$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c966e577-4964-41bf-aced-835168bef4f1/9a35aab1-3858-3df5-b514-667aa30d3359.roa File: 9a35aab1-3858-3df5-b514-667aa30d3359.roa (raw, json) Hash identifier: cmTUbqujblp3/4WD89WgIT277NRFF1GJsjfLWhBQUdQ= Subject key identifier: BC:91:10:DF:D6:C3:0A:8B:6B:C4:2A:BF:9B:B3:48:0A:3B:AD:4A:A9 Certificate issuer: /CN=c966e577-4964-41bf-aced-835168bef4f1 Certificate serial: 010D0C9F4328584F7A4D82CB7ECE172D6662DB78 Authority key identifier: 2D:0D:DA:44:49:F1:1D:E6:DF:F1:97:47:F4:A5:7D:8F:1E:8A:71:5D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c966e577-4964-41bf-aced-835168bef4f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c966e577-4964-41bf-aced-835168bef4f1/9a35aab1-3858-3df5-b514-667aa30d3359.roa Signing time: Mon 12 Oct 2026 13:00:12 +0000 ROA not before: Mon 12 Oct 2026 13:00:12 +0000 ROA not after: Sun 10 Jan 2027 14:00:12 +0000 asID: 395400 IP address blocks: 168.123.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c966e577-4964-41bf-aced-835168bef4f1/c966e577-4964-41bf-aced-835168bef4f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c966e577-4964-41bf-aced-835168bef4f1/c966e577-4964-41bf-aced-835168bef4f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c966e577-4964-41bf-aced-835168bef4f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7a:4d:82:cb:7e:ce:17:2d:66:62:db:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c966e577-4964-41bf-aced-835168bef4f1 Validity Not Before: Oct 12 13:00:12 2026 GMT Not After : Jan 10 14:00:12 2027 GMT Subject: CN=3de37dfd-53fd-4d81-b89a-a1bf03f6a306 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:6f:52:29:e3:c9:c6:bb:5c:eb:c5:38:62:ea: 3f:65:04:0b:78:e6:7f:2e:44:ca:72:67:ef:86:b4: f4:81:a6:fc:4c:92:a8:09:6b:02:2c:af:ca:60:02: ee:d3:ba:56:a1:9a:f8:f8:a4:78:c7:f6:24:fd:6b: e0:92:8b:39:f5:00:d0:07:88:3e:aa:86:f5:9f:9e: f8:e3:aa:e2:67:fe:d7:31:4b:52:f3:cb:0c:5c:bd: 7c:0c:c7:c0:69:85:b3:b5:6d:5f:6d:5f:73:29:30: d6:f3:4e:45:a2:94:3e:dc:7f:93:9f:c0:de:b2:3b: aa:11:86:2a:4d:c8:75:0e:19:ad:a0:3d:7e:00:7a: eb:46:b7:b3:56:e9:d6:d5:27:78:5c:c4:ea:03:99: d4:53:11:d6:9c:62:1a:42:49:75:58:79:6e:a0:91: 29:55:27:e5:da:85:42:13:71:e4:21:e2:01:71:9f: a6:6d:5b:c9:e1:1f:36:01:76:15:0f:21:97:25:ad: c2:e8:cb:d9:24:4e:ff:fe:ce:16:ae:57:b5:b3:9f: dc:9c:c8:bf:93:52:96:f8:3b:3d:35:23:d4:39:b6: db:08:73:49:c5:f5:d5:63:4e:b1:a9:55:4a:18:4a: 3b:d7:07:1a:b0:09:05:31:c3:88:7b:ea:8e:a4:00: 6e:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:91:10:DF:D6:C3:0A:8B:6B:C4:2A:BF:9B:B3:48:0A:3B:AD:4A:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c966e577-4964-41bf-aced-835168bef4f1/9a35aab1-3858-3df5-b514-667aa30d3359.