$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4316bfc9-2a2c-4138-ad58-ab51d7cc37d6/3d670424-fd95-3967-bba2-b42dd43d4732.roa File: 3d670424-fd95-3967-bba2-b42dd43d4732.roa (raw, json) Hash identifier: 7yXJOS3BeL9dvNSs1CgXGna71lt5U1vA2qPk1223pX0= Subject key identifier: 0A:86:3F:3E:13:3E:FE:C0:B9:7F:1E:BA:22:5D:AA:F4:11:70:1B:B5 Certificate issuer: /CN=4316bfc9-2a2c-4138-ad58-ab51d7cc37d6 Certificate serial: 010D0C9F4328584ECBD1E6F1AF78CF5E5EA80600 Authority key identifier: 12:E2:5C:34:5F:1B:37:D1:DC:89:E2:16:D1:1A:07:C0:B5:BD:4C:E1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4316bfc9-2a2c-4138-ad58-ab51d7cc37d6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4316bfc9-2a2c-4138-ad58-ab51d7cc37d6/3d670424-fd95-3967-bba2-b42dd43d4732.roa Signing time: Tue 11 Aug 2026 01:00:11 +0000 ROA not before: Tue 11 Aug 2026 01:00:11 +0000 ROA not after: Mon 09 Nov 2026 02:00:11 +0000 asID: 212512 IP address blocks: 23.185.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4316bfc9-2a2c-4138-ad58-ab51d7cc37d6/4316bfc9-2a2c-4138-ad58-ab51d7cc37d6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4316bfc9-2a2c-4138-ad58-ab51d7cc37d6/4316bfc9-2a2c-4138-ad58-ab51d7cc37d6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4316bfc9-2a2c-4138-ad58-ab51d7cc37d6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:cb:d1:e6:f1:af:78:cf:5e:5e:a8:06:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4316bfc9-2a2c-4138-ad58-ab51d7cc37d6 Validity Not Before: Aug 11 01:00:11 2026 GMT Not After : Nov 9 02:00:11 2026 GMT Subject: CN=a4f4853f-415b-40a9-91ed-1bde5eb05037 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:aa:9e:ac:ae:70:35:fd:33:69:7c:88:b3:c6: 42:a1:42:34:7e:58:77:6b:97:24:2f:ab:2a:92:9f: 66:51:1f:5a:7d:89:ff:8d:4c:a7:d9:d1:44:7b:3e: b1:a7:5d:e2:20:6b:10:e9:98:b3:9b:d7:42:6c:5d: 05:4b:ca:3e:29:a1:a6:d4:e9:34:3c:7a:61:4a:ee: 69:a9:e4:42:38:99:8d:ac:69:56:74:69:8b:04:46: 37:64:e8:02:74:b7:bb:91:34:0a:e4:c4:61:96:d8: 73:f6:52:de:79:d0:da:e4:33:60:a3:fe:c8:48:22: ad:f0:c3:bb:6a:bf:6b:3b:8c:81:d8:79:c2:30:49: db:1f:1c:13:de:54:67:65:f8:7b:81:46:80:65:4a: 5a:3d:85:e0:36:a3:ba:68:5a:1b:d0:c2:51:a0:d2: ba:75:10:ad:ea:60:c1:88:92:4f:fa:7a:a7:66:97: c3:d9:e7:a2:1a:8b:73:d0:e0:8d:9f:ef:c6:ef:a8: b4:ab:5d:55:35:56:28:d6:16:40:e7:33:8c:42:95: 0a:b4:d5:bf:d0:4f:96:5b:89:c2:83:6f:5c:e3:75: 56:3e:d5:a9:78:34:b2:e9:14:f6:8a:21:6f:a4:40: a7:0b:73:20:59:5f:76:71:a3:d1:41:cf:c5:62:10: 1b:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:86:3F:3E:13:3E:FE:C0:B9:7F:1E:BA:22:5D:AA:F4:11:70:1B:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4316bfc9-2a2c-4138-ad58-ab51d7cc37d6/3d670424-fd95-3967-bba2-b42dd43d4732.