$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3c7535f4-d3f1-4e7f-b379-0835e02fb280/fb9f7f15-6477-3f7a-b6fd-fb663e418131.roa File: fb9f7f15-6477-3f7a-b6fd-fb663e418131.roa (raw, json) Hash identifier: 2Do1ZkafJQnlowT0Lpxjy3HRShoUDKfhvTKMyvaPnmM= Subject key identifier: 86:ED:07:EC:BD:73:CD:D2:FE:98:AF:55:7A:AC:00:32:8F:28:80:E1 Certificate issuer: /CN=3c7535f4-d3f1-4e7f-b379-0835e02fb280 Certificate serial: 010D0C9F4328584F4973AEA5586EBD75E20E74C0 Authority key identifier: 6A:75:98:EE:10:F6:3C:A4:73:F2:97:8B:E2:08:9A:00:F0:E2:DA:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3c7535f4-d3f1-4e7f-b379-0835e02fb280.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3c7535f4-d3f1-4e7f-b379-0835e02fb280/fb9f7f15-6477-3f7a-b6fd-fb663e418131.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 393224 IP address blocks: 23.128.98.0/24 maxlen: 24 2620:137:e001::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3c7535f4-d3f1-4e7f-b379-0835e02fb280/3c7535f4-d3f1-4e7f-b379-0835e02fb280.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3c7535f4-d3f1-4e7f-b379-0835e02fb280/3c7535f4-d3f1-4e7f-b379-0835e02fb280.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3c7535f4-d3f1-4e7f-b379-0835e02fb280.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:ae:a5:58:6e:bd:75:e2:0e:74:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c7535f4-d3f1-4e7f-b379-0835e02fb280 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=1e758bb1-be83-43ce-8430-e2e4d9e891d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:1a:da:b0:cb:41:a1:95:5e:da:49:78:d2:7c: 4d:fd:3f:7a:cb:a0:53:46:44:13:23:7f:29:ed:ef: 7b:90:d2:08:f6:f9:35:4d:ec:60:5d:7c:fb:50:89: b1:40:1f:08:7b:94:a1:91:c9:5c:3e:51:d0:2c:1d: 83:73:91:a7:ac:b0:3b:a0:bb:6a:31:9c:e6:e1:e4: 54:30:73:d5:8d:8f:5d:d6:f8:67:eb:48:f2:bb:1d: 46:cf:24:ff:84:a6:4b:05:4a:54:a8:4e:8b:72:bf: 2e:13:4b:00:82:fc:92:07:eb:98:ba:9e:7b:84:4f: 74:34:cb:4d:bb:79:00:d6:f3:f8:99:14:21:ed:d0: 6f:e4:fc:2d:ec:0d:b8:60:5b:6f:59:c8:7d:b0:17: e3:9d:af:ae:19:90:6c:e7:93:a0:a5:87:70:85:ac: 99:96:59:f2:50:b8:15:bf:1c:26:e1:d3:4a:89:09: 42:cf:57:1f:59:e3:34:b6:86:11:4d:ef:fb:01:da: 47:23:b7:8c:8a:a5:cd:c0:66:99:6d:1c:cf:32:46: ae:fc:40:66:b6:6f:51:8b:bd:c6:ae:1c:6e:ec:db: 9a:e3:22:3e:66:a9:43:e9:40:0c:ae:51:7b:db:be: e6:f9:ca:5c:6d:e2:a7:26:00:de:8f:fc:ce:e1:52: 9a:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:ED:07:EC:BD:73:CD:D2:FE:98:AF:55:7A:AC:00:32:8F:28:80:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3c7535f4-d3f1-4e7f-b379-0835e02fb280/fb9f7f15-6477-3f7a-b6fd-fb663e418131.