$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/997f5b04-998c-4e8a-bf3e-fd9ab96a2d28/3a59a8dd-9438-357b-9270-804aa380967c.roa File: 3a59a8dd-9438-357b-9270-804aa380967c.roa (raw, json) Hash identifier: qYJA/Pv9twovoUTOq/v5/QVMWC/kOk9p4dk6AvrCdUU= Subject key identifier: 8A:3E:4F:1A:F6:AD:04:63:77:41:65:06:13:DC:26:F3:40:8C:C9:E5 Certificate issuer: /CN=997f5b04-998c-4e8a-bf3e-fd9ab96a2d28 Certificate serial: 010D0C9F4328584F6F22E9314ADA48C6D52DA300 Authority key identifier: 9B:13:2D:08:76:48:2B:5E:06:EB:06:C4:77:22:20:F0:09:CD:3E:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/997f5b04-998c-4e8a-bf3e-fd9ab96a2d28.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/997f5b04-998c-4e8a-bf3e-fd9ab96a2d28/3a59a8dd-9438-357b-9270-804aa380967c.roa Signing time: Thu 08 Oct 2026 13:00:12 +0000 ROA not before: Thu 08 Oct 2026 13:00:12 +0000 ROA not after: Wed 06 Jan 2027 14:00:12 +0000 asID: 395549 IP address blocks: 23.129.8.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/997f5b04-998c-4e8a-bf3e-fd9ab96a2d28/997f5b04-998c-4e8a-bf3e-fd9ab96a2d28.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/997f5b04-998c-4e8a-bf3e-fd9ab96a2d28/997f5b04-998c-4e8a-bf3e-fd9ab96a2d28.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/997f5b04-998c-4e8a-bf3e-fd9ab96a2d28.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 25 Oct 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:6f:22:e9:31:4a:da:48:c6:d5:2d:a3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=997f5b04-998c-4e8a-bf3e-fd9ab96a2d28 Validity Not Before: Oct 8 13:00:12 2026 GMT Not After : Jan 6 14:00:12 2027 GMT Subject: CN=67a98586-a574-478e-9e71-c77831c6eb3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:9b:87:5b:2d:d9:0c:25:bd:48:a0:f2:8f:74: 68:42:b3:26:5e:58:3a:de:06:f3:19:55:f2:ee:73: 51:0c:c7:95:78:c5:15:8f:14:ce:70:b6:51:72:90: ea:6b:b8:84:16:8f:45:d4:48:78:59:15:bd:51:11: 4b:03:0a:1c:a6:f3:e2:05:20:74:a8:3c:e3:a5:a7: 73:e8:ad:02:bd:11:3a:e9:85:22:6b:4d:07:a8:cf: f4:75:e1:3e:d3:2d:62:1d:be:0c:ff:ad:b4:06:f0: 1e:6b:f8:22:4a:98:11:d6:c5:0a:f6:aa:31:a4:ee: b8:4e:71:b3:aa:55:90:43:97:72:5b:b4:8e:57:19: 10:7b:95:1d:43:2e:d4:21:d9:99:38:d4:ec:3c:4b: 4c:dd:e3:50:e5:d1:97:5e:20:35:8e:a8:24:3f:d3: c9:2e:c1:37:3c:0e:50:d6:62:86:2a:6b:ee:d3:0e: c2:85:07:5b:67:c8:51:f4:1a:7c:05:04:b5:c2:2a: e3:7f:f8:15:af:dd:95:73:0a:a9:21:37:f5:64:f5: f6:26:7e:eb:4d:a6:45:2e:93:c4:9b:f6:be:5d:0d: 71:78:e2:83:fa:7c:cf:a0:42:36:fe:f0:af:43:91: 74:e1:83:cb:b9:da:4a:39:77:27:26:42:23:a1:bf: 19:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:3E:4F:1A:F6:AD:04:63:77:41:65:06:13:DC:26:F3:40:8C:C9:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/997f5b04-998c-4e8a-bf3e-fd9ab96a2d28/3a59a8dd-9438-357b-9270-804aa380967c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/997f5b04-998c-4e8a-bf3e-fd9ab96a2d28/997f5b04-998c-4e8a-bf3e-fd9ab96a2d28.crl X509v3 Authority Key Identifier: keyid:9B:13:2D:08:76:48:2B:5E:06:EB:06:C4:77:22:20:F0:09:CD:3E:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/997f5b04-998c-4e8a-bf3e-fd9ab96a2d28.cer sbgp-ipAddrBlock: critical IPv4: 23.129.8.