$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3dbd8306-91a8-46a2-828a-ece722fc4280/9d86f567-f312-3939-b61d-473fa6432bdb.roa File: 9d86f567-f312-3939-b61d-473fa6432bdb.roa (raw, json) Hash identifier: GXtvm4d/eTSWvoSSLVvjKBo4alYhlSCeYb3XP24m6b4= Subject key identifier: 95:B2:CD:C3:C3:F7:32:70:B2:15:AA:DF:D2:8F:36:0B:90:11:9E:BA Certificate issuer: /CN=3dbd8306-91a8-46a2-828a-ece722fc4280 Certificate serial: 010D0C9F4328584F49766D58BECB84677BC54900 Authority key identifier: 1D:60:0E:40:9D:B0:4D:ED:CB:11:04:48:13:9C:45:13:5A:66:EE:64 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3dbd8306-91a8-46a2-828a-ece722fc4280.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3dbd8306-91a8-46a2-828a-ece722fc4280/9d86f567-f312-3939-b61d-473fa6432bdb.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 8796 IP address blocks: 23.165.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3dbd8306-91a8-46a2-828a-ece722fc4280/3dbd8306-91a8-46a2-828a-ece722fc4280.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3dbd8306-91a8-46a2-828a-ece722fc4280/3dbd8306-91a8-46a2-828a-ece722fc4280.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3dbd8306-91a8-46a2-828a-ece722fc4280.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:76:6d:58:be:cb:84:67:7b:c5:49:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3dbd8306-91a8-46a2-828a-ece722fc4280 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=b8b9310f-7aa2-4c22-8099-e54f1cf25718 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:61:40:91:ed:60:ba:a1:59:22:a2:1e:72:ee: 9c:16:ae:79:01:b8:8f:9f:a8:b4:2d:27:b7:b0:86: cd:ee:a5:26:37:36:aa:0c:ef:26:5f:15:ed:1f:ce: 19:e7:bb:50:5b:f3:8f:d8:b6:87:c7:37:66:90:3f: f9:ce:48:3a:a5:fa:ce:7d:81:d0:79:d2:32:2b:46: 14:95:c7:d2:13:8a:24:68:df:fe:e6:60:d3:e9:76: 26:ea:75:e2:e8:9f:4f:a0:d9:76:28:a3:56:8e:ad: a7:dd:20:03:a5:4b:1f:eb:59:56:73:f5:f5:60:2d: 26:3b:a2:74:82:86:e0:dc:47:9f:a3:3e:74:74:7e: b3:b0:b2:17:81:89:c3:ce:74:00:82:52:0e:21:a0: 9d:aa:cf:8e:a7:c0:ce:db:8c:5a:a5:0e:7b:45:4b: 49:f8:1c:07:7e:4c:9c:d3:80:7a:2a:c2:99:fb:be: dc:de:29:f3:26:7d:0f:8d:43:b0:31:0b:10:f8:85: 54:58:3e:56:fa:55:af:74:0c:ff:cb:53:5b:31:c8: 5b:26:82:46:24:09:af:33:43:d7:18:45:ef:c3:36: 3c:a2:dc:a6:0a:67:6f:78:2f:60:f9:7c:50:c8:85: b9:cb:48:11:1b:c7:ee:fa:f2:ed:e0:7b:9f:e7:7d: 1f:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:B2:CD:C3:C3:F7:32:70:B2:15:AA:DF:D2:8F:36:0B:90:11:9E:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3dbd8306-91a8-46a2-828a-ece722fc4280/9d86f567-f312-3939-b61d-473fa6432bdb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3dbd8306-91a8-46a2-828a-ece722fc4280/3dbd8306-91a8-46a2-828a-ece722fc4280.crl X509v3 Authority Key Identifier: keyid:1D:60:0E:40:9D:B0:4D:ED:CB:11:04:48:13:9C:45:13:5A:66:EE:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3dbd8306-91a8-46a2-828a-ece722fc4280.cer sbgp-ipAddrBlock: critical IPv4: 23.165.40.