$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/c91a2b6c-e095-4c83-8474-fbf77fec5a8d/df9c6049-da53-3fbb-9a45-581fdf1ff7dc.roa File: df9c6049-da53-3fbb-9a45-581fdf1ff7dc.roa (raw, json) Hash identifier: dhaMPGyhTEL6lVlXNy6pzqpR99ey4FgATmNKbHVyvRQ= Subject key identifier: BD:41:41:03:AC:A9:3B:2B:45:23:4A:72:C8:1A:BD:A1:18:A5:FD:7B Certificate issuer: /CN=c91a2b6c-e095-4c83-8474-fbf77fec5a8d Certificate serial: 010D0C9F4328584F96AB0380102E6021F44CDBA0 Authority key identifier: FE:77:DF:D1:CE:A0:20:E1:12:47:F5:6C:C5:FC:3C:DF:FF:C5:E6:3F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/c91a2b6c-e095-4c83-8474-fbf77fec5a8d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/c91a2b6c-e095-4c83-8474-fbf77fec5a8d/df9c6049-da53-3fbb-9a45-581fdf1ff7dc.roa Signing time: Thu 22 Oct 2026 16:51:16 +0000 ROA not before: Thu 22 Oct 2026 16:51:16 +0000 ROA not after: Wed 20 Jan 2027 17:51:16 +0000 asID: 400474 IP address blocks: 23.132.168.0/24 maxlen: 24 2602:fbbf::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/c91a2b6c-e095-4c83-8474-fbf77fec5a8d/c91a2b6c-e095-4c83-8474-fbf77fec5a8d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/c91a2b6c-e095-4c83-8474-fbf77fec5a8d/c91a2b6c-e095-4c83-8474-fbf77fec5a8d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/c91a2b6c-e095-4c83-8474-fbf77fec5a8d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/0dfe58f2-edfe-4619-86bd-def2ca3ad919.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:96:ab:03:80:10:2e:60:21:f4:4c:db:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c91a2b6c-e095-4c83-8474-fbf77fec5a8d Validity Not Before: Oct 22 16:51:16 2026 GMT Not After : Jan 20 17:51:16 2027 GMT Subject: CN=debf94ab-bca9-4794-b4c5-54edc0cba6bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:45:2b:87:37:9b:cf:95:d3:0b:d5:84:89:80: 32:d0:b2:da:54:d4:98:1d:39:d9:15:32:b8:2d:81: 3c:67:04:b7:79:1b:28:16:d5:0c:ed:bd:12:1a:6d: 4a:b5:5d:17:3e:b5:b7:79:22:88:df:bc:37:7a:64: 69:7f:9b:72:e6:cd:b7:16:c8:b5:33:fd:92:ef:60: 32:5d:16:4c:d2:36:5c:64:73:2e:57:bc:ac:fe:5b: 8e:56:58:ae:27:9c:f2:fb:46:3e:0b:55:45:86:a8: 6b:1f:11:00:13:8d:44:a8:df:4b:59:d7:ed:f5:d4: f8:b9:55:93:9b:12:d1:54:97:74:83:37:8a:b2:2b: 1e:29:a9:56:cc:51:18:55:2b:d2:fc:f0:bf:fa:a1: 28:3a:0c:88:6e:d5:61:d6:b0:07:98:0f:79:ce:6c: a5:83:63:de:76:bc:c5:17:cf:d5:31:cd:59:50:6a: 7c:98:e3:cc:29:69:0c:2c:f0:6c:f7:ce:f7:7d:9d: 4a:43:31:c8:63:7b:e5:11:05:92:f5:4e:14:cb:3c: 2a:d8:fe:3b:bb:7c:c0:f3:91:d4:e2:3a:59:09:7b: aa:f5:e8:d3:9d:00:de:b6:99:1b:0a:d1:30:8a:6c: 84:65:88:48:a7:3d:6b:eb:1c:83:37:bd:ca:1e:87: 10:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:41:41:03:AC:A9:3B:2B:45:23:4A:72:C8:1A:BD:A1:18:A5:FD:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/c91a2b6c-e095-4c83-8474-fbf77fec5a8d/df9c6049-da53-3fbb-9a45-581fdf1ff7dc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/c91a2b6c-e095-4c83-8474-fbf77fec5a8d/c91a2b6c-e095-4c83-8474-fbf77fec5a8d.crl X509v3 Authority Key Identifier: