$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/23b681ff-ef1d-4309-92ea-79d112449bb2/a9084306-f582-31f1-8599-15ec7181d708.roa File: a9084306-f582-31f1-8599-15ec7181d708.roa (raw, json) Hash identifier: Vg0WM5/qOUClsEnR6x8L3u+MERUIGEJz6+TTl1qj0dA= Subject key identifier: 16:B3:76:A7:AD:C5:74:C8:D5:70:21:16:6E:16:09:94:5B:B0:6F:48 Certificate issuer: /CN=23b681ff-ef1d-4309-92ea-79d112449bb2 Certificate serial: 010D0C9F4328584EED51F581BCCB300CB4D801C0 Authority key identifier: 16:85:6C:04:08:54:F8:C4:96:5A:64:2D:1B:3F:72:D3:FF:39:13:53 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/23b681ff-ef1d-4309-92ea-79d112449bb2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/23b681ff-ef1d-4309-92ea-79d112449bb2/a9084306-f582-31f1-8599-15ec7181d708.roa Signing time: Sun 23 Aug 2026 01:00:12 +0000 ROA not before: Sun 23 Aug 2026 01:00:12 +0000 ROA not after: Sat 21 Nov 2026 02:00:12 +0000 asID: 33306 IP address blocks: 23.128.12.0/24 maxlen: 24 142.249.84.0/22 maxlen: 24 2602:f7cc::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/23b681ff-ef1d-4309-92ea-79d112449bb2/23b681ff-ef1d-4309-92ea-79d112449bb2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/23b681ff-ef1d-4309-92ea-79d112449bb2/23b681ff-ef1d-4309-92ea-79d112449bb2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/23b681ff-ef1d-4309-92ea-79d112449bb2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ed:51:f5:81:bc:cb:30:0c:b4:d8:01:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23b681ff-ef1d-4309-92ea-79d112449bb2 Validity Not Before: Aug 23 01:00:12 2026 GMT Not After : Nov 21 02:00:12 2026 GMT Subject: CN=b76b4925-67af-4929-8075-51a2b322e6a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:37:82:dd:b7:64:c7:b9:11:cf:22:be:c1:50: ad:b5:a0:8f:08:5c:05:3e:94:08:e4:e3:1f:a2:cf: ef:ea:73:fc:70:ea:dd:01:b3:c1:0d:9d:2d:ab:e7: e6:16:4c:5a:0f:0c:0a:a1:a5:14:92:4a:a2:08:ab: 7e:01:bb:99:69:dd:6f:69:15:d1:b3:f9:7b:cf:95: 62:ad:38:44:68:d1:6f:3c:db:9b:0c:0d:18:82:a5: d6:3e:55:a2:c8:45:fe:85:49:b4:f5:01:99:dd:11: 4d:ba:a3:38:94:e9:87:7e:df:6d:81:8a:b5:18:f3: 90:24:ee:75:f8:d3:5b:5d:6e:da:70:73:11:8d:de: 7e:4a:b3:8e:b0:3e:93:20:5e:31:61:93:60:6c:31: e6:31:19:8d:09:6a:16:cc:1f:37:5b:dd:7b:c6:ce: 7a:41:92:d2:12:c9:62:13:87:0e:69:c4:ee:e8:79: 8c:03:ff:8b:a7:5c:77:d9:20:cf:fc:ff:27:0a:1b: 87:d6:b9:f5:5b:cd:18:2c:97:c7:e6:42:a1:83:bd: 5f:4a:ce:1a:c6:ee:af:f4:bf:a1:91:35:a9:a4:15: e6:dc:d2:91:5c:b6:f9:d0:43:c1:7c:e6:1a:25:85: 11:4b:dd:6c:d3:d2:e0:4e:8e:0a:41:66:68:49:98: 8c:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:B3:76:A7:AD:C5:74:C8:D5:70:21:16:6E:16:09:94:5B:B0:6F:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/23b681ff-ef1d-4309-92ea-79d112449bb2/a9084306-f582-31f1-8599-15ec7181d708.