$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/603ec9c3-6a7f-4455-baee-5999e253e735/23168d98-beae-3197-8375-14702f665631.roa File: 23168d98-beae-3197-8375-14702f665631.roa (raw, json) Hash identifier: qure1C/Ivgu+J/ELmuY9ELhyRJTWgMdRZlSyqpSffaY= Subject key identifier: 5D:75:C0:C6:C1:EB:01:C3:59:D4:76:7B:6A:F6:04:69:E1:DB:B1:BF Certificate issuer: /CN=603ec9c3-6a7f-4455-baee-5999e253e735 Certificate serial: 010D0C9F4328584F63F81DFA2064BC101B047400 Authority key identifier: 8E:2C:C0:E0:03:39:DF:F9:32:13:AA:61:21:F8:AB:2D:67:F8:BA:F1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/603ec9c3-6a7f-4455-baee-5999e253e735.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/603ec9c3-6a7f-4455-baee-5999e253e735/23168d98-beae-3197-8375-14702f665631.roa Signing time: Sun 04 Oct 2026 13:00:13 +0000 ROA not before: Sun 04 Oct 2026 13:00:13 +0000 ROA not after: Sat 02 Jan 2027 14:00:13 +0000 asID: 3676 IP address blocks: 128.255.0.0/16 maxlen: 24 129.255.0.0/16 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/603ec9c3-6a7f-4455-baee-5999e253e735/603ec9c3-6a7f-4455-baee-5999e253e735.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/603ec9c3-6a7f-4455-baee-5999e253e735/603ec9c3-6a7f-4455-baee-5999e253e735.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/603ec9c3-6a7f-4455-baee-5999e253e735.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:63:f8:1d:fa:20:64:bc:10:1b:04:74:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=603ec9c3-6a7f-4455-baee-5999e253e735 Validity Not Before: Oct 4 13:00:13 2026 GMT Not After : Jan 2 14:00:13 2027 GMT Subject: CN=33c69147-8694-465b-a37b-0dd15a7297b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:d9:fd:1e:3d:ae:dd:81:5c:f2:fa:9c:b0:1c: 68:20:5b:55:18:15:98:2f:42:d1:9d:1d:af:ee:86: 91:33:99:7c:e3:f6:19:7a:8b:be:c9:c0:8d:95:c1: 7f:a2:44:f7:e5:98:db:d8:b5:6d:74:99:62:29:41: 1e:28:a7:f5:99:ee:63:68:96:75:2e:49:89:44:59: 5f:a7:68:07:e9:b9:66:47:d8:12:5b:db:78:27:2f: f2:46:88:cc:89:99:5c:3b:09:ee:a4:e9:2f:f6:ff: 0e:e1:66:ca:af:2d:3c:76:36:2c:ca:c1:d9:b8:81: 48:80:df:3f:96:d9:05:3b:de:26:a3:9e:d0:39:d7: 74:d1:dc:86:c5:ce:33:87:8f:79:7c:d1:38:0f:4a: 36:2f:e3:24:5c:72:cb:ea:77:b9:a3:05:45:7a:85: ff:da:2d:fa:55:66:b0:42:3a:1d:5f:9a:fa:c6:85: 40:eb:9c:66:85:83:c2:c1:43:36:96:81:7d:2a:db: 28:ab:fe:e5:9a:46:d5:82:68:56:7a:cb:d5:92:44: 6a:0d:74:d2:93:0f:67:db:1d:20:b8:33:17:20:00: dc:64:40:cc:db:16:96:9a:01:e0:cb:c3:53:b4:b2: df:3d:76:da:2e:4e:d6:33:18:74:47:26:3b:b6:9b: be:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:75:C0:C6:C1:EB:01:C3:59:D4:76:7B:6A:F6:04:69:E1:DB:B1:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/603ec9c3-6a7f-4455-baee-5999e253e735/23168d98-beae-3197-8375-14702f665631.