$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cf31296f-8f2f-4268-8599-4c47d25cfcf0/b8ed32fa-028c-3cfb-950c-51608cf30050.roa File: b8ed32fa-028c-3cfb-950c-51608cf30050.roa (raw, json) Hash identifier: Afk90K0qiMp59Ur/C/rYgI06xSro+F45jQ1e1iqdbQ0= Subject key identifier: EE:0D:BA:B6:51:D7:D5:DC:0B:73:4F:BE:7E:7E:86:0F:EB:4F:E2:5D Certificate issuer: /CN=cf31296f-8f2f-4268-8599-4c47d25cfcf0 Certificate serial: 010D0C9F4328584F4976617556E43DA4E398BFDC Authority key identifier: FA:BA:17:48:6C:35:CD:8A:8B:3C:16:60:C4:6F:9F:58:0E:2F:5E:64 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cf31296f-8f2f-4268-8599-4c47d25cfcf0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cf31296f-8f2f-4268-8599-4c47d25cfcf0/b8ed32fa-028c-3cfb-950c-51608cf30050.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 11913 IP address blocks: 23.163.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cf31296f-8f2f-4268-8599-4c47d25cfcf0/cf31296f-8f2f-4268-8599-4c47d25cfcf0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cf31296f-8f2f-4268-8599-4c47d25cfcf0/cf31296f-8f2f-4268-8599-4c47d25cfcf0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cf31296f-8f2f-4268-8599-4c47d25cfcf0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:76:61:75:56:e4:3d:a4:e3:98:bf:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf31296f-8f2f-4268-8599-4c47d25cfcf0 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=2c941ed1-2b84-4b5f-a168-984b39ad5ac9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:fc:b8:39:41:ec:b8:bc:5e:81:71:44:84:a1: b0:21:cc:61:76:ba:42:81:28:a5:82:69:c7:dd:49: 92:3c:26:f5:74:9a:cc:c3:53:91:f9:99:a5:48:8c: ac:b5:f3:57:29:2e:ac:68:82:8c:e5:58:50:c7:2d: 6c:26:0d:af:28:42:83:0f:27:3e:3a:d9:4e:1b:37: 3d:2f:74:b7:ac:dd:f9:98:19:71:67:44:7d:c6:20: 66:4a:1b:dd:29:2a:5a:22:a5:6c:6a:11:4b:f9:5c: d3:5f:9d:2c:64:b2:5b:6d:46:e8:87:4e:e0:49:63: a9:58:f2:09:c5:39:fb:16:db:c4:54:50:20:7e:8e: 99:f9:79:c5:30:a5:17:8c:66:d8:52:1e:50:be:54: 36:9c:24:6e:ce:e6:e3:1f:b0:d2:e1:43:2d:10:a5: 6a:51:a9:54:ea:92:c8:47:04:de:d1:b8:46:0c:37: 8d:52:fa:4a:e2:db:17:88:1d:19:ba:ec:0e:1f:fd: ab:3a:64:6b:92:27:37:b0:cb:39:63:cc:ad:55:50: 62:64:d1:a3:75:63:e8:cd:98:76:8a:19:c3:c6:c0: 2b:48:c2:3c:b9:b6:80:36:c9:02:59:64:dc:1e:60: fe:53:4f:7b:84:3f:6a:65:1d:f4:b0:12:3a:6b:e5: 6e:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:0D:BA:B6:51:D7:D5:DC:0B:73:4F:BE:7E:7E:86:0F:EB:4F:E2:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cf31296f-8f2f-4268-8599-4c47d25cfcf0/b8ed32fa-028c-3cfb-950c-51608cf30050.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cf31296f-8f2f-4268-8599-4c47d25cfcf0/cf31296f-8f2f-4268-8599-4c47d25cfcf0.crl X509v3 Authority Key Identifier: keyid:FA:BA:17:48:6C:35:CD:8A:8B:3C:16:60:C4:6F:9F:58:0E:2F:5E:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/cf31296f-8f2f-4268-8599-4c47d25cfcf0.cer sbgp-ipAddrBlock: critical IPv4: 23.163.