keyid:FE:77:DF:D1:CE:A0:20:E1:12:47:F5:6C:C5:FC:3C:DF:FF:C5:E6:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0dfe58f2-edfe-4619-86bd-def2ca3ad919/c91a2b6c-e095-4c83-8474-fbf77fec5a8d.cer sbgp-ipAddrBlock: critical IPv4: 23.132.168.0/24 IPv6: 2602:fbbf::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:d3:d7:e4:5a:55:6e:6a:a1:ee:2e:4a:51:ee:d0:d8:2a:e2: 9a:bc:0f:20:e4:72:da:62:50:f8:2f:ca:6a:49:73:1d:6a:3d: d2:e2:c8:f4:56:46:f3:53:47:69:f3:b7:a7:d8:55:64:ec:b9: c2:90:bf:23:9c:61:68:dd:d0:72:41:7a:76:b0:c8:21:41:22: 49:14:46:7d:34:b7:93:63:fd:fe:7c:64:64:ef:29:74:dd:e0: 4f:17:a9:95:74:75:92:c4:4c:da:9c:6c:2d:0f:ce:26:ef:c6: 8b:14:a0:d5:38:87:a9:59:ee:c2:f0:b2:ac:4a:c2:a5:18:44: d3:9b:b1:b6:08:a6:77:92:1f:5d:47:b9:2a:5b:87:59:27:29: 41:56:b6:d6:96:9a:83:a1:94:49:3a:fc:0f:e5:95:a5:85:53: b2:32:f0:3b:be:60:02:6f:56:9a:c1:8c:2e:e5:52:6c:81:25: 95:57:ea:28:5a:36:2d:34:6f:42:c9:85:53:b5:68:28:50:76: b3:ee:c8:6b:cd:f3:9f:c6:db:68:c5:ab:5e:63:b3:ec:d3:5c: f4:5c:9b:f9:22:64:60:aa:e9:16:a1:0d:ac:07:96:25:ba:a7: 2c:57:11:83:68:41:75:fc:ce:4d:e6:46:77:c3:6f:7c:4d:b4: 7c:52:e7:a1 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE+WqwOAEC5gIfRM26AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzkxYTJiNmMtZTA5NS00YzgzLTg0NzQtZmJmNzdmZWM1 YThkMB4XDTI2MTAyMjE2NTExNloXDTI3MDEyMDE3NTExNlowLzEtMCsGA1UEAxMk ZGViZjk0YWItYmNhOS00Nzk0LWI0YzUtNTRlZGMwY2JhNmJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm0Urhzebz5XTC9WEiYAy0LLaVNSYHTnZFTK4 LYE8ZwS3eRsoFtUM7b0SGm1KtV0XPrW3eSKI37w3emRpf5ty5s23Fsi1M/2S72Ay XRZM0jZcZHMuV7ys/luOVliuJ5zy+0Y+C1VFhqhrHxEAE41EqN9LWdft9dT4uVWT mxLRVJd0gzeKsiseKalWzFEYVSvS/PC/+qEoOgyIbtVh1rAHmA95zmylg2PedrzF F8/VMc1ZUGp8mOPMKWkMLPBs9873fZ1KQzHIY3vlEQWS9U4Uyzwq2P47u3zA85HU 4jpZCXuq9ejTnQDetpkbCtEwimyEZYhIpz1r6xyDN73KHocQIwIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFL1BQQOsqTsrRSNKcsgavaEYpf17MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYxOS04NmJkLWRlZjJjYTNhZDkxOS9jOTFh MmI2Yy1lMDk1LTRjODMtODQ3NC1mYmY3N2ZlYzVhOGQvZGY5YzYwNDktZGE1My0z ZmJiLTlhNDUtNTgxZmRmMWZmN2RjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wZGZlNThmMi1l ZGZlLTQ2MTktODZiZC1kZWYyY2EzYWQ5MTkvYzkxYTJiNmMtZTA5NS00YzgzLTg0 NzQtZmJmNzdmZWM1YThkL2M5MWEyYjZjLWUwOTUtNGM4My04NDc0LWZiZjc3ZmVj NWE4ZC5jcmwwHwYDVR0jBBgwFoAU/nff0c6gIOESR/Vsxfw83//F5j8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzBkZmU1OGYyLWVkZmUtNDYx OS04NmJkLWRlZjJjYTNhZDkxOS9jOTFhMmI2Yy1lMDk1LTRjODMtODQ3NC1mYmY3 N2ZlYzVhOGQuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF4SoMA4E AgACMAgDBgQmAvu/ADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAx09fkWlVuaqHuLkpR7tDYKuKavA8g5HLa YlD4L8pqSXMdaj3S4sj0VkbzU0dp87en2FVk7LnCkL8jnGFo3dByQXp2sMghQSJJ FEZ9NLeTY/3+fGRk7yl03eBPF6mVdHWSxEzanGwtD84m78aLFKDVOIepWe7C8LKs SsKlGETTm7G2CKZ3kh9dR7kqW4dZJylBVrbWlpqDoZRJOvwP5ZWlhVOyMvA7vmAC b1aawYwu5VJsgSWVV+ooWjYtNG9CyYVTtWgoUHaz7shrzfOfxttoxateY7Ps01z0 XJv5ImRgqukWoQ2sB5YluqcsVxGDaEF1/M5N5kZ3w298TbR8Uueh -----END CERTIFICATE-----Generated at Wed Nov 4 13:32:01 2026 by rpki-client