$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12/3ecd089d-d78a-3b0b-ae0f-937b28f4e990.roa File: 3ecd089d-d78a-3b0b-ae0f-937b28f4e990.roa (raw, json) Hash identifier: KrkjZAYuCUq1AOVx1nhZR6c27bbU+9IYB+R5xwK9LAQ= Subject key identifier: 28:0D:B3:DF:8A:1E:B1:1C:35:31:F4:60:0C:6F:D5:92:FA:9B:DE:BA Certificate issuer: /CN=3eb60253-f02d-4723-999f-e2e3e0fd9b12 Certificate serial: 010D0C9F4328584EF87CC06A47DFB0FE424E9440 Authority key identifier: F6:29:BD:F8:D6:50:CA:43:85:31:05:27:81:20:63:48:3A:4A:58:5B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12/3ecd089d-d78a-3b0b-ae0f-937b28f4e990.roa Signing time: Thu 27 Aug 2026 01:00:12 +0000 ROA not before: Thu 27 Aug 2026 01:00:12 +0000 ROA not after: Wed 25 Nov 2026 02:00:12 +0000 asID: 6977 IP address blocks: 23.188.16.0/24 maxlen: 24 2602:fc4b::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12/3eb60253-f02d-4723-999f-e2e3e0fd9b12.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12/3eb60253-f02d-4723-999f-e2e3e0fd9b12.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f8:7c:c0:6a:47:df:b0:fe:42:4e:94:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3eb60253-f02d-4723-999f-e2e3e0fd9b12 Validity Not Before: Aug 27 01:00:12 2026 GMT Not After : Nov 25 02:00:12 2026 GMT Subject: CN=9c7dbcec-67e3-4615-94d4-25d0dd80d89d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:8a:ae:9a:d1:4e:85:35:72:c6:de:29:3c:fd: 6b:08:de:97:43:9c:00:3d:b3:87:f9:9c:cc:6d:5c: 35:ba:ad:a2:cf:a8:9b:e4:d3:73:25:36:cd:5c:79: 60:62:1e:69:dc:07:5c:7e:b8:89:9a:d5:14:22:7a: e7:34:0b:5d:4b:62:c0:c4:8d:46:bf:6d:53:64:f8: 2a:31:e0:33:bd:f0:8a:e6:13:12:b3:5d:b3:3e:34: c2:c2:88:3a:e3:a8:be:73:bb:f5:a7:bf:d3:f0:9c: f0:17:9f:79:03:ca:bb:73:0c:da:fd:82:85:13:be: ca:04:c7:0c:83:4f:43:8c:24:38:8e:1b:4d:19:b7: a2:e2:8c:85:6b:73:dd:c9:82:ce:f6:9b:15:68:a6: 2e:f2:11:46:a4:d9:e2:f6:ac:f9:83:a3:db:a4:53: 57:5a:41:3f:da:f0:f8:86:bd:c7:5b:09:62:54:c7: 0d:42:32:21:e8:c4:81:4b:54:b9:e7:ef:04:3f:d2: da:85:66:2c:b1:10:0b:f4:f9:9f:01:1c:33:a3:7e: 61:c5:67:dd:75:6d:c4:43:6d:0e:63:6e:47:21:df: db:3f:8b:01:f3:f5:d3:6c:61:ef:03:2f:98:fa:16: f5:b5:cf:0f:b5:e5:6d:3c:f8:70:05:cb:88:4a:25: 83:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:0D:B3:DF:8A:1E:B1:1C:35:31:F4:60:0C:6F:D5:92:FA:9B:DE:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12/3ecd089d-d78a-3b0b-ae0f-937b28f4e990.