$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bce2ace0-971c-48f1-8361-962ad02d9618/5a866018-70fa-3794-ba86-57885d76af56.roa File: 5a866018-70fa-3794-ba86-57885d76af56.roa (raw, json) Hash identifier: CUoETNLuVCC0ppqYc7Phti4QI0SRnqB3xRblCokUJ2s= Subject key identifier: BF:AA:80:AA:23:4B:E6:C4:64:6F:15:78:8F:37:54:4A:5D:9C:4E:67 Certificate issuer: /CN=bce2ace0-971c-48f1-8361-962ad02d9618 Certificate serial: 010D0C9F4328584F4975B9553AAAC6E56B8AA080 Authority key identifier: E0:97:0C:68:49:45:08:A9:16:69:01:83:CE:76:11:9E:83:A9:6F:44 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bce2ace0-971c-48f1-8361-962ad02d9618.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bce2ace0-971c-48f1-8361-962ad02d9618/5a866018-70fa-3794-ba86-57885d76af56.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 32943 IP address blocks: 23.175.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bce2ace0-971c-48f1-8361-962ad02d9618/bce2ace0-971c-48f1-8361-962ad02d9618.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bce2ace0-971c-48f1-8361-962ad02d9618/bce2ace0-971c-48f1-8361-962ad02d9618.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bce2ace0-971c-48f1-8361-962ad02d9618.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Oct 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:75:b9:55:3a:aa:c6:e5:6b:8a:a0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bce2ace0-971c-48f1-8361-962ad02d9618 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=1d386466-3854-40a9-9076-b7c1394359db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:b9:c9:f5:0e:56:74:90:45:96:44:af:5d:6a: b0:71:81:c0:53:7f:be:79:de:b7:8f:78:ff:2c:a3: 05:a5:c4:1d:ea:60:8b:42:75:86:0e:65:88:9c:1c: 1a:38:d5:58:c9:16:80:3c:1f:90:d0:d0:08:05:18: af:15:c9:ca:32:4e:e0:8f:40:a5:21:f4:da:34:31: 1c:83:e1:6f:16:ca:1b:c6:dd:53:57:af:38:2a:da: 45:aa:ee:3c:a8:eb:75:38:cd:fb:01:7a:04:d1:99: 5c:7b:aa:76:e5:0c:1e:34:8b:32:e1:f8:3c:df:4a: 75:c4:c5:20:7e:b4:db:10:5e:5a:c3:bf:70:f5:a3: e9:cb:60:c9:86:2e:f6:ac:4f:5a:5b:d5:7b:82:d8: ba:08:7b:74:a5:95:ff:36:18:60:33:a8:0a:40:c7: f4:89:56:ef:f3:b6:9c:6e:6d:8b:75:9b:d0:85:8c: 48:a4:0b:8f:25:1d:76:b0:d1:75:0d:70:d4:6f:50: ce:48:11:a8:5b:6e:17:fb:7d:5e:75:01:95:8f:81: ab:2a:57:e0:7e:d8:e0:13:91:68:98:e7:c9:f5:0c: 33:15:5c:9e:c4:df:e2:29:14:74:b4:b3:15:c8:e0: e9:43:cb:fd:9d:93:3a:9d:5a:b1:fa:3a:a6:94:9c: 03:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:AA:80:AA:23:4B:E6:C4:64:6F:15:78:8F:37:54:4A:5D:9C:4E:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bce2ace0-971c-48f1-8361-962ad02d9618/5a866018-70fa-3794-ba86-57885d76af56.