocks: 23.168.216.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/be69e7ae-469d-400e-8f2e-4ebfc1be0098/be69e7ae-469d-400e-8f2e-4ebfc1be0098.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/be69e7ae-469d-400e-8f2e-4ebfc1be0098/be69e7ae-469d-400e-8f2e-4ebfc1be0098.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/be69e7ae-469d-400e-8f2e-4ebfc1be0098.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:60:2b:f4:f1:cc:5e:f1:63:5e:c8:2c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=be69e7ae-469d-400e-8f2e-4ebfc1be0098 Validity Not Before: Jan 1 02:00:31 2026 GMT Not After : Apr 1 01:00:31 2026 GMT Subject: CN=aa5cd827-9f22-46b3-b379-13b8af7cc8ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:ef:e0:60:08:8f:51:02:85:a4:9c:43:0c:e5: ab:95:45:40:91:87:61:b1:e8:97:1f:2a:14:1d:b8: ff:8a:f3:04:4a:40:53:92:0c:57:ae:04:44:ce:c8: 11:58:76:88:4a:20:2a:77:b6:29:7e:4e:c3:fd:2a: 65:09:25:7c:33:d5:00:91:42:98:b4:19:a1:fa:d2: 13:5a:1f:cc:03:d0:c2:54:f2:16:d0:22:3b:28:7d: 51:f3:01:15:bb:1f:9b:90:24:5e:45:51:77:5e:3b: 2c:d5:d7:b9:c6:a4:3e:08:30:e1:3a:d2:f2:50:78: 0a:74:35:90:90:d1:65:64:ac:5d:5f:1f:57:f6:ed: f2:3b:f0:30:36:b3:e1:79:9b:ca:b9:ce:28:5f:3c: c3:f1:fc:5c:6a:72:28:d0:bb:bb:7e:a5:7e:1c:cb: 0a:68:55:6f:00:14:78:ac:2e:1b:08:22:3e:81:bc: 00:f8:a5:ff:6b:bc:a4:19:6f:02:a4:f4:7c:e7:fb: f6:83:50:28:7f:01:2c:80:91:97:25:8b:32:61:9b: 0e:cf:fd:6c:c8:e6:2c:ff:ac:f6:73:03:b6:c8:58: c9:c0:a5:b0:57:50:57:2d:22:2c:c7:f1:ce:9d:a9: 9c:ad:58:ae:95:70:f3:2a:54:e2:56:e5:56:73:d0: 02:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:31:51:38:BE:7A:92:BF:CF:E9:69:EE:41:17:89:79:51:37:F1:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/be69e7ae-469d-400e-8f2e-4ebfc1be0098/853d2761-430f-3406-8353-e291e87c8b19.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/be69e7ae-469d-400e-8f2e-4ebfc1be0098/be69e7ae-469d-400e-8f2e-4ebfc1be0098.crl X509v3 Authority Key Identifier: keyid:10:44:A2:7F:5D:CB:7B:01:1A:9B:6D:EB:6D:47:3E:9F:B6:51:A5:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/be69e7ae-469d-400e-8f2e-4ebfc1be0098.cer sbgp-ipAddrBlock: critical IPv4: 23.168.216.