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:59:91:ca:4b:13:d6:df:de:61:1f:3a:d1:52:cf:57:10:74: 0e:38:50:a5:81:45:7f:74:30:94:f1:3a:2b:49:e1:c5:dd:46: dd:45:2d:54:45:72:20:7e:ee:ef:1e:d8:d2:9b:9b:79:87:fc: 8e:2f:ad:9d:16:7a:b3:13:3a:8b:22:b8:76:f2:1b:0b:5e:1f: 63:47:8e:9c:ad:c6:9f:8f:14:d7:22:76:76:f5:69:15:85:2b: f6:db:69:4d:0a:da:b6:6a:21:eb:04:76:15:3a:a1:8b:28:0c: ec:f9:a2:fc:d1:c1:7a:6a:4f:9e:05:08:1d:ce:33:b4:24:e7: e4:3f:ed:28:06:9c:e1:43:4d:e5:c7:0a:f7:7f:a6:f3:79:5f: aa:62:9c:46:e5:a3:24:d1:55:65:45:1a:b9:dc:48:ee:f4:a5: 59:21:1e:04:57:bf:47:ee:ea:f5:53:b7:38:9b:bc:76:21:cb: 6d:b4:02:20:c1:a8:f9:65:26:38:dd:f6:a6:53:20:97:f3:90: 89:50:ad:07:75:70:54:90:99:35:b3:a4:5d:97:36:40:14:b0: cb:e3:ba:34:47:53:6f:6d:7d:ce:84:a1:2b:8c:32:4a:2d:70: 96:23:67:bd:11:2d:10:41:75:79:94:18:0c:ff:db:d6:b6:fe: 89:c2:8e:dc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdmF1VuQ9pOOYv9wwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2YzMTI5NmYtOGYyZi00MjY4LTg1OTktNGM0N2QyNWNm Y2YwMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MmM5NDFlZDEtMmI4NC00YjVmLWExNjgtOTg0YjM5YWQ1YWM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAivy4OUHsuLxegXFEhKGwIcxhdrpCgSilgmnH 3UmSPCb1dJrMw1OR+ZmlSIystfNXKS6saIKM5VhQxy1sJg2vKEKDDyc+OtlOGzc9 L3S3rN35mBlxZ0R9xiBmShvdKSpaIqVsahFL+VzTX50sZLJbbUboh07gSWOpWPIJ xTn7FtvEVFAgfo6Z+XnFMKUXjGbYUh5QvlQ2nCRuzubjH7DS4UMtEKVqUalU6pLI RwTe0bhGDDeNUvpK4tsXiB0ZuuwOH/2rOmRrkic3sMs5Y8ytVVBiZNGjdWPozZh2 ihnDxsArSMI8ubaANskCWWTcHmD+U097hD9qZR30sBI6a+VugwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO4NurZR19XcC3NPvn5+hg/rT+JdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9jZjMx Mjk2Zi04ZjJmLTQyNjgtODU5OS00YzQ3ZDI1Y2ZjZjAvYjhlZDMyZmEtMDI4Yy0z Y2ZiLTk1MGMtNTE2MDhjZjMwMDUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvY2YzMTI5NmYtOGYyZi00MjY4LTg1 OTktNGM0N2QyNWNmY2YwL2NmMzEyOTZmLThmMmYtNDI2OC04NTk5LTRjNDdkMjVj ZmNmMC5jcmwwHwYDVR0jBBgwFoAU+roXSGw1zYqLPBZgxG+fWA4vXmQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9jZjMxMjk2Zi04ZjJmLTQyNjgtODU5OS00YzQ3 ZDI1Y2ZjZjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6N4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEFZkcpLE9bf3mEfOtFSz1cQdA44UKWBRX90MJTxOitJ4cXdRt1FLVRF ciB+7u8e2NKbm3mH/I4vrZ0WerMTOosiuHbyGwteH2NHjpytxp+PFNcidnb1aRWF K/bbaU0K2rZqIesEdhU6oYsoDOz5ovzRwXpqT54FCB3OM7Qk5+Q/7SgGnOFDTeXH Cvd/pvN5X6pinEbloyTRVWVFGrncSO70pVkhHgRXv0fu6vVTtzibvHYhy220AiDB qPllJjjd9qZTIJfzkIlQrQd1cFSQmTWzpF2XNkAUsMvjujRHU29tfc6EoSuMMkot cJYjZ70RLRBBdXmUGAz/29a2/onCjtw= -----END CERTIFICATE-----Generated at Tue Sep 29 17:56:33 2026 by rpki-client