$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/6886b970-4f3a-34d3-ad6f-c471821f5b32.roa File: 6886b970-4f3a-34d3-ad6f-c471821f5b32.roa (raw, json) Hash identifier: Y90Hn7e3+TqhaQo5Vv6r7K9ql3RXPEmU5o0ruhH4Z2c= Subject key identifier: 27:8D:04:E7:F0:70:67:24:FB:21:F8:09:B9:F2:0E:BC:AA:76:51:9D Certificate issuer: /CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Certificate serial: 010D0C9F4328584F6DBD6A93D9FF529A493B4780 Authority key identifier: 92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/6886b970-4f3a-34d3-ad6f-c471821f5b32.roa Signing time: Thu 08 Oct 2026 01:00:11 +0000 ROA not before: Thu 08 Oct 2026 01:00:11 +0000 ROA not after: Wed 06 Jan 2027 02:00:11 +0000 asID: 395954 IP address blocks: 23.83.136.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 16 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:6d:bd:6a:93:d9:ff:52:9a:49:3b:47:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7e42e3a9-dd62-414b-a1b1-c1b2d329997d Validity Not Before: Oct 8 01:00:11 2026 GMT Not After : Jan 6 02:00:11 2027 GMT Subject: CN=9b1dcafa-ee78-4d9a-b4e7-0f806dac08ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:d8:0d:32:3a:55:2d:34:14:96:06:7f:aa:8b: fb:24:56:81:1d:73:1d:17:62:8d:97:4b:53:a3:8e: ab:75:79:ad:9d:fc:d3:c7:31:1a:97:58:3a:0a:28: 5a:1c:a5:1a:1d:70:aa:e0:39:bf:09:a0:64:1e:04: bd:2d:42:36:9f:76:96:cc:b0:93:a2:1e:79:ca:27: e9:3e:f5:2f:2c:cf:d8:97:31:25:39:7e:24:78:93: 7e:59:ac:62:f5:4a:6d:1d:6d:49:b4:5f:86:3e:f1: 68:06:22:a8:70:51:bf:df:72:e1:62:1f:38:92:fb: 2e:09:83:d9:c1:55:99:ba:09:f9:15:df:93:80:e5: 0a:1c:a8:dd:14:a0:c7:e1:9b:ec:a1:ee:59:18:c9: a2:02:6d:9a:a8:d4:3a:66:25:66:79:ac:b6:e5:bf: e0:1b:0f:c8:c4:eb:95:f3:db:14:6c:88:df:dc:84: 3f:cf:97:eb:ed:b5:ad:e5:a9:26:55:4d:32:57:41: af:38:f8:36:cc:b2:c2:3d:d2:75:d2:94:f9:60:9c: d5:ef:90:77:f8:e9:55:de:b5:4e:31:84:9d:e1:2e: a2:2e:0e:30:56:21:d5:22:f3:12:94:4e:e3:07:fe: 3e:82:96:ce:fb:db:59:e4:58:8a:d1:ac:df:73:95: 15:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:8D:04:E7:F0:70:67:24:FB:21:F8:09:B9:F2:0E:BC:AA:76:51:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/6886b970-4f3a-34d3-ad6f-c471821f5b32.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.crl X509v3 Authority Key Identifier: keyid:92:AB:4D:E4:C6:12:AB:F1:F2:17:B7:45:9C:7C:39:D6:7A:27:ED:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7e42e3a9-dd62-414b-a1b1-c1b2d329997d.cer sbgp-ipAddrBlock: critical IPv4: 23.83.136.