$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/23b681ff-ef1d-4309-92ea-79d112449bb2/a9084306-f582-31f1-8599-15ec7181d708.roa File: a9084306-f582-31f1-8599-15ec7181d708.roa (raw, json) Hash identifier: MEIwTFu/6lA4k8lJZDPEdW//bspCoNnNbj/jy/vnrX0= Subject key identifier: 7D:9C:1F:A3:31:38:DC:C1:1C:4E:8C:97:18:30:A3:98:2B:27:00:BD Certificate issuer: /CN=23b681ff-ef1d-4309-92ea-79d112449bb2 Certificate serial: 010D0C9F4328584F8F3DA46683D83F02EB5CB100 Authority key identifier: 16:85:6C:04:08:54:F8:C4:96:5A:64:2D:1B:3F:72:D3:FF:39:13:53 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/23b681ff-ef1d-4309-92ea-79d112449bb2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/23b681ff-ef1d-4309-92ea-79d112449bb2/a9084306-f582-31f1-8599-15ec7181d708.roa Signing time: Tue 20 Oct 2026 01:00:12 +0000 ROA not before: Tue 20 Oct 2026 01:00:12 +0000 ROA not after: Mon 18 Jan 2027 02:00:12 +0000 asID: 33306 IP address blocks: 23.128.12.0/24 maxlen: 24 142.249.84.0/22 maxlen: 24 2602:f7cc::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/23b681ff-ef1d-4309-92ea-79d112449bb2/23b681ff-ef1d-4309-92ea-79d112449bb2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/23b681ff-ef1d-4309-92ea-79d112449bb2/23b681ff-ef1d-4309-92ea-79d112449bb2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/23b681ff-ef1d-4309-92ea-79d112449bb2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 28 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:8f:3d:a4:66:83:d8:3f:02:eb:5c:b1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23b681ff-ef1d-4309-92ea-79d112449bb2 Validity Not Before: Oct 20 01:00:12 2026 GMT Not After : Jan 18 02:00:12 2027 GMT Subject: CN=5c52bf19-a9c4-42ed-bd0c-75c5c2f56fc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:32:f3:cb:ae:73:96:34:75:a3:48:81:26:f0: 5f:d1:a5:db:71:a9:7e:15:88:c4:76:06:29:d8:93: 69:5c:b4:d3:09:01:14:f0:1d:b2:f3:47:2e:5a:b5: 45:38:33:a9:b6:5e:a0:c3:a7:2f:e0:13:93:9f:c1: 0c:0e:a4:04:88:d5:b6:ff:98:b1:c6:2c:71:48:45: bd:7b:e8:13:83:fc:07:99:5b:65:47:56:f5:0d:ba: 41:69:e3:ee:99:0f:f1:44:98:b8:73:20:75:94:6f: 5d:07:3c:0b:2e:b1:cf:8d:2d:c9:08:45:c3:bc:e8: 8a:c6:d6:96:fa:95:9b:f6:7a:bc:54:f0:f5:51:09: 9e:5a:41:2b:e6:cb:e2:4d:3f:0a:84:46:76:cb:bd: d3:18:4d:15:11:86:22:d7:ea:a4:02:81:bc:e3:29: a5:84:1b:5d:44:4e:01:5d:5f:06:b0:55:a0:59:5b: 4f:9e:2b:c9:71:d3:d2:e1:f2:a4:86:46:3c:16:d3: ac:e8:f7:bf:4e:6e:eb:64:bf:c9:bb:56:95:b4:fd: 99:b6:54:b1:3c:bf:0e:f9:63:71:b0:31:0f:82:86: 14:72:a5:3a:83:c7:61:95:76:3e:ac:d8:78:52:49: 3c:88:65:02:40:6e:f1:4f:9d:18:30:8e:a5:c7:e9: 96:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:9C:1F:A3:31:38:DC:C1:1C:4E:8C:97:18:30:A3:98:2B:27:00:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/23b681ff-ef1d-4309-92ea-79d112449bb2/a9084306-f582-31f1-8599-15ec7181d708.