$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/87664052-795b-32ea-a22c-6b5d3132878f.roa File: 87664052-795b-32ea-a22c-6b5d3132878f.roa (raw, json) Hash identifier: IAvBY04lJAmpCet/4D01JKkAOslrxj2brsKuwbKQYa8= Subject key identifier: 68:D1:29:D3:9D:53:92:23:BA:B5:BB:BC:5F:94:9C:03:6F:8E:EF:91 Certificate issuer: /CN=b2959336-6afe-411c-b979-dac0a693f8c4 Certificate serial: 010D0C9F4328584F4976984B14480AB2FAEA8200 Authority key identifier: 1C:52:30:32:FE:EB:5B:92:6D:5A:2E:35:E5:7C:80:3B:15:E0:32:73 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/87664052-795b-32ea-a22c-6b5d3132878f.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 55571 IP address blocks: 167.23.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/b2959336-6afe-411c-b979-dac0a693f8c4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/b2959336-6afe-411c-b979-dac0a693f8c4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:76:98:4b:14:48:0a:b2:fa:ea:82:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2959336-6afe-411c-b979-dac0a693f8c4 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=c25a1623-0b77-4985-9370-9cd7436227b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:a7:b7:55:00:15:04:a4:61:21:75:65:23:b7: 3c:a5:e3:08:ac:57:93:1c:e0:b0:e3:c8:eb:0e:a7: 3c:1a:7c:b8:8a:a4:df:28:f4:83:65:f4:82:fa:5c: 9d:52:d0:4a:f5:6e:20:3d:b1:9a:3e:29:ab:dc:ad: 0a:20:2a:16:b8:8f:3c:23:9a:cf:06:eb:ab:83:68: 17:3f:2f:33:bf:06:fc:9f:4b:13:56:d1:ca:b5:dd: 65:70:dc:89:88:17:df:2c:de:08:36:12:f7:b6:1a: bc:d9:b7:10:38:6f:1a:91:66:97:b5:dd:45:13:e7: e5:dc:0f:df:eb:e9:66:52:e0:4d:12:28:b5:45:50: 0b:95:7c:6d:28:61:21:41:c9:8a:b1:f7:d8:48:71: 34:fd:16:e5:4f:d9:fc:17:c1:0e:83:d7:31:8f:47: 3b:a0:9c:0d:fa:f4:21:50:ed:60:e0:f8:0a:d8:cb: e3:3a:45:b7:10:98:88:f6:ef:29:bb:86:f8:2f:33: d5:0f:68:fd:b9:e2:63:82:bb:a3:3b:f1:b6:b5:c4: 98:90:a7:18:6b:ca:e0:c3:bd:d9:45:18:7a:66:e1: a7:ee:9d:af:05:46:f6:c4:c9:b7:c1:6f:fd:65:69: 97:0a:a4:43:13:5b:d1:34:f7:60:0c:34:82:3b:9c: f6:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:D1:29:D3:9D:53:92:23:BA:B5:BB:BC:5F:94:9C:03:6F:8E:EF:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/87664052-795b-32ea-a22c-6b5d3132878f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/b2959336-6afe-411c-b979-dac0a693f8c4.crl X509v3 Authority Key Identifier: keyid:1C:52:30:32:FE:EB:5B:92:6D:5A:2E:35:E5:7C:80:3B:15:E0:32:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4.cer sbgp-ipAddrBlock: critical IPv4: 167.23.125.