$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec7ea071-9ad8-46c5-97de-de149c4a5a78/2d0718a0-7c15-3300-af7e-f83127e2444a.roa File: 2d0718a0-7c15-3300-af7e-f83127e2444a.roa (raw, json) Hash identifier: sgC+AdloKyzwWHNpPNzysqBCohKC4jiLoBqm/pgan1E= Subject key identifier: DE:B0:EB:93:93:E3:F0:79:FE:BC:AB:2C:08:15:27:E7:7C:FD:75:26 Certificate issuer: /CN=ec7ea071-9ad8-46c5-97de-de149c4a5a78 Certificate serial: 010D0C9F4328584F549D64D876DE5A3846655A80 Authority key identifier: 54:37:C6:D0:49:4F:D4:29:D0:C4:97:3B:92:99:0B:BC:40:6B:C9:CE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec7ea071-9ad8-46c5-97de-de149c4a5a78.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec7ea071-9ad8-46c5-97de-de149c4a5a78/2d0718a0-7c15-3300-af7e-f83127e2444a.roa Signing time: Tue 29 Sep 2026 01:00:12 +0000 ROA not before: Tue 29 Sep 2026 01:00:12 +0000 ROA not after: Mon 28 Dec 2026 02:00:12 +0000 asID: 400893 IP address blocks: 23.153.0.0/24 maxlen: 24 172.82.8.0/22 maxlen: 24 2602:ff2a::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec7ea071-9ad8-46c5-97de-de149c4a5a78/ec7ea071-9ad8-46c5-97de-de149c4a5a78.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec7ea071-9ad8-46c5-97de-de149c4a5a78/ec7ea071-9ad8-46c5-97de-de149c4a5a78.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec7ea071-9ad8-46c5-97de-de149c4a5a78.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:54:9d:64:d8:76:de:5a:38:46:65:5a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ec7ea071-9ad8-46c5-97de-de149c4a5a78 Validity Not Before: Sep 29 01:00:12 2026 GMT Not After : Dec 28 02:00:12 2026 GMT Subject: CN=8fcaeb39-d893-451f-a1cb-b26fcda4438a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:90:6c:ae:d8:b3:76:ff:9f:dd:49:36:20:db: 58:5b:4c:64:a8:c8:98:1b:ff:c1:d9:f3:0c:6e:c0: 94:69:2c:ca:9b:01:c3:5f:6c:41:24:24:29:0e:25: fb:b9:5c:55:25:ab:3b:e7:99:8c:e6:e2:df:40:3d: 8e:ed:05:35:5a:fa:43:24:ee:53:2a:dc:03:58:37: 44:01:4c:6a:d4:3f:be:ac:e3:39:42:50:4a:3e:5c: 0f:9e:16:32:17:d8:af:30:4b:4c:a8:13:71:ef:ea: e0:a8:92:7e:d1:e1:a3:1d:b2:c7:6b:80:97:e0:4a: 64:81:24:08:50:e5:b0:99:76:2d:83:31:df:9e:f5: 54:d5:27:21:47:0f:00:e7:fb:07:80:15:5b:c2:40: 42:f9:b1:fe:d9:56:9f:83:eb:d7:6b:c0:57:b0:ad: 62:a6:ce:b7:68:12:f7:a3:9a:ea:a5:05:b3:5e:5b: e6:e9:f5:15:83:13:d8:15:12:f1:12:42:fb:15:26: d1:e8:ec:44:16:90:7c:21:16:61:56:b0:f7:29:6c: fd:bc:f3:ca:e0:c8:60:2c:d5:f4:2a:c7:15:63:9d: e5:39:4c:52:43:c3:6c:41:2f:5f:af:1a:ca:7c:b4: 6c:3a:01:ce:41:2c:08:a9:de:d4:94:ae:ad:bd:a6: c0:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:B0:EB:93:93:E3:F0:79:FE:BC:AB:2C:08:15:27:E7:7C:FD:75:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec7ea071-9ad8-46c5-97de-de149c4a5a78/2d0718a0-7c15-3300-af7e-f83127e2444a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec7ea071-9ad8-46c5-97de-de149c4a5a78/ec7ea071-9ad8-46c5-97de-de149c4a5a78.crl X509v3 Authority