$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2a9c3f0-9f82-4e64-bbd0-be3652feb255/eeaf3373-be11-3d52-b2ea-9487cdb5d9b6.roa File: eeaf3373-be11-3d52-b2ea-9487cdb5d9b6.roa (raw, json) Hash identifier: AvR1Swo0zm8pQ6Zm+m27rk30afkaWMVwawh8kJWwygc= Subject key identifier: 06:61:DE:50:2F:E5:1B:18:AA:9E:D5:CC:E6:86:B8:8F:CA:B8:09:61 Certificate issuer: /CN=a2a9c3f0-9f82-4e64-bbd0-be3652feb255 Certificate serial: 010D0C9F4328584F20F7BA55795057F71ADE3B80 Authority key identifier: EA:1E:A4:E9:EA:7B:92:67:CE:20:5F:9D:27:5E:12:CC:AB:49:FC:2C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2a9c3f0-9f82-4e64-bbd0-be3652feb255.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2a9c3f0-9f82-4e64-bbd0-be3652feb255/eeaf3373-be11-3d52-b2ea-9487cdb5d9b6.roa Signing time: Thu 10 Sep 2026 13:00:12 +0000 ROA not before: Thu 10 Sep 2026 13:00:12 +0000 ROA not after: Wed 09 Dec 2026 14:00:12 +0000 asID: 401017 IP address blocks: 23.176.248.0/24 maxlen: 24 2607:ae40::/32 maxlen: 56 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2a9c3f0-9f82-4e64-bbd0-be3652feb255/a2a9c3f0-9f82-4e64-bbd0-be3652feb255.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2a9c3f0-9f82-4e64-bbd0-be3652feb255/a2a9c3f0-9f82-4e64-bbd0-be3652feb255.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2a9c3f0-9f82-4e64-bbd0-be3652feb255.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:20:f7:ba:55:79:50:57:f7:1a:de:3b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a2a9c3f0-9f82-4e64-bbd0-be3652feb255 Validity Not Before: Sep 10 13:00:12 2026 GMT Not After : Dec 9 14:00:12 2026 GMT Subject: CN=46264fe4-07f9-4633-8313-c49b2a41a144 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:7d:af:d6:e1:56:b1:35:31:bc:9c:21:80:bf: f7:e3:24:b9:97:53:df:ff:14:c2:37:d9:13:89:38: 74:70:c2:28:af:f5:9c:83:34:a3:87:e2:ac:bd:14: e9:41:d4:bb:ab:4c:1c:b4:be:58:5d:fd:a7:3f:18: 4d:c4:50:69:3c:18:ca:78:7d:de:ae:c6:1c:2c:25: 0d:92:1b:1b:a1:0d:0d:25:45:45:10:7a:c7:32:53: f6:99:d9:2e:c9:a2:93:80:7c:e7:dd:c9:4a:23:ca: e2:08:f9:3c:60:d2:4e:da:99:19:a4:2b:33:76:66: ed:c9:ba:36:ee:4b:e5:f4:6f:f8:95:4d:4e:2d:79: 12:ec:14:c4:3e:92:a9:b3:02:c9:9e:d8:d0:5c:9d: 77:dc:db:2b:d0:5a:05:a8:7d:df:b7:cf:6a:f7:4c: b1:41:a7:c3:79:52:9f:6a:19:06:cc:72:f4:0f:c4: 19:22:5a:a6:20:5e:2f:4b:96:28:82:3a:f4:62:96: 29:d1:7b:5a:c0:34:4b:e5:93:d9:e1:ca:32:d7:6a: 19:7d:96:18:60:14:d8:56:4c:75:01:1b:1b:dd:2c: 82:65:fa:62:26:fb:2a:36:f0:4c:92:72:7b:09:48: b3:71:31:01:21:62:7f:56:0a:4f:1c:56:a8:9e:83: 38:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:61:DE:50:2F:E5:1B:18:AA:9E:D5:CC:E6:86:B8:8F:CA:B8:09:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2a9c3f0-9f82-4e64-bbd0-be3652feb255/eeaf3373-be11-3d52-b2ea-9487cdb5d9b6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2a9c3f0-9f82-4e64-bbd0-be3652feb255/a2a9c3f0-9f82-4e64-bbd0-be3652feb255.crl X509v3 Authority Key Identifier: