$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b/d068d9d1-8712-357f-8be5-1594c6fd434a.roa File: d068d9d1-8712-357f-8be5-1594c6fd434a.roa (raw, json) Hash identifier: 3A0dDGc09EvH0h+2a/ThCwerFaTP0hP9r7LF+YtU2uM= Subject key identifier: 43:DF:29:9C:C5:13:6D:DF:EE:F9:17:3F:97:23:70:1C:68:56:31:66 Certificate issuer: /CN=4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b Certificate serial: 010D0C9F4328584EA79BAE488AA5979945CA7D20 Authority key identifier: 8D:76:83:30:91:E7:4B:04:84:43:F7:C4:8F:24:50:50:D1:98:96:F4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b/d068d9d1-8712-357f-8be5-1594c6fd434a.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 60539 IP address blocks: 23.172.216.0/24 maxlen: 24 2602:f959::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Sep 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9b:ae:48:8a:a5:97:99:45:ca:7d:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=8c35a30d-4d48-4c72-9ce3-2e3dc37f7942 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:db:d6:56:14:2d:a6:3c:60:c4:03:6b:1f:4f: 84:b4:21:8c:fa:13:ba:93:06:8b:a4:66:e7:b3:45: ae:74:db:9b:8b:4d:6a:12:b2:d7:7b:09:87:89:b5: d5:6e:5b:0f:70:5b:f0:e5:17:88:cb:a8:d2:58:5a: 5d:e6:81:3b:1e:cd:78:01:2a:4f:47:6a:8e:c9:bf: 3b:53:87:11:89:ca:59:91:04:a9:a3:44:bf:6b:5b: 9b:64:20:28:f6:f1:de:fd:98:cb:33:af:7c:81:a0: 50:4f:9b:3a:83:9e:95:69:44:d4:1b:7a:59:e2:ea: 0f:a7:6c:41:8e:c1:6d:e1:5e:b4:e0:7f:51:45:0e: 5f:76:8a:70:04:c8:d3:11:2f:9a:6d:70:5b:a9:49: 80:6f:a6:05:9c:d9:47:72:21:7b:73:9a:47:b5:36: f7:1b:6d:ee:6a:36:6d:1c:30:9b:45:5a:3d:e5:76: 57:0f:9b:7d:7c:08:ec:bc:b7:bc:21:3b:b6:99:03: b3:b0:32:7b:e7:24:ea:0b:0b:da:47:e8:d3:64:ee: ca:ea:df:46:da:e3:0c:8f:89:1d:29:35:6f:d1:b6: 25:b2:95:f0:25:fe:be:7d:93:d9:e8:64:ab:40:c0: 03:3e:6f:10:be:99:26:70:94:e6:8b:1a:d6:5c:cd: d2:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:DF:29:9C:C5:13:6D:DF:EE:F9:17:3F:97:23:70:1C:68:56:31:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b/d068d9d1-8712-357f-8be5-1594c6fd434a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b.crl X509v3 Authority Key Identifier: keyid:8D:76:83:30:91:E7:4B:04:84:43:F7:C4:8F:24:50:50:D1:98:96:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4c3bb7e4-c97e-43ab-a6dd-cbf0e6434c5b.cer sbgp-ipAddrBlock: critical IPv4: 23.172.216.0/24 IPv6: 2602:f959::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:ac:a0:29:cd:43:da:97:27:67:e1:a1:e6:6a:6c:ed:f1:81: 55:db:87:04:2c:ee:2c:8f:cf:98:69:d6:92:f9:49:1c:e4:dc: 