$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8f6b23b1-c197-4db2-b4d4-a81adcd6f0e5/2b98512f-e781-3b9a-b954-6bbdae3b43de.roa File: 2b98512f-e781-3b9a-b954-6bbdae3b43de.roa (raw, json) Hash identifier: 3og95v0yMMySpp8eQTGbv97HNrOQbcSQChne8ZxCH5o= Subject key identifier: F6:CF:11:6F:90:9D:B6:8E:B4:54:E8:17:D5:9E:29:9F:E6:AC:F8:D9 Certificate issuer: /CN=8f6b23b1-c197-4db2-b4d4-a81adcd6f0e5 Certificate serial: 010D0C9F4328584F3E47E80E7555C286B5402D10 Authority key identifier: ED:7E:CD:7E:EF:AE:EC:A6:4C:F5:ED:B0:44:CA:C4:02:FD:DA:43:C1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8f6b23b1-c197-4db2-b4d4-a81adcd6f0e5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8f6b23b1-c197-4db2-b4d4-a81adcd6f0e5/2b98512f-e781-3b9a-b954-6bbdae3b43de.roa Signing time: Mon 21 Sep 2026 01:00:11 +0000 ROA not before: Mon 21 Sep 2026 01:00:11 +0000 ROA not after: Sun 20 Dec 2026 02:00:11 +0000 asID: 19415 IP address blocks: 23.166.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8f6b23b1-c197-4db2-b4d4-a81adcd6f0e5/8f6b23b1-c197-4db2-b4d4-a81adcd6f0e5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8f6b23b1-c197-4db2-b4d4-a81adcd6f0e5/8f6b23b1-c197-4db2-b4d4-a81adcd6f0e5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8f6b23b1-c197-4db2-b4d4-a81adcd6f0e5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3e:47:e8:0e:75:55:c2:86:b5:40:2d:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8f6b23b1-c197-4db2-b4d4-a81adcd6f0e5 Validity Not Before: Sep 21 01:00:11 2026 GMT Not After : Dec 20 02:00:11 2026 GMT Subject: CN=f7148b85-7425-4aa2-ac4c-afc01d1c9ba3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:66:88:30:a4:94:2b:79:d9:24:f0:52:86:8b: e8:d8:67:5a:52:bf:ff:af:90:8f:fc:f7:34:92:c9: 97:7b:d9:d7:9b:b2:44:7c:cd:d2:74:08:2d:ff:ea: 4e:a5:63:34:26:1b:bc:9b:f1:a9:4d:f7:e9:68:c2: c1:94:6c:7b:fc:97:2d:46:5b:7d:63:60:19:85:37: 7e:56:82:e1:9c:51:22:ff:6f:e2:ea:d5:14:fb:a9: 5e:92:10:a6:ea:5a:e2:63:7b:3e:5f:a2:0f:c3:1c: a6:e3:58:18:ac:3c:d0:02:a2:13:ee:ba:0a:1a:6a: 9d:2e:0a:82:05:a6:fa:71:67:60:4d:f3:5a:8e:c3: 25:08:2b:0e:0c:4a:ef:f9:c0:1d:d0:06:db:7d:14: 1b:cc:7d:c9:ed:c2:44:1b:52:da:44:03:d9:02:5b: 15:c1:49:dd:5d:95:a9:e1:4b:5e:00:c2:11:0d:84: 9f:2a:0c:eb:f6:55:cd:d2:4d:7f:c7:02:83:ce:61: c9:d1:f0:b2:38:7a:1f:38:9b:fc:70:98:fb:8e:a7: 05:db:de:cf:e5:35:fa:c8:a5:22:9a:11:db:ef:6f: 56:8d:4a:23:9f:eb:fc:d1:be:4a:88:63:b6:b4:f0: cf:55:fb:45:b5:45:6c:0c:66:6f:2f:95:29:b4:ad: 64:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:CF:11:6F:90:9D:B6:8E:B4:54:E8:17:D5:9E:29:9F:E6:AC:F8:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8f6b23b1-c197-4db2-b4d4-a81adcd6f0e5/2b98512f-e781-3b9a-b954-6bbdae3b43de.