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12/3eb60253-f02d-4723-999f-e2e3e0fd9b12.crl X509v3 Authority Key Identifier: keyid:F6:29:BD:F8:D6:50:CA:43:85:31:05:27:81:20:63:48:3A:4A:58:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3eb60253-f02d-4723-999f-e2e3e0fd9b12.cer sbgp-ipAddrBlock: critical IPv4: 23.188.16.0/24 IPv6: 2602:fc4b::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:17:23:46:a7:df:35:34:62:e4:83:48:1e:74:43:bc:47:e0: f6:90:b6:7d:cc:fc:3b:34:f5:c0:0f:e4:e5:eb:58:5f:6a:13: 0d:d5:c3:c6:67:ca:08:9c:bc:c2:a4:0b:ad:3d:94:d8:f4:b0: f7:67:62:2f:4b:e9:9c:f5:4f:28:7f:8b:04:57:2b:92:c0:62: 0a:b2:21:c9:73:3c:17:b4:b4:d7:c9:7b:b3:5f:a6:45:d8:d2: 52:1a:19:25:59:c4:3d:4f:a8:43:c4:97:74:54:7d:3f:12:1d: 19:c1:a7:7f:c2:97:50:73:66:c3:a4:59:61:d9:90:c7:10:f4: 2d:85:24:42:3c:1f:7b:75:e6:22:e2:93:23:d6:ca:24:53:31: 96:b1:ff:0d:8c:50:26:cf:16:14:d0:81:74:19:8b:1d:7a:59: 05:38:1e:a3:3c:fa:5a:03:5d:36:d7:5a:4f:93:27:7e:bc:53: bb:c5:c7:75:94:81:45:ee:db:a8:0d:b2:30:e5:c4:a3:1d:b3: ad:90:8e:a5:85:d7:39:2c:ee:5b:f6:d5:55:1c:61:4d:b7:66: 02:b4:b0:41:55:33:88:d7:9a:78:13:f5:1d:87:a6:bd:37:31: 05:ab:08:b9:74:74:89:85:47:5b:de:2d:9c:d2:c7:a7:0d:5f: 79:b3:39:3b -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE74fMBqR9+w/kJOlEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2ViNjAyNTMtZjAyZC00NzIzLTk5OWYtZTJlM2UwZmQ5 YjEyMB4XDTI2MDgyNzAxMDAxMloXDTI2MTEyNTAyMDAxMlowLzEtMCsGA1UEAxMk OWM3ZGJjZWMtNjdlMy00NjE1LTk0ZDQtMjVkMGRkODBkODlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmoqumtFOhTVyxt4pPP1rCN6XQ5wAPbOH+ZzM bVw1uq2iz6ib5NNzJTbNXHlgYh5p3AdcfriJmtUUInrnNAtdS2LAxI1Gv21TZPgq MeAzvfCK5hMSs12zPjTCwog646i+c7v1p7/T8JzwF595A8q7cwza/YKFE77KBMcM g09DjCQ4jhtNGbei4oyFa3PdyYLO9psVaKYu8hFGpNni9qz5g6PbpFNXWkE/2vD4 hr3HWwliVMcNQjIh6MSBS1S55+8EP9LahWYssRAL9PmfARwzo35hxWfddW3EQ20O Y25HId/bP4sB8/XTbGHvAy+Y+hb1tc8PteVtPPhwBcuISiWD2QIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFCgNs9+KHrEcNTH0YAxv1ZL6m966MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zZWI2 MDI1My1mMDJkLTQ3MjMtOTk5Zi1lMmUzZTBmZDliMTIvM2VjZDA4OWQtZDc4YS0z YjBiLWFlMGYtOTM3YjI4ZjRlOTkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvM2ViNjAyNTMtZjAyZC00NzIzLTk5 OWYtZTJlM2UwZmQ5YjEyLzNlYjYwMjUzLWYwMmQtNDcyMy05OTlmLWUyZTNlMGZk OWIxMi5jcmwwHwYDVR0jBBgwFoAU9im9+NZQykOFMQUngSBjSDpKWFswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zZWI2MDI1My1mMDJkLTQ3MjMtOTk5Zi1lMmUz ZTBmZDliMTIuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF7wQMA4E AgACMAgDBgQmAvxLADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB+FyNGp981NGLkg0gedEO8R+D2kLZ9zPw7 NPXAD+Tl61hfahMN1cPGZ8oInLzCpAutPZTY9LD3Z2IvS+mc9U8of4sEVyuSwGIK siHJczwXtLTXyXuzX6ZF2NJSGhklWcQ9T6hDxJd0VH0/Eh0Zwad/wpdQc2bDpFlh 2ZDHEPQthSRCPB97deYi4pMj1sokUzGWsf8NjFAmzxYU0IF0GYsdelkFOB6jPPpa A10211pPkyd+vFO7xcd1lIFF7tuoDbIw5cSjHbOtkI6lhdc5LO5b9tVVHGFNt2YC tLBBVTOI15p4E/Udh6a9NzEFqwi5dHSJhUdb3i2c0senDV95szk7 -----END CERTIFICATE-----Generated at Thu Sep 10 20:28:46 2026 by rpki-client