36:7f:5d:59:6f:f0:a3:cb:02:7c:ee:10:9a:dc:ff:0a:7c:7a: fe:0c:75:2c:36:51:fe:f0:73:f2:21:e5:86:79:7a:80:b6:96: b6:83:72:bc:c1:c4:01:b8:55:d2:06:47:69:00:7e:2b:b6:9a: 0e:92:a7:06:0a:2b:ae:fc:30:74:72:c6:30:2c:48:02:be:85: 68:6e:76:5b:ab:1f:2c:68:d5:9d:63:d8:c4:42:9a:d1:1d:66: 68:90:e3:9b:f5:3e:b1:38:a9:b9:f1:61:cd:60:6b:fd:74:af: 87:2b:b5:2b:3d:2d:0c:85:13:0f:76:33:ab:71:8f:99:59:33: 18:03:40:01:79:a0:f1:87:b6:df:0a:55:a9:e0:a7:87:a8:ed: 60:ae:01:db:c0:e3:af:16:c8:36:ac:a1:b7:9f:fe:ad:52:af: 18:3e:17:36:18:08:0b:b7:bd:32:f0:81:b1:75:ca:9a:55:07: dc:c0:74:b3:fb:d2:00:0b:26:a1:12:89:c2:32:23:f9:77:7e: 1f:43:39:49:77:64:61:f2:0a:b5:74:f9:8b:03:2a:e8:93:69: 5b:ee:16:61 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE6nm65IiqWXmUXKfSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGMzYmI3ZTQtYzk3ZS00M2FiLWE2ZGQtY2JmMGU2NDM0 YzViMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk OGMzNWEzMGQtNGQ0OC00YzcyLTljZTMtMmUzZGMzN2Y3OTQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAitvWVhQtpjxgxANrH0+EtCGM+hO6kwaLpGbn s0WudNubi01qErLXewmHibXVblsPcFvw5ReIy6jSWFpd5oE7Hs14ASpPR2qOyb87 U4cRicpZkQSpo0S/a1ubZCAo9vHe/ZjLM698gaBQT5s6g56VaUTUG3pZ4uoPp2xB jsFt4V604H9RRQ5fdopwBMjTES+abXBbqUmAb6YFnNlHciF7c5pHtTb3G23uajZt HDCbRVo95XZXD5t9fAjsvLe8ITu2mQOzsDJ75yTqCwvaR+jTZO7K6t9G2uMMj4kd KTVv0bYlspXwJf6+fZPZ6GSrQMADPm8QvpkmcJTmixrWXM3SdQIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFEPfKZzFE23f7vkXP5cjcBxoVjFmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS80YzNi YjdlNC1jOTdlLTQzYWItYTZkZC1jYmYwZTY0MzRjNWIvZDA2OGQ5ZDEtODcxMi0z NTdmLThiZTUtMTU5NGM2ZmQ0MzRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNGMzYmI3ZTQtYzk3ZS00M2FiLWE2 ZGQtY2JmMGU2NDM0YzViLzRjM2JiN2U0LWM5N2UtNDNhYi1hNmRkLWNiZjBlNjQz NGM1Yi5jcmwwHwYDVR0jBBgwFoAUjXaDMJHnSwSEQ/fEjyRQUNGYlvQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS80YzNiYjdlNC1jOTdlLTQzYWItYTZkZC1jYmYw ZTY0MzRjNWIuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF6zYMA4E AgACMAgDBgAmAvlZADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBorKApzUPalydn4aHmamzt8YFV24cELO4s j8+YadaS+Ukc5Nw2f11Zb/CjywJ87hCa3P8KfHr+DHUsNlH+8HPyIeWGeXqAtpa2 g3K8wcQBuFXSBkdpAH4rtpoOkqcGCiuu/DB0csYwLEgCvoVobnZbqx8saNWdY9jE QprRHWZokOOb9T6xOKm58WHNYGv9dK+HK7UrPS0MhRMPdjOrcY+ZWTMYA0ABeaDx h7bfClWp4KeHqO1grgHbwOOvFsg2rKG3n/6tUq8YPhc2GAgLt70y8IGxdcqaVQfc wHSz+9IACyahEonCMiP5d34fQzlJd2Rh8gq1dPmLAyrok2lb7hZh -----END CERTIFICATE-----Generated at Thu Sep 10 16:49:18 2026 by rpki-client