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8f6b23b1-c197-4db2-b4d4-a81adcd6f0e5/8f6b23b1-c197-4db2-b4d4-a81adcd6f0e5.crl X509v3 Authority Key Identifier: keyid:ED:7E:CD:7E:EF:AE:EC:A6:4C:F5:ED:B0:44:CA:C4:02:FD:DA:43:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8f6b23b1-c197-4db2-b4d4-a81adcd6f0e5.cer sbgp-ipAddrBlock: critical IPv4: 23.166.248.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:81:64:97:b2:43:d9:e2:23:6a:e5:a5:12:65:e1:95:4b:30: cd:04:b6:54:7d:1b:37:33:ac:4e:40:15:3c:a7:a4:22:d2:df: 75:96:be:33:cf:6c:6a:dc:d6:50:f1:56:67:c9:09:04:7a:6d: 65:a7:b2:a2:0b:3a:cf:07:33:87:e7:d9:11:89:7d:58:1e:c2: 34:5b:a8:cf:37:d3:7d:5a:00:3c:57:21:91:82:8c:96:5c:4e: a7:df:9c:f3:1e:51:82:e4:e9:55:72:1d:2a:8b:15:09:57:02: d7:df:f6:3d:fe:b1:ee:bf:76:e7:01:7d:6b:4a:94:c5:ce:42: 74:f1:87:27:a7:41:bc:db:e1:74:a2:5e:46:99:89:4d:9b:a5: f7:b8:41:b3:25:48:ce:1b:22:ac:be:1c:20:8c:1f:4c:dd:6e: 43:d4:7b:ef:90:15:26:d8:39:20:7f:eb:9b:9a:97:da:03:32: 0f:f0:db:ac:68:62:11:b3:f1:c3:a6:c7:9c:76:b2:f8:29:dc: 22:db:f5:23:77:9c:ac:e4:e0:cd:a9:63:74:26:b2:56:29:6e: 84:4c:d1:b9:c3:d1:2d:d1:f0:4e:b8:5c:c0:97:1e:f3:9e:61: 73:f8:ce:62:d0:8b:89:97:94:c3:3b:d2:b7:77:e5:dc:e6:b8: a5:78:63:35 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8+R+gOdVXChrVALRAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGY2YjIzYjEtYzE5Ny00ZGIyLWI0ZDQtYTgxYWRjZDZm MGU1MB4XDTI2MDkyMTAxMDAxMVoXDTI2MTIyMDAyMDAxMVowLzEtMCsGA1UEAxMk ZjcxNDhiODUtNzQyNS00YWEyLWFjNGMtYWZjMDFkMWM5YmEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg2aIMKSUK3nZJPBShovo2GdaUr//r5CP/Pc0 ksmXe9nXm7JEfM3SdAgt/+pOpWM0Jhu8m/GpTffpaMLBlGx7/JctRlt9Y2AZhTd+ VoLhnFEi/2/i6tUU+6lekhCm6lriY3s+X6IPwxym41gYrDzQAqIT7roKGmqdLgqC Bab6cWdgTfNajsMlCCsODErv+cAd0AbbfRQbzH3J7cJEG1LaRAPZAlsVwUndXZWp 4UteAMIRDYSfKgzr9lXN0k1/xwKDzmHJ0fCyOHofOJv8cJj7jqcF297P5TX6yKUi mhHb729WjUojn+v80b5KiGO2tPDPVftFtUVsDGZvL5UptK1k/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPbPEW+QnbaOtFToF9WeKZ/mrPjZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84ZjZi MjNiMS1jMTk3LTRkYjItYjRkNC1hODFhZGNkNmYwZTUvMmI5ODUxMmYtZTc4MS0z YjlhLWI5NTQtNmJiZGFlM2I0M2RlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvOGY2YjIzYjEtYzE5Ny00ZGIyLWI0 ZDQtYTgxYWRjZDZmMGU1LzhmNmIyM2IxLWMxOTctNGRiMi1iNGQ0LWE4MWFkY2Q2 ZjBlNS5jcmwwHwYDVR0jBBgwFoAU7X7Nfu+u7KZM9e2wRMrEAv3aQ8EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy84ZjZiMjNiMS1jMTk3LTRkYjItYjRkNC1hODFh ZGNkNmYwZTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6b4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACSBZJeyQ9niI2rlpRJl4ZVLMM0EtlR9GzczrE5AFTynpCLS33WWvjPP bGrc1lDxVmfJCQR6bWWnsqILOs8HM4fn2RGJfVgewjRbqM83031aADxXIZGCjJZc TqffnPMeUYLk6VVyHSqLFQlXAtff9j3+se6/ducBfWtKlMXOQnTxhyenQbzb4XSi XkaZiU2bpfe4QbMlSM4bIqy+HCCMH0zdbkPUe++QFSbYOSB/65ual9oDMg/w26xo YhGz8cOmx5x2svgp3CLb9SN3nKzk4M2pY3QmslYpboRM0bnD0S3R8E64XMCXHvOe YXP4zmLQi4mXlMM70rd35dzmuKV4YzU= -----END CERTIFICATE-----Generated at Sun Sep 27 16:49:49 2026 by rpki-client