$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b/aa0e9750-ce72-3d77-a260-a17c5a36a6e6.roa File: aa0e9750-ce72-3d77-a260-a17c5a36a6e6.roa (raw, json) Hash identifier: d1Un8fa0/MYn1mh9YOFNLHimNVPiUT1RWBMtcKyQUgg= Subject key identifier: 8B:46:B2:1C:62:5F:1F:11:4B:0D:C9:5E:85:83:8A:13:B7:46:12:01 Certificate issuer: /CN=4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b Certificate serial: 010D0C9F4328584F49733A40C3ADF984AF850F00 Authority key identifier: 8D:76:83:30:91:E7:4B:04:84:43:F7:C4:8F:24:50:50:D1:98:96:F4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b/aa0e9750-ce72-3d77-a260-a17c5a36a6e6.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 50236 IP address blocks: 23.172.216.0/24 maxlen: 24 2602:f959::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 29 Oct 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:3a:40:c3:ad:f9:84:af:85:0f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=9aee2728-8b45-4236-a777-1a06a368d2ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:7f:c4:61:38:b1:02:d3:a2:9c:c6:2d:f6:b9: 1e:d7:25:20:6a:36:94:a2:01:df:a8:ed:bf:12:f9: 98:94:2b:fb:90:3b:1d:dd:4d:91:d0:be:e8:0e:7f: 52:c2:6d:d8:61:a2:2c:a8:86:71:25:df:7d:b6:5a: b4:ff:b4:3e:3f:f5:2a:c7:e5:52:98:90:4d:4e:3f: a9:28:2c:d8:5d:09:0f:71:cc:c1:10:0c:40:63:87: 63:3b:0c:c7:7b:57:72:09:e4:de:00:35:05:71:fe: 17:29:08:ec:9a:aa:ff:46:e0:a4:14:46:9b:84:2c: b6:4d:d9:99:1e:df:ea:06:42:41:8b:91:d0:50:7f: e3:05:f8:2e:4f:e2:04:86:31:bb:a1:ed:e4:8b:7f: 14:85:78:49:9c:3c:0e:76:a9:0e:e2:be:f5:6b:a9: 1c:13:67:28:b5:87:c7:d9:70:24:b0:39:86:44:eb: ab:0d:ad:64:bb:4b:2b:dd:88:12:4a:33:3e:ca:22: ed:d1:0a:1b:9d:22:9c:e1:dd:89:29:10:5b:e0:7e: 26:61:5a:f2:c4:d0:73:e4:ad:ab:c5:b4:7f:52:18: 89:1f:d8:45:c9:d8:4c:33:6e:a4:c8:b3:22:f9:f1: ef:b3:ac:be:3e:e6:0a:df:87:3e:d1:f0:fb:ae:9d: 50:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:46:B2:1C:62:5F:1F:11:4B:0D:C9:5E:85:83:8A:13:B7:46:12:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b/aa0e9750-ce72-3d77-a260-a17c5a36a6e6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b.crl X509v3 Authority Key Identifier: keyid:8D:76:83:30:91:E7:4B:04:84:43:F7:C4:8F:24:50:50:D1:98:96:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b.cer sbgp-ipAddrBlock: critical IPv4: 23.172.216.0/24 IPv6: 2602:f959::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:17:a2:82:51:ff:01:2e:a7:28:64:98:0a:c0:55:5c:d1:96: 65:a1:3e:58:34:12:9a:0c:9f:28:b4:ea:59:d8:94:57:9b:c4: 