keyid:EA:1E:A4:E9:EA:7B:92:67:CE:20:5F:9D:27:5E:12:CC:AB:49:FC:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a2a9c3f0-9f82-4e64-bbd0-be3652feb255.cer sbgp-ipAddrBlock: critical IPv4: 23.176.248.0/24 IPv6: 2607:ae40::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:a0:b2:4c:8a:85:14:b9:20:4f:4c:4f:c4:b8:5e:0b:ab:97: f2:60:53:ae:ac:a4:79:22:4e:d7:1a:80:6a:06:18:ce:e1:e8: 47:a7:80:66:31:36:58:7a:37:aa:14:54:b5:be:6c:56:d0:15: 12:6d:38:45:49:df:2f:49:4d:dd:88:03:cd:ce:92:44:97:1d: 92:b0:0d:7e:c7:9c:e7:af:55:87:f0:1a:d1:29:2f:8e:3d:aa: 87:45:31:97:d7:11:1d:4d:f2:94:f2:0d:a3:a4:99:22:b5:b7: ca:f7:f0:54:36:c2:cb:87:4b:b5:9f:de:d2:83:d9:91:8d:6d: e0:78:91:3f:17:72:e8:ed:75:7d:b0:70:12:f9:ab:63:4e:76: 4b:72:aa:49:1c:95:c4:a7:f3:9d:ee:aa:4d:65:0a:4a:6a:3a: b5:aa:24:58:81:ca:57:6d:de:c3:89:34:6d:21:71:a8:ad:ad: c6:19:d9:4b:aa:2f:70:58:9f:b6:58:90:90:21:8f:90:36:9a: 04:ee:5b:1f:44:db:da:c5:e4:ba:b4:bb:f3:1e:da:80:01:ca: 98:64:00:b3:e9:05:26:4c:13:11:d5:86:78:6c:a9:50:06:46: 59:8b:be:23:a5:c6:f7:14:42:3e:dc:e6:76:40:d1:e6:76:a1: ca:a0:28:55 -----BEGIN CERTIFICATE----- MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWE8g97pVeVBX9xreO4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTJhOWMzZjAtOWY4Mi00ZTY0LWJiZDAtYmUzNjUyZmVi MjU1MB4XDTI2MDkxMDEzMDAxMloXDTI2MTIwOTE0MDAxMlowLzEtMCsGA1UEAxMk NDYyNjRmZTQtMDdmOS00NjMzLTgzMTMtYzQ5YjJhNDFhMTQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkH2v1uFWsTUxvJwhgL/34yS5l1Pf/xTCN9kT iTh0cMIor/WcgzSjh+KsvRTpQdS7q0wctL5YXf2nPxhNxFBpPBjKeH3ersYcLCUN khsboQ0NJUVFEHrHMlP2mdkuyaKTgHzn3clKI8riCPk8YNJO2pkZpCszdmbtybo2 7kvl9G/4lU1OLXkS7BTEPpKpswLJntjQXJ133Nsr0FoFqH3ft89q90yxQafDeVKf ahkGzHL0D8QZIlqmIF4vS5Yogjr0YpYp0XtawDRL5ZPZ4coy12oZfZYYYBTYVkx1 ARsb3SyCZfpiJvsqNvBMknJ7CUizcTEBIWJ/VgpPHFaonoM4GwIDAQABo4IDZDCC A2AwHQYDVR0OBBYEFAZh3lAv5RsYqp7VzOaGuI/KuAlhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9hMmE5 YzNmMC05ZjgyLTRlNjQtYmJkMC1iZTM2NTJmZWIyNTUvZWVhZjMzNzMtYmUxMS0z ZDUyLWIyZWEtOTQ4N2NkYjVkOWI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYTJhOWMzZjAtOWY4Mi00ZTY0LWJi ZDAtYmUzNjUyZmViMjU1L2EyYTljM2YwLTlmODItNGU2NC1iYmQwLWJlMzY1MmZl YjI1NS5jcmwwHwYDVR0jBBgwFoAU6h6k6ep7kmfOIF+dJ14SzKtJ/CwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9hMmE5YzNmMC05ZjgyLTRlNjQtYmJkMC1iZTM2 NTJmZWIyNTUuY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAF7D4MA0E AgACMAcDBQAmB65AMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0 bWwwDQYJKoZIhvcNAQELBQADggEBAISgskyKhRS5IE9MT8S4Xgurl/JgU66spHki TtcagGoGGM7h6EengGYxNlh6N6oUVLW+bFbQFRJtOEVJ3y9JTd2IA83OkkSXHZKw DX7HnOevVYfwGtEpL449qodFMZfXER1N8pTyDaOkmSK1t8r38FQ2wsuHS7Wf3tKD 2ZGNbeB4kT8XcujtdX2wcBL5q2NOdktyqkkclcSn853uqk1lCkpqOrWqJFiByldt 3sOJNG0hcaitrcYZ2UuqL3BYn7ZYkJAhj5A2mgTuWx9E29rF5Lq0u/Me2oAByphk ALPpBSZMExHVhnhsqVAGRlmLviOlxvcUQj7c5nZA0eZ2ocqgKFU= -----END CERTIFICATE-----Generated at Sun Sep 13 10:51:17 2026 by rpki-client