$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d9fe3f5e-7bba-4763-84ad-4575066fb46e/bcb4fc2a-d601-3c0e-8b87-11d3c5d56487.roa File: bcb4fc2a-d601-3c0e-8b87-11d3c5d56487.roa (raw, json) Hash identifier: IyxnEc9WpZPivY4ghlFsYKFJKSy8HBY7QDglXzANEOE= Subject key identifier: FE:03:9F:0E:3C:9D:D5:35:4C:EE:7B:70:91:8E:10:63:36:D6:4B:18 Certificate issuer: /CN=d9fe3f5e-7bba-4763-84ad-4575066fb46e Certificate serial: 010D0C9F4328584F9FFDE4B32329AF69BC68C880 Authority key identifier: 17:33:FF:CC:4A:B9:97:B2:A7:74:3B:59:53:20:1B:1A:E1:66:A3:4E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d9fe3f5e-7bba-4763-84ad-4575066fb46e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d9fe3f5e-7bba-4763-84ad-4575066fb46e/bcb4fc2a-d601-3c0e-8b87-11d3c5d56487.roa Signing time: Mon 26 Oct 2026 01:00:13 +0000 ROA not before: Mon 26 Oct 2026 01:00:13 +0000 ROA not after: Sun 24 Jan 2027 02:00:13 +0000 asID: 152179 IP address blocks: 23.177.168.0/24 maxlen: 24 2602:f8f8::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d9fe3f5e-7bba-4763-84ad-4575066fb46e/d9fe3f5e-7bba-4763-84ad-4575066fb46e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d9fe3f5e-7bba-4763-84ad-4575066fb46e/d9fe3f5e-7bba-4763-84ad-4575066fb46e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d9fe3f5e-7bba-4763-84ad-4575066fb46e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 01 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:9f:fd:e4:b3:23:29:af:69:bc:68:c8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9fe3f5e-7bba-4763-84ad-4575066fb46e Validity Not Before: Oct 26 01:00:13 2026 GMT Not After : Jan 24 02:00:13 2027 GMT Subject: CN=3b22dbca-993c-4b2f-a49a-fb7ceb58c8ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:ed:49:16:60:6d:cb:7e:16:9f:7f:45:0f:4c: 97:5f:48:07:b2:72:f3:70:97:12:ac:d4:7d:d5:09: fa:84:d4:ea:5f:9a:6f:e9:86:35:47:5d:3d:0d:2d: 6e:02:73:0b:19:58:48:d4:58:36:b5:fa:5c:66:06: 7b:b5:d8:8f:89:98:62:fa:9a:1d:4d:a0:94:59:09: 19:82:61:b5:27:4e:9d:47:3d:29:27:3e:46:cc:0c: 48:4d:03:02:77:b0:92:5a:0f:b3:67:bf:d6:19:60: d6:f3:4b:53:fe:5c:7e:23:fe:6e:1d:48:08:ef:9c: db:ab:2e:87:53:ee:79:73:54:0c:f5:bd:1b:8a:aa: 2d:ce:d0:fb:40:e4:f8:37:f3:1c:5b:90:f8:f2:d9: 91:34:7f:1a:a5:c7:6a:e5:76:4e:40:44:43:c6:36: 68:7c:9c:0a:83:2f:4c:d3:d5:d1:87:a4:82:b6:5b: 8a:d1:3b:69:68:61:9a:d2:45:6d:e5:a8:df:b1:44: 28:ec:11:6e:1c:4e:33:19:92:7b:a5:7d:97:6f:99: be:96:12:aa:ad:87:63:af:84:74:fc:11:9e:63:75: 13:b3:57:80:e1:4b:96:9f:18:3b:a3:0c:93:d8:0d: 50:5c:17:75:10:84:87:89:9b:c7:5f:55:5c:50:55: d5:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:03:9F:0E:3C:9D:D5:35:4C:EE:7B:70:91:8E:10:63:36:D6:4B:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d9fe3f5e-7bba-4763-84ad-4575066fb46e/bcb4fc2a-d601-3c0e-8b87-11d3c5d56487.