$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1be7bcf5-0538-4a92-9aef-c460f15023b4/0bd8ae8c-926a-3326-b752-65b165f04694.roa File: 0bd8ae8c-926a-3326-b752-65b165f04694.roa (raw, json) Hash identifier: Ne55j8GpjqjD/zv+egrsdaLchG2En57PZ9jnMM+6Ix0= Subject key identifier: 91:CA:50:D0:11:EC:6C:4A:38:D9:1E:FA:60:F6:91:85:75:41:7F:9C Certificate issuer: /CN=1be7bcf5-0538-4a92-9aef-c460f15023b4 Certificate serial: 010D0C9F4328584EA79A09E0B0F96D79C754C5C0 Authority key identifier: 45:94:2A:B5:6A:9D:7E:36:8F:49:09:AC:A5:80:7B:74:DE:0D:B7:67 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1be7bcf5-0538-4a92-9aef-c460f15023b4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1be7bcf5-0538-4a92-9aef-c460f15023b4/0bd8ae8c-926a-3326-b752-65b165f04694.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 46365 IP address blocks: 23.152.56.0/24 maxlen: 24 198.135.179.0/24 maxlen: 24 2602:2cd::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1be7bcf5-0538-4a92-9aef-c460f15023b4/1be7bcf5-0538-4a92-9aef-c460f15023b4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1be7bcf5-0538-4a92-9aef-c460f15023b4/1be7bcf5-0538-4a92-9aef-c460f15023b4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1be7bcf5-0538-4a92-9aef-c460f15023b4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9a:09:e0:b0:f9:6d:79:c7:54:c5:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1be7bcf5-0538-4a92-9aef-c460f15023b4 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=21faeec9-46d6-437c-be8a-44d4438327ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:5f:94:ff:0f:4f:43:10:a6:32:0f:13:69:87: 26:a1:84:94:03:5e:5a:59:de:03:93:2f:8d:a9:9d: a9:75:59:42:0b:e6:5a:2d:65:87:22:90:db:bf:6b: 37:8c:d8:39:2e:e8:80:ef:aa:cc:b0:27:f6:be:17: 53:50:a6:6d:fb:71:5b:6a:27:8c:26:d7:14:14:89: 6b:3c:dc:a3:49:2f:60:ae:e9:c0:f9:2d:9d:79:5f: 7b:7b:a0:54:1e:cf:1a:b7:5c:5b:4b:b1:85:aa:82: f7:97:6e:b5:92:ad:18:ab:5f:5a:29:b4:f5:70:f0: e1:1d:cd:17:55:1c:a2:6d:9b:d2:94:f1:b6:52:d1: 01:53:88:5f:6d:04:7e:a0:c2:ac:4b:b6:d0:09:c3: 14:d4:fe:e8:34:76:21:0d:83:20:c4:4f:a2:d8:72: d4:e4:d1:21:85:9c:66:eb:5c:c4:49:d7:48:66:68: 14:fb:fb:ff:c0:c6:7e:6b:27:33:fb:1b:c8:f4:d5: ae:01:03:8b:2a:c8:c1:41:ef:57:39:b6:c2:90:73: ad:f3:a5:4c:04:87:13:3b:08:87:96:0d:57:83:18: b2:c7:88:aa:45:81:ce:0a:2a:5c:55:e8:f9:d5:07: 1a:c2:07:81:6c:8d:74:43:ec:a9:a6:22:1b:86:90: 5f:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:CA:50:D0:11:EC:6C:4A:38:D9:1E:FA:60:F6:91:85:75:41:7F:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1be7bcf5-0538-4a92-9aef-c460f15023b4/0bd8ae8c-926a-3326-b752-65b165f04694.