$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8/a981c111-3341-3f73-85ec-3e9f5b8d2766.roa File: a981c111-3341-3f73-85ec-3e9f5b8d2766.roa (raw, json) Hash identifier: RZlLmXCoBWjXP6XFwZaKgaNqapd8Yz5ViIcfxr8PrdU= Subject key identifier: A0:66:A8:0F:60:02:EB:A7:8A:3E:3A:0E:77:B3:F2:37:D0:69:0B:89 Certificate issuer: /CN=2ff85e79-174c-46f6-8a62-a92c2c9875b8 Certificate serial: 010D0C9F4328584F07001CBBC28F7A02C2803180 Authority key identifier: C8:BE:F2:EE:D8:21:9E:78:D4:AE:55:A0:07:8D:21:70:2F:8F:51:DC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8/a981c111-3341-3f73-85ec-3e9f5b8d2766.roa Signing time: Tue 01 Sep 2026 05:46:20 +0000 ROA not before: Tue 01 Sep 2026 05:46:20 +0000 ROA not after: Sat 21 Nov 2026 02:00:12 +0000 asID: 396500 IP address blocks: 23.187.152.0/24 maxlen: 28 2602:f82d::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8/2ff85e79-174c-46f6-8a62-a92c2c9875b8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8/2ff85e79-174c-46f6-8a62-a92c2c9875b8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 18 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:07:00:1c:bb:c2:8f:7a:02:c2:80:31:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ff85e79-174c-46f6-8a62-a92c2c9875b8 Validity Not Before: Sep 1 05:46:20 2026 GMT Not After : Nov 21 02:00:12 2026 GMT Subject: CN=d9d2e3ca-cd84-43c8-be55-104383e1c8ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:6d:ae:6a:7a:c9:26:bc:a3:8b:93:04:7c:e2: 46:81:45:19:cf:16:8f:8b:5b:35:47:0e:dd:2f:65: b1:99:a1:f2:aa:df:6d:7b:26:e8:74:f5:9c:c8:d7: 3d:89:75:59:8d:28:c9:02:80:b7:e5:83:d8:09:30: d9:aa:25:c8:9c:7b:fb:ac:cd:35:8f:8b:50:2d:ff: 44:53:f3:e7:f2:fe:de:1d:a9:9c:6a:cf:3c:9f:ea: 3a:37:8a:9e:c9:9a:8b:08:66:23:fd:cb:19:87:25: 23:09:9f:2a:cd:d6:9e:d3:cc:e9:fc:41:1f:29:70: 3a:88:51:21:4e:8f:e2:5b:94:65:05:f5:a1:c8:1e: 0e:80:47:ca:9e:68:04:3b:74:e6:55:1c:00:92:f8: 8b:5c:81:1c:82:b9:37:9d:9b:87:36:20:07:a2:4e: 96:72:6a:9d:fc:3c:16:d5:cb:bc:21:b1:49:68:c5: 37:e5:f9:1a:ff:72:30:1a:6c:e2:d8:04:ae:cd:e5: 4e:21:95:23:a1:29:ea:99:d4:57:69:0a:6d:64:ba: 34:aa:c9:43:e7:d3:cc:bf:92:97:fc:ce:b2:ad:2a: 61:fd:4e:5d:b2:e7:5d:00:34:f7:b3:29:88:7e:dc: 8d:a8:cd:99:78:1a:6b:60:7c:37:09:01:e3:23:63: 67:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:66:A8:0F:60:02:EB:A7:8A:3E:3A:0E:77:B3:F2:37:D0:69:0B:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8/a981c111-3341-3f73-85ec-3e9f5b8d2766.