$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b422e9a5-59dc-4f5b-ae1a-7e82c51a3fde/a55572ea-a2ef-3571-8109-383e114c8989.roa File: a55572ea-a2ef-3571-8109-383e114c8989.roa (raw, json) Hash identifier: wyYY1JihKsg5qaxSQJWyu7t8j9A0Z/6tOlSCs32i7tE= Subject key identifier: E8:D2:61:44:7D:7A:73:F0:BF:2B:83:84:83:33:55:67:AB:BA:04:28 Certificate issuer: /CN=b422e9a5-59dc-4f5b-ae1a-7e82c51a3fde Certificate serial: 010D0C9F4328584F4F0801A0A0DE54922C67D200 Authority key identifier: 67:7B:4A:AF:E7:55:C7:D2:A5:63:9A:AE:96:38:66:54:D4:26:AA:BB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b422e9a5-59dc-4f5b-ae1a-7e82c51a3fde.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b422e9a5-59dc-4f5b-ae1a-7e82c51a3fde/a55572ea-a2ef-3571-8109-383e114c8989.roa Signing time: Sun 27 Sep 2026 01:00:12 +0000 ROA not before: Sun 27 Sep 2026 01:00:12 +0000 ROA not after: Sat 26 Dec 2026 02:00:12 +0000 asID: 11665 IP address blocks: 23.166.176.0/24 maxlen: 24 2602:fcfe::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b422e9a5-59dc-4f5b-ae1a-7e82c51a3fde/b422e9a5-59dc-4f5b-ae1a-7e82c51a3fde.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b422e9a5-59dc-4f5b-ae1a-7e82c51a3fde/b422e9a5-59dc-4f5b-ae1a-7e82c51a3fde.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b422e9a5-59dc-4f5b-ae1a-7e82c51a3fde.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 Oct 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4f:08:01:a0:a0:de:54:92:2c:67:d2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b422e9a5-59dc-4f5b-ae1a-7e82c51a3fde Validity Not Before: Sep 27 01:00:12 2026 GMT Not After : Dec 26 02:00:12 2026 GMT Subject: CN=989ba701-631e-40eb-bd41-3a9b212bf616 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:fa:41:0c:92:bd:4b:6f:b5:c3:61:ff:d6:ec: 47:0c:30:4f:b1:0e:b2:45:be:f7:15:d9:80:51:9d: 10:4b:ac:9a:b3:98:d9:7c:f4:24:88:ab:8b:22:0d: fe:ad:7d:34:99:00:29:d4:85:d6:a6:37:a8:21:4f: 1e:82:f7:7c:5d:8f:1a:fa:ed:b3:c8:a9:4b:79:3f: 5f:8a:ed:bb:ab:d0:ef:e9:1c:94:6c:c4:cf:c8:99: 34:21:c9:8e:2f:c1:a8:79:68:90:fc:5c:26:12:55: 37:bd:ee:d7:3f:b4:85:06:0d:fc:6c:8c:27:b6:21: 9c:ed:b9:40:0e:0b:c7:3f:95:fd:5a:2b:a2:10:3c: c8:8b:7e:c6:30:20:9e:73:ea:03:43:f2:e5:2c:99: 76:26:5d:24:2f:f2:26:c6:9e:aa:98:9a:20:8c:76: 3a:ac:ed:9a:70:27:60:d7:0e:26:48:d2:50:2c:cf: 98:ce:6d:ae:b2:d2:f5:a2:12:6c:87:7b:bd:e8:12: 61:e8:b2:8b:5e:93:fd:57:14:3a:ce:7c:63:c0:1b: 10:5d:aa:27:62:e1:56:46:99:36:a1:68:5b:8b:97: 28:40:c7:32:bb:fa:35:06:be:bc:70:41:e9:8d:44: 3f:12:ee:02:7a:9d:8b:31:da:f1:73:21:31:1a:71: 7c:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:D2:61:44:7D:7A:73:F0:BF:2B:83:84:83:33:55:67:AB:BA:04:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b422e9a5-59dc-4f5b-ae1a-7e82c51a3fde/a55572ea-a2ef-3571-8109-383e114c8989.