$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/8e5abe26-35c1-3b16-9b96-323c165f8420.roa File: 8e5abe26-35c1-3b16-9b96-323c165f8420.roa (raw, json) Hash identifier: WTiJfSGaVwhgSd2HqOS0PrHpuL9hMDIt0nH2K9W/+Pk= Subject key identifier: E3:8D:47:E4:D8:F2:09:35:5A:D1:7C:7F:4B:70:87:80:FB:7A:7C:AA Certificate issuer: /CN=b2959336-6afe-411c-b979-dac0a693f8c4 Certificate serial: 010D0C9F4328584F497699894A58005D2F18F100 Authority key identifier: 1C:52:30:32:FE:EB:5B:92:6D:5A:2E:35:E5:7C:80:3B:15:E0:32:73 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/8e5abe26-35c1-3b16-9b96-323c165f8420.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 11870 IP address blocks: 167.23.96.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/b2959336-6afe-411c-b979-dac0a693f8c4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/b2959336-6afe-411c-b979-dac0a693f8c4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:76:99:89:4a:58:00:5d:2f:18:f1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2959336-6afe-411c-b979-dac0a693f8c4 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=e118bc70-1247-42e8-8358-c7d44cd893c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:b1:ca:e3:ad:92:c3:bc:80:59:14:de:00:78: 14:db:b4:8e:b8:b8:ee:fa:7c:8d:b9:0f:1c:68:d1: a5:8d:43:6f:40:f3:d5:f8:34:75:ba:0a:1e:7f:1d: 96:5e:33:4f:21:70:08:0d:85:cb:2d:b9:cc:1b:fa: 4b:f5:8e:82:10:e3:39:0f:2d:39:25:96:77:7a:b4: 81:47:6f:67:c8:ed:53:87:a4:53:72:89:72:6b:8c: eb:77:db:e5:25:4b:37:75:ba:07:24:cb:b8:97:f3: 33:17:09:a8:b1:75:86:e3:0a:4f:d0:28:fb:03:82: dc:79:fe:5f:f3:56:b3:b7:94:f5:69:25:e0:53:b0: 37:22:ac:bf:e5:17:ed:3b:89:fe:44:d1:3e:5f:6d: 05:a6:39:c9:d7:2b:ba:95:c4:f2:29:6a:be:1f:20: 91:23:d7:f8:5f:05:90:48:81:31:69:48:34:fd:77: 24:2f:cd:64:ca:22:f2:a0:28:ef:95:2d:5c:22:72: 0a:b3:91:ab:3b:c5:b6:ef:3f:8c:d6:20:80:81:cf: 60:36:9f:a6:e8:48:38:c6:96:16:f6:a3:cc:72:fd: 22:ff:66:7e:90:f1:23:7a:cb:5f:4a:bb:dd:fb:58: c7:85:e2:ec:c1:3f:5a:ba:e2:ec:32:5e:1c:a7:70: 55:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:8D:47:E4:D8:F2:09:35:5A:D1:7C:7F:4B:70:87:80:FB:7A:7C:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/8e5abe26-35c1-3b16-9b96-323c165f8420.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/b2959336-6afe-411c-b979-dac0a693f8c4.crl X509v3 Authority Key Identifier: keyid:1C:52:30:32:FE:EB:5B:92:6D:5A:2E:35:E5:7C:80:3B:15:E0:32:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4.cer sbgp-ipAddrBlock: critical IPv4: 167.23.96.