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/23b681ff-ef1d-4309-92ea-79d112449bb2/23b681ff-ef1d-4309-92ea-79d112449bb2.crl X509v3 Authority Key Identifier: keyid:16:85:6C:04:08:54:F8:C4:96:5A:64:2D:1B:3F:72:D3:FF:39:13:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/23b681ff-ef1d-4309-92ea-79d112449bb2.cer sbgp-ipAddrBlock: critical IPv4: 23.128.12.0/24 142.249.84.0/22 IPv6: 2602:f7cc::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:b7:08:da:ed:b5:a3:f4:55:3b:fb:2e:2e:0e:e7:65:b3:b8: 72:c5:a5:ba:27:c5:1b:cc:34:a8:18:48:f7:48:77:7c:d1:d0: 19:16:64:e7:73:db:d3:99:e1:56:ec:c5:63:3a:8a:01:ed:d6: 69:f3:21:92:7e:07:2e:51:fb:86:df:9a:87:eb:91:59:87:fe: 42:ba:6d:3a:8e:1f:61:b6:19:dc:60:a9:b7:60:da:77:8a:73: ec:bc:d6:46:f1:0c:58:08:b6:83:93:83:44:d6:7e:01:64:4c: 7b:1d:b4:8d:c0:6a:6e:ee:24:56:bb:d0:ed:32:92:c4:4f:e0: f8:a8:9f:80:6d:5e:5f:ee:57:62:29:1b:e3:dc:8f:36:de:02: 36:c1:c7:c8:40:ca:33:6c:a8:34:e1:85:7b:b7:c3:3f:a2:bf: 9a:28:7e:1c:fe:29:60:05:72:5f:c4:71:b3:37:5e:d3:33:68: cb:c2:ef:ea:cf:a0:6a:de:b9:c1:1d:f7:7e:6d:60:91:5e:be: 90:70:72:47:15:90:95:34:95:bf:9d:06:d2:04:25:1c:42:91: da:58:18:13:4f:d4:b2:0d:ba:95:08:69:d0:7c:ee:6b:d6:7a: d2:72:f3:32:18:c7:89:e0:37:80:9b:1f:15:fc:47:49:8a:a9: ec:b2:aa:80 -----BEGIN CERTIFICATE----- MIIGWDCCBUCgAwIBAgIUAQ0Mn0MoWE+PPaRmg9g/AutcsQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNiNjgxZmYtZWYxZC00MzA5LTkyZWEtNzlkMTEyNDQ5 YmIyMB4XDTI2MTAyMDAxMDAxMloXDTI3MDExODAyMDAxMlowLzEtMCsGA1UEAxMk NWM1MmJmMTktYTljNC00MmVkLWJkMGMtNzVjNWMyZjU2ZmM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnTLzy65zljR1o0iBJvBf0aXbcal+FYjEdgYp 2JNpXLTTCQEU8B2y80cuWrVFODOptl6gw6cv4BOTn8EMDqQEiNW2/5ixxixxSEW9 e+gTg/wHmVtlR1b1DbpBaePumQ/xRJi4cyB1lG9dBzwLLrHPjS3JCEXDvOiKxtaW +pWb9nq8VPD1UQmeWkEr5sviTT8KhEZ2y73TGE0VEYYi1+qkAoG84ymlhBtdRE4B XV8GsFWgWVtPnivJcdPS4fKkhkY8FtOs6Pe/Tm7rZL/Ju1aVtP2ZtlSxPL8O+WNx sDEPgoYUcqU6g8dhlXY+rNh4Ukk8iGUCQG7xT50YMI6lx+mW3wIDAQABo4IDajCC A2YwHQYDVR0OBBYEFH2cH6MxONzBHE6Mlxgwo5grJwC9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yM2I2 ODFmZi1lZjFkLTQzMDktOTJlYS03OWQxMTI0NDliYjIvYTkwODQzMDYtZjU4Mi0z MWYxLTg1OTktMTVlYzcxODFkNzA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjNiNjgxZmYtZWYxZC00MzA5LTky ZWEtNzlkMTEyNDQ5YmIyLzIzYjY4MWZmLWVmMWQtNDMwOS05MmVhLTc5ZDExMjQ0 OWJiMi5jcmwwHwYDVR0jBBgwFoAUFoVsBAhU+MSWWmQtGz9y0/85E1MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yM2I2ODFmZi1lZjFkLTQzMDktOTJlYS03OWQx MTI0NDliYjIuY2VyMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQAF4AMAwQC jvlUMA0EAgACMAcDBQAmAvfMMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAFq3CNrttaP0VTv7Li4O52WzuHLF pbonxRvMNKgYSPdId3zR0BkWZOdz29OZ4VbsxWM6igHt1mnzIZJ+By5R+4bfmofr kVmH/kK6bTqOH2G2Gdxgqbdg2neKc+y81kbxDFgItoOTg0TWfgFkTHsdtI3Aam7u JFa70O0yksRP4Pion4BtXl/uV2IpG+PcjzbeAjbBx8hAyjNsqDThhXu3wz+iv5oo fhz+KWAFcl/EcbM3XtMzaMvC7+rPoGreucEd935tYJFevpBwckcVkJU0lb+dBtIE JRxCkdpYGBNP1LINupUIadB87mvWetJy8zIYx4ngN4CbHxX8R0mKqeyyqoA= -----END CERTIFICATE-----Generated at Tue Oct 27 05:10:13 2026 by rpki-client