$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/eeff816f-42ef-47a6-ba61-7075adb85329/5b665c2e-c2d1-394f-a379-8b42a79c90ee.roa File: 5b665c2e-c2d1-394f-a379-8b42a79c90ee.roa (raw, json) Hash identifier: 9TDMgg8xl05V/IEyahSjyCBKtX6pBhjY7h14O2okg6Q= Subject key identifier: A2:20:E2:F0:31:44:F4:A9:3D:D0:6C:F0:90:87:0D:13:38:E1:73:2C Certificate issuer: /CN=eeff816f-42ef-47a6-ba61-7075adb85329 Certificate serial: 010D0C9F4328584F612D664EBE5C496B182F5800 Authority key identifier: EA:59:7B:F3:71:88:6F:CC:1E:CD:EA:8D:55:10:E5:3D:CB:11:F4:7D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/eeff816f-42ef-47a6-ba61-7075adb85329.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/eeff816f-42ef-47a6-ba61-7075adb85329/5b665c2e-c2d1-394f-a379-8b42a79c90ee.roa Signing time: Sat 03 Oct 2026 13:00:13 +0000 ROA not before: Sat 03 Oct 2026 13:00:13 +0000 ROA not after: Fri 01 Jan 2027 14:00:13 +0000 asID: 393457 IP address blocks: 23.128.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/eeff816f-42ef-47a6-ba61-7075adb85329/eeff816f-42ef-47a6-ba61-7075adb85329.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/eeff816f-42ef-47a6-ba61-7075adb85329/eeff816f-42ef-47a6-ba61-7075adb85329.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/eeff816f-42ef-47a6-ba61-7075adb85329.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 Oct 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:61:2d:66:4e:be:5c:49:6b:18:2f:58:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=eeff816f-42ef-47a6-ba61-7075adb85329 Validity Not Before: Oct 3 13:00:13 2026 GMT Not After : Jan 1 14:00:13 2027 GMT Subject: CN=2e412c37-fa96-4aac-a7e3-41c48353c405 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:94:34:38:d7:7f:21:1a:64:04:3a:e7:d9:b4: fc:ad:f9:b3:19:f6:cf:cb:73:ac:c8:d7:11:7c:37: 20:44:02:8a:2f:58:7f:ce:74:20:04:70:b7:17:47: 95:e9:87:f6:90:04:e7:34:93:0e:3e:39:6e:79:9c: 98:53:e3:ab:50:54:12:3b:2f:94:90:cf:47:53:b5: 4e:5f:f5:04:1c:92:0b:86:fb:be:d0:b6:b1:9c:bc: 5b:64:2c:ee:9e:98:11:a9:90:e8:12:50:a8:d6:56: 96:bc:6f:e9:4b:6a:98:28:19:d9:5c:f4:07:e8:58: 49:c7:5b:c9:53:12:3c:27:c0:9d:26:1e:35:2e:d2: e5:ab:0b:04:82:d9:cb:85:d7:b4:f9:11:25:cf:db: f6:87:b8:7c:69:06:7d:5b:ba:20:bc:19:6c:91:42: eb:64:1d:e9:78:f2:ec:30:14:7d:61:3c:41:32:46: 46:fd:6c:89:94:75:3a:9c:70:bb:3b:36:d5:fc:a1: 46:30:81:ea:d1:ef:3a:72:78:56:df:cb:a6:2d:de: 9f:35:e9:00:fd:aa:89:14:d4:e4:aa:0d:81:ff:b2: 49:81:90:56:57:83:0b:a0:32:ee:bf:86:04:ab:ed: bb:45:92:38:5d:7d:d4:c2:79:dd:75:c8:25:9b:3c: 2d:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:20:E2:F0:31:44:F4:A9:3D:D0:6C:F0:90:87:0D:13:38:E1:73:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/eeff816f-42ef-47a6-ba61-7075adb85329/5b665c2e-c2d1-394f-a379-8b42a79c90ee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/eeff816f-42ef-47a6-ba61-7075adb85329/eeff816f-42ef-47a6-ba61-7075adb85329.crl X509v3 Authority Key Identifier: keyid:EA:59:7B:F3:71:88:6F:CC:1E:CD:EA:8D:55:10:E5:3D:CB:11:F4:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/eeff816f-42ef-47a6-ba61-7075adb85329.cer sbgp-ipAddrBlock: critical IPv4: 23.128.