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:4f:07:75:82:17:48:a3:2e:56:c3:14:64:0f:b6:a9:be:5f: 36:8f:6a:f2:7d:2c:97:f4:22:b5:6e:79:0f:bf:e2:bf:c1:f7: 05:2f:79:25:db:ce:6e:20:77:6e:2f:6e:c6:45:40:64:e0:f8: 8b:fc:29:b5:c8:29:5d:e6:f5:b4:83:8b:5b:db:76:b0:7b:58: 19:6b:09:51:f6:3b:d9:d1:75:76:67:d6:f9:ee:8a:06:d6:3f: 13:bc:85:6c:d9:cb:cd:af:38:95:b2:f9:cc:87:8f:47:90:18: 37:e0:88:08:23:3a:5c:fe:db:9c:20:08:1f:0b:8f:73:7c:02: 79:4d:78:fa:98:7b:c7:57:a3:dc:33:8d:55:16:8e:cc:fd:03: f1:d3:87:09:42:53:aa:ae:63:e5:f7:f4:37:f7:c9:ec:c3:1d: 32:5a:a5:4b:c2:dc:f3:af:ac:7d:82:04:b8:42:6e:fc:f3:0e: a2:05:94:94:7d:e5:b2:59:f2:27:e1:49:7a:95:7f:e2:61:ac: 30:d0:6f:4a:b2:fd:23:d2:99:72:1c:fb:b4:f6:fc:0d:60:b4: a0:9b:04:46:38:12:14:2c:ff:cd:2c:39:b2:68:c2:47:8c:83: 58:dc:7d:b8:e2:ff:8a:dd:44:cb:4c:fc:a9:b0:68:a3:32:16: 67:0f:e8:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdpmJSlgAXS8Y8QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjI5NTkzMzYtNmFmZS00MTFjLWI5NzktZGFjMGE2OTNm OGM0MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZTExOGJjNzAtMTI0Ny00MmU4LTgzNTgtYzdkNDRjZDg5M2M5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm7HK462Sw7yAWRTeAHgU27SOuLju+nyNuQ8c aNGljUNvQPPV+DR1ugoefx2WXjNPIXAIDYXLLbnMG/pL9Y6CEOM5Dy05JZZ3erSB R29nyO1Th6RTcolya4zrd9vlJUs3dboHJMu4l/MzFwmosXWG4wpP0Cj7A4Lcef5f 81azt5T1aSXgU7A3Iqy/5RftO4n+RNE+X20FpjnJ1yu6lcTyKWq+HyCRI9f4XwWQ SIExaUg0/XckL81kyiLyoCjvlS1cInIKs5GrO8W27z+M1iCAgc9gNp+m6Eg4xpYW 9qPMcv0i/2Z+kPEjestfSrvd+1jHheLswT9auuLsMl4cp3BVFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOONR+TY8gk1WtF8f0twh4D7enyqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iMjk1 OTMzNi02YWZlLTQxMWMtYjk3OS1kYWMwYTY5M2Y4YzQvOGU1YWJlMjYtMzVjMS0z YjE2LTliOTYtMzIzYzE2NWY4NDIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYjI5NTkzMzYtNmFmZS00MTFjLWI5 NzktZGFjMGE2OTNmOGM0L2IyOTU5MzM2LTZhZmUtNDExYy1iOTc5LWRhYzBhNjkz ZjhjNC5jcmwwHwYDVR0jBBgwFoAUHFIwMv7rW5JtWi415XyAOxXgMnMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9iMjk1OTMzNi02YWZlLTQxMWMtYjk3OS1kYWMw YTY5M2Y4YzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBpxdgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAElPB3WCF0ijLlbDFGQPtqm+XzaPavJ9LJf0IrVueQ+/4r/B9wUveSXb zm4gd24vbsZFQGTg+Iv8KbXIKV3m9bSDi1vbdrB7WBlrCVH2O9nRdXZn1vnuigbW PxO8hWzZy82vOJWy+cyHj0eQGDfgiAgjOlz+25wgCB8Lj3N8AnlNePqYe8dXo9wz jVUWjsz9A/HThwlCU6quY+X39Df3yezDHTJapUvC3POvrH2CBLhCbvzzDqIFlJR9 5bJZ8ifhSXqVf+JhrDDQb0qy/SPSmXIc+7T2/A1gtKCbBEY4EhQs/80sObJowkeM g1jcfbji/4rdRMtM/KmwaKMyFmcP6Lk= -----END CERTIFICATE-----Generated at Tue Oct 6 21:19:11 2026 by rpki-client