$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d23bf149-3e89-4ca4-b96d-918c2eab87d8/55c67fd6-b589-3c28-a27e-8dfe0c45ecbb.roa File: 55c67fd6-b589-3c28-a27e-8dfe0c45ecbb.roa (raw, json) Hash identifier: 2kIpZ9+tQ3BRdFBq5wIH83ZmZnJ3HhgW9PKZWACKncw= Subject key identifier: 3F:3C:0B:6C:A5:ED:C1:EA:76:E4:41:DF:29:B2:30:7E:A2:95:BB:74 Certificate issuer: /CN=d23bf149-3e89-4ca4-b96d-918c2eab87d8 Certificate serial: 010D0C9F4328584FD3C138D2540F34FD520B4F20 Authority key identifier: 59:DA:25:1D:FF:DB:09:20:84:C1:22:8B:2F:20:BE:28:0D:90:A2:E9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d23bf149-3e89-4ca4-b96d-918c2eab87d8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d23bf149-3e89-4ca4-b96d-918c2eab87d8/55c67fd6-b589-3c28-a27e-8dfe0c45ecbb.roa Signing time: Fri 13 Nov 2026 14:00:14 +0000 ROA not before: Fri 13 Nov 2026 14:00:14 +0000 ROA not after: Thu 11 Feb 2027 14:00:14 +0000 asID: 22223 IP address blocks: 162.218.40.0/21 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d23bf149-3e89-4ca4-b96d-918c2eab87d8/d23bf149-3e89-4ca4-b96d-918c2eab87d8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d23bf149-3e89-4ca4-b96d-918c2eab87d8/d23bf149-3e89-4ca4-b96d-918c2eab87d8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d23bf149-3e89-4ca4-b96d-918c2eab87d8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:d3:c1:38:d2:54:0f:34:fd:52:0b:4f:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d23bf149-3e89-4ca4-b96d-918c2eab87d8 Validity Not Before: Nov 13 14:00:14 2026 GMT Not After : Feb 11 14:00:14 2027 GMT Subject: CN=3ed33cde-84d3-4b01-8172-c5deb581ea90 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:8a:cb:17:7c:cc:34:33:f7:7b:7b:14:7a:79: d1:cb:91:b9:e3:ce:e3:a5:18:8c:9b:b9:87:17:43: 40:ea:10:5a:3f:7b:b6:4b:cc:5b:4b:86:df:5f:f3: bd:07:e5:58:d7:b9:c6:39:b5:a2:e7:d2:75:63:16: b7:d7:ea:73:2f:1f:e5:e1:06:33:bf:cc:96:fa:f6: bd:60:b4:0a:ec:e0:a7:35:bb:08:9b:05:88:c8:91: 45:d5:28:01:37:c8:7b:58:84:61:37:6c:7b:27:13: 63:6d:8e:04:7c:da:c4:11:c5:fe:04:30:50:2b:b5: 89:f1:3e:af:0f:ed:b5:ab:09:ac:e4:88:39:b7:ea: 6a:d8:9a:e5:ac:8a:50:4f:55:45:f4:f1:35:a8:d9: 61:7a:c9:5e:ce:70:b4:dd:7e:2d:23:e2:84:20:98: 3e:df:dd:92:a3:92:68:be:e1:56:75:48:dd:49:f7: d0:f5:a5:eb:47:6f:6e:24:cd:2d:8f:7b:42:eb:b6: 35:40:5b:75:66:9c:80:81:5e:a2:cd:7a:6e:33:35: bd:7a:73:ad:99:f3:79:f6:73:c9:da:4a:01:3c:82: 32:68:5b:07:8f:10:57:77:30:55:8b:9a:e6:1b:f5: 41:cb:b8:61:b5:c5:76:53:fa:53:77:31:69:fd:63: 53:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:3C:0B:6C:A5:ED:C1:EA:76:E4:41:DF:29:B2:30:7E:A2:95:BB:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d23bf149-3e89-4ca4-b96d-918c2eab87d8/55c67fd6-b589-3c28-a27e-8dfe0c45ecbb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d23bf149-3e89-4ca4-b96d-918c2eab87d8/d23bf149-3e89-4ca4-b96d-918c2eab87d8.crl X509v3 Authority Key Identifier: keyid:59:DA:25:1D:FF:DB:09:20:84:C1:22:8B:2F:20:BE:28:0D:90:A2:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/d23bf149-3e89-4ca4-b96d-918c2eab87d8.cer sbgp-ipAddrBlock: critical IPv4: 162.218.40.