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3c7535f4-d3f1-4e7f-b379-0835e02fb280/3c7535f4-d3f1-4e7f-b379-0835e02fb280.crl X509v3 Authority Key Identifier: keyid:6A:75:98:EE:10:F6:3C:A4:73:F2:97:8B:E2:08:9A:00:F0:E2:DA:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3c7535f4-d3f1-4e7f-b379-0835e02fb280.cer sbgp-ipAddrBlock: critical IPv4: 23.128.98.0/24 IPv6: 2620:137:e001::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:b0:94:b1:40:db:cb:47:18:c9:ef:5b:f6:dc:b0:d7:ab:28: 17:5d:d9:33:81:d1:ad:2d:7e:f2:a1:5e:50:d1:ad:ad:d1:39: d7:74:12:80:35:c6:db:2c:bf:d9:c5:e8:4e:83:c1:34:3e:10: 7d:94:6f:fd:6e:7c:4c:78:9f:85:4e:e2:61:b6:27:48:18:84: e7:64:aa:c7:6f:c9:02:3b:57:79:ed:2b:88:9c:7e:e7:2e:d2: af:df:4c:cd:7d:5a:a0:a0:6d:f7:b3:27:d8:58:37:70:70:f6: ce:f7:11:d8:0b:ab:b0:d5:80:c7:62:75:3e:98:ff:81:ce:4a: b4:d9:0e:64:78:c1:7c:dc:64:07:cd:88:4a:b0:a6:9d:5a:7d: 70:7f:38:4a:a5:be:e0:56:12:5a:b5:f5:67:a5:30:5a:e2:3d: 6c:2f:60:6e:7a:06:7c:fa:f1:44:30:ea:71:75:19:55:d7:9f: 20:6c:5e:1d:cb:c1:16:de:a7:e5:de:d2:91:33:2f:e2:19:96: 48:62:79:c0:26:62:24:a7:ad:b9:f4:ac:d4:59:0c:62:7a:a2: a2:96:88:af:ec:3f:33:ff:a3:e6:b6:bf:d1:ca:58:62:89:51: 49:46:dc:99:db:da:a0:f4:53:2b:2e:f1:a1:ba:8c:ca:a3:b0: 29:8a:32:91 -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWE9Jc66lWG69deIOdMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M3NTM1ZjQtZDNmMS00ZTdmLWIzNzktMDgzNWUwMmZi MjgwMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MWU3NThiYjEtYmU4My00M2NlLTg0MzAtZTJlNGQ5ZTg5MWQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkxrasMtBoZVe2kl40nxN/T96y6BTRkQTI38p 7e97kNII9vk1TexgXXz7UImxQB8Ie5ShkclcPlHQLB2Dc5GnrLA7oLtqMZzm4eRU MHPVjY9d1vhn60jyux1GzyT/hKZLBUpUqE6Lcr8uE0sAgvySB+uYup57hE90NMtN u3kA1vP4mRQh7dBv5Pwt7A24YFtvWch9sBfjna+uGZBs55OgpYdwhayZllnyULgV vxwm4dNKiQlCz1cfWeM0toYRTe/7AdpHI7eMiqXNwGaZbRzPMkau/EBmtm9Ri73G rhxu7Nua4yI+ZqlD6UAMrlF7277m+cpcbeKnJgDej/zO4VKaaQIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFIbtB+y9c83S/pivVXqsADKPKIDhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zYzc1 MzVmNC1kM2YxLTRlN2YtYjM3OS0wODM1ZTAyZmIyODAvZmI5ZjdmMTUtNjQ3Ny0z ZjdhLWI2ZmQtZmI2NjNlNDE4MTMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2M3NTM1ZjQtZDNmMS00ZTdmLWIz NzktMDgzNWUwMmZiMjgwLzNjNzUzNWY0LWQzZjEtNGU3Zi1iMzc5LTA4MzVlMDJm YjI4MC5jcmwwHwYDVR0jBBgwFoAUanWY7hD2PKRz8peL4giaAPDi2ocwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8zYzc1MzVmNC1kM2YxLTRlN2YtYjM3OS0wODM1 ZTAyZmIyODAuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAF4BiMA8E AgACMAkDBwAmIAE34AEwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAi7CUsUDby0cYye9b9tyw16soF13ZM4HR rS1+8qFeUNGtrdE513QSgDXG2yy/2cXoToPBND4QfZRv/W58THifhU7iYbYnSBiE 52Sqx2/JAjtXee0riJx+5y7Sr99MzX1aoKBt97Mn2Fg3cHD2zvcR2AursNWAx2J1 Ppj/gc5KtNkOZHjBfNxkB82ISrCmnVp9cH84SqW+4FYSWrX1Z6UwWuI9bC9gbnoG fPrxRDDqcXUZVdefIGxeHcvBFt6n5d7SkTMv4hmWSGJ5wCZiJKetufSs1FkMYnqi opaIr+w/M/+j5ra/0cpYYolRSUbcmdvaoPRTKy7xobqMyqOwKYoykQ== -----END CERTIFICATE-----Generated at Sun Sep 27 12:14:09 2026 by rpki-client