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c966e577-4964-41bf-aced-835168bef4f1/c966e577-4964-41bf-aced-835168bef4f1.crl X509v3 Authority Key Identifier: keyid:2D:0D:DA:44:49:F1:1D:E6:DF:F1:97:47:F4:A5:7D:8F:1E:8A:71:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c966e577-4964-41bf-aced-835168bef4f1.cer sbgp-ipAddrBlock: critical IPv4: 168.123.245.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:06:d1:62:96:6d:21:bf:1c:37:3a:93:89:4f:83:73:05:a1: 1d:1a:9f:fb:3c:27:c8:3f:2b:85:5b:ee:5a:0f:b5:b3:eb:bf: a7:1d:99:96:1a:a6:31:bc:0d:2d:f6:7f:e3:2b:fc:05:eb:64: 4c:f7:ce:c8:7b:63:28:72:c3:fd:87:98:c0:eb:26:28:48:c0: 92:74:8d:97:2b:cf:24:36:9b:27:70:f0:20:bf:9f:65:b5:25: 74:22:fe:6e:36:c4:ea:79:47:fb:8c:06:0d:54:6b:7c:b0:c8: 55:2d:97:7c:dc:89:7c:8d:51:8e:72:aa:b5:40:68:c1:e0:4a: 51:5c:3b:ab:a9:02:0c:13:8a:14:b8:64:a8:18:b8:59:75:da: 79:f6:5e:8c:ad:11:15:bc:eb:72:ef:a6:77:34:89:ea:3a:1a: 3c:87:66:e1:6d:d3:08:0e:89:e0:1c:03:7d:59:d1:03:68:80: 40:0c:b8:6a:5c:d9:7e:8a:1c:de:f8:05:8d:b6:17:63:cd:b0: d2:b0:ab:82:44:b6:77:38:84:d6:55:a5:a5:14:b5:46:ee:1b: e9:6f:4c:a6:bb:fd:31:43:28:68:5f:a6:94:56:a5:e7:ff:a6: be:32:81:46:ea:90:af:8a:4e:ef:77:98:81:3c:a5:fb:83:69: 51:98:55:ee -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE96TYLLfs4XLWZi23gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzk2NmU1NzctNDk2NC00MWJmLWFjZWQtODM1MTY4YmVm NGYxMB4XDTI2MTAxMjEzMDAxMloXDTI3MDExMDE0MDAxMlowLzEtMCsGA1UEAxMk M2RlMzdkZmQtNTNmZC00ZDgxLWI4OWEtYTFiZjAzZjZhMzA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx29SKePJxrtc68U4Yuo/ZQQLeOZ/LkTKcmfv hrT0gab8TJKoCWsCLK/KYALu07pWoZr4+KR4x/Yk/Wvgkos59QDQB4g+qob1n574 46riZ/7XMUtS88sMXL18DMfAaYWztW1fbV9zKTDW805FopQ+3H+Tn8DesjuqEYYq Tch1DhmtoD1+AHrrRrezVunW1Sd4XMTqA5nUUxHWnGIaQkl1WHluoJEpVSfl2oVC E3HkIeIBcZ+mbVvJ4R82AXYVDyGXJa3C6MvZJE7//s4Wrle1s5/cnMi/k1KW+Ds9 NSPUObbbCHNJxfXVY06xqVVKGEo71wcasAkFMcOIe+qOpABuXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLyREN/WwwqLa8Qqv5uzSAo7rUqpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9jOTY2 ZTU3Ny00OTY0LTQxYmYtYWNlZC04MzUxNjhiZWY0ZjEvOWEzNWFhYjEtMzg1OC0z ZGY1LWI1MTQtNjY3YWEzMGQzMzU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYzk2NmU1NzctNDk2NC00MWJmLWFj ZWQtODM1MTY4YmVmNGYxL2M5NjZlNTc3LTQ5NjQtNDFiZi1hY2VkLTgzNTE2OGJl ZjRmMS5jcmwwHwYDVR0jBBgwFoAULQ3aREnxHebf8ZdH9KV9jx6KcV0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9jOTY2ZTU3Ny00OTY0LTQxYmYtYWNlZC04MzUx NjhiZWY0ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqHv1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGQG0WKWbSG/HDc6k4lPg3MFoR0an/s8J8g/K4Vb7loPtbPrv6cdmZYa pjG8DS32f+Mr/AXrZEz3zsh7Yyhyw/2HmMDrJihIwJJ0jZcrzyQ2mydw8CC/n2W1 JXQi/m42xOp5R/uMBg1Ua3ywyFUtl3zciXyNUY5yqrVAaMHgSlFcO6upAgwTihS4 ZKgYuFl12nn2XoytERW863Lvpnc0ieo6GjyHZuFt0wgOieAcA31Z0QNogEAMuGpc 2X6KHN74BY22F2PNsNKwq4JEtnc4hNZVpaUUtUbuG+lvTKa7/TFDKGhfppRWpef/ pr4ygUbqkK+KTu93mIE8pfuDaVGYVe4= -----END CERTIFICATE-----Generated at Tue Oct 13 16:15:05 2026 by rpki-client