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:d0:91:d7:ff:38:7e:a1:1c:22:07:f1:9e:89:96:cb:fd:c5: 66:68:16:34:68:8f:95:bd:6d:b6:13:7e:65:f0:63:f6:1c:dd: 34:e3:84:b4:7e:ad:ca:f0:66:a1:5a:ff:07:b4:71:bf:75:ec: e7:d9:fa:82:f4:c3:64:4e:2d:90:dc:72:ea:df:e1:4a:14:1e: 07:46:b0:cf:4d:b1:d4:54:9a:ee:07:05:4c:ca:4b:a5:3a:77: b8:0c:ed:bb:a7:ee:86:b9:08:e7:54:6c:d7:ba:d1:c1:bc:22: e4:c1:e8:28:a9:00:8e:dd:6b:dc:ac:f6:54:ce:65:b8:d8:db: 4e:23:0d:4f:12:11:c2:27:f3:6a:a8:01:53:31:cf:8f:07:48: 3d:27:98:89:cc:f7:6c:b1:b4:91:18:39:01:b5:c5:a0:6a:26: b3:e0:65:a6:1f:d3:61:4b:9d:6d:c1:a9:61:bf:b7:39:a0:e0: c7:51:94:86:e4:a8:27:41:cf:08:ad:3a:2f:5a:e1:8d:2e:97: a3:c1:6a:ad:c0:e7:b9:25:9d:e1:26:b7:53:53:5d:8d:f5:d9: bc:8b:b4:95:0f:62:ad:ed:47:30:a2:70:a1:f3:32:70:3c:b1: 4a:ce:ba:89:4b:78:df:26:b9:33:7c:22:fa:9f:64:75:a1:f2: 06:92:dd:d5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWExgK/TxzF7xY17ILAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmU2OWU3YWUtNDY5ZC00MDBlLThmMmUtNGViZmMxYmUw MDk4MB4XDTI2MDEwMTAyMDAzMVoXDTI2MDQwMTAxMDAzMVowLzEtMCsGA1UEAxMk YWE1Y2Q4MjctOWYyMi00NmIzLWIzNzktMTNiOGFmN2NjOGVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAju/gYAiPUQKFpJxDDOWrlUVAkYdhseiXHyoU Hbj/ivMESkBTkgxXrgREzsgRWHaISiAqd7Ypfk7D/SplCSV8M9UAkUKYtBmh+tIT Wh/MA9DCVPIW0CI7KH1R8wEVux+bkCReRVF3Xjss1de5xqQ+CDDhOtLyUHgKdDWQ kNFlZKxdXx9X9u3yO/AwNrPheZvKuc4oXzzD8fxcanIo0Lu7fqV+HMsKaFVvABR4 rC4bCCI+gbwA+KX/a7ykGW8CpPR85/v2g1AofwEsgJGXJYsyYZsOz/1syOYs/6z2 cwO2yFjJwKWwV1BXLSIsx/HOnamcrViulXDzKlTiVuVWc9ACGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAoxUTi+epK/z+lp7kEXiXlRN/EWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9iZTY5 ZTdhZS00NjlkLTQwMGUtOGYyZS00ZWJmYzFiZTAwOTgvODUzZDI3NjEtNDMwZi0z NDA2LTgzNTMtZTI5MWU4N2M4YjE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYmU2OWU3YWUtNDY5ZC00MDBlLThm MmUtNGViZmMxYmUwMDk4L2JlNjllN2FlLTQ2OWQtNDAwZS04ZjJlLTRlYmZjMWJl MDA5OC5jcmwwHwYDVR0jBBgwFoAUEESif13LewEam23rbUc+n7ZRpYQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9iZTY5ZTdhZS00NjlkLTQwMGUtOGYyZS00ZWJm YzFiZTAwOTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6jYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJvQkdf/OH6hHCIH8Z6Jlsv9xWZoFjRoj5W9bbYTfmXwY/Yc3TTjhLR+ rcrwZqFa/we0cb917OfZ+oL0w2ROLZDccurf4UoUHgdGsM9NsdRUmu4HBUzKS6U6 d7gM7bun7oa5COdUbNe60cG8IuTB6CipAI7da9ys9lTOZbjY204jDU8SEcIn82qo AVMxz48HSD0nmInM92yxtJEYOQG1xaBqJrPgZaYf02FLnW3BqWG/tzmg4MdRlIbk qCdBzwitOi9a4Y0ul6PBaq3A57klneEmt1NTXY312byLtJUPYq3tRzCicKHzMnA8 sUrOuolLeN8muTN8IvqfZHWh8gaS3dU= -----END CERTIFICATE-----Generated at Mon Mar 2 07:33:23 2026 by rpki-client