$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/aeb681ac-ce83-4588-bbed-2877bf5a43ae/f52dd0c1-e2ba-3806-8f8c-3122911de43f.roa File: f52dd0c1-e2ba-3806-8f8c-3122911de43f.roa (raw, json) Hash identifier: KRmPKnoxJ0oC9d1RpRp4GcD/chXAZXKEbJUIoYiynI0= Subject key identifier: 60:92:66:CC:6A:24:01:71:86:8D:19:1A:B4:4D:62:B2:B3:B8:04:85 Certificate issuer: /CN=aeb681ac-ce83-4588-bbed-2877bf5a43ae Certificate serial: 010D0C9F4328584ED1672C1837F1310012187000 Authority key identifier: E9:49:D7:DF:8A:86:E5:D6:7F:AC:98:03:AE:C2:6F:4B:08:DD:0B:45 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/aeb681ac-ce83-4588-bbed-2877bf5a43ae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/aeb681ac-ce83-4588-bbed-2877bf5a43ae/f52dd0c1-e2ba-3806-8f8c-3122911de43f.roa Signing time: Thu 13 Aug 2026 01:00:11 +0000 ROA not before: Thu 13 Aug 2026 01:00:11 +0000 ROA not after: Wed 11 Nov 2026 02:00:11 +0000 asID: 11990 IP address blocks: 23.168.136.0/24 maxlen: 24 2602:f9bd::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/aeb681ac-ce83-4588-bbed-2877bf5a43ae/aeb681ac-ce83-4588-bbed-2877bf5a43ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/aeb681ac-ce83-4588-bbed-2877bf5a43ae/aeb681ac-ce83-4588-bbed-2877bf5a43ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/aeb681ac-ce83-4588-bbed-2877bf5a43ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d1:67:2c:18:37:f1:31:00:12:18:70:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aeb681ac-ce83-4588-bbed-2877bf5a43ae Validity Not Before: Aug 13 01:00:11 2026 GMT Not After : Nov 11 02:00:11 2026 GMT Subject: CN=977aa655-f474-49f4-b98e-d841a75294ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:fd:28:30:64:c6:36:cb:56:e7:aa:66:96:09: 19:ab:d7:89:8a:29:d4:a1:d9:aa:39:28:8b:bb:cb: e5:f6:36:7f:4f:9b:46:7d:f8:b2:77:b9:c6:a6:98: d3:f0:24:41:7a:e0:47:8b:61:a9:d0:bf:fb:b5:53: 05:7c:ae:26:cb:a7:28:74:b3:b2:38:bd:5f:3a:d5: 8c:19:08:7d:50:ee:c2:04:8c:fb:c9:37:99:9a:41: 00:e2:4a:bc:e5:bc:01:0d:6c:38:fc:ae:3e:f1:4f: a9:32:b4:1c:18:3e:d5:78:e6:ca:81:17:15:1e:0f: 29:4c:21:63:4d:2a:6e:6c:98:cb:f2:89:83:cc:a3: 36:68:20:6a:ab:5b:84:47:4d:21:7c:11:3c:c6:f6: 7f:c2:44:58:ce:91:e2:c8:12:40:14:95:bd:ef:82: dc:a7:c6:1f:20:53:1f:2c:b9:11:c8:ad:a2:64:4e: f0:0d:bb:3f:00:92:3a:53:84:6b:49:76:8b:ad:ac: e2:bd:ab:73:9a:91:33:ed:f0:20:ab:80:ca:ee:51: 95:94:b3:41:18:2a:10:64:ca:53:7c:5b:5a:28:0e: e2:cb:c6:b3:ed:cc:68:47:56:00:b4:cb:fb:b1:32: e3:85:80:94:b3:1c:64:70:b2:b4:db:a9:f6:04:94: 3b:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:92:66:CC:6A:24:01:71:86:8D:19:1A:B4:4D:62:B2:B3:B8:04:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/aeb681ac-ce83-4588-bbed-2877bf5a43ae/f52dd0c1-e2ba-3806-8f8c-3122911de43f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/aeb681ac-ce83-4588-bbed-2877bf5a43ae/aeb681ac-ce83-4588-bbed-2877bf5a43ae.crl X509v3 Authority Key