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:84:34:b2:94:d3:00:05:80:6a:61:17:e2:79:28:52:88:e1: bd:49:aa:e9:d4:4d:d1:03:64:b3:ec:3b:a6:85:48:28:8a:a4: 01:22:74:c0:12:1c:1f:6c:b7:64:6b:37:72:48:48:c5:c8:ad: d2:bf:2d:ea:60:15:ac:ef:1d:2e:98:d0:7c:73:37:84:a0:2f: fd:75:bc:53:eb:31:9c:47:a9:2f:22:d2:c3:c5:16:68:f1:ba: 8e:a0:e4:45:bb:ea:8d:a5:76:09:69:26:22:d5:95:29:38:15: 82:97:29:16:ca:49:3b:22:67:16:15:52:f4:39:fa:5b:d9:f4: 99:ff:ca:49:c1:f5:7f:05:20:53:07:30:a4:b8:6a:40:90:be: b6:a4:3b:58:5e:5a:5d:8f:da:a7:1b:d0:20:e7:0a:8f:be:9b: 66:f9:36:37:76:26:c2:83:8e:a6:9b:88:07:c6:96:0a:80:54: 16:9a:6a:b9:f9:99:4a:93:b0:0c:c8:de:9e:7b:c2:76:69:62: 06:1b:a9:93:36:53:d7:52:4a:ce:13:f7:3a:27:2f:8b:c5:4e: 9c:5b:4f:f9:20:4a:8b:ae:84:42:2c:df:30:09:8a:5b:4f:76: c1:13:cd:de:ae:3d:ec:9f:2a:08:db:1a:44:fb:93:75:e8:ed: ea:7d:4d:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE/TwTjSVA80/VILTyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDIzYmYxNDktM2U4OS00Y2E0LWI5NmQtOTE4YzJlYWI4 N2Q4MB4XDTI2MTExMzE0MDAxNFoXDTI3MDIxMTE0MDAxNFowLzEtMCsGA1UEAxMk M2VkMzNjZGUtODRkMy00YjAxLTgxNzItYzVkZWI1ODFlYTkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsorLF3zMNDP3e3sUennRy5G5487jpRiMm7mH F0NA6hBaP3u2S8xbS4bfX/O9B+VY17nGObWi59J1Yxa31+pzLx/l4QYzv8yW+va9 YLQK7OCnNbsImwWIyJFF1SgBN8h7WIRhN2x7JxNjbY4EfNrEEcX+BDBQK7WJ8T6v D+21qwms5Ig5t+pq2JrlrIpQT1VF9PE1qNlhesleznC03X4tI+KEIJg+392So5Jo vuFWdUjdSffQ9aXrR29uJM0tj3tC67Y1QFt1ZpyAgV6izXpuMzW9enOtmfN59nPJ 2koBPIIyaFsHjxBXdzBVi5rmG/VBy7hhtcV2U/pTdzFp/WNTEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD88C2yl7cHqduRB3ymyMH6ilbt0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9kMjNi ZjE0OS0zZTg5LTRjYTQtYjk2ZC05MThjMmVhYjg3ZDgvNTVjNjdmZDYtYjU4OS0z YzI4LWEyN2UtOGRmZTBjNDVlY2JiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvZDIzYmYxNDktM2U4OS00Y2E0LWI5 NmQtOTE4YzJlYWI4N2Q4L2QyM2JmMTQ5LTNlODktNGNhNC1iOTZkLTkxOGMyZWFi ODdkOC5jcmwwHwYDVR0jBBgwFoAUWdolHf/bCSCEwSKLLyC+KA2QoukwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS9kMjNiZjE0OS0zZTg5LTRjYTQtYjk2ZC05MThj MmVhYjg3ZDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDotooMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAmENLKU0wAFgGphF+J5KFKI4b1JqunUTdEDZLPsO6aFSCiKpAEidMAS HB9st2RrN3JISMXIrdK/LepgFazvHS6Y0HxzN4SgL/11vFPrMZxHqS8i0sPFFmjx uo6g5EW76o2ldglpJiLVlSk4FYKXKRbKSTsiZxYVUvQ5+lvZ9Jn/yknB9X8FIFMH MKS4akCQvrakO1heWl2P2qcb0CDnCo++m2b5Njd2JsKDjqabiAfGlgqAVBaaarn5 mUqTsAzI3p57wnZpYgYbqZM2U9dSSs4T9zonL4vFTpxbT/kgSouuhEIs3zAJiltP dsETzd6uPeyfKgjbGkT7k3Xo7ep9Tb0= -----END CERTIFICATE-----Generated at Sun Nov 15 14:36:47 2026 by rpki-client