$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0fa8e3f-67e9-4e8f-9d18-6211dd613073/7f2249f6-4bb2-31b7-9f14-aa3ee4d4a343.roa File: 7f2249f6-4bb2-31b7-9f14-aa3ee4d4a343.roa (raw, json) Hash identifier: pw/kGIgg8Sw+DGGS8I+NnuSK9f+uC0UW9zG4BuaRPT4= Subject key identifier: D3:86:16:25:4E:1D:8D:66:CD:3D:38:1D:50:B0:08:89:4D:76:B7:EC Certificate issuer: /CN=d0fa8e3f-67e9-4e8f-9d18-6211dd613073 Certificate serial: 010D0C9F4328584F497520414F231143B6A33900 Authority key identifier: 2B:B4:63:CE:67:00:19:DA:3A:DE:BC:3B:E5:62:36:DD:BB:4D:C2:9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0fa8e3f-67e9-4e8f-9d18-6211dd613073.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0fa8e3f-67e9-4e8f-9d18-6211dd613073/7f2249f6-4bb2-31b7-9f14-aa3ee4d4a343.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 3356 IP address blocks: 23.156.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0fa8e3f-67e9-4e8f-9d18-6211dd613073/d0fa8e3f-67e9-4e8f-9d18-6211dd613073.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0fa8e3f-67e9-4e8f-9d18-6211dd613073/d0fa8e3f-67e9-4e8f-9d18-6211dd613073.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0fa8e3f-67e9-4e8f-9d18-6211dd613073.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:75:20:41:4f:23:11:43:b6:a3:39:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d0fa8e3f-67e9-4e8f-9d18-6211dd613073 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=2411a2fe-aeaf-42e2-847e-337a9a46b0fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:bb:6c:48:db:94:15:68:ac:54:24:09:cc:59: 23:94:61:0c:f6:2c:6c:b7:e6:cc:d6:70:39:00:19: 31:17:7d:12:58:8f:34:f7:5e:72:4b:29:e8:02:0b: 92:d6:0f:6f:e9:ba:c2:5b:60:33:14:60:d3:cb:5a: 7b:8b:d2:2b:3c:ad:2f:4b:c5:ba:35:43:59:2f:64: 1d:63:43:82:e2:cb:44:7c:55:fe:66:a5:28:d0:52: 85:42:a1:92:bb:fc:ae:20:d1:a9:79:85:4e:e8:f8: 34:63:26:3a:cf:fc:cd:28:73:9c:26:ae:c0:4f:06: 2c:fb:99:bb:9a:9d:81:fe:31:e5:ed:6a:05:d8:c9: e0:09:1c:04:41:99:9e:2d:5c:4c:24:4b:88:81:d8: fe:bd:c9:77:82:76:b9:0d:ff:0f:4d:7b:dd:a0:38: 14:cf:7d:26:9b:1f:20:27:df:23:53:e6:e6:2e:7c: 2e:20:b4:79:2d:4e:ed:16:c0:9c:15:77:98:e5:1e: b8:0a:9f:e0:19:a4:7b:d2:bc:04:b3:e7:9d:6a:90: 54:bc:05:7f:43:2f:88:c8:cc:cb:e0:0c:8a:c8:bc: 33:fd:79:26:65:58:72:cb:46:64:f6:68:86:02:4d: 65:f1:c9:1a:29:97:e2:c1:e7:a9:6d:55:39:0d:76: 43:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:86:16:25:4E:1D:8D:66:CD:3D:38:1D:50:B0:08:89:4D:76:B7:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0fa8e3f-67e9-4e8f-9d18-6211dd613073/7f2249f6-4bb2-31b7-9f14-aa3ee4d4a343.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0fa8e3f-67e9-4e8f-9d18-6211dd613073/d0fa8e3f-67e9-4e8f-9d18-6211dd613073.crl X509v3 Authority Key Identifier: keyid:2B:B4:63:CE:67:00:19:DA:3A:DE:BC:3B:E5:62:36:DD:BB:4D:C2:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0fa8e3f-67e9-4e8f-9d18-6211dd613073.cer sbgp-ipAddrBlock: critical IPv4: 23.156.