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bce2ace0-971c-48f1-8361-962ad02d9618/bce2ace0-971c-48f1-8361-962ad02d9618.crl X509v3 Authority Key Identifier: keyid:E0:97:0C:68:49:45:08:A9:16:69:01:83:CE:76:11:9E:83:A9:6F:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bce2ace0-971c-48f1-8361-962ad02d9618.cer sbgp-ipAddrBlock: critical IPv4: 23.175.168.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:1e:55:d5:c1:95:4d:76:9c:ff:cf:75:bf:10:d1:4f:aa:8d: 31:cd:9d:fa:1e:d2:da:63:2f:0c:94:10:e7:aa:7e:0b:b4:f1: 78:1d:8d:46:54:a5:aa:d5:77:8a:9f:f6:c6:be:6f:28:d6:d3: b3:68:5e:e2:f8:04:6a:73:d5:82:2c:41:9c:8a:ee:2b:2c:0f: e0:7e:2c:f1:96:6d:f6:7e:76:fd:e0:b2:4d:7e:07:7d:02:50: 3c:98:b8:7a:bf:01:25:a8:b5:63:05:ba:c3:36:1d:01:31:21: e0:3d:51:b3:e3:0b:ae:6c:57:ac:fb:3c:27:95:79:c3:69:32: bd:8c:9e:d4:b8:8d:fc:0f:e3:bb:f3:4c:f8:82:3a:a6:14:cd: 60:ec:29:50:57:ca:21:ca:7c:ac:ae:e1:19:02:12:58:27:ff: 20:4a:36:55:e9:3f:05:7c:ca:f1:30:0b:34:81:fd:04:09:17: e7:61:53:42:10:57:9f:af:71:7d:55:97:31:f7:5a:6d:38:dc: 5c:38:37:1a:6e:1b:b5:61:cd:a0:79:f7:90:50:ca:e9:2b:2e: 5c:68:ca:a7:0e:be:7f:c4:de:80:82:e1:ed:ff:b4:fb:ac:36: 04:ea:1e:57:74:12:3f:9c:74:88:46:7c:6b:fa:95:e2:30:eb: 61:04:77:fc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdblVOqrG5WuKoIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmNlMmFjZTAtOTcxYy00OGYxLTgzNjEtOTYyYWQwMmQ5 NjE4MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MWQzODY0NjYtMzg1NC00MGE5LTkwNzYtYjdjMTM5NDM1OWRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA77nJ9Q5WdJBFlkSvXWqwcYHAU3++ed63j3j/ LKMFpcQd6mCLQnWGDmWInBwaONVYyRaAPB+Q0NAIBRivFcnKMk7gj0ClIfTaNDEc g+FvFsobxt1TV684KtpFqu48qOt1OM37AXoE0Zlce6p25QweNIsy4fg830p1xMUg frTbEF5aw79w9aPpy2DJhi72rE9aW9V7gti6CHt0pZX/NhhgM6gKQMf0iVbv87ac bm2LdZvQhYxIpAuPJR12sNF1DXDUb1DOSBGoW24X+31edQGVj4GrKlfgftjgE5Fo mOfJ9QwzFVyexN/iKRR0tLMVyODpQ8v9nZM6nVqx+jqmlJwD8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL+qgKojS+bEZG8VeI83VEpdnE5nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iY2Uy YWNlMC05NzFjLTQ4ZjEtODM2MS05NjJhZDAyZDk2MTgvNWE4NjYwMTgtNzBmYS0z Nzk0LWJhODYtNTc4ODVkNzZhZjU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYmNlMmFjZTAtOTcxYy00OGYxLTgz NjEtOTYyYWQwMmQ5NjE4L2JjZTJhY2UwLTk3MWMtNDhmMS04MzYxLTk2MmFkMDJk OTYxOC5jcmwwHwYDVR0jBBgwFoAU4JcMaElFCKkWaQGDznYRnoOpb0QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9iY2UyYWNlMC05NzFjLTQ4ZjEtODM2MS05NjJh ZDAyZDk2MTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6+oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGUeVdXBlU12nP/Pdb8Q0U+qjTHNnfoe0tpjLwyUEOeqfgu08XgdjUZU parVd4qf9sa+byjW07NoXuL4BGpz1YIsQZyK7issD+B+LPGWbfZ+dv3gsk1+B30C UDyYuHq/ASWotWMFusM2HQExIeA9UbPjC65sV6z7PCeVecNpMr2MntS4jfwP47vz TPiCOqYUzWDsKVBXyiHKfKyu4RkCElgn/yBKNlXpPwV8yvEwCzSB/QQJF+dhU0IQ V5+vcX1VlzH3Wm043Fw4NxpuG7VhzaB595BQyukrLlxoyqcOvn/E3oCC4e3/tPus NgTqHld0Ej+cdIhGfGv6leIw62EEd/w= -----END CERTIFICATE-----Generated at Fri Oct 9 20:42:15 2026 by rpki-client