$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c966e577-4964-41bf-aced-835168bef4f1/5b65963c-d23f-31a3-b848-4132887683b8.roa File: 5b65963c-d23f-31a3-b848-4132887683b8.roa (raw, json) Hash identifier: 8m7xoQ9//nSEaKYPLAwlo0Bola1AIG//WhD46qG1344= Subject key identifier: 87:F4:23:04:A6:41:87:1D:AE:07:24:E0:29:02:DE:BB:E9:7A:BB:BA Certificate issuer: /CN=c966e577-4964-41bf-aced-835168bef4f1 Certificate serial: 010D0C9F4328584EEA8756A25A67225262775B60 Authority key identifier: 2D:0D:DA:44:49:F1:1D:E6:DF:F1:97:47:F4:A5:7D:8F:1E:8A:71:5D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c966e577-4964-41bf-aced-835168bef4f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c966e577-4964-41bf-aced-835168bef4f1/5b65963c-d23f-31a3-b848-4132887683b8.roa Signing time: Sat 22 Aug 2026 01:00:12 +0000 ROA not before: Sat 22 Aug 2026 01:00:12 +0000 ROA not after: Fri 20 Nov 2026 02:00:12 +0000 asID: 395400 IP address blocks: 168.123.0.0/16 maxlen: 17 192.149.202.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c966e577-4964-41bf-aced-835168bef4f1/c966e577-4964-41bf-aced-835168bef4f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c966e577-4964-41bf-aced-835168bef4f1/c966e577-4964-41bf-aced-835168bef4f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c966e577-4964-41bf-aced-835168bef4f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ea:87:56:a2:5a:67:22:52:62:77:5b:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c966e577-4964-41bf-aced-835168bef4f1 Validity Not Before: Aug 22 01:00:12 2026 GMT Not After : Nov 20 02:00:12 2026 GMT Subject: CN=0d1de688-9431-4445-a09a-b6f195aa5f70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:b7:a2:0e:80:ae:6c:d2:c5:23:87:9c:78:3f: b4:c8:c6:ad:15:2e:cd:d8:f4:3f:6d:3c:0a:ec:b6: 92:da:15:29:e4:56:b4:05:3b:f4:65:86:d3:51:c8: f5:12:8b:7c:a9:7a:39:67:19:d5:cb:4e:95:9c:ff: 6c:fe:74:57:1f:28:94:17:23:77:f6:55:4b:50:f8: d9:8f:6f:73:1e:07:7b:57:54:c4:47:3b:41:b6:15: 39:f2:62:48:e9:da:c2:e9:5f:e2:74:08:09:c2:06: 6b:f2:2e:15:cb:9a:96:2c:d9:67:8c:c3:eb:c2:2e: d7:36:86:69:fd:94:30:31:d7:27:9b:79:4c:9b:2d: ed:b1:df:1a:84:77:84:c9:e8:19:25:b7:29:d6:7e: f6:d4:21:36:3d:b9:57:f3:a4:75:24:18:71:12:6e: b3:91:20:42:65:ce:b1:3e:fb:27:f4:50:04:aa:96: b1:3d:66:c8:e9:a2:cd:3a:90:fd:ce:a9:71:88:8f: 2f:34:ae:6a:93:f5:ef:4b:bd:3a:43:5b:eb:d1:88: 47:07:23:25:c7:6b:8d:eb:e5:96:84:dc:bd:c6:bd: 6a:16:ae:fd:ba:0b:a0:dd:5e:c6:29:c0:1c:fc:91: 5e:46:e3:80:d1:4a:fe:67:d5:f0:08:4f:65:74:aa: 1e:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:F4:23:04:A6:41:87:1D:AE:07:24:E0:29:02:DE:BB:E9:7A:BB:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c966e577-4964-41bf-aced-835168bef4f1/5b65963c-d23f-31a3-b848-4132887683b8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c966e577-4964-41bf-aced-835168bef4f1/c966e577-4964-41bf-aced-835168bef4f1.crl X509v3 Authority Key Identifier: keyid:2D:0D:DA:44:49:F1:1D:E6:DF:F1:97:47:F4:A5:7D:8F:1E:8A:71:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c966e577-4964-41bf-aced-835168bef4f1.cer sbgp-ipAddrBlock: critical IPv4: 168.123.0.0/16 192.149.202.