$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/2bec9340-ce1a-377f-9441-391ebed2ec3b.roa File: 2bec9340-ce1a-377f-9441-391ebed2ec3b.roa (raw, json) Hash identifier: O8DxEvmJ8zMWdgVieqmKFhfvNnbWZzk9ruTI6lkhpbg= Subject key identifier: 5C:BD:34:03:D7:B0:37:76:AA:AA:65:40:54:4F:0E:51:CA:36:42:77 Certificate issuer: /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71 Certificate serial: 010D0C9F4328584F43DD59E0A4B4CE8330FCE080 Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/2bec9340-ce1a-377f-9441-391ebed2ec3b.roa Signing time: Wed 23 Sep 2026 01:00:12 +0000 ROA not before: Wed 23 Sep 2026 01:00:12 +0000 ROA not after: Tue 22 Dec 2026 02:00:12 +0000 asID: 22652 IP address blocks: 173.231.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:43:dd:59:e0:a4:b4:ce:83:30:fc:e0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71 Validity Not Before: Sep 23 01:00:12 2026 GMT Not After : Dec 22 02:00:12 2026 GMT Subject: CN=159a5b5d-77d0-47ab-8d9f-eb5626320a7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:7e:7c:56:4c:5c:aa:2e:c8:58:b0:89:ea:7c: b2:84:f2:17:7d:40:61:ed:6a:ce:18:ef:d5:c6:01: 94:73:1f:53:74:ed:77:6f:7e:06:9c:66:bf:8d:74: 21:68:64:de:43:dd:4c:2d:81:4f:59:6e:88:94:8b: 74:16:a2:19:f1:c4:49:e8:8e:47:4e:ee:7e:15:61: e0:d7:f9:f6:d5:cb:db:db:ec:24:f2:b6:c8:d0:7f: 9c:c2:4a:12:7f:87:cf:3d:ef:04:43:69:b3:9d:87: f3:17:4c:9d:00:69:0d:0e:61:f5:ad:b5:50:ac:d8: 98:1c:82:78:7d:5b:54:2e:4f:7d:28:3e:8a:8b:d1: 5a:c3:30:0c:48:46:00:1d:69:53:6e:33:23:a4:41: 4a:db:9c:f3:6b:99:98:c1:3b:63:77:69:3f:cb:cf: b9:85:7e:44:e2:02:a6:7b:63:17:6f:da:70:e6:a9: 11:e6:1e:1a:56:f1:11:45:e7:41:1f:12:23:c0:a5: 68:a6:e3:2a:f7:ab:06:63:c8:12:ed:dc:8c:31:ef: 16:bf:84:fc:bb:46:a7:b1:5a:8a:bf:7a:af:bc:1d: ad:ec:3a:de:af:57:59:f9:38:21:c0:ea:d7:10:a0: b7:06:b2:30:88:a0:c1:b0:d3:39:43:db:a6:4c:7a: c7:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:BD:34:03:D7:B0:37:76:AA:AA:65:40:54:4F:0E:51:CA:36:42:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/2bec9340-ce1a-377f-9441-391ebed2ec3b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl X509v3 Authority Key Identifier: keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer sbgp-ipAddrBlock: critical IPv4: 173.231.124.