$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/103e2c68-3cdd-47e4-bce0-07faaeba78e1/73e60fce-48ad-3cff-baaa-9c6c1d1d470d.roa File: 73e60fce-48ad-3cff-baaa-9c6c1d1d470d.roa (raw, json) Hash identifier: 8A1nuXlxXZ/dcZUOvlmJlMPVB6dX5bsbroZWXFwQ1x8= Subject key identifier: C1:BE:78:E2:A0:75:00:3D:D8:5B:F3:0A:CF:7E:59:24:E8:56:44:30 Certificate issuer: /CN=103e2c68-3cdd-47e4-bce0-07faaeba78e1 Certificate serial: 010D0C9F4328584F6F230B465BE9133D4B7661D0 Authority key identifier: 90:4D:9C:1B:E6:96:A5:67:07:28:6B:32:12:80:86:30:8C:AB:D5:2D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/103e2c68-3cdd-47e4-bce0-07faaeba78e1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/103e2c68-3cdd-47e4-bce0-07faaeba78e1/73e60fce-48ad-3cff-baaa-9c6c1d1d470d.roa Signing time: Thu 08 Oct 2026 13:00:12 +0000 ROA not before: Thu 08 Oct 2026 13:00:12 +0000 ROA not after: Wed 06 Jan 2027 14:00:12 +0000 asID: 400154 IP address blocks: 23.128.168.0/24 maxlen: 24 2606:8cc0::/32 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/103e2c68-3cdd-47e4-bce0-07faaeba78e1/103e2c68-3cdd-47e4-bce0-07faaeba78e1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/103e2c68-3cdd-47e4-bce0-07faaeba78e1/103e2c68-3cdd-47e4-bce0-07faaeba78e1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/103e2c68-3cdd-47e4-bce0-07faaeba78e1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 22 Oct 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:6f:23:0b:46:5b:e9:13:3d:4b:76:61:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=103e2c68-3cdd-47e4-bce0-07faaeba78e1 Validity Not Before: Oct 8 13:00:12 2026 GMT Not After : Jan 6 14:00:12 2027 GMT Subject: CN=22428dc4-bfc2-4e20-a554-05e928437c11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:83:78:d3:b7:09:5e:35:c5:e1:84:75:b2:80: a0:b0:f0:e1:79:04:3b:53:15:32:18:d5:3b:2d:30: 0f:b7:fc:4b:e8:c3:8c:fb:29:d5:d3:d7:05:93:60: d3:a2:8e:4d:67:af:6c:9a:19:81:72:6f:99:c3:79: 8a:d4:23:11:d8:17:e8:7e:6f:40:6f:68:d8:6e:08: 16:c6:66:d3:97:82:3b:b6:8b:f4:bd:33:4e:23:4a: 15:bd:42:0c:b3:bb:47:f8:b8:36:92:85:00:04:d1: b4:f0:05:84:d0:7a:f8:a1:e2:24:86:5d:d7:40:d1: 17:bd:3d:16:23:a1:f2:44:5c:3a:a3:67:ef:06:95: 81:a5:6d:b5:4d:78:d5:c0:c3:a0:58:46:d7:f2:bf: 11:b6:3d:5f:51:7e:c8:00:a3:3b:cf:cf:88:3f:70: bf:19:7d:cf:93:06:80:2c:34:80:33:98:f3:5f:c3: b8:95:f5:59:31:36:e2:48:69:0d:d2:49:d4:e9:04: 0d:9c:d2:49:7b:e0:5a:53:12:9f:d1:4c:80:3a:8a: 87:f7:b9:d9:bf:f1:41:23:23:1e:95:14:f1:83:1a: f0:46:a9:a2:ed:fa:6f:8f:57:43:1c:19:5b:d3:b6: 08:1c:9d:54:3e:64:73:9d:68:3f:96:27:17:b0:ce: 84:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:BE:78:E2:A0:75:00:3D:D8:5B:F3:0A:CF:7E:59:24:E8:56:44:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/103e2c68-3cdd-47e4-bce0-07faaeba78e1/73e60fce-48ad-3cff-baaa-9c6c1d1d470d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/103e2c68-3cdd-47e4-bce0-07faaeba78e1/103e2c68-3cdd-47e4-bce0-07faaeba78e1.crl X509v3 