$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/4386f7e1-06e1-45c4-ae55-7dea00a8349e/f7936fca-bc47-3d89-824f-d02c33619104.roa File: f7936fca-bc47-3d89-824f-d02c33619104.roa (raw, json) Hash identifier: GOqTSTbUk/oj/BFJP5TN4lxAgIlq1ubgGpyvnNbmt5A= Subject key identifier: FC:F0:73:83:07:6E:15:B3:11:DE:91:34:C1:C8:7E:F7:67:19:30:59 Certificate issuer: /CN=4386f7e1-06e1-45c4-ae55-7dea00a8349e Certificate serial: 010D0C9F4328584F5C10E1418DB6628913A95880 Authority key identifier: CD:54:84:19:89:52:3B:66:C8:05:05:20:FE:FE:5B:D8:1D:2C:6D:EB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/4386f7e1-06e1-45c4-ae55-7dea00a8349e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/4386f7e1-06e1-45c4-ae55-7dea00a8349e/f7936fca-bc47-3d89-824f-d02c33619104.roa Signing time: Thu 01 Oct 2026 17:03:50 +0000 ROA not before: Thu 01 Oct 2026 17:03:50 +0000 ROA not after: Wed 30 Dec 2026 18:03:50 +0000 asID: 396474 IP address blocks: 23.161.152.0/24 maxlen: 24 206.126.117.0/24 maxlen: 24 2602:fa72::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/4386f7e1-06e1-45c4-ae55-7dea00a8349e/4386f7e1-06e1-45c4-ae55-7dea00a8349e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/4386f7e1-06e1-45c4-ae55-7dea00a8349e/4386f7e1-06e1-45c4-ae55-7dea00a8349e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/4386f7e1-06e1-45c4-ae55-7dea00a8349e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Nov 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5c:10:e1:41:8d:b6:62:89:13:a9:58:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4386f7e1-06e1-45c4-ae55-7dea00a8349e Validity Not Before: Oct 1 17:03:50 2026 GMT Not After : Dec 30 18:03:50 2026 GMT Subject: CN=25738aaa-fce9-4019-a44a-3efd4fd0cf19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:27:d5:96:b9:4c:a5:f4:42:0e:0a:fd:3d:53: 0c:15:45:9b:8f:2f:68:e5:be:54:72:32:94:52:e3: 5b:ca:03:99:80:28:d1:4e:40:de:0e:6d:d9:4b:92: 79:83:4f:6b:10:ff:cd:a2:71:c2:6b:14:92:bd:7d: e7:41:62:fa:6c:69:71:8a:ea:a4:33:62:02:11:15: b3:26:54:50:46:4a:ae:55:31:31:91:07:af:16:ff: be:95:cd:ad:d0:be:18:96:01:16:1d:22:8c:6f:36: ca:ba:24:66:40:15:bf:e3:f5:89:9d:d0:64:2a:86: 9a:fc:a5:75:4f:80:40:00:63:bb:fa:1f:d1:21:ee: 13:dd:7d:2e:7f:24:aa:35:87:2d:2e:dd:00:7f:52: 7e:8f:2e:a5:14:23:ce:f4:ea:e1:48:13:51:1b:4e: 21:2b:91:7d:fc:0a:97:9d:8b:0c:3c:8c:3f:df:3f: 31:62:88:24:d6:77:d6:4e:a2:e7:1d:52:b5:54:07: c0:a4:6a:0b:3c:7b:f5:81:e6:7b:0a:bb:6a:62:1b: 10:78:25:53:df:c2:f1:ec:00:8d:17:fe:76:61:35: d6:39:f6:59:e4:09:2f:e9:ee:59:1f:6a:45:c5:16: d6:48:b3:7e:b8:c1:02:95:70:2a:95:4d:2b:4a:25: 75:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:F0:73:83:07:6E:15:B3:11:DE:91:34:C1:C8:7E:F7:67:19:30:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/4386f7e1-06e1-45c4-ae55-7dea00a8349e/f7936fca-bc47-3d89-824f-d02c33619104.