$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/68a35552-4277-4e62-a51e-4b31ab8d4ca0/eaf23d5c-7bbe-3565-9f9a-56cbc342ca34.roa File: eaf23d5c-7bbe-3565-9f9a-56cbc342ca34.roa (raw, json) Hash identifier: BvVCMj9VVPco3qQaBx7FPOKUyj+mg0LiHWqZU4LQTnw= Subject key identifier: F7:7F:C3:2F:7D:B0:4D:02:75:6B:F8:7C:10:27:48:40:73:FC:48:B4 Certificate issuer: /CN=68a35552-4277-4e62-a51e-4b31ab8d4ca0 Certificate serial: 010D0C9F4328584F5767FFDED95D552C7F585980 Authority key identifier: 16:B2:4D:AD:C8:30:67:AE:94:AB:66:CF:54:E8:C6:2A:E6:3A:52:59 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/68a35552-4277-4e62-a51e-4b31ab8d4ca0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/68a35552-4277-4e62-a51e-4b31ab8d4ca0/eaf23d5c-7bbe-3565-9f9a-56cbc342ca34.roa Signing time: Wed 30 Sep 2026 01:00:12 +0000 ROA not before: Wed 30 Sep 2026 01:00:12 +0000 ROA not after: Tue 29 Dec 2026 02:00:12 +0000 asID: 401021 IP address blocks: 23.176.152.0/24 maxlen: 24 2620:0:8000::/44 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/68a35552-4277-4e62-a51e-4b31ab8d4ca0/68a35552-4277-4e62-a51e-4b31ab8d4ca0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/68a35552-4277-4e62-a51e-4b31ab8d4ca0/68a35552-4277-4e62-a51e-4b31ab8d4ca0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/68a35552-4277-4e62-a51e-4b31ab8d4ca0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:57:67:ff:de:d9:5d:55:2c:7f:58:59:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68a35552-4277-4e62-a51e-4b31ab8d4ca0 Validity Not Before: Sep 30 01:00:12 2026 GMT Not After : Dec 29 02:00:12 2026 GMT Subject: CN=f0b96ea1-6a30-47a5-a477-45a5b2493399 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:2c:56:0f:53:fb:c9:b2:77:84:a1:ab:c0:2b: 35:a3:fa:6a:df:fa:1c:7e:05:b2:44:1f:8e:20:2e: fa:1b:b6:d7:b3:57:b0:ad:84:96:93:0b:2a:16:a1: d1:15:62:87:65:36:dc:9d:b7:34:9d:45:d4:c5:4a: 6c:49:d9:cb:08:0e:75:3f:b9:d8:fd:21:64:7a:14: 23:19:f0:6c:2c:76:a4:42:6d:6b:e9:12:28:4b:e5: 29:5a:2c:ff:b3:4c:42:46:eb:df:9c:1c:d4:da:e7: 8d:24:ea:4a:5b:95:cd:23:4b:85:de:12:43:65:82: 7f:f6:e0:2b:7c:79:05:20:98:5d:28:68:71:8c:c2: 6f:ad:91:ed:51:80:50:21:d9:c6:08:63:5e:31:58: e4:69:1b:35:fd:ad:05:5f:b5:ba:78:a4:d9:50:e2: a2:b3:d4:1a:57:f3:06:99:2b:76:5c:57:e8:47:c9: f2:ae:b4:24:42:ee:a6:9d:e1:36:ff:72:b1:8b:ea: 1c:27:ee:92:9a:0d:23:0b:dc:9b:a4:ee:ad:bb:ad: 29:4a:76:f1:91:e7:e0:61:28:3f:49:0b:29:cf:3c: 0f:bb:f1:1f:3e:55:6c:36:c2:8a:77:4c:1c:7b:f1: be:e8:57:e0:73:97:b6:7f:81:d1:8d:77:c0:fe:6a: aa:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:7F:C3:2F:7D:B0:4D:02:75:6B:F8:7C:10:27:48:40:73:FC:48:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/68a35552-4277-4e62-a51e-4b31ab8d4ca0/eaf23d5c-7bbe-3565-9f9a-56cbc342ca34.