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a9:49:1d:fb:fb:45:32:a4:b6:b4:1f:07:cd:26:c3:30:43:1c: fc:55:cb:78:a2:88:68:3b:7f:a7:8b:c9:c8:98:a3:73:75:40: e1:41:51:5d:7e:40:b1:39:66:9b:7d:a4:44:a5:a7:0c:a3:b7: e4:8e:80:b2:31:01:ae:da:ff:89:4c:ec:79:f7:4d:19:ca:bd: 1f:95:34:ad:b7:cf:4a:b0:83:97:2d:99:8c:fe:00:34:a3:e5: e4:7e:9e:4b:2f:1d:e1:b6:07:c1:e4:0d:6b:4e:20:1d:ca:ef: b8:a5:aa:a7:80:fa:88:a1:65:88:45:ca:d8:45:25:93:e1:36: cd:e5:57:c0:b2:7a:8f:e6:c6:c2:d9:a0:88:f8:41:b0:64:8c: ef:a2:b2:ab:98:80:ed:f1:42:c7:9d:ad:d0:b8:ab:2d:9c:33: e1:32:eb:0f:5d:dd:83:e0:8f:85:6e:a5:cc:bc:f0:22:2b:83: 44:d1:d9:2e:14:e0:86:24:4c:cf:de:48:d5:ae:00:d1:92:e0: 65:72:a9:18:99:4f:1a:0b:e6:3f:d6:e7:59:50:5b:77:00:65: 5e:93:93:49:6a:ef:78:9d:79:14:de:19:25:f1:94:87:1f:04: 0f:d3:78:16:46:e6:a9:69:ee:db:4b:66:8b:60:44:eb:9b:22: 6d:f4:22:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9tvWqT2f9Smkk7R4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2U0MmUzYTktZGQ2Mi00MTRiLWExYjEtYzFiMmQzMjk5 OTdkMB4XDTI2MTAwODAxMDAxMVoXDTI3MDEwNjAyMDAxMVowLzEtMCsGA1UEAxMk OWIxZGNhZmEtZWU3OC00ZDlhLWI0ZTctMGY4MDZkYWMwOGFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkNgNMjpVLTQUlgZ/qov7JFaBHXMdF2KNl0tT o46rdXmtnfzTxzEal1g6CihaHKUaHXCq4Dm/CaBkHgS9LUI2n3aWzLCToh55yifp PvUvLM/YlzElOX4keJN+Waxi9UptHW1JtF+GPvFoBiKocFG/33LhYh84kvsuCYPZ wVWZugn5Fd+TgOUKHKjdFKDH4Zvsoe5ZGMmiAm2aqNQ6ZiVmeay25b/gGw/IxOuV 89sUbIjf3IQ/z5fr7bWt5akmVU0yV0GvOPg2zLLCPdJ10pT5YJzV75B3+OlV3rVO MYSd4S6iLg4wViHVIvMSlE7jB/4+gpbO+9tZ5FiK0azfc5UVKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCeNBOfwcGck+yH4CbnyDryqdlGdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQy ZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIyZDMyOTk5N2QvNjg4NmI5NzAtNGYzYS0z NGQzLWFkNmYtYzQ3MTgyMWY1YjMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvN2U0MmUzYTktZGQ2Mi00MTRiLWEx YjEtYzFiMmQzMjk5OTdkLzdlNDJlM2E5LWRkNjItNDE0Yi1hMWIxLWMxYjJkMzI5 OTk3ZC5jcmwwHwYDVR0jBBgwFoAUkqtN5MYSq/HyF7dFnHw51non7XwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy83ZTQyZTNhOS1kZDYyLTQxNGItYTFiMS1jMWIy ZDMyOTk5N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDF1OIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKlJHfv7RTKktrQfB80mwzBDHPxVy3iiiGg7f6eLyciYo3N1QOFBUV1+ QLE5Zpt9pESlpwyjt+SOgLIxAa7a/4lM7Hn3TRnKvR+VNK23z0qwg5ctmYz+ADSj 5eR+nksvHeG2B8HkDWtOIB3K77ilqqeA+oihZYhFythFJZPhNs3lV8Cyeo/mxsLZ oIj4QbBkjO+isquYgO3xQsedrdC4qy2cM+Ey6w9d3YPgj4Vupcy88CIrg0TR2S4U 4IYkTM/eSNWuANGS4GVyqRiZTxoL5j/W51lQW3cAZV6Tk0lq73ideRTeGSXxlIcf BA/TeBZG5qlp7ttLZotgROubIm30IgE= -----END CERTIFICATE-----Generated at Thu Oct 15 02:09:26 2026 by rpki-client