$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38a96a9a-6257-4a63-a149-21f6ad67ae15/2d645b1b-c695-3b2e-a452-15cdbb302b6f.roa File: 2d645b1b-c695-3b2e-a452-15cdbb302b6f.roa (raw, json) Hash identifier: L+8m635dUzXLdecS6BMao7Jr8dQNfc2aHVmJzDTos3Q= Subject key identifier: 4C:AA:29:34:FE:E2:49:FF:7F:16:4C:11:FA:79:CC:67:FF:EC:2B:20 Certificate issuer: /CN=38a96a9a-6257-4a63-a149-21f6ad67ae15 Certificate serial: 010D0C9F4328584EF2E75C0A8590D1812BCB2800 Authority key identifier: 16:2E:10:44:7C:D5:AA:CF:BA:36:28:03:AB:44:E3:EA:0E:AD:49:5C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38a96a9a-6257-4a63-a149-21f6ad67ae15.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38a96a9a-6257-4a63-a149-21f6ad67ae15/2d645b1b-c695-3b2e-a452-15cdbb302b6f.roa Signing time: Tue 25 Aug 2026 01:00:12 +0000 ROA not before: Tue 25 Aug 2026 01:00:12 +0000 ROA not after: Mon 23 Nov 2026 02:00:12 +0000 asID: 399717 IP address blocks: 23.179.176.0/24 maxlen: 24 64.112.106.0/24 maxlen: 24 2602:fc7e::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38a96a9a-6257-4a63-a149-21f6ad67ae15/38a96a9a-6257-4a63-a149-21f6ad67ae15.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38a96a9a-6257-4a63-a149-21f6ad67ae15/38a96a9a-6257-4a63-a149-21f6ad67ae15.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38a96a9a-6257-4a63-a149-21f6ad67ae15.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f2:e7:5c:0a:85:90:d1:81:2b:cb:28:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=38a96a9a-6257-4a63-a149-21f6ad67ae15 Validity Not Before: Aug 25 01:00:12 2026 GMT Not After : Nov 23 02:00:12 2026 GMT Subject: CN=67e56bd7-4aef-4b29-b628-6ad7aedd4584 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:38:3a:52:e9:de:d6:8d:81:79:72:2f:e3:98: b8:2e:91:56:d5:66:ec:db:03:e8:38:d5:2e:41:28: 0e:34:26:69:67:16:a3:73:48:2f:a9:0c:3a:83:f1: 56:cd:53:53:1e:73:c1:f6:d9:05:ad:cb:d6:b0:3b: 6a:6a:0b:7c:da:7b:7d:98:e9:42:ea:b4:1e:eb:6c: 19:bb:18:15:16:3e:b1:0d:62:87:6a:1a:c2:e8:33: 88:a1:16:1f:e0:ed:03:da:81:cf:91:83:2d:d4:64: 99:f0:40:d8:3c:3e:3d:69:2a:34:f7:f0:f8:c1:70: e0:d8:3b:05:44:47:fa:5e:0d:13:da:18:bd:45:e4: 1a:4b:af:12:fb:d3:0b:b4:68:f9:0d:88:05:b5:06: 96:ba:98:7a:64:5a:18:62:d7:d9:0c:e1:50:dc:b5: 8e:67:54:46:53:68:49:1f:5b:e3:73:9f:e4:87:92: 3f:73:c5:ac:99:37:13:6e:91:70:60:d3:02:f3:58: 1b:96:1a:b3:ff:73:a1:1a:bc:13:69:60:83:85:5c: ae:9f:b7:b4:75:c4:c7:62:72:4c:b8:92:51:4c:16: a4:7a:9f:8f:3b:2c:45:27:5b:67:4f:76:b3:0d:92: 81:13:bf:48:09:3c:9e:e1:d1:6c:53:17:74:0c:c6: 8a:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:AA:29:34:FE:E2:49:FF:7F:16:4C:11:FA:79:CC:67:FF:EC:2B:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38a96a9a-6257-4a63-a149-21f6ad67ae15/2d645b1b-c695-3b2e-a452-15cdbb302b6f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38a96a9a-6257-4a63-a149-21f6ad67ae15/38a96a9a-6257-4a63-a149-21f6ad67ae15.crl X509v3 