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b422e9a5-59dc-4f5b-ae1a-7e82c51a3fde/b422e9a5-59dc-4f5b-ae1a-7e82c51a3fde.crl X509v3 Authority Key Identifier: keyid:67:7B:4A:AF:E7:55:C7:D2:A5:63:9A:AE:96:38:66:54:D4:26:AA:BB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b422e9a5-59dc-4f5b-ae1a-7e82c51a3fde.cer sbgp-ipAddrBlock: critical IPv4: 23.166.176.0/24 IPv6: 2602:fcfe::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:45:7f:12:09:ae:6e:b3:f2:9a:91:fa:86:24:b4:02:d0:23: 36:29:a6:ca:a6:a4:a7:b9:4b:bc:03:f4:04:7f:84:ce:9b:a2: f1:bf:4e:18:11:94:ff:ab:ec:4f:82:6c:d8:1a:8c:0b:e7:91: 3a:11:a6:f4:e9:67:f6:63:cb:43:de:45:22:18:87:8a:4f:3e: 97:08:cb:9b:4e:fd:df:93:2a:8f:14:1c:a7:77:9c:e9:91:c2: 24:14:db:37:88:e7:6f:58:d9:3a:c3:97:c2:69:d1:be:44:4a: e6:99:4d:0b:7f:1a:15:94:50:b9:17:28:4e:56:f9:40:de:ea: 1e:77:ca:8c:f4:61:70:9f:db:bc:94:5b:e3:7b:f5:72:15:25: 87:af:2a:bf:08:ab:b6:f4:36:b7:d4:ac:16:cd:48:4e:ca:40: 8e:36:46:68:41:03:34:98:8b:a3:df:1b:26:45:81:9d:25:e2: bb:95:13:cf:69:99:9b:a6:92:a6:96:6e:0c:cd:b0:cd:44:c8: 5e:a8:a8:d6:1a:22:24:cd:47:f8:e4:ed:b7:1f:60:77:56:df: b0:98:5e:79:ec:b9:4d:38:87:bb:26:0f:6e:d0:26:9b:8c:ab: 2b:21:54:63:61:81:cb:d4:4b:15:ef:18:51:cd:32:ff:0b:59: 9d:15:5f:96 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE9PCAGgoN5Ukixn0gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQyMmU5YTUtNTlkYy00ZjViLWFlMWEtN2U4MmM1MWEz ZmRlMB4XDTI2MDkyNzAxMDAxMloXDTI2MTIyNjAyMDAxMlowLzEtMCsGA1UEAxMk OTg5YmE3MDEtNjMxZS00MGViLWJkNDEtM2E5YjIxMmJmNjE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiPpBDJK9S2+1w2H/1uxHDDBPsQ6yRb73FdmA UZ0QS6yas5jZfPQkiKuLIg3+rX00mQAp1IXWpjeoIU8egvd8XY8a+u2zyKlLeT9f iu27q9Dv6RyUbMTPyJk0IcmOL8GoeWiQ/FwmElU3ve7XP7SFBg38bIwntiGc7blA DgvHP5X9WiuiEDzIi37GMCCec+oDQ/LlLJl2Jl0kL/Imxp6qmJogjHY6rO2acCdg 1w4mSNJQLM+Yzm2ustL1ohJsh3u96BJh6LKLXpP9VxQ6znxjwBsQXaonYuFWRpk2 oWhbi5coQMcyu/o1Br68cEHpjUQ/Eu4Cep2LMdrxcyExGnF8bQIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFOjSYUR9enPwvyuDhIMzVWerugQoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9iNDIy ZTlhNS01OWRjLTRmNWItYWUxYS03ZTgyYzUxYTNmZGUvYTU1NTcyZWEtYTJlZi0z NTcxLTgxMDktMzgzZTExNGM4OTg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYjQyMmU5YTUtNTlkYy00ZjViLWFl MWEtN2U4MmM1MWEzZmRlL2I0MjJlOWE1LTU5ZGMtNGY1Yi1hZTFhLTdlODJjNTFh M2ZkZS5jcmwwHwYDVR0jBBgwFoAUZ3tKr+dVx9KlY5quljhmVNQmqrswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9iNDIyZTlhNS01OWRjLTRmNWItYWUxYS03ZTgy YzUxYTNmZGUuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF6awMA4E AgACMAgDBgQmAvz+ADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQApRX8SCa5us/KakfqGJLQC0CM2KabKpqSn uUu8A/QEf4TOm6Lxv04YEZT/q+xPgmzYGowL55E6Eab06Wf2Y8tD3kUiGIeKTz6X CMubTv3fkyqPFBynd5zpkcIkFNs3iOdvWNk6w5fCadG+RErmmU0LfxoVlFC5FyhO VvlA3uoed8qM9GFwn9u8lFvje/VyFSWHryq/CKu29Da31KwWzUhOykCONkZoQQM0 mIuj3xsmRYGdJeK7lRPPaZmbppKmlm4MzbDNRMheqKjWGiIkzUf45O23H2B3Vt+w mF557LlNOIe7Jg9u0CabjKsrIVRjYYHL1EsV7xhRzTL/C1mdFV+W -----END CERTIFICATE-----Generated at Sun Oct 4 02:49:25 2026 by rpki-client