$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324346b5-3875-43b0-bb0d-8052274567d4/8c38affa-b7b6-3147-b194-57417958ad36.roa File: 8c38affa-b7b6-3147-b194-57417958ad36.roa (raw, json) Hash identifier: WGTCMjqtYg6tVszHgk2Q58w1QZayshorKph7xBr/G+E= Subject key identifier: 34:F5:84:56:EB:4E:BA:C5:E7:22:0F:D0:4D:8E:A3:46:0E:56:1F:32 Certificate issuer: /CN=324346b5-3875-43b0-bb0d-8052274567d4 Certificate serial: 010D0C9F4328584F6F22E5D4EF81C741DC411040 Authority key identifier: 4A:29:34:C5:92:66:79:E9:E9:E0:0B:FE:7F:B6:F0:E8:29:76:5E:24 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324346b5-3875-43b0-bb0d-8052274567d4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324346b5-3875-43b0-bb0d-8052274567d4/8c38affa-b7b6-3147-b194-57417958ad36.roa Signing time: Thu 08 Oct 2026 13:00:12 +0000 ROA not before: Thu 08 Oct 2026 13:00:12 +0000 ROA not after: Wed 06 Jan 2027 14:00:12 +0000 asID: 55 IP address blocks: 165.123.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324346b5-3875-43b0-bb0d-8052274567d4/324346b5-3875-43b0-bb0d-8052274567d4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324346b5-3875-43b0-bb0d-8052274567d4/324346b5-3875-43b0-bb0d-8052274567d4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324346b5-3875-43b0-bb0d-8052274567d4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:6f:22:e5:d4:ef:81:c7:41:dc:41:10:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=324346b5-3875-43b0-bb0d-8052274567d4 Validity Not Before: Oct 8 13:00:12 2026 GMT Not After : Jan 6 14:00:12 2027 GMT Subject: CN=aa53abda-7afb-4c7d-8e7a-9306b090ed38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:fb:85:69:13:fd:9b:8d:8a:f0:e4:1f:5e:d4: 19:f5:a3:dd:6d:ed:d2:c9:ea:f2:f3:9e:78:d2:6a: 9b:ae:9d:2a:df:94:fc:5e:8a:42:df:6e:c7:bf:b1: 6f:11:77:97:8d:a8:ba:ab:97:b6:13:89:30:9b:26: a1:83:81:74:32:b9:3a:a2:b2:f8:ac:a8:56:28:8d: 2a:61:ac:ec:24:1a:51:76:c7:09:d6:99:73:be:d9: bb:26:7d:76:b7:22:90:b3:c5:08:71:d6:34:09:fc: 62:f7:95:c3:a0:00:5e:7d:ec:a5:f8:46:52:37:23: 90:3c:83:0f:da:d1:82:8f:ff:62:67:25:a9:a3:99: 8d:74:63:96:9e:4f:bf:4c:f0:80:b6:7c:1e:e0:00: 97:82:76:7a:cb:9c:59:50:26:b7:ab:bb:80:4a:fe: c9:2d:90:c4:0e:9d:06:12:d9:2e:cc:9a:26:f6:e1: bc:2a:69:13:7b:a3:fb:49:96:9a:e2:d6:3d:aa:bd: 89:90:09:24:99:64:5f:5e:ab:0d:42:60:b5:6e:b3: 76:aa:68:b9:ac:01:fb:e3:9b:c7:8b:14:11:d4:79: 80:5b:2b:3b:03:9e:bc:83:a3:74:d4:ba:82:7d:9a: b3:70:a1:7e:c8:ae:7b:29:8e:d9:db:aa:8d:53:ca: d1:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:F5:84:56:EB:4E:BA:C5:E7:22:0F:D0:4D:8E:A3:46:0E:56:1F:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324346b5-3875-43b0-bb0d-8052274567d4/8c38affa-b7b6-3147-b194-57417958ad36.