$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3f67b12-458f-4257-bdb1-de84b1b8d40d/e767ba04-e729-36a9-ad2e-ac12e7d8c5b7.roa File: e767ba04-e729-36a9-ad2e-ac12e7d8c5b7.roa (raw, json) Hash identifier: c4ALW8mCpKP4tfJeZAs3Rs0CVptVBXTujpEiDRVdSXY= Subject key identifier: 56:04:CF:23:3B:8D:96:58:B0:0B:FC:6D:7F:35:62:DA:FB:50:40:07 Certificate issuer: /CN=a3f67b12-458f-4257-bdb1-de84b1b8d40d Certificate serial: 010D0C9F4328584F9BCDC616FC8B4F395B705920 Authority key identifier: 7A:EB:13:35:A4:FA:B0:E7:B6:3E:6C:30:CD:BE:44:51:4D:8D:08:EC Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3f67b12-458f-4257-bdb1-de84b1b8d40d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3f67b12-458f-4257-bdb1-de84b1b8d40d/e767ba04-e729-36a9-ad2e-ac12e7d8c5b7.roa Signing time: Sat 24 Oct 2026 13:00:12 +0000 ROA not before: Sat 24 Oct 2026 13:00:12 +0000 ROA not after: Fri 22 Jan 2027 14:00:12 +0000 asID: 401139 IP address blocks: 23.181.168.0/24 maxlen: 24 2602:f8b1::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3f67b12-458f-4257-bdb1-de84b1b8d40d/a3f67b12-458f-4257-bdb1-de84b1b8d40d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3f67b12-458f-4257-bdb1-de84b1b8d40d/a3f67b12-458f-4257-bdb1-de84b1b8d40d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3f67b12-458f-4257-bdb1-de84b1b8d40d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 27 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:9b:cd:c6:16:fc:8b:4f:39:5b:70:59:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a3f67b12-458f-4257-bdb1-de84b1b8d40d Validity Not Before: Oct 24 13:00:12 2026 GMT Not After : Jan 22 14:00:12 2027 GMT Subject: CN=4c1a2abe-1b3f-40d9-a9a1-809ca9ff8bc4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:aa:05:d8:32:dd:1c:f0:89:ef:33:55:36:50: 8d:ca:11:a1:91:ee:c8:7d:4e:48:a4:7c:89:a5:8b: 75:c1:58:6d:d4:75:83:4a:9c:a6:45:1d:e0:cd:f6: 8d:ff:de:28:1a:a7:85:9a:7b:bf:51:0e:a8:8c:a9: d4:e6:2a:78:dd:c6:e6:f4:e6:67:5d:fc:7b:44:76: 9b:9f:64:e5:25:06:b3:62:c4:b2:a2:61:28:14:ab: f9:d0:f6:17:1f:1e:cc:c7:8f:65:ad:dc:f5:51:43: f8:29:25:11:2e:4e:a9:bf:3a:e8:de:da:34:67:71: 65:1c:fb:72:34:4a:98:9f:70:93:53:92:d3:53:d9: 42:8c:57:57:32:b5:f9:b3:cf:1d:a4:89:44:78:6d: a8:f4:2f:fe:74:3c:53:08:ee:51:40:25:31:41:dc: d9:b9:a2:b7:51:a9:27:43:8a:de:51:ca:f2:47:cb: 79:08:e5:07:d7:15:82:74:64:40:51:00:fa:0b:43: eb:ca:ea:f4:b5:9a:9d:f7:81:89:ba:5c:d0:ed:9d: 4d:1c:5f:c2:bb:4c:7a:75:81:2c:a5:93:57:8c:9f: 5e:b1:27:93:73:09:ec:5a:5c:f2:51:0a:3e:28:6a: 17:45:77:3f:98:45:70:6b:e8:11:35:c7:17:f6:39: 41:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:04:CF:23:3B:8D:96:58:B0:0B:FC:6D:7F:35:62:DA:FB:50:40:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3f67b12-458f-4257-bdb1-de84b1b8d40d/e767ba04-e729-36a9-ad2e-ac12e7d8c5b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3f67b12-458f-4257-bdb1-de84b1b8d40d/a3f67b12-458f-4257-bdb1-de84b1b8d40d.crl