$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/997d8e83-8eaa-4e25-8da8-2f3978ada6d1/9fb0f325-1a3f-3d56-9d06-b327d65816a2.roa File: 9fb0f325-1a3f-3d56-9d06-b327d65816a2.roa (raw, json) Hash identifier: QaR2nK+OQY/ZZaY4t5VeOFa0kveb6W/YE5+dK94lKp4= Subject key identifier: 1A:CD:50:73:D7:3B:27:88:C8:8F:00:6E:7F:10:70:AC:F3:7F:83:C7 Certificate issuer: /CN=997d8e83-8eaa-4e25-8da8-2f3978ada6d1 Certificate serial: 010D0C9F4328584F4973CC55110AABEF15DD2E00 Authority key identifier: D6:80:F8:83:60:64:50:13:25:C2:4F:D5:3B:3F:F1:9D:9D:09:C2:DE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/997d8e83-8eaa-4e25-8da8-2f3978ada6d1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/997d8e83-8eaa-4e25-8da8-2f3978ada6d1/9fb0f325-1a3f-3d56-9d06-b327d65816a2.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 395494 IP address blocks: 23.139.104.0/24 maxlen: 24 72.19.28.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/997d8e83-8eaa-4e25-8da8-2f3978ada6d1/997d8e83-8eaa-4e25-8da8-2f3978ada6d1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/997d8e83-8eaa-4e25-8da8-2f3978ada6d1/997d8e83-8eaa-4e25-8da8-2f3978ada6d1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/997d8e83-8eaa-4e25-8da8-2f3978ada6d1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 Oct 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:cc:55:11:0a:ab:ef:15:dd:2e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=997d8e83-8eaa-4e25-8da8-2f3978ada6d1 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=d39e0cd0-96aa-4fb0-a68d-ce901ae0043b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:86:f9:1f:dc:ce:03:2d:17:e6:8a:02:66:1a: db:03:28:11:41:6e:15:a0:d0:e9:1c:c7:ea:0e:82: 21:22:fd:b3:35:4a:05:e9:3f:99:3b:14:ba:bb:4d: 56:e0:c0:23:85:4f:fd:55:bc:1d:13:f0:f2:b1:c7: 80:c5:cd:1b:97:52:77:6b:a2:99:76:7b:17:ca:83: 2f:d6:07:27:0e:48:1d:fa:39:db:be:b1:ef:67:76: 79:df:17:af:9b:41:03:2c:9a:08:b2:60:13:6f:1e: 94:38:39:8b:90:0f:63:d3:0b:2c:4d:69:d1:8c:8f: e1:f4:ac:aa:a3:0a:88:de:df:d2:f7:33:95:0c:a2: 97:c6:c8:9f:2d:e0:9d:cf:64:7b:d2:7e:05:8b:50: 58:42:a4:e6:5a:9e:09:81:f0:4b:3d:b4:0e:53:65: 74:3d:cf:06:dc:f8:83:e8:8d:ce:2f:f5:b8:46:f3: ad:3a:d5:8e:67:67:34:52:39:f0:81:00:24:20:19: ab:9c:a7:d4:2a:c3:55:52:d8:02:47:14:95:b5:23: b5:30:75:54:28:54:3b:be:84:0b:58:e8:62:f8:f8: f2:0a:00:68:20:90:49:67:5a:26:2f:73:fc:00:e9: 64:a2:f3:93:6c:10:aa:65:77:d7:35:c7:2b:45:1f: cb:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:CD:50:73:D7:3B:27:88:C8:8F:00:6E:7F:10:70:AC:F3:7F:83:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/997d8e83-8eaa-4e25-8da8-2f3978ada6d1/9fb0f325-1a3f-3d56-9d06-b327d65816a2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/997d8e83-8eaa-4e25-8da8-2f3978ada6d1/997d8e83-8eaa-4e25-8da8-2f3978ada6d1.crl X509v3 Authority Key Identifier: keyid:D6:80:F8:83:60:64:50:13:25:C2:4F:D5:3B:3F:F1:9D:9D:09:C2:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/997d8e83-8eaa-4e25-8da8-2f3978ada6d1.cer sbgp-ipAddrBlock: critical IPv4: 23.139.104.0/24 72.19.28.