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:81:64:a8:d5:eb:35:61:78:13:23:26:a5:93:00:e6:ba:ef: 4a:95:af:54:a9:be:4d:eb:6d:6b:36:a8:63:c7:03:3d:66:1f: 35:df:d3:c3:64:36:f0:fb:61:6f:32:ce:b3:72:f9:c6:09:35: a5:04:bc:ea:b4:40:e1:e6:83:ff:57:22:3c:3e:24:5b:7e:a9: 29:6c:e6:87:b5:61:4c:df:cc:9b:b5:1a:6d:42:99:49:63:d0: e7:6d:52:cc:ad:4a:72:aa:55:62:35:a9:59:80:eb:cb:87:06: cf:fa:cb:d0:f2:b3:15:2c:d0:97:58:44:79:5f:d6:3e:d3:75: 88:e2:74:fd:38:94:c6:c4:a3:66:af:4a:d3:b8:66:54:04:82: f9:87:43:2f:b6:52:2f:d3:0f:89:67:df:22:c2:ac:9d:4e:14: 73:e8:bb:59:94:4c:42:06:94:0c:cb:f3:d0:3f:de:20:6d:1f: a1:ee:35:c9:cd:5c:7f:57:6b:31:6c:09:6c:ae:10:97:9f:60: f6:f4:f7:05:57:f4:84:d8:ea:59:c4:5a:d7:6a:94:26:4c:f7: cd:8e:c0:d9:5f:97:93:9d:6c:e1:c3:b0:67:7e:3b:bf:a2:b5: e2:1d:a6:09:14:5e:91:05:ef:81:1c:3f:24:b3:dd:6b:1d:a2: 8d:86:5e:65 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9vIukxStpIxtUtowAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTk3ZjViMDQtOTk4Yy00ZThhLWJmM2UtZmQ5YWI5NmEy ZDI4MB4XDTI2MTAwODEzMDAxMloXDTI3MDEwNjE0MDAxMlowLzEtMCsGA1UEAxMk NjdhOTg1ODYtYTU3NC00NzhlLTllNzEtYzc3ODMxYzZlYjNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAupuHWy3ZDCW9SKDyj3RoQrMmXlg63gbzGVXy 7nNRDMeVeMUVjxTOcLZRcpDqa7iEFo9F1Eh4WRW9URFLAwocpvPiBSB0qDzjpadz 6K0CvRE66YUia00HqM/0deE+0y1iHb4M/620BvAea/giSpgR1sUK9qoxpO64TnGz qlWQQ5dyW7SOVxkQe5UdQy7UIdmZONTsPEtM3eNQ5dGXXiA1jqgkP9PJLsE3PA5Q 1mKGKmvu0w7ChQdbZ8hR9Bp8BQS1wirjf/gVr92VcwqpITf1ZPX2Jn7rTaZFLpPE m/a+XQ1xeOKD+nzPoEI2/vCvQ5F04YPLudpKOXcnJkIjob8ZYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIo+Txr2rQRjd0FlBhPcJvNAjMnlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85OTdm NWIwNC05OThjLTRlOGEtYmYzZS1mZDlhYjk2YTJkMjgvM2E1OWE4ZGQtOTQzOC0z NTdiLTkyNzAtODA0YWEzODA5NjdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTk3ZjViMDQtOTk4Yy00ZThhLWJm M2UtZmQ5YWI5NmEyZDI4Lzk5N2Y1YjA0LTk5OGMtNGU4YS1iZjNlLWZkOWFiOTZh MmQyOC5jcmwwHwYDVR0jBBgwFoAUmxMtCHZIK14G6wbEdyIg8AnNPtgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85OTdmNWIwNC05OThjLTRlOGEtYmYzZS1mZDlh Yjk2YTJkMjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4EIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADOBZKjV6zVheBMjJqWTAOa670qVr1Spvk3rbWs2qGPHAz1mHzXf08Nk NvD7YW8yzrNy+cYJNaUEvOq0QOHmg/9XIjw+JFt+qSls5oe1YUzfzJu1Gm1CmUlj 0OdtUsytSnKqVWI1qVmA68uHBs/6y9DysxUs0JdYRHlf1j7TdYjidP04lMbEo2av StO4ZlQEgvmHQy+2Ui/TD4ln3yLCrJ1OFHPou1mUTEIGlAzL89A/3iBtH6HuNcnN XH9XazFsCWyuEJefYPb09wVX9ITY6lnEWtdqlCZM982OwNlfl5OdbOHDsGd+O7+i teIdpgkUXpEF74EcPySz3Wsdoo2GXmU= -----END CERTIFICATE-----Generated at Sat Oct 24 17:35:56 2026 by rpki-client