$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/23b9386a-5c2a-4a69-bd44-c9076f51301f/a2d4ccb5-c80f-3b52-abf3-c5cf32deb612.roa File: a2d4ccb5-c80f-3b52-abf3-c5cf32deb612.roa (raw, json) Hash identifier: FibCCYZJR5cOq3ChnHgV7nk4AaLVP0noBtdXKRXwd/Y= Subject key identifier: C6:20:BB:CB:4E:72:8E:50:01:0D:33:EC:BF:FF:FF:20:DB:E6:97:0A Certificate issuer: /CN=23b9386a-5c2a-4a69-bd44-c9076f51301f Certificate serial: 010D0C9F4328584EAA518A707FB1DC1268C7C300 Authority key identifier: A6:51:EB:2B:1B:08:8B:5F:B9:0C:F3:88:D2:58:8B:7F:68:A5:F1:A3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/23b9386a-5c2a-4a69-bd44-c9076f51301f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/23b9386a-5c2a-4a69-bd44-c9076f51301f/a2d4ccb5-c80f-3b52-abf3-c5cf32deb612.roa Signing time: Thu 30 Jul 2026 01:00:12 +0000 ROA not before: Thu 30 Jul 2026 01:00:12 +0000 ROA not after: Wed 28 Oct 2026 01:00:12 +0000 asID: 393775 IP address blocks: 24.235.14.0/23 maxlen: 24 65.61.48.0/23 maxlen: 24 143.223.142.0/23 maxlen: 24 192.103.11.0/24 maxlen: 24 199.116.136.0/21 maxlen: 24 209.127.254.0/23 maxlen: 24 2604:9d00::/32 maxlen: 36 2606:4180::/32 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/23b9386a-5c2a-4a69-bd44-c9076f51301f/23b9386a-5c2a-4a69-bd44-c9076f51301f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/23b9386a-5c2a-4a69-bd44-c9076f51301f/23b9386a-5c2a-4a69-bd44-c9076f51301f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/23b9386a-5c2a-4a69-bd44-c9076f51301f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:aa:51:8a:70:7f:b1:dc:12:68:c7:c3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23b9386a-5c2a-4a69-bd44-c9076f51301f Validity Not Before: Jul 30 01:00:12 2026 GMT Not After : Oct 28 01:00:12 2026 GMT Subject: CN=449b019d-eb61-4041-aa89-d072102ac874 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:07:14:82:2a:f9:43:3b:75:10:ba:f9:a8:3e: db:e9:84:a0:f0:31:6a:cf:ef:45:f6:a5:c5:c0:d5: 8d:bb:94:c9:6b:d2:4a:de:7d:70:92:91:d5:a4:94: 88:5d:8e:22:55:8a:6e:bf:46:69:67:8d:70:f1:c8: 16:cb:f5:50:77:68:62:06:1f:fa:5e:74:9c:47:df: ce:fc:1c:6b:99:33:ee:7d:f5:e6:5a:6d:f9:35:df: 99:e1:fa:04:7a:12:aa:c2:05:e3:2a:fa:5b:62:46: e1:1a:24:ff:18:ac:64:ef:c2:9a:ac:83:97:e8:c1: 9d:03:11:92:d9:d7:72:63:af:22:c4:e9:d7:aa:d2: 94:8d:17:39:17:51:25:45:a8:24:b5:f7:af:dd:aa: 35:27:cf:73:5a:78:4f:3a:b7:f5:2c:c5:8e:42:d7: 3d:d8:85:3a:7e:c7:33:bf:01:8d:66:cf:00:b9:c5: da:9d:00:43:e5:d3:c3:04:ad:b9:6f:16:4e:86:1f: 02:d4:6b:19:d9:2b:d0:89:23:0a:a8:e9:af:d1:06: 3d:31:9d:93:00:fb:5d:52:23:a8:e1:8c:d5:51:ec: e8:96:84:8f:32:57:61:07:c8:6a:c7:ae:e4:d3:e1: 81:04:15:be:ae:f8:94:d8:86:1b:ed:fe:0b:a8:f9: c2:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:20:BB:CB:4E:72:8E:50:01:0D:33:EC:BF:FF:FF:20:DB:E6:97:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/23b9386a-5c2a-4a69-bd44-c9076f51301f/a2d4ccb5-c80f-3b52-abf3-c5cf32deb612.