$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12/3ecd089d-d78a-3b0b-ae0f-937b28f4e990.roa File: 3ecd089d-d78a-3b0b-ae0f-937b28f4e990.roa (raw, json) Hash identifier: o0fc/rYq3vwvf82TEtc9v/Zdei7jY4mEicbTpfK5gaE= Subject key identifier: 34:91:89:45:69:49:FD:35:BE:0B:64:E0:81:6E:F3:0A:CB:6A:9C:1B Certificate issuer: /CN=3eb60253-f02d-4723-999f-e2e3e0fd9b12 Certificate serial: 010D0C9F4328584F9BCDC2AAFE619A796099A300 Authority key identifier: F6:29:BD:F8:D6:50:CA:43:85:31:05:27:81:20:63:48:3A:4A:58:5B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12/3ecd089d-d78a-3b0b-ae0f-937b28f4e990.roa Signing time: Sat 24 Oct 2026 13:00:12 +0000 ROA not before: Sat 24 Oct 2026 13:00:12 +0000 ROA not after: Fri 22 Jan 2027 14:00:12 +0000 asID: 6977 IP address blocks: 23.188.16.0/24 maxlen: 24 2602:fc4b::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12/3eb60253-f02d-4723-999f-e2e3e0fd9b12.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12/3eb60253-f02d-4723-999f-e2e3e0fd9b12.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 29 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:9b:cd:c2:aa:fe:61:9a:79:60:99:a3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3eb60253-f02d-4723-999f-e2e3e0fd9b12 Validity Not Before: Oct 24 13:00:12 2026 GMT Not After : Jan 22 14:00:12 2027 GMT Subject: CN=32997948-3952-4600-a239-e9eb3d65fc2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:c0:3e:12:dc:9c:20:c3:2b:77:e8:da:5b:51: 16:03:49:53:a8:82:17:67:5f:b6:87:9a:6a:97:7b: b6:a1:95:d8:e2:04:59:46:1c:97:2b:03:14:c2:70: e3:43:f8:6b:d9:bd:36:ed:ae:47:fb:47:1b:5a:af: 91:4e:d6:e9:35:62:df:55:8f:30:0d:f3:09:27:73: 2e:c4:4a:99:34:58:13:92:ab:53:c2:7b:cc:03:c8: 49:ca:f2:90:e3:e7:2d:0b:2d:94:2f:19:34:85:84: d3:93:ab:89:b4:f3:d7:89:59:79:e4:d8:b1:33:e5: 97:1a:5b:07:bc:7e:c9:8c:6c:c2:1d:ec:94:c1:bb: 16:53:d9:9d:9e:47:f0:06:0e:b6:49:6f:16:b9:81: 4e:c7:85:db:47:59:03:c0:62:53:42:c5:30:e8:01: f7:18:1e:cf:7d:75:16:c0:33:b1:3e:a2:e0:40:f9: f5:40:57:16:2b:77:bd:13:ea:85:4a:4f:a9:a0:f7: ec:2b:b9:c3:92:5c:8c:db:9b:76:a1:ee:8f:b2:51: 8d:52:bd:53:19:d2:e2:aa:26:72:4d:ad:9b:bd:d0: a7:62:81:62:fc:ea:f4:5d:dd:6a:6b:8c:06:f5:e2: 19:03:04:7d:7f:c2:47:cd:e6:db:c1:1c:5e:0d:2f: 4c:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:91:89:45:69:49:FD:35:BE:0B:64:E0:81:6E:F3:0A:CB:6A:9C:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12/3ecd089d-d78a-3b0b-ae0f-937b28f4e990.