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:24:92:05:74:fa:5c:8c:d6:2b:f0:32:48:38:9f:8a:99:d6: 1d:7f:d4:6c:b8:ec:6b:09:9a:fe:07:db:90:87:a1:cd:ad:94: c4:ce:27:89:83:19:a0:19:90:60:b9:e5:c1:71:52:07:cb:ff: f0:05:de:6c:14:c9:87:04:23:73:23:db:88:ef:f5:17:dc:c6: d1:02:80:30:ae:61:06:b6:76:86:f9:52:05:de:35:b4:32:a4: 0d:d2:99:37:3e:22:8d:6f:49:ec:8a:0e:99:1b:11:40:97:ef: b9:17:9f:5f:13:21:10:72:b9:36:8a:9c:cd:d3:c2:f8:5b:37: 3f:49:2e:d8:df:2f:ba:e2:c9:79:0e:07:08:18:1b:08:a7:7c: f9:62:0e:60:67:24:31:c4:26:f6:4d:36:80:bc:d0:42:a6:85: 13:59:21:2f:23:b6:98:d9:0a:72:3c:6c:9d:05:64:25:2e:00: 54:51:e1:b5:47:7e:8a:04:d7:37:9a:b3:3d:a7:d0:83:1d:14: f7:9d:35:7e:bc:1e:a2:87:19:4f:20:bb:31:55:a5:0c:8c:fa: 57:d3:0c:7d:d8:e0:c2:8a:56:49:39:e9:99:e6:a0:a5:a0:87: d1:8c:6d:35:35:3a:70:28:e4:69:9c:c8:e9:53:6c:51:c9:58: b8:0d:a8:bb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9D3VngpLTOgzD84IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2ViOTI2MzAtM2MxMy00ZTEzLWE5MmEtNzlkNmZlYjJm ZjcxMB4XDTI2MDkyMzAxMDAxMloXDTI2MTIyMjAyMDAxMlowLzEtMCsGA1UEAxMk MTU5YTViNWQtNzdkMC00N2FiLThkOWYtZWI1NjI2MzIwYTdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnH58Vkxcqi7IWLCJ6nyyhPIXfUBh7WrOGO/V xgGUcx9TdO13b34GnGa/jXQhaGTeQ91MLYFPWW6IlIt0FqIZ8cRJ6I5HTu5+FWHg 1/n21cvb2+wk8rbI0H+cwkoSf4fPPe8EQ2mznYfzF0ydAGkNDmH1rbVQrNiYHIJ4 fVtULk99KD6Ki9FawzAMSEYAHWlTbjMjpEFK25zza5mYwTtjd2k/y8+5hX5E4gKm e2MXb9pw5qkR5h4aVvERRedBHxIjwKVopuMq96sGY8gS7dyMMe8Wv4T8u0ansVqK v3qvvB2t7Drer1dZ+TghwOrXEKC3BrIwiKDBsNM5Q9umTHrH+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFy9NAPXsDd2qqplQFRPDlHKNkJ3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZWI5 MjYzMC0zYzEzLTRlMTMtYTkyYS03OWQ2ZmViMmZmNzEvMmJlYzkzNDAtY2UxYS0z NzdmLTk0NDEtMzkxZWJlZDJlYzNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2ViOTI2MzAtM2MxMy00ZTEzLWE5 MmEtNzlkNmZlYjJmZjcxLzdlYjkyNjMwLTNjMTMtNGUxMy1hOTJhLTc5ZDZmZWIy ZmY3MS5jcmwwHwYDVR0jBBgwFoAUBc9bdEQvwy1OuD9Zn54Ibr2IcHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83ZWI5MjYzMC0zYzEzLTRlMTMtYTkyYS03OWQ2 ZmViMmZmNzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAred8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA4kkgV0+lyM1ivwMkg4n4qZ1h1/1Gy47GsJmv4H25CHoc2tlMTOJ4mD GaAZkGC55cFxUgfL//AF3mwUyYcEI3Mj24jv9RfcxtECgDCuYQa2dob5UgXeNbQy pA3SmTc+Io1vSeyKDpkbEUCX77kXn18TIRByuTaKnM3TwvhbNz9JLtjfL7riyXkO BwgYGwinfPliDmBnJDHEJvZNNoC80EKmhRNZIS8jtpjZCnI8bJ0FZCUuAFRR4bVH fooE1zeasz2n0IMdFPedNX68HqKHGU8guzFVpQyM+lfTDH3Y4MKKVkk56ZnmoKWg h9GMbTU1OnAo5GmcyOlTbFHJWLgNqLs= -----END CERTIFICATE-----Generated at Thu Sep 24 07:53:58 2026 by rpki-client