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4316bfc9-2a2c-4138-ad58-ab51d7cc37d6/4316bfc9-2a2c-4138-ad58-ab51d7cc37d6.crl X509v3 Authority Key Identifier: keyid:12:E2:5C:34:5F:1B:37:D1:DC:89:E2:16:D1:1A:07:C0:B5:BD:4C:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/4316bfc9-2a2c-4138-ad58-ab51d7cc37d6.cer sbgp-ipAddrBlock: critical IPv4: 23.185.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:ec:cd:8d:12:41:89:de:4f:32:97:5a:6b:2b:b9:7a:39:79: 0c:2c:5f:1e:45:48:39:af:23:1b:c1:2a:17:56:b9:fc:ad:9d: 3d:67:db:a5:03:5b:11:45:af:59:68:10:03:5a:e5:db:0f:b5: 76:13:93:00:c2:c4:45:92:89:55:98:bb:52:28:78:86:f4:b2: b7:86:78:28:7e:7c:47:7f:45:40:bb:1e:56:9a:ff:eb:e8:e5: ea:f2:7e:65:11:38:ca:8d:76:20:50:5a:02:fd:28:7f:be:74: be:60:6f:b4:c5:54:da:20:77:88:a0:22:09:86:c3:8a:6c:eb: 50:48:68:f5:7d:1a:df:ba:7b:59:4c:5d:be:bb:15:ce:6e:09: c2:4a:34:01:6b:13:5c:3c:0e:33:63:d8:fc:8f:c9:f3:55:47: c2:63:39:cd:70:b3:c3:55:40:11:34:f9:67:4b:94:ba:5a:35: 18:34:a2:6b:29:85:0f:13:d8:f3:5b:37:0f:4e:28:57:d6:c1: f3:78:84:96:be:41:dc:bf:37:44:f9:62:36:3c:87:9b:71:a0: 63:67:d4:e1:82:bf:a6:2b:33:a4:62:6b:15:aa:99:6a:5b:24: 68:f6:91:4d:d3:4d:79:12:cc:78:c2:74:46:72:df:e5:ab:66: c5:09:65:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7L0ebxr3jPXl6oBgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDMxNmJmYzktMmEyYy00MTM4LWFkNTgtYWI1MWQ3Y2Mz N2Q2MB4XDTI2MDgxMTAxMDAxMVoXDTI2MTEwOTAyMDAxMVowLzEtMCsGA1UEAxMk YTRmNDg1M2YtNDE1Yi00MGE5LTkxZWQtMWJkZTVlYjA1MDM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArqqerK5wNf0zaXyIs8ZCoUI0flh3a5ckL6sq kp9mUR9afYn/jUyn2dFEez6xp13iIGsQ6Zizm9dCbF0FS8o+KaGm1Ok0PHphSu5p qeRCOJmNrGlWdGmLBEY3ZOgCdLe7kTQK5MRhlthz9lLeedDa5DNgo/7ISCKt8MO7 ar9rO4yB2HnCMEnbHxwT3lRnZfh7gUaAZUpaPYXgNqO6aFob0MJRoNK6dRCt6mDB iJJP+nqnZpfD2eeiGotz0OCNn+/G76i0q11VNVYo1hZA5zOMQpUKtNW/0E+WW4nC g29c43VWPtWpeDSy6RT2iiFvpECnC3MgWV92caPRQc/FYhAbjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAqGPz4TPv7AuX8euiJdqvQRcBu1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy80MzE2 YmZjOS0yYTJjLTQxMzgtYWQ1OC1hYjUxZDdjYzM3ZDYvM2Q2NzA0MjQtZmQ5NS0z OTY3LWJiYTItYjQyZGQ0M2Q0NzMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvNDMxNmJmYzktMmEyYy00MTM4LWFk NTgtYWI1MWQ3Y2MzN2Q2LzQzMTZiZmM5LTJhMmMtNDEzOC1hZDU4LWFiNTFkN2Nj MzdkNi5jcmwwHwYDVR0jBBgwFoAUEuJcNF8bN9HcieIW0RoHwLW9TOEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy80MzE2YmZjOS0yYTJjLTQxMzgtYWQ1OC1hYjUx ZDdjYzM3ZDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF7l4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACHszY0SQYneTzKXWmsruXo5eQwsXx5FSDmvIxvBKhdWufytnT1n26UD WxFFr1loEANa5dsPtXYTkwDCxEWSiVWYu1IoeIb0sreGeCh+fEd/RUC7Hlaa/+vo 5eryfmUROMqNdiBQWgL9KH++dL5gb7TFVNogd4igIgmGw4ps61BIaPV9Gt+6e1lM Xb67Fc5uCcJKNAFrE1w8DjNj2PyPyfNVR8JjOc1ws8NVQBE0+WdLlLpaNRg0omsp hQ8T2PNbNw9OKFfWwfN4hJa+Qdy/N0T5YjY8h5txoGNn1OGCv6YrM6RiaxWqmWpb JGj2kU3TTXkSzHjCdEZy3+WrZsUJZfE= -----END CERTIFICATE-----Generated at Thu Sep 10 19:53:40 2026 by rpki-client