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1be7bcf5-0538-4a92-9aef-c460f15023b4/1be7bcf5-0538-4a92-9aef-c460f15023b4.crl X509v3 Authority Key Identifier: keyid:45:94:2A:B5:6A:9D:7E:36:8F:49:09:AC:A5:80:7B:74:DE:0D:B7:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1be7bcf5-0538-4a92-9aef-c460f15023b4.cer sbgp-ipAddrBlock: critical IPv4: 23.152.56.0/24 198.135.179.0/24 IPv6: 2602:2cd::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:f9:14:02:15:75:2b:50:92:52:d2:5b:30:c2:87:91:7e:5d: 3d:91:3b:52:75:d1:ad:16:a0:1b:2f:5e:5a:ed:d2:19:a6:fd: b6:2b:6e:c5:7d:9a:ad:66:6e:aa:72:2a:e7:ac:88:d9:1a:1f: 9f:f4:fc:0d:c9:65:73:2d:c6:37:1a:9e:aa:0a:f0:5b:f0:ab: 4c:ef:6d:c9:8e:14:a2:92:08:c9:7a:f0:80:ab:07:4d:20:5e: 79:e6:96:8c:42:98:58:43:e5:fd:fd:37:0f:79:63:0a:05:d7: fd:9e:2c:b0:85:6a:b7:07:db:85:90:b7:85:4b:8a:51:a5:3e: ec:45:fa:3f:b0:56:b7:e3:fa:bb:4d:58:66:c1:e5:92:c5:9c: af:74:b7:0f:32:1e:a3:c6:12:5d:24:67:d1:98:cd:4f:fc:05: 5d:97:73:82:a6:59:c0:d9:1f:44:1f:a7:e7:2f:67:1c:51:2a: 98:ed:64:41:b8:9e:bf:49:22:d1:7f:42:97:6c:9e:c4:ca:ac: b8:08:34:91:b8:7c:c6:70:79:60:95:c1:42:e8:5b:05:a5:4a: 5e:a0:a1:a2:3f:66:b4:d3:60:d6:f8:89:31:8f:79:ba:e6:98: 15:9c:d8:5a:fe:00:ed:af:40:16:dd:e9:27:c7:7c:60:19:21: 7a:e4:77:06 -----BEGIN CERTIFICATE----- MIIGWTCCBUGgAwIBAgIUAQ0Mn0MoWE6nmgngsPltecdUxcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWJlN2JjZjUtMDUzOC00YTkyLTlhZWYtYzQ2MGYxNTAy M2I0MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MjFmYWVlYzktNDZkNi00MzdjLWJlOGEtNDRkNDQzODMyN2NhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgl+U/w9PQxCmMg8TaYcmoYSUA15aWd4Dky+N qZ2pdVlCC+ZaLWWHIpDbv2s3jNg5LuiA76rMsCf2vhdTUKZt+3FbaieMJtcUFIlr PNyjSS9grunA+S2deV97e6BUHs8at1xbS7GFqoL3l261kq0Yq19aKbT1cPDhHc0X VRyibZvSlPG2UtEBU4hfbQR+oMKsS7bQCcMU1P7oNHYhDYMgxE+i2HLU5NEhhZxm 61zESddIZmgU+/v/wMZ+aycz+xvI9NWuAQOLKsjBQe9XObbCkHOt86VMBIcTOwiH lg1Xgxiyx4iqRYHOCipcVej51QcawgeBbI10Q+yppiIbhpBf1QIDAQABo4IDazCC A2cwHQYDVR0OBBYEFJHKUNAR7GxKONke+mD2kYV1QX+cMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8xYmU3 YmNmNS0wNTM4LTRhOTItOWFlZi1jNDYwZjE1MDIzYjQvMGJkOGFlOGMtOTI2YS0z MzI2LWI3NTItNjViMTY1ZjA0Njk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMWJlN2JjZjUtMDUzOC00YTkyLTlh ZWYtYzQ2MGYxNTAyM2I0LzFiZTdiY2Y1LTA1MzgtNGE5Mi05YWVmLWM0NjBmMTUw MjNiNC5jcmwwHwYDVR0jBBgwFoAURZQqtWqdfjaPSQmspYB7dN4Nt2cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8xYmU3YmNmNS0wNTM4LTRhOTItOWFlZi1jNDYw ZjE1MDIzYjQuY2VyMDUGCCsGAQUFBwEHAQH/BCYwJDASBAIAATAMAwQAF5g4AwQA xoezMA4EAgACMAgDBgQmAgLNADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA2+RQCFXUrUJJS0lswwoeRfl09 kTtSddGtFqAbL15a7dIZpv22K27FfZqtZm6qcirnrIjZGh+f9PwNyWVzLcY3Gp6q CvBb8KtM723JjhSikgjJevCAqwdNIF555paMQphYQ+X9/TcPeWMKBdf9niywhWq3 B9uFkLeFS4pRpT7sRfo/sFa34/q7TVhmweWSxZyvdLcPMh6jxhJdJGfRmM1P/AVd l3OCplnA2R9EH6fnL2ccUSqY7WRBuJ6/SSLRf0KXbJ7Eyqy4CDSRuHzGcHlglcFC 6FsFpUpeoKGiP2a002DW+Ikxj3m65pgVnNha/gDtr0AW3eknx3xgGSF65HcG -----END CERTIFICATE-----Generated at Sat Sep 5 13:29:58 2026 by rpki-client