69:5f:2a:d9:0d:e7:9f:59:fd:9c:ba:2f:4f:3b:4b:c8:6e:72: 7b:59:35:5a:6a:04:9a:ff:9b:e6:b1:41:51:a3:3d:30:cd:6f: 66:25:02:74:5b:ff:06:cc:a3:e2:bd:07:e2:01:e5:37:5f:e1: f5:8a:f4:db:4c:df:2d:47:c4:12:0c:7f:69:8d:a3:f0:27:87: 79:4c:19:58:16:42:b6:be:bb:ad:e6:b0:ce:a1:0b:16:46:73: fd:c8:96:3f:b0:36:4e:89:fb:ad:2e:ab:db:1f:ad:e0:92:6a: 06:36:f0:46:99:ed:59:df:00:e2:80:32:7f:d3:7a:66:32:36: 58:78:1b:59:d9:62:e7:8c:9d:66:60:1f:5d:3b:f5:16:26:45: 1a:c0:38:11:a0:36:b3:c2:4e:9d:95:3d:b5:c5:5a:08:fb:b4: 33:0d:9e:4f:8a:31:0b:98:94:c1:11:fd:93:70:62:a3:08:9b: 90:3c:c2:f3:26:54:09:6a:ab:11:3e:ce:8f:27:54:05:6a:ad: a7:4a:95:7f:38:2f:2d:b9:c0:96:21:d7:cb:5c:32:75:35:c3: 40:ea:a8:88 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE9JczpAw635hK+FDwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGMzYmI3ZTQtYzk3ZS00M2FiLWE2ZGQtY2JmMGU2NDM0 YzViMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk OWFlZTI3MjgtOGI0NS00MjM2LWE3NzctMWEwNmEzNjhkMmZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh3/EYTixAtOinMYt9rke1yUgajaUogHfqO2/ EvmYlCv7kDsd3U2R0L7oDn9Swm3YYaIsqIZxJd99tlq0/7Q+P/Uqx+VSmJBNTj+p KCzYXQkPcczBEAxAY4djOwzHe1dyCeTeADUFcf4XKQjsmqr/RuCkFEabhCy2TdmZ Ht/qBkJBi5HQUH/jBfguT+IEhjG7oe3ki38UhXhJnDwOdqkO4r71a6kcE2cotYfH 2XAksDmGROurDa1ku0sr3YgSSjM+yiLt0QobnSKc4d2JKRBb4H4mYVryxNBz5K2r xbR/UhiJH9hFydhMM26kyLMi+fHvs6y+PuYK34c+0fD7rp1QgQIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFItGshxiXx8RSw3JXoWDihO3RhIBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS80YzNi YjdlNC1jOTdlLTQzYWItYTZkZC1jYmYwZTY0MzRjNWIvYWEwZTk3NTAtY2U3Mi0z ZDc3LWEyNjAtYTE3YzVhMzZhNmU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNGMzYmI3ZTQtYzk3ZS00M2FiLWE2 ZGQtY2JmMGU2NDM0YzViLzRjM2JiN2U0LWM5N2UtNDNhYi1hNmRkLWNiZjBlNjQz NGM1Yi5jcmwwHwYDVR0jBBgwFoAUjXaDMJHnSwSEQ/fEjyRQUNGYlvQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS80YzNiYjdlNC1jOTdlLTQzYWItYTZkZC1jYmYw ZTY0MzRjNWIuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF6zYMA4E AgACMAgDBgAmAvlZADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA5F6KCUf8BLqcoZJgKwFVc0ZZloT5YNBKa DJ8otOpZ2JRXm8RpXyrZDeefWf2cui9PO0vIbnJ7WTVaagSa/5vmsUFRoz0wzW9m JQJ0W/8GzKPivQfiAeU3X+H1ivTbTN8tR8QSDH9pjaPwJ4d5TBlYFkK2vrut5rDO oQsWRnP9yJY/sDZOifutLqvbH63gkmoGNvBGme1Z3wDigDJ/03pmMjZYeBtZ2WLn jJ1mYB9dO/UWJkUawDgRoDazwk6dlT21xVoI+7QzDZ5PijELmJTBEf2TcGKjCJuQ PMLzJlQJaqsRPs6PJ1QFaq2nSpV/OC8tucCWIdfLXDJ1NcNA6qiI -----END CERTIFICATE-----Generated at Wed Oct 28 00:49:10 2026 by rpki-client