$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b/aa0e9750-ce72-3d77-a260-a17c5a36a6e6.roa File: aa0e9750-ce72-3d77-a260-a17c5a36a6e6.roa (raw, json) Hash identifier: JNVLz6OdlJ6bpmL0JkDcM8S7YZXycUDso0T34vmrn38= Subject key identifier: 43:0F:71:D6:AA:78:16:BB:31:C5:D2:6F:0B:36:C0:05:5A:E8:99:A0 Certificate issuer: /CN=4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b Certificate serial: 010D0C9F4328584EA79BAE2A33C150053A897F40 Authority key identifier: 8D:76:83:30:91:E7:4B:04:84:43:F7:C4:8F:24:50:50:D1:98:96:F4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b/aa0e9750-ce72-3d77-a260-a17c5a36a6e6.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 50236 IP address blocks: 23.172.216.0/24 maxlen: 24 2602:f959::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9b:ae:2a:33:c1:50:05:3a:89:7f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=696c0c1a-467e-4126-be64-b284cced7e00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:02:ac:e3:2e:d6:7a:02:fd:b7:a1:86:2e:22: 48:28:af:ed:b9:43:90:bd:80:87:77:51:f2:60:55: 6a:29:18:79:ca:84:e0:e6:f1:36:c7:41:c6:15:3f: 66:9f:c1:3a:d6:b0:07:c1:db:8f:d0:e9:7d:b9:d5: 60:38:2d:2b:b6:9c:f7:7f:1f:04:65:f7:60:76:63: 05:f7:c7:c4:f8:7d:80:51:de:03:99:13:4b:1e:e4: 04:6b:86:d4:d2:9b:fd:19:8a:03:6e:e4:df:5c:09: 50:28:d1:66:49:4c:db:58:68:8b:9e:2e:cd:8a:ba: d9:3a:f5:64:ae:09:69:2d:a1:84:33:ee:c7:d5:62: ec:7f:5b:07:4c:37:71:b9:84:e1:c2:d2:52:46:e5: 52:ed:82:ea:25:2d:c5:67:8e:f9:79:58:be:a4:ae: 10:cf:29:af:4e:08:70:25:2b:42:52:69:2e:fd:21: 97:ce:a9:7a:e1:c4:39:92:aa:c6:5c:9d:09:20:8b: 30:1e:20:27:92:0e:49:ff:25:a5:1e:73:86:50:d1: f8:97:97:f9:71:28:20:03:86:13:52:13:5b:6f:8f: f7:22:cd:3c:40:52:dc:cd:87:4a:a5:4d:73:a8:1f: 0d:71:d3:d1:3d:e3:06:f9:d8:0d:50:76:ac:a4:40: dc:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:0F:71:D6:AA:78:16:BB:31:C5:D2:6F:0B:36:C0:05:5A:E8:99:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b/aa0e9750-ce72-3d77-a260-a17c5a36a6e6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b.crl X509v3 Authority Key Identifier: keyid:8D:76:83:30:91:E7:4B:04:84:43:F7:C4:8F:24:50:50:D1:98:96:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b.cer sbgp-ipAddrBlock: critical IPv4: 23.172.216.0/24 IPv6: 2602:f959::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:14:53:f6:39:b4:58:29:d2:99:0b:2e:55:6b:3a:8a:da:09: 73:95:4f:46:11:23:53:35:cd:3f:dd:3c:1f:92:6d:ff:4f:b5: 2a:53:35:cf:a0:94:4f:75:7e:3b:a6:3e:01:ea:36:97:b3:05: 