$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b/d068d9d1-8712-357f-8be5-1594c6fd434a.roa File: d068d9d1-8712-357f-8be5-1594c6fd434a.roa (raw, json) Hash identifier: lWCebr3rpRSF6ECBCuGT14dMltNo4B4IYBz/J1M4PiM= Subject key identifier: 02:2A:91:CD:F0:5D:65:60:3C:69:B7:CD:94:ED:5A:0A:68:CE:71:7B Certificate issuer: /CN=4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b Certificate serial: 010D0C9F4328584F497486E1788D89C566468000 Authority key identifier: 8D:76:83:30:91:E7:4B:04:84:43:F7:C4:8F:24:50:50:D1:98:96:F4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b/d068d9d1-8712-357f-8be5-1594c6fd434a.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 60539 IP address blocks: 23.172.216.0/24 maxlen: 24 2602:f959::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 29 Oct 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:86:e1:78:8d:89:c5:66:46:80:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=9ef575ab-dd70-45a1-af48-200170f458ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:e0:0a:fc:64:5e:58:39:56:c0:db:9a:f5:c6: bb:36:fc:7e:f9:c1:3e:66:12:39:79:12:9a:78:3b: b1:4b:e9:fc:1f:55:a3:f7:8e:17:4d:3d:bd:09:54: cb:f4:52:fe:6d:89:7a:c8:ba:87:b9:b2:c9:af:76: 61:dc:26:ae:a6:c5:11:a1:e6:2e:d8:3b:ab:51:9c: 83:96:1b:2a:96:eb:22:ac:7b:9b:60:60:46:56:29: c3:34:92:c5:c4:65:17:78:5e:21:50:f2:89:3a:a1: 23:2a:1b:ec:ab:ab:9f:cd:c1:a0:f7:29:87:4a:c5: 31:61:5f:a9:be:f8:44:55:4a:a9:0c:31:43:69:e7: 10:5f:02:d6:f6:98:fd:c7:fa:18:44:d0:8b:f9:91: 03:3e:28:e9:a8:af:5d:4a:0b:ff:a0:33:59:e8:77: 3f:a6:b9:a9:06:54:85:56:a3:26:b4:a5:5e:b2:71: a1:fd:73:77:89:05:93:22:62:9b:2f:d6:56:ac:91: dd:65:41:b2:e8:9a:17:c0:d6:79:80:c2:c5:8a:13: 68:9f:15:fd:75:4b:c0:75:20:ce:7b:53:d3:01:fa: 61:a2:09:71:49:e1:b5:10:63:26:45:44:0a:07:35: 60:14:37:63:07:9c:14:7a:d6:24:d8:cf:62:96:88: 97:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:2A:91:CD:F0:5D:65:60:3C:69:B7:CD:94:ED:5A:0A:68:CE:71:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b/d068d9d1-8712-357f-8be5-1594c6fd434a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b.crl X509v3 Authority Key Identifier: keyid:8D:76:83:30:91:E7:4B:04:84:43:F7:C4:8F:24:50:50:D1:98:96:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b.cer sbgp-ipAddrBlock: critical IPv4: 23.172.216.0/24 IPv6: 2602:f959::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:62:62:fd:20:a6:34:fb:ec:4c:a4:9c:66:65:64:77:64:41: 36:82:93:5a:1d:63:33:d4:72:32:35:6d:e8:42:d5:36:8e:9b: 