$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b/5f0a6d78-e6e4-341c-a3d5-979aaa85b31e.roa File: 5f0a6d78-e6e4-341c-a3d5-979aaa85b31e.roa (raw, json) Hash identifier: dIO3ZaSWwGgm/JWJn6UEPczCBfC4xJQ8QAp3X6G1V+8= Subject key identifier: F5:16:DD:31:E9:17:61:98:72:E7:E8:DC:42:6F:34:45:A3:94:AE:5D Certificate issuer: /CN=4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b Certificate serial: 010D0C9F4328584F4988926A797206D3DC6CE280 Authority key identifier: 8D:76:83:30:91:E7:4B:04:84:43:F7:C4:8F:24:50:50:D1:98:96:F4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b/5f0a6d78-e6e4-341c-a3d5-979aaa85b31e.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 398741 IP address blocks: 23.172.216.0/24 maxlen: 24 2602:f959::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 28 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:88:92:6a:79:72:06:d3:dc:6c:e2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=a5e32606-df95-4249-b1e4-f92b0a533386 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:81:25:b3:4a:9e:c2:44:76:09:0c:a8:79:e2: 1d:99:e1:a1:d9:bf:78:54:10:e7:3c:e1:10:ae:7f: ad:5f:10:79:78:c8:8a:71:b0:b4:19:71:04:c7:31: 48:ae:7f:5d:3d:4d:29:08:88:63:bd:d4:b0:a4:31: 3a:20:8b:6d:55:6e:8d:7f:d8:bf:46:2d:a2:bc:16: ef:ae:63:9b:53:57:d9:9c:96:82:86:8f:f0:e1:09: 50:ab:e5:72:6e:da:a4:1a:12:ae:13:68:7b:ab:f4: 08:b5:91:74:71:60:3e:fc:5e:ac:3c:b8:6c:d7:94: 99:2f:48:e3:c5:ec:cc:06:d1:eb:d4:7c:4c:e5:27: 8a:13:bd:c8:08:f9:f3:c6:ee:b7:28:c4:fd:83:c1: fd:f7:60:1c:79:ab:ed:37:84:01:f9:fc:0e:28:e2: cd:ca:76:03:a5:33:d8:c0:86:75:eb:b8:28:ab:07: 4d:f6:d1:b0:d0:bb:cc:aa:fd:21:7e:a1:e3:51:03: b4:9b:d5:51:1b:82:48:20:d6:ad:28:90:10:cb:b2: 85:3a:dc:78:b4:10:da:a1:c7:27:10:53:3d:94:1d: 1c:84:c1:31:ed:0d:59:aa:47:3d:ae:8a:fd:7b:71: 54:07:66:1d:be:06:30:7e:85:66:ce:a2:90:a2:12: be:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:16:DD:31:E9:17:61:98:72:E7:E8:DC:42:6F:34:45:A3:94:AE:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b/5f0a6d78-e6e4-341c-a3d5-979aaa85b31e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b.crl X509v3 Authority Key Identifier: keyid:8D:76:83:30:91:E7:4B:04:84:43:F7:C4:8F:24:50:50:D1:98:96:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b.cer sbgp-ipAddrBlock: critical IPv4: 23.172.216.0/24 IPv6: 2602:f959::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:57:73:a8:56:23:30:77:7d:56:d1:20:e8:d7:33:b0:3d:51: fc:75:ab:6d:63:01:b1:cb:89:0d:e3:a3:54:e5:bf:0e:58:af: 