Authority Key Identifier: keyid:90:4D:9C:1B:E6:96:A5:67:07:28:6B:32:12:80:86:30:8C:AB:D5:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/103e2c68-3cdd-47e4-bce0-07faaeba78e1.cer sbgp-ipAddrBlock: critical IPv4: 23.128.168.0/24 IPv6: 2606:8cc0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:65:2f:07:1d:f6:40:fc:0c:cd:a7:25:0a:dd:7c:17:55:1a: 03:1a:ab:a8:95:18:a9:4c:8b:1e:70:24:c3:a0:85:dc:80:2d: be:c2:91:4c:6b:04:a2:16:90:72:eb:d0:dd:db:2d:1d:f2:3a: 1e:0f:ef:5b:3a:36:aa:83:f5:1b:cd:44:6e:b2:48:a9:75:9a: fb:dd:bb:b2:0b:08:2e:4a:ce:e7:cf:48:4e:cb:ff:46:b9:cd: 02:09:12:70:c1:25:2f:92:f3:2b:e6:fd:cd:51:90:4b:b6:44: 48:25:66:7f:08:39:55:da:85:f1:d0:f3:22:9b:41:31:2e:4f: d6:2c:ab:a9:64:cf:8a:ab:b6:5d:52:0e:6f:03:7d:b8:c4:fc: 8e:35:a1:8e:22:43:0d:1c:58:e1:08:02:ed:2f:cc:98:31:a3: a4:69:a4:32:01:6c:5a:ba:70:7e:07:e2:d3:2d:e0:f0:b1:33: 0b:61:52:65:c8:f6:34:6a:43:68:e1:10:b4:37:12:26:07:62: c2:2d:1c:fd:0f:75:ea:89:72:97:fc:13:07:0e:1d:e9:d4:e7: f1:86:f5:2c:65:5a:14:1a:ac:d6:2d:a8:75:3f:bd:88:ca:66: 87:4f:b7:ad:82:5d:dd:d8:de:de:10:99:d4:94:82:8b:d4:2a: 6e:81:fe:e5 -----BEGIN CERTIFICATE----- MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWE9vIwtGW+kTPUt2YdAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTAzZTJjNjgtM2NkZC00N2U0LWJjZTAtMDdmYWFlYmE3 OGUxMB4XDTI2MTAwODEzMDAxMloXDTI3MDEwNjE0MDAxMlowLzEtMCsGA1UEAxMk MjI0MjhkYzQtYmZjMi00ZTIwLWE1NTQtMDVlOTI4NDM3YzExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA04N407cJXjXF4YR1soCgsPDheQQ7UxUyGNU7 LTAPt/xL6MOM+ynV09cFk2DToo5NZ69smhmBcm+Zw3mK1CMR2Bfofm9Ab2jYbggW xmbTl4I7tov0vTNOI0oVvUIMs7tH+Lg2koUABNG08AWE0Hr4oeIkhl3XQNEXvT0W I6HyRFw6o2fvBpWBpW21TXjVwMOgWEbX8r8Rtj1fUX7IAKM7z8+IP3C/GX3PkwaA LDSAM5jzX8O4lfVZMTbiSGkN0knU6QQNnNJJe+BaUxKf0UyAOoqH97nZv/FBIyMe lRTxgxrwRqmi7fpvj1dDHBlb07YIHJ1UPmRznWg/licXsM6EZwIDAQABo4IDZDCC A2AwHQYDVR0OBBYEFMG+eOKgdQA92FvzCs9+WSToVkQwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8xMDNl MmM2OC0zY2RkLTQ3ZTQtYmNlMC0wN2ZhYWViYTc4ZTEvNzNlNjBmY2UtNDhhZC0z Y2ZmLWJhYWEtOWM2YzFkMWQ0NzBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMTAzZTJjNjgtM2NkZC00N2U0LWJj ZTAtMDdmYWFlYmE3OGUxLzEwM2UyYzY4LTNjZGQtNDdlNC1iY2UwLTA3ZmFhZWJh NzhlMS5jcmwwHwYDVR0jBBgwFoAUkE2cG+aWpWcHKGsyEoCGMIyr1S0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8xMDNlMmM2OC0zY2RkLTQ3ZTQtYmNlMC0wN2Zh YWViYTc4ZTEuY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAF4CoMA0E AgACMAcDBQAmBozAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0 bWwwDQYJKoZIhvcNAQELBQADggEBACllLwcd9kD8DM2nJQrdfBdVGgMaq6iVGKlM ix5wJMOghdyALb7CkUxrBKIWkHLr0N3bLR3yOh4P71s6NqqD9RvNRG6ySKl1mvvd u7ILCC5KzufPSE7L/0a5zQIJEnDBJS+S8yvm/c1RkEu2REglZn8IOVXahfHQ8yKb QTEuT9Ysq6lkz4qrtl1SDm8DfbjE/I41oY4iQw0cWOEIAu0vzJgxo6RppDIBbFq6 cH4H4tMt4PCxMwthUmXI9jRqQ2jhELQ3EiYHYsItHP0PdeqJcpf8EwcOHenU5/GG 9SxlWhQarNYtqHU/vYjKZodPt62CXd3Y3t4QmdSUgovUKm6B/uU= -----END CERTIFICATE-----Generated at Wed Oct 21 04:40:04 2026 by rpki-client