Key Identifier: keyid:54:37:C6:D0:49:4F:D4:29:D0:C4:97:3B:92:99:0B:BC:40:6B:C9:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec7ea071-9ad8-46c5-97de-de149c4a5a78.cer sbgp-ipAddrBlock: critical IPv4: 23.153.0.0/24 172.82.8.0/22 IPv6: 2602:ff2a::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:48:2e:9d:30:9d:24:d8:1d:0b:54:26:03:2f:7c:f1:1c:ff: 3e:85:c0:d2:59:82:e4:6a:c3:ce:47:82:0b:c9:9f:02:0c:01: cc:c1:49:8d:97:32:f2:38:5f:17:94:76:1b:44:9d:e2:84:c1: 2d:07:64:d1:71:74:06:32:c6:01:5d:56:00:45:6e:aa:97:1c: fe:cb:05:12:79:b6:bb:38:d3:f0:0a:1b:8b:05:f8:85:39:dc: f7:5c:ba:8f:7b:64:3a:0d:39:2f:12:76:83:6f:5c:0b:d1:a2: fd:7f:39:57:54:d0:33:2c:7b:03:ba:86:eb:7a:e6:06:01:b4: 70:95:be:78:83:6b:29:c3:73:6e:c5:3b:26:ae:79:fb:ee:49: 29:9c:85:1b:6f:bc:2e:e7:8b:39:cf:28:8f:d5:cd:ef:2a:d0: 29:eb:8d:63:62:4b:28:91:14:cb:d7:5a:f8:96:01:4d:a9:b3: a0:3f:3d:f5:32:09:52:c0:d9:d4:b1:d3:52:5e:3a:44:09:9a: 4d:1d:20:2c:e7:ec:ee:89:8f:1a:42:5b:47:18:02:f4:73:e7: d0:82:0e:21:de:48:35:a8:13:01:03:4c:a6:6d:45:9c:7e:cd: dc:85:ea:1c:b1:03:50:af:20:c6:39:ce:73:5f:1f:f2:49:df: c1:6b:f0:c1 -----BEGIN CERTIFICATE----- MIIGWDCCBUCgAwIBAgIUAQ0Mn0MoWE9UnWTYdt5aOEZlWoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWM3ZWEwNzEtOWFkOC00NmM1LTk3ZGUtZGUxNDljNGE1 YTc4MB4XDTI2MDkyOTAxMDAxMloXDTI2MTIyODAyMDAxMlowLzEtMCsGA1UEAxMk OGZjYWViMzktZDg5My00NTFmLWExY2ItYjI2ZmNkYTQ0MzhhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqJBsrtizdv+f3Uk2INtYW0xkqMiYG//B2fMM bsCUaSzKmwHDX2xBJCQpDiX7uVxVJas755mM5uLfQD2O7QU1WvpDJO5TKtwDWDdE AUxq1D++rOM5QlBKPlwPnhYyF9ivMEtMqBNx7+rgqJJ+0eGjHbLHa4CX4EpkgSQI UOWwmXYtgzHfnvVU1SchRw8A5/sHgBVbwkBC+bH+2Vafg+vXa8BXsK1ips63aBL3 o5rqpQWzXlvm6fUVgxPYFRLxEkL7FSbR6OxEFpB8IRZhVrD3KWz9vPPK4MhgLNX0 KscVY53lOUxSQ8NsQS9frxrKfLRsOgHOQSwIqd7UlK6tvabALwIDAQABo4IDajCC A2YwHQYDVR0OBBYEFN6w65OT4/B5/ryrLAgVJ+d8/XUmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lYzdl YTA3MS05YWQ4LTQ2YzUtOTdkZS1kZTE0OWM0YTVhNzgvMmQwNzE4YTAtN2MxNS0z MzAwLWFmN2UtZjgzMTI3ZTI0NDRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZWM3ZWEwNzEtOWFkOC00NmM1LTk3 ZGUtZGUxNDljNGE1YTc4L2VjN2VhMDcxLTlhZDgtNDZjNS05N2RlLWRlMTQ5YzRh NWE3OC5jcmwwHwYDVR0jBBgwFoAUVDfG0ElP1CnQxJc7kpkLvEBryc4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lYzdlYTA3MS05YWQ4LTQ2YzUtOTdkZS1kZTE0 OWM0YTVhNzguY2VyMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQAF5kAAwQC rFIIMA0EAgACMAcDBQAmAv8qMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAG1ILp0wnSTYHQtUJgMvfPEc/z6F wNJZguRqw85HggvJnwIMAczBSY2XMvI4XxeUdhtEneKEwS0HZNFxdAYyxgFdVgBF bqqXHP7LBRJ5trs40/AKG4sF+IU53Pdcuo97ZDoNOS8SdoNvXAvRov1/OVdU0DMs ewO6hut65gYBtHCVvniDaynDc27FOyauefvuSSmchRtvvC7niznPKI/Vze8q0Cnr jWNiSyiRFMvXWviWAU2ps6A/PfUyCVLA2dSx01JeOkQJmk0dICzn7O6JjxpCW0cY AvRz59CCDiHeSDWoEwEDTKZtRZx+zdyF6hyxA1CvIMY5znNfH/JJ38Fr8ME= -----END CERTIFICATE-----Generated at Sat Oct 10 16:12:34 2026 by rpki-client