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12/3eb60253-f02d-4723-999f-e2e3e0fd9b12.crl X509v3 Authority Key Identifier: keyid:F6:29:BD:F8:D6:50:CA:43:85:31:05:27:81:20:63:48:3A:4A:58:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12.cer sbgp-ipAddrBlock: critical IPv4: 23.188.16.0/24 IPv6: 2602:fc4b::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:40:92:de:7c:8c:db:0a:c6:a8:da:7d:3b:6e:45:34:85:8d: f0:9d:6b:ef:0a:e8:90:f1:63:28:0e:8c:f0:df:2e:72:4f:7e: c3:25:61:b1:d3:7f:4b:f0:36:89:9b:bb:68:75:2c:89:4f:e4: c5:a5:d6:66:08:18:42:ca:69:16:cc:87:ae:1a:1f:db:0f:81: 6a:bd:09:98:c7:b5:8b:b4:22:a0:a7:48:d5:37:51:65:7f:4f: 88:98:9d:95:89:c2:da:e3:22:3b:03:ca:df:71:08:5a:be:d5: b7:e1:fe:03:e1:70:4d:58:d8:25:1c:6d:7b:7e:3a:fe:eb:7b: 00:b7:a6:73:b3:f8:46:b2:10:d5:a4:08:06:b8:14:e2:ed:73: f7:8a:71:b8:2d:b6:51:f1:38:74:7a:31:82:67:c8:ca:a0:5c: 91:16:23:6c:11:c3:86:bd:2c:da:b9:e4:f5:ad:ca:45:61:0d: ab:3c:7d:f2:4c:00:91:55:8b:21:28:f1:83:01:e6:1e:a8:b6: f3:e0:4e:1a:11:f6:7b:93:d7:6f:2b:8f:71:a8:9a:a2:86:77: 93:87:dc:b6:7a:0a:b4:a0:ea:f9:ca:16:2b:07:79:17:b2:36: d5:05:b1:7c:74:1b:07:59:82:1c:e6:91:9d:e3:5a:41:62:d0: da:94:4e:db -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE+bzcKq/mGaeWCZowAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2ViNjAyNTMtZjAyZC00NzIzLTk5OWYtZTJlM2UwZmQ5 YjEyMB4XDTI2MTAyNDEzMDAxMloXDTI3MDEyMjE0MDAxMlowLzEtMCsGA1UEAxMk MzI5OTc5NDgtMzk1Mi00NjAwLWEyMzktZTllYjNkNjVmYzJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmMA+EtycIMMrd+jaW1EWA0lTqIIXZ1+2h5pq l3u2oZXY4gRZRhyXKwMUwnDjQ/hr2b027a5H+0cbWq+RTtbpNWLfVY8wDfMJJ3Mu xEqZNFgTkqtTwnvMA8hJyvKQ4+ctCy2ULxk0hYTTk6uJtPPXiVl55NixM+WXGlsH vH7JjGzCHeyUwbsWU9mdnkfwBg62SW8WuYFOx4XbR1kDwGJTQsUw6AH3GB7PfXUW wDOxPqLgQPn1QFcWK3e9E+qFSk+poPfsK7nDklyM25t2oe6PslGNUr1TGdLiqiZy Ta2bvdCnYoFi/Or0Xd1qa4wG9eIZAwR9f8JHzebbwRxeDS9MGwIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFDSRiUVpSf01vgtk4IFu8wrLapwbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zZWI2 MDI1My1mMDJkLTQ3MjMtOTk5Zi1lMmUzZTBmZDliMTIvM2VjZDA4OWQtZDc4YS0z YjBiLWFlMGYtOTM3YjI4ZjRlOTkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvM2ViNjAyNTMtZjAyZC00NzIzLTk5 OWYtZTJlM2UwZmQ5YjEyLzNlYjYwMjUzLWYwMmQtNDcyMy05OTlmLWUyZTNlMGZk OWIxMi5jcmwwHwYDVR0jBBgwFoAU9im9+NZQykOFMQUngSBjSDpKWFswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zZWI2MDI1My1mMDJkLTQ3MjMtOTk5Zi1lMmUz ZTBmZDliMTIuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF7wQMA4E AgACMAgDBgQmAvxLADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA9QJLefIzbCsao2n07bkU0hY3wnWvvCuiQ 8WMoDozw3y5yT37DJWGx039L8DaJm7todSyJT+TFpdZmCBhCymkWzIeuGh/bD4Fq vQmYx7WLtCKgp0jVN1Flf0+ImJ2VicLa4yI7A8rfcQhavtW34f4D4XBNWNglHG17 fjr+63sAt6Zzs/hGshDVpAgGuBTi7XP3inG4LbZR8Th0ejGCZ8jKoFyRFiNsEcOG vSzaueT1rcpFYQ2rPH3yTACRVYshKPGDAeYeqLbz4E4aEfZ7k9dvK49xqJqihneT h9y2egq0oOr5yhYrB3kXsjbVBbF8dBsHWYIc5pGd41pBYtDalE7b -----END CERTIFICATE-----Generated at Tue Oct 27 23:55:36 2026 by rpki-client