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:1f:bd:98:90:9b:36:79:ab:81:c7:b7:8a:5f:8c:34:e5:93: d4:9d:fa:6b:a8:02:c7:5f:1e:eb:2a:56:a5:00:34:53:13:13: e2:55:60:75:88:a8:bb:5f:50:49:f7:cf:8b:7b:92:e2:aa:74: 6d:77:b8:5c:f9:55:15:36:4d:fe:0a:9b:ea:21:dd:8a:b6:90: 52:9e:97:34:df:ab:ee:a2:57:f8:47:5c:91:d6:fc:9d:03:ad: 7f:5b:6a:3d:10:a7:18:11:dd:30:90:d4:56:59:71:8e:ac:50: 3d:9a:49:93:38:00:5b:c5:71:b3:d3:26:2f:25:e0:28:17:30: ec:9e:cb:ea:27:6e:a7:6b:b8:5e:1d:49:44:ab:6d:c3:9b:c4: 09:58:38:59:f6:38:aa:04:64:ff:b8:35:8b:61:79:56:a5:c9: 91:dd:d1:92:1a:9e:65:c5:e5:6d:f6:54:b3:32:e9:f0:a3:11: e2:67:b2:79:02:d9:90:cb:af:62:5e:8a:85:16:2e:81:31:9d: da:88:db:15:8f:88:60:5c:61:1e:1e:34:44:b0:0d:a0:dd:ce: d2:4f:c5:dd:be:68:26:93:ba:05:e7:40:1e:81:e9:6f:38:5e: 05:7f:8f:8b:eb:b2:02:18:3a:b1:9f:b0:ca:46:11:e7:c1:0b: b9:5f:c0:a5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9hLWZOvlxJaxgvWAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWVmZjgxNmYtNDJlZi00N2E2LWJhNjEtNzA3NWFkYjg1 MzI5MB4XDTI2MTAwMzEzMDAxM1oXDTI3MDEwMTE0MDAxM1owLzEtMCsGA1UEAxMk MmU0MTJjMzctZmE5Ni00YWFjLWE3ZTMtNDFjNDgzNTNjNDA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnZQ0ONd/IRpkBDrn2bT8rfmzGfbPy3OsyNcR fDcgRAKKL1h/znQgBHC3F0eV6Yf2kATnNJMOPjlueZyYU+OrUFQSOy+UkM9HU7VO X/UEHJILhvu+0LaxnLxbZCzunpgRqZDoElCo1laWvG/pS2qYKBnZXPQH6FhJx1vJ UxI8J8CdJh41LtLlqwsEgtnLhde0+RElz9v2h7h8aQZ9W7ogvBlskULrZB3pePLs MBR9YTxBMkZG/WyJlHU6nHC7OzbV/KFGMIHq0e86cnhW38umLd6fNekA/aqJFNTk qg2B/7JJgZBWV4MLoDLuv4YEq+27RZI4XX3UwnnddcglmzwtkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKIg4vAxRPSpPdBs8JCHDRM44XMsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9lZWZm ODE2Zi00MmVmLTQ3YTYtYmE2MS03MDc1YWRiODUzMjkvNWI2NjVjMmUtYzJkMS0z OTRmLWEzNzktOGI0MmE3OWM5MGVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZWVmZjgxNmYtNDJlZi00N2E2LWJh NjEtNzA3NWFkYjg1MzI5L2VlZmY4MTZmLTQyZWYtNDdhNi1iYTYxLTcwNzVhZGI4 NTMyOS5jcmwwHwYDVR0jBBgwFoAU6ll783GIb8wezeqNVRDlPcsR9H0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9lZWZmODE2Zi00MmVmLTQ3YTYtYmE2MS03MDc1 YWRiODUzMjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4AAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEgfvZiQmzZ5q4HHt4pfjDTlk9Sd+muoAsdfHusqVqUANFMTE+JVYHWI qLtfUEn3z4t7kuKqdG13uFz5VRU2Tf4Km+oh3Yq2kFKelzTfq+6iV/hHXJHW/J0D rX9baj0QpxgR3TCQ1FZZcY6sUD2aSZM4AFvFcbPTJi8l4CgXMOyey+onbqdruF4d SUSrbcObxAlYOFn2OKoEZP+4NYtheValyZHd0ZIanmXF5W32VLMy6fCjEeJnsnkC 2ZDLr2JeioUWLoExndqI2xWPiGBcYR4eNESwDaDdztJPxd2+aCaTugXnQB6B6W84 XgV/j4vrsgIYOrGfsMpGEefBC7lfwKU= -----END CERTIFICATE-----Generated at Thu Oct 8 06:33:21 2026 by rpki-client