9d:e2:da:60:ff:94:30:55:ec:ce:e8:c9:61:ce:0d:80:a2:bc: 29:bd:82:72:10:9d:01:be:61:4d:85:2c:07:b8:e3:73:12:eb: 9a:10:2a:4e:a1:1d:13:3a:7c:00:24:0f:ee:a6:fb:e3:75:55: dc:63:b4:b2:32:7d:f5:29:d7:b2:28:03:72:90:d5:fd:94:fb: a5:3f:7d:f7:bf:de:48:4b:48:d0:95:a4:08:6e:fd:1c:03:02: a9:8d:d9:7b:48:96:0f:7f:3b:06:2b:2f:45:85:97:b3:5e:36: 22:fe:76:32:79:a5:e2:12:ec:83:a6:cf:55:c3:70:35:fa:11: 18:20:3b:24:0d:6d:cf:7c:ef:33:b8:be:00:7c:2c:5b:97:32: 54:f9:d1:e7:85:26:6e:bf:ca:03:87:5c:e4:d8:16:02:6d:eb: fc:7e:98:e3:34:45:18:6b:4b:b7:96:c8:a3:c1:df:f7:72:11: 74:7b:fe:8c:94:7e:0f:0e:e4:bb:b5:f4:08:7e:78:98:d5:dd: b6:e8:b6:6d:81:b6:66:ca:0d:e1:f3:a8:d4:e9:47:b3:88:33: ec:24:04:c1 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE9JdIbheI2JxWZGgAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGMzYmI3ZTQtYzk3ZS00M2FiLWE2ZGQtY2JmMGU2NDM0 YzViMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk OWVmNTc1YWItZGQ3MC00NWExLWFmNDgtMjAwMTcwZjQ1OGZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmOAK/GReWDlWwNua9ca7Nvx++cE+ZhI5eRKa eDuxS+n8H1Wj944XTT29CVTL9FL+bYl6yLqHubLJr3Zh3CaupsURoeYu2DurUZyD lhsqlusirHubYGBGVinDNJLFxGUXeF4hUPKJOqEjKhvsq6ufzcGg9ymHSsUxYV+p vvhEVUqpDDFDaecQXwLW9pj9x/oYRNCL+ZEDPijpqK9dSgv/oDNZ6Hc/prmpBlSF VqMmtKVesnGh/XN3iQWTImKbL9ZWrJHdZUGy6JoXwNZ5gMLFihNonxX9dUvAdSDO e1PTAfphoglxSeG1EGMmRUQKBzVgFDdjB5wUetYk2M9iloiX4QIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFAIqkc3wXWVgPGm3zZTtWgpoznF7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS80YzNi YjdlNC1jOTdlLTQzYWItYTZkZC1jYmYwZTY0MzRjNWIvZDA2OGQ5ZDEtODcxMi0z NTdmLThiZTUtMTU5NGM2ZmQ0MzRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNGMzYmI3ZTQtYzk3ZS00M2FiLWE2 ZGQtY2JmMGU2NDM0YzViLzRjM2JiN2U0LWM5N2UtNDNhYi1hNmRkLWNiZjBlNjQz NGM1Yi5jcmwwHwYDVR0jBBgwFoAUjXaDMJHnSwSEQ/fEjyRQUNGYlvQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS80YzNiYjdlNC1jOTdlLTQzYWItYTZkZC1jYmYw ZTY0MzRjNWIuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF6zYMA4E AgACMAgDBgAmAvlZADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAQYmL9IKY0++xMpJxmZWR3ZEE2gpNaHWMz 1HIyNW3oQtU2jpud4tpg/5QwVezO6Mlhzg2AorwpvYJyEJ0BvmFNhSwHuONzEuua ECpOoR0TOnwAJA/upvvjdVXcY7SyMn31KdeyKANykNX9lPulP333v95IS0jQlaQI bv0cAwKpjdl7SJYPfzsGKy9FhZezXjYi/nYyeaXiEuyDps9Vw3A1+hEYIDskDW3P fO8zuL4AfCxblzJU+dHnhSZuv8oDh1zk2BYCbev8fpjjNEUYa0u3lsijwd/3chF0 e/6MlH4PDuS7tfQIfniY1d226LZtgbZmyg3h86jU6UeziDPsJATB -----END CERTIFICATE-----Generated at Tue Oct 27 18:04:05 2026 by rpki-client