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d9fe3f5e-7bba-4763-84ad-4575066fb46e/d9fe3f5e-7bba-4763-84ad-4575066fb46e.crl X509v3 Authority Key Identifier: keyid:17:33:FF:CC:4A:B9:97:B2:A7:74:3B:59:53:20:1B:1A:E1:66:A3:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d9fe3f5e-7bba-4763-84ad-4575066fb46e.cer sbgp-ipAddrBlock: critical IPv4: 23.177.168.0/24 IPv6: 2602:f8f8::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b9:48:3c:d9:0f:8c:61:d4:71:3c:b8:a3:58:31:30:24:eb:cc: 15:6f:52:39:e6:eb:3b:75:8b:4e:b5:2a:14:0c:5f:f3:39:f5: f5:62:b0:11:1e:d2:a6:7a:8a:c2:46:8b:29:60:29:52:b1:22: a9:a3:52:08:27:79:a2:7a:ec:4b:3e:a1:dd:aa:03:37:17:a4: 61:d6:9a:9b:89:77:1f:b2:d6:85:23:f1:2e:ff:b1:31:92:54: 3c:58:4b:f6:ad:8c:f8:07:c7:6a:a1:7d:e4:40:fe:9f:5b:dc: e3:a3:ab:fd:a8:77:a9:7b:8c:80:bf:2f:c2:01:9c:d5:22:8f: 11:6c:45:20:ef:ae:04:10:bf:b3:6f:38:49:14:e7:06:98:d3: 64:2a:8c:96:23:f1:b1:05:30:b3:c4:dc:9c:a9:e6:e5:4a:e0: a8:92:7b:a4:35:8f:8a:8a:8a:23:39:50:f2:15:7e:a8:b7:66: b7:12:42:1d:76:b7:ce:0f:79:96:5a:e0:20:39:07:b3:36:8b: 44:c3:29:0c:78:bb:79:96:d6:76:8f:79:cf:08:a9:7f:47:22: f2:f6:47:80:e7:3f:68:63:6e:ea:76:5b:25:3a:22:40:ab:a8: fe:08:47:fb:29:49:8e:6d:1a:f5:fa:80:8a:20:58:40:08:a8: 7a:97:af:6c -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE+f/eSzIymvabxoyIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmZTNmNWUtN2JiYS00NzYzLTg0YWQtNDU3NTA2NmZi NDZlMB4XDTI2MTAyNjAxMDAxM1oXDTI3MDEyNDAyMDAxM1owLzEtMCsGA1UEAxMk M2IyMmRiY2EtOTkzYy00YjJmLWE0OWEtZmI3Y2ViNThjOGVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh+1JFmBty34Wn39FD0yXX0gHsnLzcJcSrNR9 1Qn6hNTqX5pv6YY1R109DS1uAnMLGVhI1Fg2tfpcZgZ7tdiPiZhi+podTaCUWQkZ gmG1J06dRz0pJz5GzAxITQMCd7CSWg+zZ7/WGWDW80tT/lx+I/5uHUgI75zbqy6H U+55c1QM9b0biqotztD7QOT4N/McW5D48tmRNH8apcdq5XZOQERDxjZofJwKgy9M 09XRh6SCtluK0TtpaGGa0kVt5ajfsUQo7BFuHE4zGZJ7pX2Xb5m+lhKqrYdjr4R0 /BGeY3UTs1eA4UuWnxg7owyT2A1QXBd1EISHiZvHX1VcUFXVLQIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFP4Dnw48ndU1TO57cJGOEGM21ksYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9kOWZl M2Y1ZS03YmJhLTQ3NjMtODRhZC00NTc1MDY2ZmI0NmUvYmNiNGZjMmEtZDYwMS0z YzBlLThiODctMTFkM2M1ZDU2NDg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvZDlmZTNmNWUtN2JiYS00NzYzLTg0 YWQtNDU3NTA2NmZiNDZlL2Q5ZmUzZjVlLTdiYmEtNDc2My04NGFkLTQ1NzUwNjZm YjQ2ZS5jcmwwHwYDVR0jBBgwFoAUFzP/zEq5l7KndDtZUyAbGuFmo04wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9kOWZlM2Y1ZS03YmJhLTQ3NjMtODRhZC00NTc1 MDY2ZmI0NmUuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF7GoMA4E AgACMAgDBgAmAvj4ADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQC5SDzZD4xh1HE8uKNYMTAk68wVb1I55us7 dYtOtSoUDF/zOfX1YrARHtKmeorCRospYClSsSKpo1IIJ3mieuxLPqHdqgM3F6Rh 1pqbiXcfstaFI/Eu/7ExklQ8WEv2rYz4B8dqoX3kQP6fW9zjo6v9qHepe4yAvy/C AZzVIo8RbEUg764EEL+zbzhJFOcGmNNkKoyWI/GxBTCzxNycqeblSuCoknukNY+K ioojOVDyFX6ot2a3EkIddrfOD3mWWuAgOQezNotEwykMeLt5ltZ2j3nPCKl/RyLy 9keA5z9oY27qdlslOiJAq6j+CEf7KUmObRr1+oCKIFhACKh6l69s -----END CERTIFICATE-----Generated at Sat Oct 31 12:07:48 2026 by rpki-client