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8/2ff85e79-174c-46f6-8a62-a92c2c9875b8.crl X509v3 Authority Key Identifier: keyid:C8:BE:F2:EE:D8:21:9E:78:D4:AE:55:A0:07:8D:21:70:2F:8F:51:DC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ff85e79-174c-46f6-8a62-a92c2c9875b8.cer sbgp-ipAddrBlock: critical IPv4: 23.187.152.0/24 IPv6: 2602:f82d::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:02:fa:dc:a9:3b:db:5c:98:f6:6b:1b:1e:43:26:0d:b6:c8: 93:2d:27:9f:d1:e8:1a:b6:e8:56:74:5d:c0:a9:1b:ff:40:ea: 15:c6:26:a5:57:3e:a6:bc:1a:bc:34:d0:4e:80:6a:ab:de:bf: 0a:10:9e:38:c8:ed:17:8b:78:bc:e1:a7:6e:e4:2e:ed:e1:a4: eb:74:ad:ae:78:7e:bc:e0:25:08:fd:6e:0f:ad:f7:a4:b4:cd: de:3f:ad:da:9f:d0:7e:32:76:39:27:35:6f:62:8d:e3:20:94: 61:75:fa:20:7c:33:51:b5:a7:ac:fb:4e:9f:6a:ef:8d:ec:9f: 6f:e0:a7:a5:7f:69:75:16:2d:f1:ef:f7:d8:9d:2b:de:ab:07: 9e:35:38:a1:c4:fb:4c:80:4a:c2:b6:c6:40:ae:7d:4f:d3:28: 6a:24:a5:15:de:3f:9d:f0:32:4b:0d:2d:39:d6:69:f3:0b:34: 24:5d:a1:8d:e8:dd:c6:eb:1a:4d:9f:15:b5:6f:20:c5:2a:11: 59:3a:11:b1:4c:42:d9:13:a1:d4:04:11:4a:84:9f:56:c3:66: 1d:55:a8:69:33:84:94:45:8e:f8:be:4f:ad:14:ba:6a:03:27: 83:e7:99:11:81:82:78:94:5f:3b:76:81:70:34:5f:86:a9:c3: 4b:61:ec:72 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE8HABy7wo96AsKAMYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmZmODVlNzktMTc0Yy00NmY2LThhNjItYTkyYzJjOTg3 NWI4MB4XDTI2MDkwMTA1NDYyMFoXDTI2MTEyMTAyMDAxMlowLzEtMCsGA1UEAxMk ZDlkMmUzY2EtY2Q4NC00M2M4LWJlNTUtMTA0MzgzZTFjOGFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiW2uanrJJryji5MEfOJGgUUZzxaPi1s1Rw7d L2WxmaHyqt9teybodPWcyNc9iXVZjSjJAoC35YPYCTDZqiXInHv7rM01j4tQLf9E U/Pn8v7eHamcas88n+o6N4qeyZqLCGYj/csZhyUjCZ8qzdae08zp/EEfKXA6iFEh To/iW5RlBfWhyB4OgEfKnmgEO3TmVRwAkviLXIEcgrk3nZuHNiAHok6Wcmqd/DwW 1cu8IbFJaMU35fka/3IwGmzi2ASuzeVOIZUjoSnqmdRXaQptZLo0qslD59PMv5KX /M6yrSph/U5dsuddADT3symIftyNqM2ZeBprYHw3CQHjI2NntwIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFKBmqA9gAuunij46Dnez8jfQaQuJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8yZmY4 NWU3OS0xNzRjLTQ2ZjYtOGE2Mi1hOTJjMmM5ODc1YjgvYTk4MWMxMTEtMzM0MS0z ZjczLTg1ZWMtM2U5ZjViOGQyNzY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMmZmODVlNzktMTc0Yy00NmY2LThh NjItYTkyYzJjOTg3NWI4LzJmZjg1ZTc5LTE3NGMtNDZmNi04YTYyLWE5MmMyYzk4 NzViOC5jcmwwHwYDVR0jBBgwFoAUyL7y7tghnnjUrlWgB40hcC+PUdwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8yZmY4NWU3OS0xNzRjLTQ2ZjYtOGE2Mi1hOTJj MmM5ODc1YjguY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF7uYMA4E AgACMAgDBgQmAvgtADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBZAvrcqTvbXJj2axseQyYNtsiTLSef0ega tuhWdF3AqRv/QOoVxialVz6mvBq8NNBOgGqr3r8KEJ44yO0Xi3i84adu5C7t4aTr dK2ueH684CUI/W4PrfektM3eP63an9B+MnY5JzVvYo3jIJRhdfogfDNRtaes+06f au+N7J9v4Kelf2l1Fi3x7/fYnSveqweeNTihxPtMgErCtsZArn1P0yhqJKUV3j+d 8DJLDS051mnzCzQkXaGN6N3G6xpNnxW1byDFKhFZOhGxTELZE6HUBBFKhJ9Ww2Yd VahpM4SURY74vk+tFLpqAyeD55kRgYJ4lF87doFwNF+GqcNLYexy -----END CERTIFICATE-----Generated at Thu Sep 17 01:32:07 2026 by rpki-client