0e:67:ac:9e:75:64:9c:48:cb:12:5e:d2:bc:62:fc:c2:0a:98: 66:fb:5c:05:23:3a:a2:52:bf:94:fa:22:d9:ae:ae:89:33:2e: f4:b5:b1:7c:96:af:37:5c:07:a3:11:96:88:d9:89:2e:43:fa: 80:05:d1:33:13:79:63:71:3f:0e:79:48:8c:61:76:f2:51:da: e0:13:a0:3c:0e:38:92:4f:11:74:47:be:40:6d:a7:b1:c5:7c: a6:fe:e4:f5:a7:a5:ec:37:75:81:02:08:4b:01:9f:07:e4:e3: ad:8d:68:33:bd:1c:3c:b9:8c:2a:45:42:05:b6:48:36:79:48: 26:47:71:40:78:88:aa:4e:81:b6:6d:42:81:3f:fd:24:b9:f8: ee:35:98:78:58:df:48:b0:ed:16:52:76:0e:0f:39:16:38:b2: 69:8e:91:73:88:1e:23:8e:04:3d:92:29:89:0a:c1:86:32:08: 2c:5b:d1:a6:05:07:02:60:c0:f4:10:0d:10:b4:3c:ec:ba:ea: 91:10:25:bd:83:92:9b:a0:ec:24:77:c9:ef:05:b0:bf:2b:49: be:46:79:e1 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE9JiJJqeXIG09xs4oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGMzYmI3ZTQtYzk3ZS00M2FiLWE2ZGQtY2JmMGU2NDM0 YzViMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YTVlMzI2MDYtZGY5NS00MjQ5LWIxZTQtZjkyYjBhNTMzMzg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwoEls0qewkR2CQyoeeIdmeGh2b94VBDnPOEQ rn+tXxB5eMiKcbC0GXEExzFIrn9dPU0pCIhjvdSwpDE6IIttVW6Nf9i/Ri2ivBbv rmObU1fZnJaCho/w4QlQq+VybtqkGhKuE2h7q/QItZF0cWA+/F6sPLhs15SZL0jj xezMBtHr1HxM5SeKE73ICPnzxu63KMT9g8H992AceavtN4QB+fwOKOLNynYDpTPY wIZ167goqwdN9tGw0LvMqv0hfqHjUQO0m9VRG4JIINatKJAQy7KFOtx4tBDaoccn EFM9lB0chMEx7Q1Zqkc9ror9e3FUB2YdvgYwfoVmzqKQohK+nQIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFPUW3THpF2GYcufo3EJvNEWjlK5dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS80YzNi YjdlNC1jOTdlLTQzYWItYTZkZC1jYmYwZTY0MzRjNWIvNWYwYTZkNzgtZTZlNC0z NDFjLWEzZDUtOTc5YWFhODViMzFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNGMzYmI3ZTQtYzk3ZS00M2FiLWE2 ZGQtY2JmMGU2NDM0YzViLzRjM2JiN2U0LWM5N2UtNDNhYi1hNmRkLWNiZjBlNjQz NGM1Yi5jcmwwHwYDVR0jBBgwFoAUjXaDMJHnSwSEQ/fEjyRQUNGYlvQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS80YzNiYjdlNC1jOTdlLTQzYWItYTZkZC1jYmYw ZTY0MzRjNWIuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF6zYMA4E AgACMAgDBgAmAvlZADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB3V3OoViMwd31W0SDo1zOwPVH8dattYwGx y4kN46NU5b8OWK8OZ6yedWScSMsSXtK8YvzCCphm+1wFIzqiUr+U+iLZrq6JMy70 tbF8lq83XAejEZaI2YkuQ/qABdEzE3ljcT8OeUiMYXbyUdrgE6A8DjiSTxF0R75A baexxXym/uT1p6XsN3WBAghLAZ8H5OOtjWgzvRw8uYwqRUIFtkg2eUgmR3FAeIiq ToG2bUKBP/0kufjuNZh4WN9IsO0WUnYODzkWOLJpjpFziB4jjgQ9kimJCsGGMggs W9GmBQcCYMD0EA0QtDzsuuqRECW9g5KboOwkd8nvBbC/K0m+Rnnh -----END CERTIFICATE-----Generated at Tue Oct 27 05:14:48 2026 by rpki-client