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:7f:0f:8e:c0:5a:43:9d:ff:08:4c:eb:6a:68:ba:fc:a9:10: 87:f3:5d:06:fa:cd:cf:54:60:8e:0d:66:7d:94:e4:b3:4b:30: 6c:b5:3e:1e:75:fe:96:45:6d:53:f4:74:5f:76:c9:a4:62:14: f4:13:7a:1b:e3:87:0f:96:96:fa:e5:7b:d5:72:2f:03:fe:85: 2a:59:e9:0b:21:5f:69:88:28:bb:73:94:7a:aa:c9:0d:c6:d5: 6c:da:c2:e0:da:30:f5:bf:90:42:8c:1b:2f:d5:5d:01:10:74: 80:25:31:36:e8:54:ea:06:0a:ae:5e:de:62:fb:6b:9d:9b:30: 45:98:12:3b:9d:40:66:e4:36:6d:7d:fd:99:81:f9:21:90:b5: 77:d0:9a:a8:be:25:56:36:cf:43:25:5a:12:5f:3e:12:91:e5: c6:c4:ae:6c:61:6b:73:d9:c4:12:e8:b0:46:3a:01:a4:f8:0b: ad:b3:99:c8:b6:e8:e4:50:0f:47:17:e9:dd:21:eb:42:42:c0: d0:c9:ce:9c:8b:e0:c4:92:bc:ea:1a:c1:1c:8d:51:c1:7d:73: 31:2b:ad:6e:1a:e4:13:d8:53:95:77:59:94:c3:08:cf:5c:a3: 29:69:68:e4:43:16:3d:7e:0e:75:7e:e6:a8:ab:40:98:d9:35: 5a:ec:11:1c -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE9Jc8xVEQqr7xXdLgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTk3ZDhlODMtOGVhYS00ZTI1LThkYTgtMmYzOTc4YWRh NmQxMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZDM5ZTBjZDAtOTZhYS00ZmIwLWE2OGQtY2U5MDFhZTAwNDNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq4b5H9zOAy0X5ooCZhrbAygRQW4VoNDpHMfq DoIhIv2zNUoF6T+ZOxS6u01W4MAjhU/9VbwdE/DysceAxc0bl1J3a6KZdnsXyoMv 1gcnDkgd+jnbvrHvZ3Z53xevm0EDLJoIsmATbx6UODmLkA9j0wssTWnRjI/h9Kyq owqI3t/S9zOVDKKXxsifLeCdz2R70n4Fi1BYQqTmWp4JgfBLPbQOU2V0Pc8G3PiD 6I3OL/W4RvOtOtWOZ2c0UjnwgQAkIBmrnKfUKsNVUtgCRxSVtSO1MHVUKFQ7voQL WOhi+PjyCgBoIJBJZ1omL3P8AOlkovOTbBCqZXfXNccrRR/L7wIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFBrNUHPXOyeIyI8Abn8QcKzzf4PHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi85OTdk OGU4My04ZWFhLTRlMjUtOGRhOC0yZjM5NzhhZGE2ZDEvOWZiMGYzMjUtMWEzZi0z ZDU2LTlkMDYtYjMyN2Q2NTgxNmEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOTk3ZDhlODMtOGVhYS00ZTI1LThk YTgtMmYzOTc4YWRhNmQxLzk5N2Q4ZTgzLThlYWEtNGUyNS04ZGE4LTJmMzk3OGFk YTZkMS5jcmwwHwYDVR0jBBgwFoAU1oD4g2BkUBMlwk/VOz/xnZ0Jwt4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi85OTdkOGU4My04ZWFhLTRlMjUtOGRhOC0yZjM5 NzhhZGE2ZDEuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAF4toAwQC SBMcMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBADJ/D47AWkOd/whM62pouvypEIfzXQb6zc9UYI4NZn2U5LNL MGy1Ph51/pZFbVP0dF92yaRiFPQTehvjhw+Wlvrle9VyLwP+hSpZ6QshX2mIKLtz lHqqyQ3G1WzawuDaMPW/kEKMGy/VXQEQdIAlMTboVOoGCq5e3mL7a52bMEWYEjud QGbkNm19/ZmB+SGQtXfQmqi+JVY2z0MlWhJfPhKR5cbErmxha3PZxBLosEY6AaT4 C62zmci26ORQD0cX6d0h60JCwNDJzpyL4MSSvOoawRyNUcF9czErrW4a5BPYU5V3 WZTDCM9coylpaORDFj1+DnV+5qirQJjZNVrsERw= -----END CERTIFICATE-----Generated at Wed Oct 14 07:54:53 2026 by rpki-client