$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/bc83c976-dcf0-4b3e-8e91-9e9788253352/af743eec-c6f7-3dca-aa04-fb081ee50884.roa File: af743eec-c6f7-3dca-aa04-fb081ee50884.roa (raw, json) Hash identifier: sJKu4Q16orr2DUY4k52+UPC9y3JOrTLAV+5AcoOTKhM= Subject key identifier: D8:AF:74:60:A7:E2:5A:9A:6B:16:02:A3:1D:0B:D0:96:A0:6E:D6:43 Certificate issuer: /CN=bc83c976-dcf0-4b3e-8e91-9e9788253352 Certificate serial: 010D0C9F4328584FB825A15217E632CEBEF053E0 Authority key identifier: E1:75:EE:55:EE:A9:04:89:34:60:A8:73:FA:5F:78:40:7E:24:9D:90 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/bc83c976-dcf0-4b3e-8e91-9e9788253352.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/bc83c976-dcf0-4b3e-8e91-9e9788253352/af743eec-c6f7-3dca-aa04-fb081ee50884.roa Signing time: Tue 03 Nov 2026 16:40:00 +0000 ROA not before: Tue 03 Nov 2026 16:40:00 +0000 ROA not after: Mon 01 Feb 2027 16:40:00 +0000 asID: 152179 IP address blocks: 23.163.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/bc83c976-dcf0-4b3e-8e91-9e9788253352/bc83c976-dcf0-4b3e-8e91-9e9788253352.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/bc83c976-dcf0-4b3e-8e91-9e9788253352/bc83c976-dcf0-4b3e-8e91-9e9788253352.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/bc83c976-dcf0-4b3e-8e91-9e9788253352.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a77526a0-fe4e-4741-b39b-323353a1ebf2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/a77526a0-fe4e-4741-b39b-323353a1ebf2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Nov 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:b8:25:a1:52:17:e6:32:ce:be:f0:53:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc83c976-dcf0-4b3e-8e91-9e9788253352 Validity Not Before: Nov 3 16:40:00 2026 GMT Not After : Feb 1 16:40:00 2027 GMT Subject: CN=573193e2-371d-4cea-a0cd-a55a9d306482 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:f3:84:0d:37:05:b8:8c:60:8e:f5:fb:d5:da: b1:76:02:4d:92:6f:76:b6:cf:32:a1:b5:d2:a1:a0: 15:6a:17:14:51:62:fa:32:b9:ec:d3:c2:1c:1f:31: a8:ba:06:5f:aa:5e:5f:9d:cb:75:4c:e8:2c:4d:63: 84:b3:66:80:ec:8e:92:f9:32:85:d9:cf:be:71:5e: e7:32:6c:8d:62:07:1e:86:5e:d9:e2:5d:a4:b0:5b: 6a:bf:7a:0b:1b:00:19:6e:ac:eb:63:5c:45:10:e9: 19:2d:f8:ec:65:be:b9:2f:fe:65:84:b8:7a:25:82: 6c:e8:46:37:e6:e3:81:e3:2b:68:c2:d5:15:2e:b7: 14:95:e3:ef:e6:33:a9:91:0b:e0:f4:2f:b1:d7:5d: d4:ad:65:7d:57:89:f6:c8:4c:3c:41:94:6c:1b:36: 5e:24:ef:ca:b6:7b:df:11:bf:98:fc:27:a9:f5:74: 45:46:7c:d1:81:23:26:61:a1:3a:fa:44:6c:87:c6: 58:b2:82:28:6b:04:8f:43:d3:19:c4:fb:33:51:14: c6:bf:51:c6:3c:f3:b3:72:c8:78:22:28:36:2c:14: 07:bf:fc:b7:94:3e:60:b1:be:88:60:bc:87:e4:86: 89:0a:54:41:63:99:a2:34:65:6e:8d:71:a3:c7:39: 7f:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:AF:74:60:A7:E2:5A:9A:6B:16:02:A3:1D:0B:D0:96:A0:6E:D6:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/bc83c976-dcf0-4b3e-8e91-9e9788253352/af743eec-c6f7-3dca-aa04-fb081ee50884.