X509v3 Authority Key Identifier: keyid:7A:EB:13:35:A4:FA:B0:E7:B6:3E:6C:30:CD:BE:44:51:4D:8D:08:EC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a3f67b12-458f-4257-bdb1-de84b1b8d40d.cer sbgp-ipAddrBlock: critical IPv4: 23.181.168.0/24 IPv6: 2602:f8b1::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:27:dc:38:59:41:ef:8c:50:08:8e:31:79:39:2d:71:8b:a9: 66:3f:11:a1:e2:cc:1d:1d:a0:69:93:f2:72:a3:8a:9e:89:69: 5a:c6:09:42:12:7a:60:90:56:60:e7:64:d3:6b:3c:29:48:77: 77:b9:13:63:ca:1a:49:dd:75:fd:5d:0b:2e:aa:a5:53:96:eb: ca:ab:6f:09:07:36:a7:eb:79:01:3d:21:43:57:8a:82:29:d5: 7e:6e:f8:60:67:76:db:e5:3a:16:4e:a4:bd:e5:e3:e6:b8:aa: 2d:7b:47:3f:87:79:ad:d1:92:88:cf:43:c5:ac:1a:d8:7d:88: 83:9a:6c:9c:d0:b7:8e:83:a6:fb:cb:28:22:df:29:0c:0a:a5: 4d:8f:6e:ed:d2:49:f8:5e:2a:d6:1a:a0:ea:d7:9e:c4:97:a4: db:6c:79:74:f2:19:41:24:4d:9b:33:bb:82:bf:c8:51:53:34: 1e:8d:5a:bc:d6:69:99:06:9d:54:a2:37:34:4e:49:f1:b8:da: a2:f2:bf:de:4f:61:2a:89:fd:b6:8f:7b:e2:75:78:60:6b:26: b7:d3:85:58:cf:3a:34:2f:ba:e7:b2:f9:c4:d5:25:b8:24:c9: 66:6b:bc:57:11:15:b6:20:78:fa:92:89:95:39:89:81:1b:3f: af:ad:d4:26 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE+bzcYW/ItPOVtwWSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTNmNjdiMTItNDU4Zi00MjU3LWJkYjEtZGU4NGIxYjhk NDBkMB4XDTI2MTAyNDEzMDAxMloXDTI3MDEyMjE0MDAxMlowLzEtMCsGA1UEAxMk NGMxYTJhYmUtMWIzZi00MGQ5LWE5YTEtODA5Y2E5ZmY4YmM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuKoF2DLdHPCJ7zNVNlCNyhGhke7IfU5IpHyJ pYt1wVht1HWDSpymRR3gzfaN/94oGqeFmnu/UQ6ojKnU5ip43cbm9OZnXfx7RHab n2TlJQazYsSyomEoFKv50PYXHx7Mx49lrdz1UUP4KSURLk6pvzro3to0Z3FlHPty NEqYn3CTU5LTU9lCjFdXMrX5s88dpIlEeG2o9C/+dDxTCO5RQCUxQdzZuaK3Uakn Q4reUcryR8t5COUH1xWCdGRAUQD6C0Pryur0tZqd94GJulzQ7Z1NHF/Cu0x6dYEs pZNXjJ9esSeTcwnsWlzyUQo+KGoXRXc/mEVwa+gRNccX9jlBPQIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFFYEzyM7jZZYsAv8bX81Ytr7UEAHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9hM2Y2 N2IxMi00NThmLTQyNTctYmRiMS1kZTg0YjFiOGQ0MGQvZTc2N2JhMDQtZTcyOS0z NmE5LWFkMmUtYWMxMmU3ZDhjNWI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYTNmNjdiMTItNDU4Zi00MjU3LWJk YjEtZGU4NGIxYjhkNDBkL2EzZjY3YjEyLTQ1OGYtNDI1Ny1iZGIxLWRlODRiMWI4 ZDQwZC5jcmwwHwYDVR0jBBgwFoAUeusTNaT6sOe2Pmwwzb5EUU2NCOwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9hM2Y2N2IxMi00NThmLTQyNTctYmRiMS1kZTg0 YjFiOGQ0MGQuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF7WoMA4E AgACMAgDBgQmAvixADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB2J9w4WUHvjFAIjjF5OS1xi6lmPxGh4swd HaBpk/Jyo4qeiWlaxglCEnpgkFZg52TTazwpSHd3uRNjyhpJ3XX9XQsuqqVTluvK q28JBzan63kBPSFDV4qCKdV+bvhgZ3bb5ToWTqS95ePmuKote0c/h3mt0ZKIz0PF rBrYfYiDmmyc0LeOg6b7yygi3ykMCqVNj27t0kn4XirWGqDq157El6TbbHl08hlB JE2bM7uCv8hRUzQejVq81mmZBp1Uojc0TknxuNqi8r/eT2Eqif22j3vidXhgaya3 04VYzzo0L7rnsvnE1SW4JMlma7xXERW2IHj6komVOYmBGz+vrdQm -----END CERTIFICATE-----Generated at Mon Oct 26 21:18:20 2026 by rpki-client