$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b6ece90f-e28e-4958-bcc3-3fa4be6f5db4/804116eb-a114-377d-b8a5-c3c5f8f4c66b.roa File: 804116eb-a114-377d-b8a5-c3c5f8f4c66b.roa (raw, json) Hash identifier: 8OAKOypmVj2EkqxokoNd9rkxXDbCREHzQBjMVZ0yMbo= Subject key identifier: C5:74:70:F7:2B:C0:81:2A:21:F8:5A:25:DE:99:47:96:73:C0:4C:0B Certificate issuer: /CN=b6ece90f-e28e-4958-bcc3-3fa4be6f5db4 Certificate serial: 010D0C9F4328584F37900AF2A4B7693C81F6C4E0 Authority key identifier: 96:7E:79:55:0B:6B:8C:47:A6:70:47:B3:4B:B6:B5:67:1C:F5:BC:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b6ece90f-e28e-4958-bcc3-3fa4be6f5db4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b6ece90f-e28e-4958-bcc3-3fa4be6f5db4/804116eb-a114-377d-b8a5-c3c5f8f4c66b.roa Signing time: Fri 18 Sep 2026 15:15:08 +0000 ROA not before: Fri 18 Sep 2026 15:15:08 +0000 ROA not after: Thu 17 Dec 2026 16:15:08 +0000 asID: 17077 IP address blocks: 23.189.65.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b6ece90f-e28e-4958-bcc3-3fa4be6f5db4/b6ece90f-e28e-4958-bcc3-3fa4be6f5db4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b6ece90f-e28e-4958-bcc3-3fa4be6f5db4/b6ece90f-e28e-4958-bcc3-3fa4be6f5db4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b6ece90f-e28e-4958-bcc3-3fa4be6f5db4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:37:90:0a:f2:a4:b7:69:3c:81:f6:c4:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b6ece90f-e28e-4958-bcc3-3fa4be6f5db4 Validity Not Before: Sep 18 15:15:08 2026 GMT Not After : Dec 17 16:15:08 2026 GMT Subject: CN=2d8f34bf-8975-4e25-9854-609fe8c017c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:c0:3d:f7:83:bd:a1:ad:3b:04:fe:6b:b5:1f: 52:78:0f:be:97:c4:a4:6c:3e:19:91:dd:64:7f:8a: 82:a5:90:bd:99:bc:67:3b:b0:1f:cb:75:10:70:7a: 64:42:25:bf:39:6d:15:99:f6:68:ee:c0:1b:26:1a: 68:24:9e:13:21:cb:35:f7:ef:b4:4b:55:3a:dc:e9: 16:d1:83:a7:4b:70:99:d9:d3:2d:d3:0a:54:e2:59: 05:94:b8:e6:d5:82:11:ac:99:e8:9e:8b:cd:67:51: c0:9b:d5:69:73:33:96:7e:6e:04:3e:26:5f:72:bf: d0:52:cd:18:70:c7:e3:62:1d:0f:2b:25:d6:e6:f5: 08:9e:53:06:19:79:38:9e:a4:fa:8e:1d:7d:d5:3f: 66:df:e1:66:ef:e3:63:44:ab:df:c1:e9:03:ac:ad: bb:20:f9:31:45:47:c9:01:ad:74:33:95:95:9e:55: ac:58:e5:c7:a4:02:ba:42:70:5e:5b:af:79:22:a6: e4:7d:d4:82:0c:c5:f4:4a:a8:70:c5:c1:66:d5:66: ca:c1:58:f6:e0:5a:97:3c:10:17:8c:b9:e7:1c:31: ae:3d:17:58:13:19:73:3c:df:c8:f2:5b:1c:eb:a6: e0:49:b9:89:92:44:61:75:1d:28:6d:a6:e4:bd:c8: 37:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:74:70:F7:2B:C0:81:2A:21:F8:5A:25:DE:99:47:96:73:C0:4C:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b6ece90f-e28e-4958-bcc3-3fa4be6f5db4/804116eb-a114-377d-b8a5-c3c5f8f4c66b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b6ece90f-e28e-4958-bcc3-3fa4be6f5db4/b6ece90f-e28e-4958-bcc3-3fa4be6f5db4.crl X509v3 Authority Key Identifier: keyid:96:7E:79:55:0B:6B:8C:47:A6:70:47:B3:4B:B6:B5:67:1C:F5:BC:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b6ece90f-e28e-4958-bcc3-3fa4be6f5db4.cer sbgp-ipAddrBlock: critical IPv4: 23.189.65.