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324346b5-3875-43b0-bb0d-8052274567d4/324346b5-3875-43b0-bb0d-8052274567d4.crl X509v3 Authority Key Identifier: keyid:4A:29:34:C5:92:66:79:E9:E9:E0:0B:FE:7F:B6:F0:E8:29:76:5E:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/324346b5-3875-43b0-bb0d-8052274567d4.cer sbgp-ipAddrBlock: critical IPv4: 165.123.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:8b:d7:13:96:76:85:22:a8:f2:57:12:3d:cc:dd:5d:8f:4f: bf:e8:a3:27:1a:e4:40:77:e2:6e:2e:17:f1:d7:08:75:8f:c9: c1:48:7a:3e:aa:2d:64:d7:c8:77:37:d4:46:54:0f:2f:fe:0b: 6d:93:19:03:47:4f:6b:48:fc:2e:3c:76:53:e9:df:9a:70:10: 5b:dc:7c:0b:76:36:7b:5b:56:e2:92:03:46:16:ab:ce:ac:09: 01:4e:8b:e2:5e:f0:79:92:5b:5c:52:d9:b6:e8:5f:0b:10:c2: 68:ca:49:67:2f:04:88:35:b3:42:22:3f:d9:fe:e3:3e:9f:45: b5:83:db:7c:06:f7:7e:03:9b:ce:19:44:a4:b7:c7:1a:8a:ea: 99:3a:f1:e9:de:29:37:25:95:42:40:9e:cc:cb:c6:a8:f2:e9: 2a:1b:7b:cb:a2:c1:6d:f5:ac:b3:41:65:d0:3d:31:bf:c9:48: 32:f1:0d:56:dd:d5:ae:4e:4e:82:04:fb:6e:f1:19:8c:12:12: ba:34:1d:78:98:da:22:0d:5f:ec:e4:22:ce:44:c2:f5:a9:ff: 9d:ed:6c:a2:c2:41:e7:31:6f:1a:ab:03:aa:ab:76:fa:82:c7: c7:ca:28:41:d8:22:8a:27:21:62:2b:e9:d7:3c:c8:fd:34:cb: dd:25:ce:f5 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWE9vIuXU74HHQdxBEEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzI0MzQ2YjUtMzg3NS00M2IwLWJiMGQtODA1MjI3NDU2 N2Q0MB4XDTI2MTAwODEzMDAxMloXDTI3MDEwNjE0MDAxMlowLzEtMCsGA1UEAxMk YWE1M2FiZGEtN2FmYi00YzdkLThlN2EtOTMwNmIwOTBlZDM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArfuFaRP9m42K8OQfXtQZ9aPdbe3Syery8554 0mqbrp0q35T8XopC327Hv7FvEXeXjai6q5e2E4kwmyahg4F0Mrk6orL4rKhWKI0q YazsJBpRdscJ1plzvtm7Jn12tyKQs8UIcdY0Cfxi95XDoABefeyl+EZSNyOQPIMP 2tGCj/9iZyWpo5mNdGOWnk+/TPCAtnwe4ACXgnZ6y5xZUCa3q7uASv7JLZDEDp0G EtkuzJom9uG8KmkTe6P7SZaa4tY9qr2JkAkkmWRfXqsNQmC1brN2qmi5rAH745vH ixQR1HmAWys7A568g6N01LqCfZqzcKF+yK57KY7Z26qNU8rR4wIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFDT1hFbrTrrF5yIP0E2Oo0YOVh8yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zMjQz NDZiNS0zODc1LTQzYjAtYmIwZC04MDUyMjc0NTY3ZDQvOGMzOGFmZmEtYjdiNi0z MTQ3LWIxOTQtNTc0MTc5NThhZDM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzI0MzQ2YjUtMzg3NS00M2IwLWJi MGQtODA1MjI3NDU2N2Q0LzMyNDM0NmI1LTM4NzUtNDNiMC1iYjBkLTgwNTIyNzQ1 NjdkNC5jcmwwHwYDVR0jBBgwFoAUSik0xZJmeenp4Av+f7bw6Cl2XiQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zMjQzNDZiNS0zODc1LTQzYjAtYmIwZC04MDUy Mjc0NTY3ZDQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMApXswVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAf4vXE5Z2hSKo8lcSPczdXY9Pv+ijJxrkQHfibi4X8dcIdY/JwUh6Pqot ZNfIdzfURlQPL/4LbZMZA0dPa0j8Ljx2U+nfmnAQW9x8C3Y2e1tW4pIDRharzqwJ AU6L4l7weZJbXFLZtuhfCxDCaMpJZy8EiDWzQiI/2f7jPp9FtYPbfAb3fgObzhlE pLfHGorqmTrx6d4pNyWVQkCezMvGqPLpKht7y6LBbfWss0Fl0D0xv8lIMvENVt3V rk5OggT7bvEZjBISujQdeJjaIg1f7OQizkTC9an/ne1sosJB5zFvGqsDqqt2+oLH x8ooQdgiiichYivp1zzI/TTL3SXO9Q== -----END CERTIFICATE-----Generated at Sun Oct 11 12:03:55 2026 by rpki-client