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:55:65:5b:be:9b:2d:aa:5a:8b:09:73:30:23:77:f5:4f:4b: ec:aa:5e:2f:25:15:ca:a4:7d:e9:83:a4:68:25:52:7b:1f:bc: ee:e6:9f:c0:d2:7d:ba:e6:d5:be:34:a5:c2:f7:99:05:8b:73: 7d:24:c6:ad:69:3d:48:b6:43:66:17:3c:42:8a:cd:54:b5:aa: 25:a0:43:ac:41:15:57:1d:cf:a1:0c:0a:32:d8:73:13:ad:de: 76:89:91:ef:f8:15:68:ec:2e:5b:99:ce:a1:a3:cc:b7:83:1f: b0:44:10:1f:ff:ef:40:9e:81:04:ea:c2:88:ad:1e:d0:d4:db: 6c:52:d8:ba:11:cf:79:2b:8b:61:d4:ad:0f:04:44:de:f7:aa: 97:61:84:cb:14:0d:cf:79:13:46:b5:7e:aa:97:e5:61:56:70: 2e:67:82:cf:e8:4e:08:25:16:26:a9:71:e5:13:dc:38:c5:e8: 0d:5a:26:06:1e:2d:05:e8:86:04:6f:54:18:f7:da:b1:e1:b6: 44:5d:bf:e1:30:c4:23:ad:c8:eb:f9:93:79:69:a9:de:40:f7: 29:a6:b2:92:07:bb:53:a5:b3:0d:ed:0a:7e:0a:8c:24:86:8f: e3:05:03:23:30:0b:99:98:d8:8f:cb:6a:8a:64:7a:ba:a1:bc: 4a:c9:1c:2f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdSBBTyMRQ7ajOQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDBmYThlM2YtNjdlOS00ZThmLTlkMTgtNjIxMWRkNjEz MDczMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MjQxMWEyZmUtYWVhZi00MmUyLTg0N2UtMzM3YTlhNDZiMGZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq7tsSNuUFWisVCQJzFkjlGEM9ixst+bM1nA5 ABkxF30SWI80915ySynoAguS1g9v6brCW2AzFGDTy1p7i9IrPK0vS8W6NUNZL2Qd Y0OC4stEfFX+ZqUo0FKFQqGSu/yuINGpeYVO6Pg0YyY6z/zNKHOcJq7ATwYs+5m7 mp2B/jHl7WoF2MngCRwEQZmeLVxMJEuIgdj+vcl3gna5Df8PTXvdoDgUz30mmx8g J98jU+bmLnwuILR5LU7tFsCcFXeY5R64Cp/gGaR70rwEs+edapBUvAV/Qy+IyMzL 4AyKyLwz/XkmZVhyy0Zk9miGAk1l8ckaKZfiweepbVU5DXZDlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNOGFiVOHY1mzT04HVCwCIlNdrfsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9kMGZh OGUzZi02N2U5LTRlOGYtOWQxOC02MjExZGQ2MTMwNzMvN2YyMjQ5ZjYtNGJiMi0z MWI3LTlmMTQtYWEzZWU0ZDRhMzQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZDBmYThlM2YtNjdlOS00ZThmLTlk MTgtNjIxMWRkNjEzMDczL2QwZmE4ZTNmLTY3ZTktNGU4Zi05ZDE4LTYyMTFkZDYx MzA3My5jcmwwHwYDVR0jBBgwFoAUK7RjzmcAGdo63rw75WI23btNwp4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9kMGZhOGUzZi02N2U5LTRlOGYtOWQxOC02MjEx ZGQ2MTMwNzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5x4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIVVZVu+my2qWosJczAjd/VPS+yqXi8lFcqkfemDpGglUnsfvO7mn8DS fbrm1b40pcL3mQWLc30kxq1pPUi2Q2YXPEKKzVS1qiWgQ6xBFVcdz6EMCjLYcxOt 3naJke/4FWjsLluZzqGjzLeDH7BEEB//70CegQTqwoitHtDU22xS2LoRz3kri2HU rQ8ERN73qpdhhMsUDc95E0a1fqqX5WFWcC5ngs/oTgglFiapceUT3DjF6A1aJgYe LQXohgRvVBj32rHhtkRdv+EwxCOtyOv5k3lpqd5A9ymmspIHu1Olsw3tCn4KjCSG j+MFAyMwC5mY2I/LaopkerqhvErJHC8= -----END CERTIFICATE-----Generated at Thu Oct 8 00:49:12 2026 by rpki-client