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/bc83c976-dcf0-4b3e-8e91-9e9788253352/bc83c976-dcf0-4b3e-8e91-9e9788253352.crl X509v3 Authority Key Identifier: keyid:E1:75:EE:55:EE:A9:04:89:34:60:A8:73:FA:5F:78:40:7E:24:9D:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a77526a0-fe4e-4741-b39b-323353a1ebf2/bc83c976-dcf0-4b3e-8e91-9e9788253352.cer sbgp-ipAddrBlock: critical IPv4: 23.163.244.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:8c:0d:db:8c:33:1a:c3:21:a1:1d:63:0c:2c:49:b8:24:69: 50:cc:55:9b:d5:53:82:40:28:f4:2b:0e:18:6f:fc:a1:c7:b4: a6:9a:12:e9:7e:c3:94:35:1d:ae:63:43:71:68:3a:c0:15:b0: df:d1:d1:d0:13:27:96:9f:3c:e4:1f:fd:7c:ee:4d:93:6a:ef: f9:1a:4a:02:6a:b8:96:08:77:1d:be:44:e4:23:01:4c:e1:f0: 6f:fe:41:34:2a:59:c4:1c:59:c4:6f:76:d6:10:41:df:7f:e4: cd:f2:d1:6c:78:76:f7:dc:0b:f7:20:92:86:fb:67:f2:c7:10: a4:12:c9:ee:84:b3:82:b1:08:75:d6:05:f2:2b:f4:5c:0b:d2: bb:41:1a:9a:85:66:f7:58:74:c4:0d:a5:9c:dd:65:8d:66:f7: 6b:1d:cf:f8:73:9c:20:10:09:14:77:46:ee:40:dc:1b:a9:ff: d5:6b:d4:05:9d:35:df:18:72:85:1d:ea:cd:29:04:e9:76:c2: dd:16:7d:22:69:d2:e4:cc:ae:06:07:c3:32:2d:27:20:de:05: 90:88:8e:63:b0:eb:2f:42:bb:9f:e7:2c:ee:f3:e4:e3:9e:91: d8:c5:db:9a:50:84:9a:a8:dd:9b:5d:42:66:81:0e:88:db:c4: dc:04:b5:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+4JaFSF+Yyzr7wU+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmM4M2M5NzYtZGNmMC00YjNlLThlOTEtOWU5Nzg4MjUz MzUyMB4XDTI2MTEwMzE2NDAwMFoXDTI3MDIwMTE2NDAwMFowLzEtMCsGA1UEAxMk NTczMTkzZTItMzcxZC00Y2VhLWEwY2QtYTU1YTlkMzA2NDgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs/OEDTcFuIxgjvX71dqxdgJNkm92ts8yobXS oaAVahcUUWL6Mrns08IcHzGougZfql5fnct1TOgsTWOEs2aA7I6S+TKF2c++cV7n MmyNYgcehl7Z4l2ksFtqv3oLGwAZbqzrY1xFEOkZLfjsZb65L/5lhLh6JYJs6EY3 5uOB4ytowtUVLrcUlePv5jOpkQvg9C+x113UrWV9V4n2yEw8QZRsGzZeJO/Ktnvf Eb+Y/Cep9XRFRnzRgSMmYaE6+kRsh8ZYsoIoawSPQ9MZxPszURTGv1HGPPOzcsh4 Iig2LBQHv/y3lD5gsb6IYLyH5IaJClRBY5miNGVujXGjxzl/DwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNivdGCn4lqaaxYCox0L0JagbtZDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3NzUyNmEwLWZlNGUtNDc0MS1iMzliLTMyMzM1M2ExZWJmMi9iYzgz Yzk3Ni1kY2YwLTRiM2UtOGU5MS05ZTk3ODgyNTMzNTIvYWY3NDNlZWMtYzZmNy0z ZGNhLWFhMDQtZmIwODFlZTUwODg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzc1MjZhMC1m ZTRlLTQ3NDEtYjM5Yi0zMjMzNTNhMWViZjIvYmM4M2M5NzYtZGNmMC00YjNlLThl OTEtOWU5Nzg4MjUzMzUyL2JjODNjOTc2LWRjZjAtNGIzZS04ZTkxLTllOTc4ODI1 MzM1Mi5jcmwwHwYDVR0jBBgwFoAU4XXuVe6pBIk0YKhz+l94QH4knZAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3NzUyNmEwLWZlNGUtNDc0 MS1iMzliLTMyMzM1M2ExZWJmMi9iYzgzYzk3Ni1kY2YwLTRiM2UtOGU5MS05ZTk3 ODgyNTMzNTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6P0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE2MDduMMxrDIaEdYwwsSbgkaVDMVZvVU4JAKPQrDhhv/KHHtKaaEul+ w5Q1Ha5jQ3FoOsAVsN/R0dATJ5afPOQf/XzuTZNq7/kaSgJquJYIdx2+ROQjAUzh 8G/+QTQqWcQcWcRvdtYQQd9/5M3y0Wx4dvfcC/cgkob7Z/LHEKQSye6Es4KxCHXW BfIr9FwL0rtBGpqFZvdYdMQNpZzdZY1m92sdz/hznCAQCRR3Ru5A3Bup/9Vr1AWd Nd8YcoUd6s0pBOl2wt0WfSJp0uTMrgYHwzItJyDeBZCIjmOw6y9Cu5/nLO7z5OOe kdjF25pQhJqo3ZtdQmaBDojbxNwEtaM= -----END CERTIFICATE-----Generated at Thu Nov 5 05:31:06 2026 by rpki-client