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/23b681ff-ef1d-4309-92ea-79d112449bb2/23b681ff-ef1d-4309-92ea-79d112449bb2.crl X509v3 Authority Key Identifier: keyid:16:85:6C:04:08:54:F8:C4:96:5A:64:2D:1B:3F:72:D3:FF:39:13:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/23b681ff-ef1d-4309-92ea-79d112449bb2.cer sbgp-ipAddrBlock: critical IPv4: 23.128.12.0/24 142.249.84.0/22 IPv6: 2602:f7cc::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:38:37:20:dd:70:01:e4:23:53:e2:40:40:8a:9b:3e:81:e6: 8a:f7:68:ba:b4:3e:45:a4:fc:81:30:cc:59:64:11:3e:e9:94: 6c:38:80:94:9f:24:95:80:22:11:2f:9f:0a:30:e3:50:1b:8b: f9:b9:c6:f3:ce:1c:be:64:96:50:27:e0:cb:3b:66:43:1e:a1: c3:07:00:4d:7b:09:cd:14:3d:d5:5c:04:de:a5:3f:b3:16:1f: a6:52:2d:df:a8:2c:fc:d6:5f:6a:9c:61:8e:d9:24:bd:7e:bf: 6b:76:21:96:45:99:d7:64:07:80:82:47:1a:d7:2e:74:15:7e: 24:db:e2:0b:94:c4:7f:de:58:90:92:e3:b4:36:f4:5a:96:e6: 42:0d:03:ae:df:c7:5d:55:e7:b9:87:e1:87:55:4d:5a:ba:47: d0:ae:1f:d9:64:68:18:51:18:75:c2:b5:4d:61:3f:b8:4b:4d: fb:73:c1:e8:10:d8:59:27:d9:d9:92:0b:c3:21:cd:43:ed:be: 0b:54:5a:a7:04:f2:84:de:f0:5d:be:2f:7f:46:f5:c2:85:99: 69:6f:e8:4d:b0:91:fc:71:e8:c1:3d:8e:91:ed:50:fb:f0:b7: c3:bc:32:d0:16:5b:ae:d4:09:f8:c2:81:9b:71:9c:ad:54:64: aa:51:c3:a4 -----BEGIN CERTIFICATE----- MIIGWDCCBUCgAwIBAgIUAQ0Mn0MoWE7tUfWBvMswDLTYAcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNiNjgxZmYtZWYxZC00MzA5LTkyZWEtNzlkMTEyNDQ5 YmIyMB4XDTI2MDgyMzAxMDAxMloXDTI2MTEyMTAyMDAxMlowLzEtMCsGA1UEAxMk Yjc2YjQ5MjUtNjdhZi00OTI5LTgwNzUtNTFhMmIzMjJlNmEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzjeC3bdkx7kRzyK+wVCttaCPCFwFPpQI5OMf os/v6nP8cOrdAbPBDZ0tq+fmFkxaDwwKoaUUkkqiCKt+AbuZad1vaRXRs/l7z5Vi rThEaNFvPNubDA0YgqXWPlWiyEX+hUm09QGZ3RFNuqM4lOmHft9tgYq1GPOQJO51 +NNbXW7acHMRjd5+SrOOsD6TIF4xYZNgbDHmMRmNCWoWzB83W917xs56QZLSEsli E4cOacTu6HmMA/+Lp1x32SDP/P8nChuH1rn1W80YLJfH5kKhg71fSs4axu6v9L+h kTWppBXm3NKRXLb50EPBfOYaJYURS91s09LgTo4KQWZoSZiMIwIDAQABo4IDajCC A2YwHQYDVR0OBBYEFBazdqetxXTI1XAhFm4WCZRbsG9IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yM2I2 ODFmZi1lZjFkLTQzMDktOTJlYS03OWQxMTI0NDliYjIvYTkwODQzMDYtZjU4Mi0z MWYxLTg1OTktMTVlYzcxODFkNzA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjNiNjgxZmYtZWYxZC00MzA5LTky ZWEtNzlkMTEyNDQ5YmIyLzIzYjY4MWZmLWVmMWQtNDMwOS05MmVhLTc5ZDExMjQ0 OWJiMi5jcmwwHwYDVR0jBBgwFoAUFoVsBAhU+MSWWmQtGz9y0/85E1MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yM2I2ODFmZi1lZjFkLTQzMDktOTJlYS03OWQx MTI0NDliYjIuY2VyMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQAF4AMAwQC jvlUMA0EAgACMAcDBQAmAvfMMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAEg4NyDdcAHkI1PiQECKmz6B5or3 aLq0PkWk/IEwzFlkET7plGw4gJSfJJWAIhEvnwow41Abi/m5xvPOHL5kllAn4Ms7 ZkMeocMHAE17Cc0UPdVcBN6lP7MWH6ZSLd+oLPzWX2qcYY7ZJL1+v2t2IZZFmddk B4CCRxrXLnQVfiTb4guUxH/eWJCS47Q29FqW5kINA67fx11V57mH4YdVTVq6R9Cu H9lkaBhRGHXCtU1hP7hLTftzwegQ2Fkn2dmSC8MhzUPtvgtUWqcE8oTe8F2+L39G 9cKFmWlv6E2wkfxx6ME9jpHtUPvwt8O8MtAWW67UCfjCgZtxnK1UZKpRw6Q= -----END CERTIFICATE-----Generated at Sat Sep 5 02:06:46 2026 by rpki-client