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:5b:99:7c:76:13:23:b3:7d:35:71:0e:1c:dc:cf:7e:e5:32: 89:42:5b:98:3c:3a:2f:87:90:0c:42:f8:89:b3:fa:54:d2:c2: 96:e9:51:35:34:a1:e5:1c:65:82:d7:ab:79:37:d0:08:dc:99: b5:0f:51:bc:95:f6:74:62:43:d2:a4:d5:87:6d:32:f3:bb:54: 17:95:6c:68:3a:1a:e3:f7:16:63:61:7b:ed:9f:64:43:ea:37: 6c:fb:44:be:ab:ed:25:43:08:e7:8a:ae:eb:94:32:11:fc:72: 45:03:f4:ea:18:75:81:fc:36:b3:b2:45:e3:84:d5:43:82:f0: 58:f9:e1:e5:a9:78:5e:66:d9:0c:b8:5c:63:35:cb:3e:70:c5: d7:9d:01:61:7a:f2:28:a8:0f:a9:f8:ca:cc:28:98:6c:7f:40: e9:5b:80:ca:a4:a7:06:ce:5b:30:4a:31:39:61:e6:4d:97:57: bd:62:3a:8e:d3:4d:ae:3d:38:89:72:0e:5d:bb:ce:80:fe:77: 5b:c2:95:8c:b4:75:62:36:0c:f1:d7:e7:0f:d7:c5:8e:e9:0e: e8:31:68:a2:99:ba:40:ff:bf:7e:e6:99:12:99:80:45:7d:09: 76:ed:f7:ac:ec:bf:2d:7f:9f:7e:a6:f8:7a:be:02:c7:52:a7: 05:c4:45:9f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdphLFEgKsvrqggAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjI5NTkzMzYtNmFmZS00MTFjLWI5NzktZGFjMGE2OTNm OGM0MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YzI1YTE2MjMtMGI3Ny00OTg1LTkzNzAtOWNkNzQzNjIyN2I1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiae3VQAVBKRhIXVlI7c8peMIrFeTHOCw48jr Dqc8Gny4iqTfKPSDZfSC+lydUtBK9W4gPbGaPimr3K0KICoWuI88I5rPBuurg2gX Py8zvwb8n0sTVtHKtd1lcNyJiBffLN4INhL3thq82bcQOG8akWaXtd1FE+fl3A/f 6+lmUuBNEii1RVALlXxtKGEhQcmKsffYSHE0/RblT9n8F8EOg9cxj0c7oJwN+vQh UO1g4PgK2MvjOkW3EJiI9u8pu4b4LzPVD2j9ueJjgrujO/G2tcSYkKcYa8rgw73Z RRh6ZuGn7p2vBUb2xMm3wW/9ZWmXCqRDE1vRNPdgDDSCO5z2nQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGjRKdOdU5IjurW7vF+UnANvju+RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iMjk1 OTMzNi02YWZlLTQxMWMtYjk3OS1kYWMwYTY5M2Y4YzQvODc2NjQwNTItNzk1Yi0z MmVhLWEyMmMtNmI1ZDMxMzI4NzhmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYjI5NTkzMzYtNmFmZS00MTFjLWI5 NzktZGFjMGE2OTNmOGM0L2IyOTU5MzM2LTZhZmUtNDExYy1iOTc5LWRhYzBhNjkz ZjhjNC5jcmwwHwYDVR0jBBgwFoAUHFIwMv7rW5JtWi415XyAOxXgMnMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9iMjk1OTMzNi02YWZlLTQxMWMtYjk3OS1kYWMw YTY5M2Y4YzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApxd9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEJbmXx2EyOzfTVxDhzcz37lMolCW5g8Oi+HkAxC+Imz+lTSwpbpUTU0 oeUcZYLXq3k30AjcmbUPUbyV9nRiQ9Kk1YdtMvO7VBeVbGg6GuP3FmNhe+2fZEPq N2z7RL6r7SVDCOeKruuUMhH8ckUD9OoYdYH8NrOyReOE1UOC8Fj54eWpeF5m2Qy4 XGM1yz5wxdedAWF68iioD6n4yswomGx/QOlbgMqkpwbOWzBKMTlh5k2XV71iOo7T Ta49OIlyDl27zoD+d1vClYy0dWI2DPHX5w/XxY7pDugxaKKZukD/v37mmRKZgEV9 CXbt96zsvy1/n36m+Hq+AsdSpwXERZ8= -----END CERTIFICATE-----Generated at Tue Oct 6 21:18:18 2026 by rpki-client