$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6cb2f24e-d112-4b22-a030-f85e88a245a8/cfa1fe0f-0368-33da-a131-dbb8902281a7.roa File: cfa1fe0f-0368-33da-a131-dbb8902281a7.roa (raw, json) Hash identifier: gbaPOu3Z+nYOScSCvjEhIzmuqYR8nYGPX+NON2MstVU= Subject key identifier: 2F:B4:55:BB:4A:F1:1B:AD:AC:A6:5E:3D:79:CE:0A:B4:B3:5A:6C:6B Certificate issuer: /CN=6cb2f24e-d112-4b22-a030-f85e88a245a8 Certificate serial: 010D0C9F4328584EE4F1E68EE7A3C7D1AD1772E0 Authority key identifier: 7A:F4:0D:F0:19:77:78:E5:5C:3F:D8:F1:43:0A:C8:0C:0A:6D:0A:4A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6cb2f24e-d112-4b22-a030-f85e88a245a8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6cb2f24e-d112-4b22-a030-f85e88a245a8/cfa1fe0f-0368-33da-a131-dbb8902281a7.roa Signing time: Thu 20 Aug 2026 01:00:12 +0000 ROA not before: Thu 20 Aug 2026 01:00:12 +0000 ROA not after: Wed 18 Nov 2026 02:00:12 +0000 asID: 400045 IP address blocks: 23.159.180.0/24 maxlen: 24 2602:293::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6cb2f24e-d112-4b22-a030-f85e88a245a8/6cb2f24e-d112-4b22-a030-f85e88a245a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6cb2f24e-d112-4b22-a030-f85e88a245a8/6cb2f24e-d112-4b22-a030-f85e88a245a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6cb2f24e-d112-4b22-a030-f85e88a245a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e4:f1:e6:8e:e7:a3:c7:d1:ad:17:72:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6cb2f24e-d112-4b22-a030-f85e88a245a8 Validity Not Before: Aug 20 01:00:12 2026 GMT Not After : Nov 18 02:00:12 2026 GMT Subject: CN=4fa78f9b-6f5c-4ae3-9a56-0db5c918d0d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:28:09:7f:65:4a:a7:37:a4:54:4f:44:98:2c: c6:da:eb:b9:67:fd:e7:2c:39:d2:84:e7:7d:18:77: ae:58:78:0a:a4:6d:cc:f9:7a:0f:be:f8:29:fb:03: e2:fe:fd:bc:b3:22:b4:41:84:75:03:88:c6:82:c3: 36:56:c2:ab:28:25:8a:dd:ed:79:4c:4f:5c:88:ef: 34:b6:32:15:86:8b:c3:ac:67:e1:e0:e2:79:9c:59: c2:6c:35:8b:fc:9d:bd:a6:9a:bc:d7:b2:51:55:f0: bc:fa:dc:40:9c:f2:b9:90:33:fa:5e:c1:f2:48:2f: d3:a2:8c:14:ad:0d:c8:0b:af:87:f0:0f:52:77:dc: 64:76:f3:29:18:bb:e2:63:d0:4f:d7:8c:42:9f:f1: 91:34:28:6e:8d:3e:3e:43:dd:60:6e:03:83:bd:7b: d3:99:af:91:e3:f5:0b:ab:62:d8:a3:cc:ed:7a:8c: bd:60:a2:9a:45:42:f4:51:7b:0a:b5:90:9c:b6:56: 8e:78:87:98:dd:c3:93:65:d6:1a:76:65:98:cf:4b: c9:c0:11:9b:e2:c6:0d:c8:d5:eb:54:92:16:27:ea: dd:63:62:8e:45:55:4e:48:e4:5c:2b:ae:e5:4b:b6: 74:ee:60:a0:4b:95:f2:75:4f:f5:82:9a:21:f9:f2: 85:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:B4:55:BB:4A:F1:1B:AD:AC:A6:5E:3D:79:CE:0A:B4:B3:5A:6C:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6cb2f24e-d112-4b22-a030-f85e88a245a8/cfa1fe0f-0368-33da-a131-dbb8902281a7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6cb2f24e-d112-4b22-a030-f85e88a245a8/6cb2f24e-d112-4b22-a030-f85e88a245a8.crl X509v3 Authority Key Identifier: