$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c966e577-4964-41bf-aced-835168bef4f1/aa578848-2b75-3b39-9243-d445c17b3680.roa File: aa578848-2b75-3b39-9243-d445c17b3680.roa (raw, json) Hash identifier: FjkrIMSWwseqcZ7kqs2sYnMpOzkF2qBqg8hRYbyXWqg= Subject key identifier: 2F:EC:83:D6:61:E7:96:A0:99:07:DE:78:4E:E8:49:BC:41:C4:D0:CA Certificate issuer: /CN=c966e577-4964-41bf-aced-835168bef4f1 Certificate serial: 010D0C9F4328584EED521D76AE5E69E43785D380 Authority key identifier: 2D:0D:DA:44:49:F1:1D:E6:DF:F1:97:47:F4:A5:7D:8F:1E:8A:71:5D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c966e577-4964-41bf-aced-835168bef4f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c966e577-4964-41bf-aced-835168bef4f1/aa578848-2b75-3b39-9243-d445c17b3680.roa Signing time: Sun 23 Aug 2026 01:00:12 +0000 ROA not before: Sun 23 Aug 2026 01:00:12 +0000 ROA not after: Sat 21 Nov 2026 02:00:12 +0000 asID: 395400 IP address blocks: 168.123.132.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c966e577-4964-41bf-aced-835168bef4f1/c966e577-4964-41bf-aced-835168bef4f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c966e577-4964-41bf-aced-835168bef4f1/c966e577-4964-41bf-aced-835168bef4f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c966e577-4964-41bf-aced-835168bef4f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ed:52:1d:76:ae:5e:69:e4:37:85:d3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c966e577-4964-41bf-aced-835168bef4f1 Validity Not Before: Aug 23 01:00:12 2026 GMT Not After : Nov 21 02:00:12 2026 GMT Subject: CN=350a0cda-404c-4894-847a-1959b243ac86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:b5:02:b4:a7:17:62:08:17:bc:bc:ba:13:8d: f3:36:2c:a9:e6:ed:f1:f6:7b:8b:dd:c5:84:6c:0a: ad:2a:c4:97:1d:84:51:a2:96:03:52:b3:f8:13:fa: 14:94:f7:b7:fb:35:e0:be:67:37:0e:12:8f:e6:1e: f2:3c:f4:9f:79:23:9a:6b:e1:89:9d:75:dd:c0:69: 27:88:04:ff:38:08:a8:a4:85:b6:24:2c:f8:49:27: 44:12:f9:92:b6:ab:b7:6d:2a:b5:f0:a9:92:85:55: 2b:a9:47:2d:c1:2f:2a:ab:bf:ff:92:69:0d:d3:a3: 16:25:e6:6e:98:dc:28:0c:9d:0a:15:16:fc:79:11: 65:81:69:87:b8:ec:d0:bd:e3:d5:1e:cb:9f:e1:08: c6:21:3d:44:a9:31:80:28:98:87:d3:01:d5:0b:92: 31:b5:b1:76:1e:fd:1e:61:e8:0b:3a:2a:96:c0:14: c6:0e:17:6f:01:96:80:c0:16:f9:15:1c:70:0c:90: 71:35:67:61:13:36:13:15:32:0c:b0:20:c5:99:e4: 58:28:eb:22:fc:ca:12:bd:60:4a:6b:93:bb:80:63: f1:8c:61:12:e2:d4:df:41:cf:b9:3f:24:9b:77:e6: 58:9f:63:0e:b0:c3:fc:16:15:cc:21:f6:db:c0:e2: 9b:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:EC:83:D6:61:E7:96:A0:99:07:DE:78:4E:E8:49:BC:41:C4:D0:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c966e577-4964-41bf-aced-835168bef4f1/aa578848-2b75-3b39-9243-d445c17b3680.