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/603ec9c3-6a7f-4455-baee-5999e253e735/603ec9c3-6a7f-4455-baee-5999e253e735.crl X509v3 Authority Key Identifier: keyid:8E:2C:C0:E0:03:39:DF:F9:32:13:AA:61:21:F8:AB:2D:67:F8:BA:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/603ec9c3-6a7f-4455-baee-5999e253e735.cer sbgp-ipAddrBlock: critical IPv4: 128.255.0.0/16 129.255.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bf:ef:c2:39:db:78:c7:ae:da:51:a5:ad:0d:98:0c:e5:d9:ad: 24:14:58:34:32:8b:c8:e6:41:bf:1d:d1:f1:ff:53:e0:7e:21: 4c:78:9e:25:66:3c:a0:0e:d6:cc:b6:47:63:8a:5a:c8:01:30: 5d:90:4b:df:a7:a6:32:0b:7a:64:67:38:d4:b7:93:5a:05:1a: 03:0b:97:43:37:ab:fb:8e:2b:62:c1:89:6a:e2:d6:be:12:6d: b0:63:c6:cf:b5:71:fc:eb:06:fb:71:d6:f4:40:e1:33:99:ce: 7f:df:a3:1e:8c:47:ba:9b:75:96:d5:58:07:56:7d:14:e3:c4: 0a:41:22:9b:98:0f:b6:86:b5:16:ea:d6:03:fb:74:39:af:12: 56:a1:b9:71:e5:45:4a:56:66:e0:77:ec:6e:53:cc:ba:0a:88: 36:00:4c:29:2d:6b:32:d3:e5:88:5b:8b:74:bb:74:de:db:7e: 31:c6:f0:00:c2:0d:23:24:c4:f2:f7:99:c6:42:43:eb:27:4f: 1e:d0:35:4a:93:2b:9c:3a:da:3a:38:49:09:de:fc:ee:5c:0f: a4:5e:1a:b5:eb:fe:50:5f:c9:42:42:b9:66:26:ef:73:f1:09: be:f1:7a:6a:84:21:44:9f:53:d2:f0:91:ac:7a:d0:86:c3:d8: de:69:61:f1 -----BEGIN CERTIFICATE----- MIIGRzCCBS+gAwIBAgIUAQ0Mn0MoWE9j+B36IGS8EBsEdAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjAzZWM5YzMtNmE3Zi00NDU1LWJhZWUtNTk5OWUyNTNl NzM1MB4XDTI2MTAwNDEzMDAxM1oXDTI3MDEwMjE0MDAxM1owLzEtMCsGA1UEAxMk MzNjNjkxNDctODY5NC00NjViLWEzN2ItMGRkMTVhNzI5N2IxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1tn9Hj2u3YFc8vqcsBxoIFtVGBWYL0LRnR2v 7oaRM5l84/YZeou+ycCNlcF/okT35Zjb2LVtdJliKUEeKKf1me5jaJZ1LkmJRFlf p2gH6blmR9gSW9t4Jy/yRojMiZlcOwnupOkv9v8O4WbKry08djYsysHZuIFIgN8/ ltkFO94mo57QOdd00dyGxc4zh495fNE4D0o2L+MkXHLL6ne5owVFeoX/2i36VWaw QjodX5r6xoVA65xmhYPCwUM2loF9Ktsoq/7lmkbVgmhWesvVkkRqDXTSkw9n2x0g uDMXIADcZEDM2xaWmgHgy8NTtLLfPXbaLk7WMxh0RyY7tpu+kwIDAQABo4IDWTCC A1UwHQYDVR0OBBYEFF11wMbB6wHDWdR2e2r2BGnh27G/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82MDNl YzljMy02YTdmLTQ0NTUtYmFlZS01OTk5ZTI1M2U3MzUvMjMxNjhkOTgtYmVhZS0z MTk3LTgzNzUtMTQ3MDJmNjY1NjMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjAzZWM5YzMtNmE3Zi00NDU1LWJh ZWUtNTk5OWUyNTNlNzM1LzYwM2VjOWMzLTZhN2YtNDQ1NS1iYWVlLTU5OTllMjUz ZTczNS5jcmwwHwYDVR0jBBgwFoAUjizA4AM53/kyE6phIfirLWf4uvEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82MDNlYzljMy02YTdmLTQ0NTUtYmFlZS01OTk5 ZTI1M2U3MzUuY2VyMCMGCCsGAQUFBwEHAQH/BBQwEjAQBAIAATAKAwMAgP8DAwCB /zBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBz Oi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3 DQEBCwUAA4IBAQC/78I523jHrtpRpa0NmAzl2a0kFFg0MovI5kG/HdHx/1PgfiFM eJ4lZjygDtbMtkdjilrIATBdkEvfp6YyC3pkZzjUt5NaBRoDC5dDN6v7jitiwYlq 4ta+Em2wY8bPtXH86wb7cdb0QOEzmc5/36MejEe6m3WW1VgHVn0U48QKQSKbmA+2 hrUW6tYD+3Q5rxJWoblx5UVKVmbgd+xuU8y6Cog2AEwpLWsy0+WIW4t0u3Te234x xvAAwg0jJMTy95nGQkPrJ08e0DVKkyucOto6OEkJ3vzuXA+kXhq16/5QX8lCQrlm Ju9z8Qm+8XpqhCFEn1PS8JGsetCGw9jeaWHx -----END CERTIFICATE-----Generated at Sun Oct 11 04:37:42 2026 by rpki-client