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bb:b7:e0:14:97:9e:69:a4:c0:f6:69:b8:1c:64:b1:1a:4e:14: f5:4b:d6:81:af:6a:c5:8f:6f:9a:41:48:66:09:5b:4c:11:e1: 87:e1:7c:0d:e2:49:c0:a3:dc:8f:de:ce:14:a3:6a:ec:fb:e3: 2c:1a:36:91:57:01:cd:81:eb:22:bd:a1:ba:7d:cb:ac:32:1b: 48:9a:c8:7c:26:ce:93:c7:39:6a:90:87:22:52:0d:33:8c:ba: ab:d0:e6:7d:b1:df:f8:8c:e3:b5:ff:de:17:93:0a:2e:7c:ff: 66:b9:fd:43:cf:9a:90:7e:e6:2e:12:73:55:0f:33:52:4f:d3: 02:43:f3:84:2f:bc:3e:42:e8:7b:25:70:6f:3d:2f:d6:c1:ac: 52:d6:7a:6f:8f:6f:55:5e:80:22:da:0f:0d:c5:12:55:80:2f: 54:e4:5e:3e:6e:2b:d5:8d:91:5e:7a:21:4a:23:6d:2d:8c:05: f0:15:15:aa:26:18:97:68:e4:1b:69:17:47:14:46:2b:5f:f6: 3d:b6:7f:66:be:b9:1b:f3:52:ba:d3:38:4d:6b:93:d2:52:28: 41:b9:46:29:8e:cf:e4:5d:41:2c:4a:c5:d6:2f:b2:45:b1:15: 7b:72:3a:52:e0:6b:10:52:af:0a:2e:94:8b:cb:0d:95:af:5e: 26:e2:90:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jdm1YvsuEZ3vFSQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2RiZDgzMDYtOTFhOC00NmEyLTgyOGEtZWNlNzIyZmM0 MjgwMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YjhiOTMxMGYtN2FhMi00YzIyLTgwOTktZTU0ZjFjZjI1NzE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgWFAke1guqFZIqIecu6cFq55AbiPn6i0LSe3 sIbN7qUmNzaqDO8mXxXtH84Z57tQW/OP2LaHxzdmkD/5zkg6pfrOfYHQedIyK0YU lcfSE4okaN/+5mDT6XYm6nXi6J9PoNl2KKNWjq2n3SADpUsf61lWc/X1YC0mO6J0 gobg3Eefoz50dH6zsLIXgYnDznQAglIOIaCdqs+Op8DO24xapQ57RUtJ+BwHfkyc 04B6KsKZ+77c3inzJn0PjUOwMQsQ+IVUWD5W+lWvdAz/y1NbMchbJoJGJAmvM0PX GEXvwzY8otymCmdveC9g+XxQyIW5y0gRG8fu+vLt4Huf530fSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJWyzcPD9zJwshWq39KPNguQEZ66MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8zZGJk ODMwNi05MWE4LTQ2YTItODI4YS1lY2U3MjJmYzQyODAvOWQ4NmY1NjctZjMxMi0z OTM5LWI2MWQtNDczZmE2NDMyYmRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvM2RiZDgzMDYtOTFhOC00NmEyLTgy OGEtZWNlNzIyZmM0MjgwLzNkYmQ4MzA2LTkxYTgtNDZhMi04MjhhLWVjZTcyMmZj NDI4MC5jcmwwHwYDVR0jBBgwFoAUHWAOQJ2wTe3LEQRIE5xFE1pm7mQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8zZGJkODMwNi05MWE4LTQ2YTItODI4YS1lY2U3 MjJmYzQyODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6UoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALu34BSXnmmkwPZpuBxksRpOFPVL1oGvasWPb5pBSGYJW0wR4YfhfA3i ScCj3I/ezhSjauz74ywaNpFXAc2B6yK9obp9y6wyG0iayHwmzpPHOWqQhyJSDTOM uqvQ5n2x3/iM47X/3heTCi58/2a5/UPPmpB+5i4Sc1UPM1JP0wJD84QvvD5C6Hsl cG89L9bBrFLWem+Pb1VegCLaDw3FElWAL1TkXj5uK9WNkV56IUojbS2MBfAVFaom GJdo5BtpF0cURitf9j22f2a+uRvzUrrTOE1rk9JSKEG5RimOz+RdQSxKxdYvskWx FXtyOlLgaxBSrwoulIvLDZWvXibikOI= -----END CERTIFICATE-----Generated at Thu Oct 8 13:27:19 2026 by rpki-client