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/4386f7e1-06e1-45c4-ae55-7dea00a8349e/4386f7e1-06e1-45c4-ae55-7dea00a8349e.crl X509v3 Authority Key Identifier: keyid:CD:54:84:19:89:52:3B:66:C8:05:05:20:FE:FE:5B:D8:1D:2C:6D:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/4386f7e1-06e1-45c4-ae55-7dea00a8349e.cer sbgp-ipAddrBlock: critical IPv4: 23.161.152.0/24 206.126.117.0/24 IPv6: 2602:fa72::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:3c:7e:33:be:7c:3d:af:b6:0c:72:bd:ea:86:c8:de:57:78: 63:b3:79:71:ad:e2:02:4b:ca:a9:1e:51:74:81:ec:ee:e6:4b: a6:56:0d:71:0f:91:aa:2f:8c:5a:43:77:f9:32:f9:bb:ea:f1: 82:41:3f:42:8c:01:4d:c7:a5:6e:81:d2:33:a1:ca:f4:d6:fd: 96:03:e6:85:35:e4:d0:5c:df:cb:92:a6:0a:7d:f5:43:f1:39: 81:3d:fc:81:ba:07:d2:e8:bd:17:0a:55:6d:6c:50:fa:84:c3: 93:5e:e1:60:78:db:2d:7e:c5:28:e8:9b:9a:12:6d:47:23:c1: b0:8a:4e:1f:55:bf:63:b6:7c:0f:23:85:fa:85:d9:61:be:d0: 19:6f:46:cd:90:dd:76:f9:e1:19:f4:eb:51:10:0e:d9:b3:da: ec:85:8f:26:13:1d:7a:99:52:b6:99:ac:8c:cc:28:9e:20:df: bb:f5:a5:e3:a6:be:f9:a1:fa:20:bd:af:59:3e:03:d7:c0:fe: 58:4c:69:88:b0:5b:ad:8b:18:42:17:0f:56:01:16:23:d3:2b: 8f:81:eb:83:7f:08:7c:69:b2:c5:81:0d:11:b9:e7:5a:49:19: 65:97:55:0d:ed:0e:bf:26:af:a2:c0:12:34:63:4d:88:c2:71: 99:fe:0d:57 -----BEGIN CERTIFICATE----- MIIGWTCCBUGgAwIBAgIUAQ0Mn0MoWE9cEOFBjbZiiROpWIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDM4NmY3ZTEtMDZlMS00NWM0LWFlNTUtN2RlYTAwYTgz NDllMB4XDTI2MTAwMTE3MDM1MFoXDTI2MTIzMDE4MDM1MFowLzEtMCsGA1UEAxMk MjU3MzhhYWEtZmNlOS00MDE5LWE0NGEtM2VmZDRmZDBjZjE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuyfVlrlMpfRCDgr9PVMMFUWbjy9o5b5UcjKU UuNbygOZgCjRTkDeDm3ZS5J5g09rEP/NonHCaxSSvX3nQWL6bGlxiuqkM2ICERWz JlRQRkquVTExkQevFv++lc2t0L4YlgEWHSKMbzbKuiRmQBW/4/WJndBkKoaa/KV1 T4BAAGO7+h/RIe4T3X0ufySqNYctLt0Af1J+jy6lFCPO9OrhSBNRG04hK5F9/AqX nYsMPIw/3z8xYogk1nfWTqLnHVK1VAfApGoLPHv1geZ7CrtqYhsQeCVT38Lx7ACN F/52YTXWOfZZ5Akv6e5ZH2pFxRbWSLN+uMEClXAqlU0rSiV1/QIDAQABo4IDazCC A2cwHQYDVR0OBBYEFPzwc4MHbhWzEd6RNMHIfvdnGTBZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS80Mzg2 ZjdlMS0wNmUxLTQ1YzQtYWU1NS03ZGVhMDBhODM0OWUvZjc5MzZmY2EtYmM0Ny0z ZDg5LTgyNGYtZDAyYzMzNjE5MTA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wZGZlNThmMi1l ZGZlLTQ2MTktODZiZC1kZWYyY2EzYWQ5MTkvNDM4NmY3ZTEtMDZlMS00NWM0LWFl NTUtN2RlYTAwYTgzNDllLzQzODZmN2UxLTA2ZTEtNDVjNC1hZTU1LTdkZWEwMGE4 MzQ5ZS5jcmwwHwYDVR0jBBgwFoAUzVSEGYlSO2bIBQUg/v5b2B0sbeswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYx OS04NmJkLWRlZjJjYTNhZDkxOS80Mzg2ZjdlMS0wNmUxLTQ1YzQtYWU1NS03ZGVh MDBhODM0OWUuY2VyMDUGCCsGAQUFBwEHAQH/BCYwJDASBAIAATAMAwQAF6GYAwQA zn51MA4EAgACMAgDBgAmAvpyADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBHPH4zvnw9r7YMcr3qhsjeV3hj s3lxreICS8qpHlF0gezu5kumVg1xD5GqL4xaQ3f5Mvm76vGCQT9CjAFNx6VugdIz ocr01v2WA+aFNeTQXN/LkqYKffVD8TmBPfyBugfS6L0XClVtbFD6hMOTXuFgeNst fsUo6JuaEm1HI8Gwik4fVb9jtnwPI4X6hdlhvtAZb0bNkN12+eEZ9OtREA7Zs9rs hY8mEx16mVK2mayMzCieIN+79aXjpr75ofogva9ZPgPXwP5YTGmIsFutixhCFw9W ARYj0yuPgeuDfwh8abLFgQ0RuedaSRlll1UN7Q6/Jq+iwBI0Y02IwnGZ/g1X -----END CERTIFICATE-----Generated at Mon Nov 2 11:32:22 2026 by rpki-client