$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6cb2f24e-d112-4b22-a030-f85e88a245a8/cfa1fe0f-0368-33da-a131-dbb8902281a7.roa File: cfa1fe0f-0368-33da-a131-dbb8902281a7.roa (raw, json) Hash identifier: 15aGQFRVaBUD6b+tLy6S8nhtP305089Gq5nfL0NtyXU= Subject key identifier: B2:B6:C9:A1:A8:65:F6:A7:EC:D9:B9:BC:5D:2B:97:F3:14:EC:0D:BE Certificate issuer: /CN=6cb2f24e-d112-4b22-a030-f85e88a245a8 Certificate serial: 010D0C9F4328584F86DDA8B130EF3AAED9416D00 Authority key identifier: 7A:F4:0D:F0:19:77:78:E5:5C:3F:D8:F1:43:0A:C8:0C:0A:6D:0A:4A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6cb2f24e-d112-4b22-a030-f85e88a245a8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6cb2f24e-d112-4b22-a030-f85e88a245a8/cfa1fe0f-0368-33da-a131-dbb8902281a7.roa Signing time: Sat 17 Oct 2026 01:00:13 +0000 ROA not before: Sat 17 Oct 2026 01:00:13 +0000 ROA not after: Fri 15 Jan 2027 02:00:13 +0000 asID: 400045 IP address blocks: 23.159.180.0/24 maxlen: 24 2602:293::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6cb2f24e-d112-4b22-a030-f85e88a245a8/6cb2f24e-d112-4b22-a030-f85e88a245a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6cb2f24e-d112-4b22-a030-f85e88a245a8/6cb2f24e-d112-4b22-a030-f85e88a245a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6cb2f24e-d112-4b22-a030-f85e88a245a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:86:dd:a8:b1:30:ef:3a:ae:d9:41:6d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6cb2f24e-d112-4b22-a030-f85e88a245a8 Validity Not Before: Oct 17 01:00:13 2026 GMT Not After : Jan 15 02:00:13 2027 GMT Subject: CN=cd55c240-a5d2-4e4e-bbec-a8f64038de8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:af:96:e3:2d:72:bb:c7:19:73:bc:6c:4f:be: cd:f1:02:45:8c:7f:c2:1a:22:87:b1:ff:71:2f:69: bf:09:23:ee:10:10:88:e6:b6:8e:9a:7a:6b:72:e1: 06:5b:00:9e:30:08:63:3e:da:e8:da:fb:b0:af:1e: 86:1e:95:61:95:e4:64:50:dc:ee:b6:1b:b9:bb:67: ad:ad:66:a9:6e:56:11:1e:30:a8:21:5e:54:35:07: 67:d9:06:0e:74:9e:47:51:34:4f:a8:e0:6c:70:a7: b0:4b:e5:37:bb:2c:bd:32:76:a4:5a:e7:2b:f9:e0: df:f3:f0:e6:74:dc:c1:8f:60:c6:34:71:88:2b:b4: dc:6f:6a:9f:b3:1f:3a:83:57:6d:8a:3d:6a:5c:be: 48:e0:29:79:b4:6b:7e:7b:08:35:9c:10:65:5a:87: e2:69:35:06:94:c7:a8:d9:d5:51:d7:8d:d3:fe:eb: fd:09:8e:ca:c5:2a:2c:e4:4a:1d:3d:f2:c6:8d:2f: ce:44:a4:a3:b1:fb:4c:63:b6:6f:50:e0:97:3e:3a: f2:b9:a5:08:3e:c1:d1:72:19:65:1a:4e:01:41:3b: 3d:3a:37:39:d7:bd:d9:a0:9d:19:c7:e8:e5:38:aa: de:88:f1:fe:87:e0:86:1a:ab:7f:a2:54:14:92:b2: 7e:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:B6:C9:A1:A8:65:F6:A7:EC:D9:B9:BC:5D:2B:97:F3:14:EC:0D:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6cb2f24e-d112-4b22-a030-f85e88a245a8/cfa1fe0f-0368-33da-a131-dbb8902281a7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6cb2f24e-d112-4b22-a030-f85e88a245a8/6cb2f24e-d112-4b22-a030-f85e88a245a8.crl X509v3 Authority Key Identifier: keyid:7A:F4:0D:F0:19:77:78:E5:5C:3F:D8:F1:43:0A:C8:0C:0A:6D:0A:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6cb2f24e-d112-4b22-a030-f85e88a245a8.cer sbgp-ipAddrBlock: critical IPv4: 23.159.180.0/24 IPv6: 2602:293::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:c0:5a:03:37:25:c3:b3:9a:d1:9f:5e:6e:eb:04:42:ff:0a: 8a:22:1f:fb:c3:15:72:25:56:6f:cd:b2:83:b7:a6:64:ba:c4: 3f:87:cb:e1:75:fd:1a:8e:10:a5:61:9b:1c:d3:3c:67:45:ba: b2:9c:ef:f7:43:70:3c:6b:d9:b0:d1:86:d7:36:14:3c:04:3d: cf:a5:b0:a1:f7:77:c3:ef:d6:e2:82:ad:af:d8:58:e9:d7:cd: d4:78:f1:b1:5c:8d:3f:c7:16:e1:0c:72:2c:bb:cc:b9:b5:66: 36:cc:65:86:49:0c:e5:ff:1c:fe:32:b7:23:b6:74:4e:d1:50: 61:77:df:1c:36:38:10:db:da:20:d5:e8:ac:91:db:48:ad:fa: d0:c6:11:ff:70:87:ab:4e:54:df:3c:3c:d1:fc:87:05:bb:07: bc:3c:11:65:fd:fd:9d:52:ae:a7:a6:f8:e8:80:05:49:12:67: 40:be:1c:c2:13:f2:a5:bf:21:59:b3:17:34:9c:e8:4a:74:51: bb:ec:36:13:6d:a3:e7:2b:68:c0:fa:91:50:a9:22:89:7d:d7: c1:2e:0c:ea:8e:4c:99:0e:77:58:47:99:df:69:95:ef:0b:5e: 76:c2:59:bf:26:dd:06:12:d0:1f:f8:39:e0:5b:68:7a:cd:d2: 94:98:46:6c -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE+G3aixMO86rtlBbQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmNiMmYyNGUtZDExMi00YjIyLWEwMzAtZjg1ZTg4YTI0 NWE4MB4XDTI2MTAxNzAxMDAxM1oXDTI3MDExNTAyMDAxM1owLzEtMCsGA1UEAxMk Y2Q1NWMyNDAtYTVkMi00ZTRlLWJiZWMtYThmNjQwMzhkZThkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnq+W4y1yu8cZc7xsT77N8QJFjH/CGiKHsf9x L2m/CSPuEBCI5raOmnprcuEGWwCeMAhjPtro2vuwrx6GHpVhleRkUNzuthu5u2et rWapblYRHjCoIV5UNQdn2QYOdJ5HUTRPqOBscKewS+U3uyy9MnakWucr+eDf8/Dm dNzBj2DGNHGIK7Tcb2qfsx86g1dtij1qXL5I4Cl5tGt+ewg1nBBlWofiaTUGlMeo 2dVR143T/uv9CY7KxSos5EodPfLGjS/ORKSjsftMY7ZvUOCXPjryuaUIPsHRchll Gk4BQTs9Ojc5173ZoJ0Zx+jlOKreiPH+h+CGGqt/olQUkrJ+hwIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFLK2yaGoZfan7Nm5vF0rl/MU7A2+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi82Y2Iy ZjI0ZS1kMTEyLTRiMjItYTAzMC1mODVlODhhMjQ1YTgvY2ZhMWZlMGYtMDM2OC0z M2RhLWExMzEtZGJiODkwMjI4MWE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvNmNiMmYyNGUtZDExMi00YjIyLWEw MzAtZjg1ZTg4YTI0NWE4LzZjYjJmMjRlLWQxMTItNGIyMi1hMDMwLWY4NWU4OGEy NDVhOC5jcmwwHwYDVR0jBBgwFoAUevQN8Bl3eOVcP9jxQwrIDAptCkowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi82Y2IyZjI0ZS1kMTEyLTRiMjItYTAzMC1mODVl ODhhMjQ1YTguY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF5+0MA4E AgACMAgDBgAmAgKTADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBMwFoDNyXDs5rRn15u6wRC/wqKIh/7wxVy JVZvzbKDt6ZkusQ/h8vhdf0ajhClYZsc0zxnRbqynO/3Q3A8a9mw0YbXNhQ8BD3P pbCh93fD79bigq2v2Fjp183UePGxXI0/xxbhDHIsu8y5tWY2zGWGSQzl/xz+Mrcj tnRO0VBhd98cNjgQ29og1eiskdtIrfrQxhH/cIerTlTfPDzR/IcFuwe8PBFl/f2d Uq6npvjogAVJEmdAvhzCE/KlvyFZsxc0nOhKdFG77DYTbaPnK2jA+pFQqSKJfdfB LgzqjkyZDndYR5nfaZXvC152wlm/Jt0GEtAf+DngW2h6zdKUmEZs -----END CERTIFICATE-----Generated at Mon Oct 26 17:09:58 2026 by rpki-client