Authority Key Identifier: keyid:16:2E:10:44:7C:D5:AA:CF:BA:36:28:03:AB:44:E3:EA:0E:AD:49:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/38a96a9a-6257-4a63-a149-21f6ad67ae15.cer sbgp-ipAddrBlock: critical IPv4: 23.179.176.0/24 64.112.106.0/24 IPv6: 2602:fc7e::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:cd:f6:f3:61:9f:d8:88:8a:d6:80:81:1c:05:df:90:df:4e: b7:40:f8:c7:68:6f:6e:5d:7e:a6:ed:8d:e2:83:9d:83:98:9d: d1:fa:dd:90:76:ec:13:73:21:f6:99:18:49:35:de:37:13:86: 10:89:82:31:32:25:95:b8:c2:76:4d:18:0a:7f:8e:c9:b6:9a: af:d7:5e:65:4b:45:98:e9:44:dc:1a:7e:7c:0d:68:54:38:f5: dd:fb:2e:c3:af:4c:df:9d:3c:74:41:d8:9b:03:60:3b:69:41: a7:8b:aa:f6:8b:98:8b:c0:74:3a:3c:83:2e:3d:49:f2:13:1c: a9:de:80:39:7b:09:63:ab:d8:07:72:29:38:90:f6:ca:28:91: cf:08:7c:dc:0d:5c:00:47:32:20:2b:aa:9d:c3:8c:3d:85:aa: a2:2d:7e:a1:5f:1c:2d:47:40:d1:65:1b:50:f5:49:58:0a:52: 66:8d:13:ce:3f:9d:16:39:19:e3:96:2a:52:07:fe:84:8e:60: f0:70:e5:45:af:cf:25:ae:c0:da:40:0b:57:a4:5f:dc:72:4c: f3:41:48:ad:0d:93:aa:8b:4a:a0:00:56:a4:9c:50:6e:e0:7b: 6e:43:2f:67:30:d2:3c:ca:bc:b3:cb:da:6e:54:8d:56:3d:27: 9b:cc:d1:32 -----BEGIN CERTIFICATE----- MIIGWTCCBUGgAwIBAgIUAQ0Mn0MoWE7y51wKhZDRgSvLKAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzhhOTZhOWEtNjI1Ny00YTYzLWExNDktMjFmNmFkNjdh ZTE1MB4XDTI2MDgyNTAxMDAxMloXDTI2MTEyMzAyMDAxMlowLzEtMCsGA1UEAxMk NjdlNTZiZDctNGFlZi00YjI5LWI2MjgtNmFkN2FlZGQ0NTg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmTg6Uune1o2BeXIv45i4LpFW1Wbs2wPoONUu QSgONCZpZxajc0gvqQw6g/FWzVNTHnPB9tkFrcvWsDtqagt82nt9mOlC6rQe62wZ uxgVFj6xDWKHahrC6DOIoRYf4O0D2oHPkYMt1GSZ8EDYPD49aSo09/D4wXDg2DsF REf6Xg0T2hi9ReQaS68S+9MLtGj5DYgFtQaWuph6ZFoYYtfZDOFQ3LWOZ1RGU2hJ H1vjc5/kh5I/c8WsmTcTbpFwYNMC81gblhqz/3OhGrwTaWCDhVyun7e0dcTHYnJM uJJRTBakep+POyxFJ1tnT3azDZKBE79ICTye4dFsUxd0DMaKmQIDAQABo4IDazCC A2cwHQYDVR0OBBYEFEyqKTT+4kn/fxZMEfp5zGf/7CsgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zOGE5 NmE5YS02MjU3LTRhNjMtYTE0OS0yMWY2YWQ2N2FlMTUvMmQ2NDViMWItYzY5NS0z YjJlLWE0NTItMTVjZGJiMzAyYjZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzhhOTZhOWEtNjI1Ny00YTYzLWEx NDktMjFmNmFkNjdhZTE1LzM4YTk2YTlhLTYyNTctNGE2My1hMTQ5LTIxZjZhZDY3 YWUxNS5jcmwwHwYDVR0jBBgwFoAUFi4QRHzVqs+6NigDq0Tj6g6tSVwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8zOGE5NmE5YS02MjU3LTRhNjMtYTE0OS0yMWY2 YWQ2N2FlMTUuY2VyMDUGCCsGAQUFBwEHAQH/BCYwJDASBAIAATAMAwQAF7OwAwQA QHBqMA4EAgACMAgDBgAmAvx+ADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBgzfbzYZ/YiIrWgIEcBd+Q3063 QPjHaG9uXX6m7Y3ig52DmJ3R+t2QduwTcyH2mRhJNd43E4YQiYIxMiWVuMJ2TRgK f47Jtpqv115lS0WY6UTcGn58DWhUOPXd+y7Dr0zfnTx0QdibA2A7aUGni6r2i5iL wHQ6PIMuPUnyExyp3oA5ewljq9gHcik4kPbKKJHPCHzcDVwARzIgK6qdw4w9haqi LX6hXxwtR0DRZRtQ9UlYClJmjRPOP50WORnjlipSB/6EjmDwcOVFr88lrsDaQAtX pF/cckzzQUitDZOqi0qgAFaknFBu4HtuQy9nMNI8yryzy9puVI1WPSebzNEy -----END CERTIFICATE-----Generated at Sun Oct 11 10:52:40 2026 by rpki-client