Identifier: keyid:E9:49:D7:DF:8A:86:E5:D6:7F:AC:98:03:AE:C2:6F:4B:08:DD:0B:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/aeb681ac-ce83-4588-bbed-2877bf5a43ae.cer sbgp-ipAddrBlock: critical IPv4: 23.168.136.0/24 IPv6: 2602:f9bd::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:07:1f:91:31:f4:87:5e:36:e8:7b:c7:e2:08:5a:4a:c4:18: d0:a9:ae:f2:a9:da:86:7a:50:fa:f7:04:1a:27:2b:55:88:be: b6:15:89:14:5c:78:c8:f3:9d:ce:07:6b:ad:15:92:4b:15:54: 0b:4d:0e:a9:00:8e:41:13:85:61:ac:c5:3d:da:6c:f3:00:47: 01:3c:4a:15:2b:2a:1e:74:06:d3:b0:63:ff:52:a5:53:b4:d0: a1:92:44:22:c6:74:40:b9:1b:94:90:54:d3:fe:e2:4f:19:74: db:79:87:f2:d9:16:af:bc:90:84:c5:35:c5:a9:c1:1f:b3:c8: 92:77:b5:e3:8a:02:37:c6:10:92:65:3e:24:d3:e7:50:8e:5c: f0:c9:7f:a9:b5:55:3c:50:75:ac:fe:36:ba:7a:a4:6c:d3:06: 0d:de:d6:3f:b5:99:1e:41:8c:83:86:75:c6:9f:4d:5d:60:3c: ad:74:5e:11:55:c5:76:d9:8d:c9:3b:2d:0e:8c:99:e5:5a:50: 08:aa:13:3b:a5:be:79:1d:ae:07:b6:34:c2:d1:49:2e:e9:22: 37:a1:a7:d5:0f:1e:90:ea:34:1b:ec:43:0c:c6:5d:78:22:e4: d9:6a:b5:6d:36:86:5d:bf:31:e9:8d:68:a9:81:fc:11:e1:3d: 92:3f:9d:22 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE7RZywYN/ExABIYcAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWViNjgxYWMtY2U4My00NTg4LWJiZWQtMjg3N2JmNWE0 M2FlMB4XDTI2MDgxMzAxMDAxMVoXDTI2MTExMTAyMDAxMVowLzEtMCsGA1UEAxMk OTc3YWE2NTUtZjQ3NC00OWY0LWI5OGUtZDg0MWE3NTI5NGNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzv0oMGTGNstW56pmlgkZq9eJiinUodmqOSiL u8vl9jZ/T5tGffiyd7nGppjT8CRBeuBHi2Gp0L/7tVMFfK4my6codLOyOL1fOtWM GQh9UO7CBIz7yTeZmkEA4kq85bwBDWw4/K4+8U+pMrQcGD7VeObKgRcVHg8pTCFj TSpubJjL8omDzKM2aCBqq1uER00hfBE8xvZ/wkRYzpHiyBJAFJW974Lcp8YfIFMf LLkRyK2iZE7wDbs/AJI6U4RrSXaLrazivatzmpEz7fAgq4DK7lGVlLNBGCoQZMpT fFtaKA7iy8az7cxoR1YAtMv7sTLjhYCUsxxkcLK026n2BJQ7vQIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFGCSZsxqJAFxho0ZGrRNYrKzuASFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9hZWI2 ODFhYy1jZTgzLTQ1ODgtYmJlZC0yODc3YmY1YTQzYWUvZjUyZGQwYzEtZTJiYS0z ODA2LThmOGMtMzEyMjkxMWRlNDNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYWViNjgxYWMtY2U4My00NTg4LWJi ZWQtMjg3N2JmNWE0M2FlL2FlYjY4MWFjLWNlODMtNDU4OC1iYmVkLTI4NzdiZjVh NDNhZS5jcmwwHwYDVR0jBBgwFoAU6UnX34qG5dZ/rJgDrsJvSwjdC0UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9hZWI2ODFhYy1jZTgzLTQ1ODgtYmJlZC0yODc3 YmY1YTQzYWUuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF6iIMA4E AgACMAgDBgAmAvm9ADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBdBx+RMfSHXjboe8fiCFpKxBjQqa7yqdqG elD69wQaJytViL62FYkUXHjI853OB2utFZJLFVQLTQ6pAI5BE4VhrMU92mzzAEcB PEoVKyoedAbTsGP/UqVTtNChkkQixnRAuRuUkFTT/uJPGXTbeYfy2RavvJCExTXF qcEfs8iSd7XjigI3xhCSZT4k0+dQjlzwyX+ptVU8UHWs/ja6eqRs0wYN3tY/tZke QYyDhnXGn01dYDytdF4RVcV22Y3JOy0OjJnlWlAIqhM7pb55Ha4HtjTC0Uku6SI3 oafVDx6Q6jQb7EMMxl14IuTZarVtNoZdvzHpjWipgfwR4T2SP50i -----END CERTIFICATE-----Generated at Tue Sep 29 17:34:15 2026 by rpki-client