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/23b9386a-5c2a-4a69-bd44-c9076f51301f/23b9386a-5c2a-4a69-bd44-c9076f51301f.crl X509v3 Authority Key Identifier: keyid:A6:51:EB:2B:1B:08:8B:5F:B9:0C:F3:88:D2:58:8B:7F:68:A5:F1:A3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/23b9386a-5c2a-4a69-bd44-c9076f51301f.cer sbgp-ipAddrBlock: critical IPv4: 24.235.14.0/23 65.61.48.0/23 143.223.142.0/23 192.103.11.0/24 199.116.136.0/21 209.127.254.0/23 IPv6: 2604:9d00::/32 2606:4180::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:09:03:9f:13:3a:3d:1c:0f:c4:f4:6f:10:b7:3e:4a:e5:af: a0:14:55:34:f5:38:2b:9c:b7:27:b8:87:b3:48:59:8c:7a:4a: 6b:00:9c:cb:e7:2c:8f:73:ee:ca:9a:ad:f0:bd:20:eb:24:6c: 68:e5:a9:b4:7d:ae:63:23:f9:c6:90:8b:1f:68:46:15:1f:3c: 7e:7f:9a:98:87:f5:d8:c9:b6:23:87:2d:6b:89:20:a3:17:8b: 9c:fb:0c:f4:1d:df:39:4e:a6:f0:ad:91:90:39:89:7f:39:f0: 94:bd:05:76:ed:56:5f:7a:fc:11:ba:8e:54:be:f2:11:4c:de: 84:21:ca:a1:51:53:24:49:4c:a1:8c:9d:71:35:17:f0:55:12: 21:cf:66:6a:ea:21:c3:66:44:29:95:d7:98:63:4c:92:a5:ca: b7:49:75:65:20:3c:23:cc:e1:03:19:c4:67:7c:e0:3c:e3:af: b3:27:34:db:b0:34:2f:f3:6b:74:42:44:3a:1c:03:53:fb:cd: 3c:27:40:7f:e3:7c:42:e6:eb:f7:49:4e:5b:43:60:02:f4:93: d2:23:1b:05:87:ba:4b:97:a0:ba:e9:c0:dd:ac:af:06:3e:b8: 89:d7:eb:c8:d8:1b:9f:f6:e5:13:f5:8a:53:e9:07:81:90:01: fe:95:6b:d0 -----BEGIN CERTIFICATE----- MIIGdzCCBV+gAwIBAgIUAQ0Mn0MoWE6qUYpwf7HcEmjHwwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNiOTM4NmEtNWMyYS00YTY5LWJkNDQtYzkwNzZmNTEz MDFmMB4XDTI2MDczMDAxMDAxMloXDTI2MTAyODAxMDAxMlowLzEtMCsGA1UEAxMk NDQ5YjAxOWQtZWI2MS00MDQxLWFhODktZDA3MjEwMmFjODc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAowcUgir5Qzt1ELr5qD7b6YSg8DFqz+9F9qXF wNWNu5TJa9JK3n1wkpHVpJSIXY4iVYpuv0ZpZ41w8cgWy/VQd2hiBh/6XnScR9/O /BxrmTPuffXmWm35Nd+Z4foEehKqwgXjKvpbYkbhGiT/GKxk78KarIOX6MGdAxGS 2ddyY68ixOnXqtKUjRc5F1ElRagktfev3ao1J89zWnhPOrf1LMWOQtc92IU6fscz vwGNZs8AucXanQBD5dPDBK25bxZOhh8C1GsZ2SvQiSMKqOmv0QY9MZ2TAPtdUiOo 4YzVUezoloSPMldhB8hqx67k0+GBBBW+rviU2IYb7f4LqPnC2wIDAQABo4IDiTCC A4UwHQYDVR0OBBYEFMYgu8tOco5QAQ0z7L///yDb5pcKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi8yM2I5 Mzg2YS01YzJhLTRhNjktYmQ0NC1jOTA3NmY1MTMwMWYvYTJkNGNjYjUtYzgwZi0z YjUyLWFiZjMtYzVjZjMyZGViNjEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvMjNiOTM4NmEtNWMyYS00YTY5LWJk NDQtYzkwNzZmNTEzMDFmLzIzYjkzODZhLTVjMmEtNGE2OS1iZDQ0LWM5MDc2ZjUx MzAxZi5jcmwwHwYDVR0jBBgwFoAUplHrKxsIi1+5DPOI0liLf2il8aMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi8yM2I5Mzg2YS01YzJhLTRhNjktYmQ0NC1jOTA3 NmY1MTMwMWYuY2VyMFMGCCsGAQUFBwEHAQH/BEQwQjAqBAIAATAkAwQBGOsOAwQB QT0wAwQBj9+OAwQAwGcLAwQDx3SIAwQB0X/+MBQEAgACMA4DBQAmBJ0AAwUAJgZB gDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBz Oi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3 DQEBCwUAA4IBAQA5CQOfEzo9HA/E9G8Qtz5K5a+gFFU09TgrnLcnuIezSFmMekpr AJzL5yyPc+7Kmq3wvSDrJGxo5am0fa5jI/nGkIsfaEYVHzx+f5qYh/XYybYjhy1r iSCjF4uc+wz0Hd85TqbwrZGQOYl/OfCUvQV27VZfevwRuo5UvvIRTN6EIcqhUVMk SUyhjJ1xNRfwVRIhz2Zq6iHDZkQpldeYY0ySpcq3SXVlIDwjzOEDGcRnfOA846+z JzTbsDQv82t0QkQ6HANT+808J0B/43xC5uv3SU5bQ2AC9JPSIxsFh7pLl6C66cDd rK8GPriJ1+vI2Buf9uUT9YpT6QeBkAH+lWvQ -----END CERTIFICATE-----Generated at Sat Sep 5 06:25:38 2026 by rpki-client