51:24:cb:ce:14:b2:56:e3:fc:d2:f8:c3:66:0b:49:0d:98:48: a4:27:ea:c0:f0:4b:ff:9f:3b:ca:af:7b:67:ed:00:7c:62:09: 0f:54:87:b1:0a:c7:3f:b9:5b:00:4e:16:f9:3f:a9:b4:6d:ab: 5f:64:fb:0a:a4:8e:80:25:cc:bf:2c:14:6f:61:39:38:50:37: 35:18:d3:bb:d2:e6:e2:57:78:d3:5f:56:ba:86:45:e6:9d:9c: b2:5e:1c:63:17:1e:8b:59:74:6c:39:d6:fb:7c:69:ea:a1:27: d7:eb:da:52:8d:56:5c:14:72:74:30:25:07:e9:2c:3f:be:67: 23:ba:de:e8:bb:f8:d3:5a:62:82:7b:ab:dd:fc:af:71:d4:c1: a4:6f:b0:d5:95:36:05:f3:ca:b2:c1:73:96:de:4c:5b:01:90: 22:25:11:91:b5:9a:cc:84:22:e9:0b:63:7b:51:93:2b:26:f3: 4c:74:eb:1f:eb:78:23:1a:b9:9c:9f:a5:7e:5a:12:51:01:76: 7f:2e:7b:48 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE6nm64qM8FQBTqJf0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGMzYmI3ZTQtYzk3ZS00M2FiLWE2ZGQtY2JmMGU2NDM0 YzViMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk Njk2YzBjMWEtNDY3ZS00MTI2LWJlNjQtYjI4NGNjZWQ3ZTAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiAKs4y7WegL9t6GGLiJIKK/tuUOQvYCHd1Hy YFVqKRh5yoTg5vE2x0HGFT9mn8E61rAHwduP0Ol9udVgOC0rtpz3fx8EZfdgdmMF 98fE+H2AUd4DmRNLHuQEa4bU0pv9GYoDbuTfXAlQKNFmSUzbWGiLni7NirrZOvVk rglpLaGEM+7H1WLsf1sHTDdxuYThwtJSRuVS7YLqJS3FZ475eVi+pK4QzymvTghw JStCUmku/SGXzql64cQ5kqrGXJ0JIIswHiAnkg5J/yWlHnOGUNH4l5f5cSggA4YT UhNbb4/3Is08QFLczYdKpU1zqB8NcdPRPeMG+dgNUHaspEDcBwIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFEMPcdaqeBa7McXSbws2wAVa6JmgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS80YzNi YjdlNC1jOTdlLTQzYWItYTZkZC1jYmYwZTY0MzRjNWIvYWEwZTk3NTAtY2U3Mi0z ZDc3LWEyNjAtYTE3YzVhMzZhNmU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNGMzYmI3ZTQtYzk3ZS00M2FiLWE2 ZGQtY2JmMGU2NDM0YzViLzRjM2JiN2U0LWM5N2UtNDNhYi1hNmRkLWNiZjBlNjQz NGM1Yi5jcmwwHwYDVR0jBBgwFoAUjXaDMJHnSwSEQ/fEjyRQUNGYlvQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS80YzNiYjdlNC1jOTdlLTQzYWItYTZkZC1jYmYw ZTY0MzRjNWIuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF6zYMA4E AgACMAgDBgAmAvlZADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBrFFP2ObRYKdKZCy5VazqK2glzlU9GESNT Nc0/3Twfkm3/T7UqUzXPoJRPdX47pj4B6jaXswVRJMvOFLJW4/zS+MNmC0kNmEik J+rA8Ev/nzvKr3tn7QB8YgkPVIexCsc/uVsAThb5P6m0batfZPsKpI6AJcy/LBRv YTk4UDc1GNO70ubiV3jTX1a6hkXmnZyyXhxjFx6LWXRsOdb7fGnqoSfX69pSjVZc FHJ0MCUH6Sw/vmcjut7ou/jTWmKCe6vd/K9x1MGkb7DVlTYF88qywXOW3kxbAZAi JRGRtZrMhCLpC2N7UZMrJvNMdOsf63gjGrmcn6V+WhJRAXZ/LntI -----END CERTIFICATE-----Generated at Thu Sep 10 23:38:04 2026 by rpki-client