keyid:7A:F4:0D:F0:19:77:78:E5:5C:3F:D8:F1:43:0A:C8:0C:0A:6D:0A:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6cb2f24e-d112-4b22-a030-f85e88a245a8.cer sbgp-ipAddrBlock: critical IPv4: 23.159.180.0/24 IPv6: 2602:293::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:cc:0b:c6:d2:76:87:78:51:a3:c5:c8:f1:7e:de:01:ad:51: 8e:74:77:62:58:3a:46:17:9b:71:8e:f7:0a:b0:a3:63:e6:11: eb:cd:29:ad:7f:9f:9e:bb:27:c2:e3:f3:d5:54:ac:c4:a1:44: 26:a3:94:13:21:04:01:32:cc:51:ed:3f:5e:b9:ac:cb:48:59: 6b:56:dc:2f:f5:05:ff:e3:45:26:62:db:25:b3:b5:9a:1c:30: 51:95:61:bc:fa:a4:de:cd:c9:75:37:de:75:e6:3a:bf:f8:ea: 35:00:f7:1a:b1:3c:2a:31:77:28:52:45:47:45:5f:ee:69:06: 63:62:bb:34:a1:ff:bd:b4:3a:00:8b:fb:b2:6c:ea:e1:d4:f7: 4d:c8:b2:01:ef:f7:1a:61:9e:65:fd:3f:17:f6:1f:2f:96:74: bf:68:06:23:f7:de:1c:9e:6e:c8:33:ad:a7:7b:0b:4c:75:ee: a0:6a:a4:10:6e:8e:ef:2c:53:bd:5a:97:6b:53:19:8a:2a:6a: 1f:f1:6d:13:d4:ce:d1:bc:ea:96:31:b1:26:c5:40:b2:9e:7f: c6:a1:c1:9e:6e:c4:82:51:dc:a2:e9:e0:0f:10:75:93:c9:d6: 98:00:fe:ff:c1:c2:eb:ad:8e:64:02:6f:83:be:38:f0:ab:5a: 4e:2b:9b:81 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE7k8eaO56PH0a0XcuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmNiMmYyNGUtZDExMi00YjIyLWEwMzAtZjg1ZTg4YTI0 NWE4MB4XDTI2MDgyMDAxMDAxMloXDTI2MTExODAyMDAxMlowLzEtMCsGA1UEAxMk NGZhNzhmOWItNmY1Yy00YWUzLTlhNTYtMGRiNWM5MThkMGQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArygJf2VKpzekVE9EmCzG2uu5Z/3nLDnShOd9 GHeuWHgKpG3M+XoPvvgp+wPi/v28syK0QYR1A4jGgsM2VsKrKCWK3e15TE9ciO80 tjIVhovDrGfh4OJ5nFnCbDWL/J29ppq817JRVfC8+txAnPK5kDP6XsHySC/ToowU rQ3IC6+H8A9Sd9xkdvMpGLviY9BP14xCn/GRNChujT4+Q91gbgODvXvTma+R4/UL q2LYo8zteoy9YKKaRUL0UXsKtZCctlaOeIeY3cOTZdYadmWYz0vJwBGb4sYNyNXr VJIWJ+rdY2KORVVOSORcK67lS7Z07mCgS5XydU/1gpoh+fKFAQIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFC+0VbtK8RutrKZePXnOCrSzWmxrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi82Y2Iy ZjI0ZS1kMTEyLTRiMjItYTAzMC1mODVlODhhMjQ1YTgvY2ZhMWZlMGYtMDM2OC0z M2RhLWExMzEtZGJiODkwMjI4MWE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvNmNiMmYyNGUtZDExMi00YjIyLWEw MzAtZjg1ZTg4YTI0NWE4LzZjYjJmMjRlLWQxMTItNGIyMi1hMDMwLWY4NWU4OGEy NDVhOC5jcmwwHwYDVR0jBBgwFoAUevQN8Bl3eOVcP9jxQwrIDAptCkowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi82Y2IyZjI0ZS1kMTEyLTRiMjItYTAzMC1mODVl ODhhMjQ1YTguY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF5+0MA4E AgACMAgDBgAmAgKTADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBqzAvG0naHeFGjxcjxft4BrVGOdHdiWDpG F5txjvcKsKNj5hHrzSmtf5+euyfC4/PVVKzEoUQmo5QTIQQBMsxR7T9euazLSFlr Vtwv9QX/40UmYtsls7WaHDBRlWG8+qTezcl1N9515jq/+Oo1APcasTwqMXcoUkVH RV/uaQZjYrs0of+9tDoAi/uybOrh1PdNyLIB7/caYZ5l/T8X9h8vlnS/aAYj994c nm7IM62newtMde6gaqQQbo7vLFO9WpdrUxmKKmof8W0T1M7RvOqWMbEmxUCynn/G ocGebsSCUdyi6eAPEHWTydaYAP7/wcLrrY5kAm+Dvjjwq1pOK5uB -----END CERTIFICATE-----Generated at Sat Sep 5 04:30:34 2026 by rpki-client