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/68a35552-4277-4e62-a51e-4b31ab8d4ca0/68a35552-4277-4e62-a51e-4b31ab8d4ca0.crl X509v3 Authority Key Identifier: keyid:16:B2:4D:AD:C8:30:67:AE:94:AB:66:CF:54:E8:C6:2A:E6:3A:52:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/68a35552-4277-4e62-a51e-4b31ab8d4ca0.cer sbgp-ipAddrBlock: critical IPv4: 23.176.152.0/24 IPv6: 2620:0:8000::/44 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:e7:50:f6:b2:89:40:5b:60:af:53:ad:d5:b2:7a:fa:a8:b0: 5e:e8:29:d0:1c:5b:c8:e2:59:e0:fe:51:9e:af:61:f0:ac:2f: 64:69:28:eb:1f:5e:86:f6:ac:c7:fa:28:72:91:04:66:6d:65: 89:8b:96:32:80:9d:8b:6f:1d:7a:b5:36:74:51:83:1f:ea:2b: 8b:c7:67:b8:11:29:79:a6:5c:71:86:f2:79:b5:bb:8c:5b:4e: a1:a6:ad:c1:89:87:eb:64:bd:3f:00:6c:68:28:86:b6:67:a2: b5:4d:c3:4d:a2:7e:45:1f:68:c8:70:18:fc:ea:a9:37:d4:1e: d9:b5:ba:7a:94:23:98:d5:fa:c1:bf:dd:ce:2b:52:91:58:da: 05:76:95:3f:99:da:e6:57:8b:fe:6d:02:25:b2:1a:2f:c7:e9: f0:67:22:13:2a:e1:c9:2a:cd:98:5f:70:2e:a5:df:ce:84:89: f2:d5:b8:e0:7d:e8:c3:07:ee:b0:46:b3:d6:97:fb:70:e8:70: 4e:e5:f1:43:ad:11:21:b5:2e:59:37:9b:0f:ab:30:47:77:b1: 34:cd:0c:f9:68:74:42:71:f8:74:08:70:02:1d:af:e5:b7:53: fc:e0:17:93:39:22:56:88:b4:36:4b:7d:60:26:45:1a:64:85: 46:3d:ba:ca -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWE9XZ//e2V1VLH9YWYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjhhMzU1NTItNDI3Ny00ZTYyLWE1MWUtNGIzMWFiOGQ0 Y2EwMB4XDTI2MDkzMDAxMDAxMloXDTI2MTIyOTAyMDAxMlowLzEtMCsGA1UEAxMk ZjBiOTZlYTEtNmEzMC00N2E1LWE0NzctNDVhNWIyNDkzMzk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnixWD1P7ybJ3hKGrwCs1o/pq3/ocfgWyRB+O IC76G7bXs1ewrYSWkwsqFqHRFWKHZTbcnbc0nUXUxUpsSdnLCA51P7nY/SFkehQj GfBsLHakQm1r6RIoS+UpWiz/s0xCRuvfnBzU2ueNJOpKW5XNI0uF3hJDZYJ/9uAr fHkFIJhdKGhxjMJvrZHtUYBQIdnGCGNeMVjkaRs1/a0FX7W6eKTZUOKis9QaV/MG mSt2XFfoR8nyrrQkQu6mneE2/3Kxi+ocJ+6Smg0jC9ybpO6tu60pSnbxkefgYSg/ SQspzzwPu/EfPlVsNsKKd0wce/G+6Ffgc5e2f4HRjXfA/mqqnwIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFPd/wy99sE0CdWv4fBAnSEBz/Ei0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82OGEz NTU1Mi00Mjc3LTRlNjItYTUxZS00YjMxYWI4ZDRjYTAvZWFmMjNkNWMtN2JiZS0z NTY1LTlmOWEtNTZjYmMzNDJjYTM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNjhhMzU1NTItNDI3Ny00ZTYyLWE1 MWUtNGIzMWFiOGQ0Y2EwLzY4YTM1NTUyLTQyNzctNGU2Mi1hNTFlLTRiMzFhYjhk NGNhMC5jcmwwHwYDVR0jBBgwFoAUFrJNrcgwZ66Uq2bPVOjGKuY6UlkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS82OGEzNTU1Mi00Mjc3LTRlNjItYTUxZS00YjMx YWI4ZDRjYTAuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAF7CYMA8E AgACMAkDBwQmIAAAgAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAhOdQ9rKJQFtgr1Ot1bJ6+qiwXugp0Bxb yOJZ4P5Rnq9h8KwvZGko6x9ehvasx/oocpEEZm1liYuWMoCdi28derU2dFGDH+or i8dnuBEpeaZccYbyebW7jFtOoaatwYmH62S9PwBsaCiGtmeitU3DTaJ+RR9oyHAY /OqpN9Qe2bW6epQjmNX6wb/dzitSkVjaBXaVP5na5leL/m0CJbIaL8fp8GciEyrh ySrNmF9wLqXfzoSJ8tW44H3owwfusEaz1pf7cOhwTuXxQ60RIbUuWTebD6swR3ex NM0M+Wh0QnH4dAhwAh2v5bdT/OAXkzkiVoi0Nkt9YCZFGmSFRj26yg== -----END CERTIFICATE-----Generated at Mon Nov 2 12:43:37 2026 by rpki-client