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c966e577-4964-41bf-aced-835168bef4f1/c966e577-4964-41bf-aced-835168bef4f1.crl X509v3 Authority Key Identifier: keyid:2D:0D:DA:44:49:F1:1D:E6:DF:F1:97:47:F4:A5:7D:8F:1E:8A:71:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c966e577-4964-41bf-aced-835168bef4f1.cer sbgp-ipAddrBlock: critical IPv4: 168.123.132.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:a4:2b:99:fc:fe:d9:5a:c6:cf:82:ec:df:52:d6:97:0a:bd: 23:8f:50:8d:75:95:0a:8c:ab:95:5a:27:0d:5a:97:f9:31:fd: 26:11:a8:e4:1e:0d:0c:30:fc:e7:19:23:7c:44:35:99:55:c7: 57:dc:89:c0:cb:81:f5:5e:cc:65:aa:fe:a6:77:d0:0a:f8:04: 75:f1:7a:61:62:b1:6a:4a:ce:83:b5:4a:4c:1d:8e:23:fe:71: f7:bd:06:32:63:81:cc:62:16:67:c5:9b:b5:39:a3:4c:c2:04: b9:a2:09:0f:84:0b:d3:16:3e:5a:4f:24:71:f3:15:39:7c:aa: c4:a4:69:e8:24:d6:14:da:32:67:65:52:e5:af:58:22:57:24: d9:83:18:1b:a7:8c:ae:13:69:fd:67:33:d3:c8:92:61:b6:40: 2a:24:5a:be:7c:d3:81:3d:0c:75:e9:72:4b:b3:ee:3b:8c:b4: f0:da:d7:01:8e:c8:01:bc:a7:81:7f:4c:6e:24:82:8b:3e:b8: 73:8e:ab:88:f5:6e:5d:8f:78:1c:9a:f5:3f:bc:3f:c1:cd:2a: c0:bd:4f:60:c0:1b:09:b4:4e:11:02:d3:91:ad:9e:14:8d:b6: c7:ed:49:c4:05:5d:a0:c0:99:92:12:ad:8f:a2:70:99:de:b7: 89:8e:12:26 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7tUh12rl5p5DeF04AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzk2NmU1NzctNDk2NC00MWJmLWFjZWQtODM1MTY4YmVm NGYxMB4XDTI2MDgyMzAxMDAxMloXDTI2MTEyMTAyMDAxMlowLzEtMCsGA1UEAxMk MzUwYTBjZGEtNDA0Yy00ODk0LTg0N2EtMTk1OWIyNDNhYzg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhbUCtKcXYggXvLy6E43zNiyp5u3x9nuL3cWE bAqtKsSXHYRRopYDUrP4E/oUlPe3+zXgvmc3DhKP5h7yPPSfeSOaa+GJnXXdwGkn iAT/OAiopIW2JCz4SSdEEvmStqu3bSq18KmShVUrqUctwS8qq7//kmkN06MWJeZu mNwoDJ0KFRb8eRFlgWmHuOzQvePVHsuf4QjGIT1EqTGAKJiH0wHVC5IxtbF2Hv0e YegLOiqWwBTGDhdvAZaAwBb5FRxwDJBxNWdhEzYTFTIMsCDFmeRYKOsi/MoSvWBK a5O7gGPxjGES4tTfQc+5PySbd+ZYn2MOsMP8FhXMIfbbwOKbCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC/sg9Zh55agmQfeeE7oSbxBxNDKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9jOTY2 ZTU3Ny00OTY0LTQxYmYtYWNlZC04MzUxNjhiZWY0ZjEvYWE1Nzg4NDgtMmI3NS0z YjM5LTkyNDMtZDQ0NWMxN2IzNjgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYzk2NmU1NzctNDk2NC00MWJmLWFj ZWQtODM1MTY4YmVmNGYxL2M5NjZlNTc3LTQ5NjQtNDFiZi1hY2VkLTgzNTE2OGJl ZjRmMS5jcmwwHwYDVR0jBBgwFoAULQ3aREnxHebf8ZdH9KV9jx6KcV0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9jOTY2ZTU3Ny00OTY0LTQxYmYtYWNlZC04MzUx NjhiZWY0ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqHuEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHykK5n8/tlaxs+C7N9S1pcKvSOPUI11lQqMq5VaJw1al/kx/SYRqOQe DQww/OcZI3xENZlVx1fcicDLgfVezGWq/qZ30Ar4BHXxemFisWpKzoO1SkwdjiP+ cfe9BjJjgcxiFmfFm7U5o0zCBLmiCQ+EC9MWPlpPJHHzFTl8qsSkaegk1hTaMmdl UuWvWCJXJNmDGBunjK4Taf1nM9PIkmG2QCokWr5804E9DHXpckuz7juMtPDa1wGO yAG8p4F/TG4kgos+uHOOq4j1bl2PeBya9T+8P8HNKsC9T2DAGwm0ThEC05GtnhSN tsftScQFXaDAmZISrY+icJnet4mOEiY= -----END CERTIFICATE-----Generated at Sat Oct 10 11:27:19 2026 by rpki-client