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:92:c2:b9:74:f4:a5:49:aa:f7:ea:4f:a1:dc:40:f6:48:da: 5f:73:a0:49:17:54:31:b4:85:a1:fe:b8:5d:f6:02:17:7d:ee: 95:5c:2d:d5:0d:27:75:fd:d8:e1:1b:a5:b8:81:5c:49:f7:9f: c0:fa:b2:f9:4c:59:23:01:a7:c5:a1:bc:d0:e7:6e:d7:eb:59: 4a:fb:5b:98:73:9f:31:13:79:5c:32:99:3d:a5:35:45:6c:6d: 48:5f:c9:04:32:78:e2:cd:0c:16:2c:56:92:ed:e0:cf:18:dc: 08:d7:dc:b0:b3:a5:46:25:19:99:63:d2:31:c9:cb:1f:4d:47: c6:73:b0:f8:c3:16:99:6c:dd:72:55:40:25:44:dc:ee:b4:63: d5:5b:22:fa:a6:56:bb:6f:09:5b:84:0f:3c:99:49:90:e9:8b: 3e:ab:57:a9:75:fa:f2:31:88:c6:75:c1:cd:6c:7e:8e:45:50: da:8e:69:2e:c6:4e:0f:3c:ff:6a:53:91:b5:2b:d3:ef:0f:b8: 92:cb:28:b4:63:f4:ce:c2:42:1d:62:b5:40:04:4b:b5:e4:09: 7c:53:5c:2d:6e:82:25:dd:a4:33:34:37:c9:33:56:10:d0:19: 62:36:cc:e0:a8:ec:50:e3:a1:d6:e9:ad:3f:3a:3c:aa:95:e1: d9:da:e1:5a -----BEGIN CERTIFICATE----- MIIGSDCCBTCgAwIBAgIUAQ0Mn0MoWE7qh1aiWmciUmJ3W2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzk2NmU1NzctNDk2NC00MWJmLWFjZWQtODM1MTY4YmVm NGYxMB4XDTI2MDgyMjAxMDAxMloXDTI2MTEyMDAyMDAxMlowLzEtMCsGA1UEAxMk MGQxZGU2ODgtOTQzMS00NDQ1LWEwOWEtYjZmMTk1YWE1ZjcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAobeiDoCubNLFI4eceD+0yMatFS7N2PQ/bTwK 7LaS2hUp5Fa0BTv0ZYbTUcj1Eot8qXo5ZxnVy06VnP9s/nRXHyiUFyN39lVLUPjZ j29zHgd7V1TERztBthU58mJI6drC6V/idAgJwgZr8i4Vy5qWLNlnjMPrwi7XNoZp /ZQwMdcnm3lMmy3tsd8ahHeEyegZJbcp1n721CE2PblX86R1JBhxEm6zkSBCZc6x Pvsn9FAEqpaxPWbI6aLNOpD9zqlxiI8vNK5qk/XvS706Q1vr0YhHByMlx2uN6+WW hNy9xr1qFq79ugug3V7GKcAc/JFeRuOA0Ur+Z9XwCE9ldKoeUwIDAQABo4IDWjCC A1YwHQYDVR0OBBYEFIf0IwSmQYcdrgck4CkC3rvperu6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9jOTY2 ZTU3Ny00OTY0LTQxYmYtYWNlZC04MzUxNjhiZWY0ZjEvNWI2NTk2M2MtZDIzZi0z MWEzLWI4NDgtNDEzMjg4NzY4M2I4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYzk2NmU1NzctNDk2NC00MWJmLWFj ZWQtODM1MTY4YmVmNGYxL2M5NjZlNTc3LTQ5NjQtNDFiZi1hY2VkLTgzNTE2OGJl ZjRmMS5jcmwwHwYDVR0jBBgwFoAULQ3aREnxHebf8ZdH9KV9jx6KcV0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9jOTY2ZTU3Ny00OTY0LTQxYmYtYWNlZC04MzUx NjhiZWY0ZjEuY2VyMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAATALAwMAqHsDBADA lcowVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG 9w0BAQsFAAOCAQEANpLCuXT0pUmq9+pPodxA9kjaX3OgSRdUMbSFof64XfYCF33u lVwt1Q0ndf3Y4RuluIFcSfefwPqy+UxZIwGnxaG80Odu1+tZSvtbmHOfMRN5XDKZ PaU1RWxtSF/JBDJ44s0MFixWku3gzxjcCNfcsLOlRiUZmWPSMcnLH01HxnOw+MMW mWzdclVAJUTc7rRj1Vsi+qZWu28JW4QPPJlJkOmLPqtXqXX68jGIxnXBzWx+jkVQ 2o5pLsZODzz/alORtSvT7w+4kssotGP0zsJCHWK1QARLteQJfFNcLW6CJd2kMzQ3 yTNWENAZYjbM4KjsUOOh1umtPzo8qpXh2drhWg== -----END CERTIFICATE-----Generated at Sun Oct 11 23:46:12 2026 by rpki-client