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:52:63:5a:75:29:dd:fd:2c:6a:01:26:27:97:02:95:03:4e: bc:63:54:7d:40:34:98:34:e1:fa:96:47:94:a7:6a:73:ab:2f: fa:11:68:54:b3:5f:ea:42:63:e3:af:36:10:9a:58:1c:9d:18: dd:9c:88:4c:b9:97:92:ff:31:08:85:18:3d:6f:bc:33:1b:c4: f9:b7:32:02:c1:af:76:a3:23:dc:96:20:17:d2:ea:4c:e2:80: e0:d8:ef:ce:91:4f:08:34:09:06:12:87:18:9a:6c:bc:6c:37: 47:86:c6:79:26:40:24:d0:7d:e8:e4:fc:5a:71:aa:e6:8c:8e: ff:f3:a8:0b:48:92:5b:3e:4e:12:18:b2:e2:33:48:b1:cb:67: 67:3e:6d:17:4c:7a:bb:dd:93:b1:8a:76:c3:a9:85:0f:23:11: a7:a6:3f:72:ec:f1:20:a3:06:51:28:3d:8d:9d:b1:2d:30:ce: f3:b0:2f:30:b3:1f:fb:9f:cc:4a:94:a9:1c:b6:d5:78:c6:75: a9:db:33:5e:a8:c6:4a:56:d9:a9:68:96:08:20:f5:41:c0:5f: c0:3d:05:df:5a:17:cb:df:1b:38:a0:79:70:60:7c:d5:bb:c1: b1:80:21:6f:84:53:87:15:1f:6d:2f:ad:59:f5:3a:88:62:f2: 4f:ed:3b:3f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE83kArypLdpPIH2xOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjZlY2U5MGYtZTI4ZS00OTU4LWJjYzMtM2ZhNGJlNmY1 ZGI0MB4XDTI2MDkxODE1MTUwOFoXDTI2MTIxNzE2MTUwOFowLzEtMCsGA1UEAxMk MmQ4ZjM0YmYtODk3NS00ZTI1LTk4NTQtNjA5ZmU4YzAxN2M1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2cA994O9oa07BP5rtR9SeA++l8SkbD4Zkd1k f4qCpZC9mbxnO7Afy3UQcHpkQiW/OW0VmfZo7sAbJhpoJJ4TIcs19++0S1U63OkW 0YOnS3CZ2dMt0wpU4lkFlLjm1YIRrJnonovNZ1HAm9VpczOWfm4EPiZfcr/QUs0Y cMfjYh0PKyXW5vUInlMGGXk4nqT6jh191T9m3+Fm7+NjRKvfwekDrK27IPkxRUfJ Aa10M5WVnlWsWOXHpAK6QnBeW695IqbkfdSCDMX0SqhwxcFm1WbKwVj24FqXPBAX jLnnHDGuPRdYExlzPN/I8lsc66bgSbmJkkRhdR0obabkvcg3mQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMV0cPcrwIEqIfhaJd6ZR5ZzwEwLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9iNmVj ZTkwZi1lMjhlLTQ5NTgtYmNjMy0zZmE0YmU2ZjVkYjQvODA0MTE2ZWItYTExNC0z NzdkLWI4YTUtYzNjNWY4ZjRjNjZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYjZlY2U5MGYtZTI4ZS00OTU4LWJj YzMtM2ZhNGJlNmY1ZGI0L2I2ZWNlOTBmLWUyOGUtNDk1OC1iY2MzLTNmYTRiZTZm NWRiNC5jcmwwHwYDVR0jBBgwFoAUln55VQtrjEemcEezS7a1Zxz1vEwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9iNmVjZTkwZi1lMjhlLTQ5NTgtYmNjMy0zZmE0 YmU2ZjVkYjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF71BMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFNSY1p1Kd39LGoBJieXApUDTrxjVH1ANJg04fqWR5SnanOrL/oRaFSz X+pCY+OvNhCaWBydGN2ciEy5l5L/MQiFGD1vvDMbxPm3MgLBr3ajI9yWIBfS6kzi gODY786RTwg0CQYShxiabLxsN0eGxnkmQCTQfejk/FpxquaMjv/zqAtIkls+ThIY suIzSLHLZ2c+bRdMervdk7GKdsOphQ8jEaemP3Ls8SCjBlEoPY2dsS0wzvOwLzCz H/ufzEqUqRy21XjGdanbM16oxkpW2alolggg9UHAX8A9Bd9aF8vfGzigeXBgfNW7 wbGAIW+EU4cVH20vrVn1Oohi8k/tOz8= -----END CERTIFICATE-----Generated at Mon Sep 21 22:14:26 2026 by rpki-client