$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a987c446-5fc2-44b0-9a41-65296d90d0c2/a9736c2d-b353-3032-be0f-62272540e0ac.roa File: a9736c2d-b353-3032-be0f-62272540e0ac.roa (raw, json) Hash identifier: VCKjPH3fU4i6lBUw4KrDNHUeXu5QxM7fYE9wzYUPM3k= Subject key identifier: 9E:24:2C:1E:A8:81:34:B1:53:12:7E:6C:16:5E:96:9E:66:FA:C9:65 Certificate issuer: /CN=a987c446-5fc2-44b0-9a41-65296d90d0c2 Certificate serial: 010D0C9F4328584EA786F16B74DBAFEC33248F40 Authority key identifier: C4:91:C7:5F:29:DA:52:AA:C5:B2:03:91:DE:44:94:44:E4:EC:34:D1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a987c446-5fc2-44b0-9a41-65296d90d0c2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a987c446-5fc2-44b0-9a41-65296d90d0c2/a9736c2d-b353-3032-be0f-62272540e0ac.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 393373 IP address blocks: 23.136.180.0/24 maxlen: 24 2602:f69c::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a987c446-5fc2-44b0-9a41-65296d90d0c2/a987c446-5fc2-44b0-9a41-65296d90d0c2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a987c446-5fc2-44b0-9a41-65296d90d0c2/a987c446-5fc2-44b0-9a41-65296d90d0c2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a987c446-5fc2-44b0-9a41-65296d90d0c2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 27 Aug 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:86:f1:6b:74:db:af:ec:33:24:8f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a987c446-5fc2-44b0-9a41-65296d90d0c2 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=40855afb-4017-4a12-87eb-c3da473678bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:c3:14:03:c4:41:d5:da:20:bd:32:26:8a:54: 62:86:d5:d6:b5:78:7e:8a:76:54:b0:cf:ed:38:65: 1b:2c:1e:ff:d0:f7:76:f1:32:c4:5a:8a:aa:f7:ba: 23:bd:25:01:28:e6:e0:68:51:8b:06:4b:c8:72:7c: 59:db:98:d4:7c:fb:8c:f4:8a:04:d0:47:35:9c:f4: 23:ee:2b:f2:9a:2e:c5:7e:78:61:95:a5:67:8a:04: e6:51:f8:ee:0b:ed:6c:9f:2b:50:0d:fb:ce:df:c3: d4:0a:a1:62:2f:24:a3:51:ba:e9:31:d3:15:93:0e: e5:87:86:7f:f2:ab:fe:4d:7c:58:7d:11:81:76:12: f1:13:87:df:58:e7:9b:e3:00:ae:a2:42:02:b4:9e: 23:cb:cf:87:0f:16:c3:1f:5b:28:9a:eb:65:ff:40: 52:3f:8c:21:4d:33:81:0f:50:48:5e:f1:09:61:75: f4:5b:8a:27:94:c3:2b:f7:93:04:f1:d1:cd:ea:13: a9:64:d7:eb:39:28:d0:41:83:25:83:04:bb:72:b8: 5f:7d:5f:ce:38:b0:0d:82:67:d1:ac:a6:f3:54:5b: aa:9c:d7:99:3a:6f:96:64:fc:f6:6d:6b:05:70:05: 84:3c:58:7d:dc:fd:c1:64:16:10:b2:c1:2d:96:da: d9:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:24:2C:1E:A8:81:34:B1:53:12:7E:6C:16:5E:96:9E:66:FA:C9:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a987c446-5fc2-44b0-9a41-65296d90d0c2/a9736c2d-b353-3032-be0f-62272540e0ac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a987c446-5fc2-44b0-9a41-65296d90d0c2/a987c446-5fc2-44b0-9a41-65296d90d0c2.crl X509v3 Authority Key Identifier: keyid:C4:91:C7:5F:29:DA:52:AA:C5:B2:03:91:DE:44:94:44:E4:EC:34:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a987c446-5fc2-44b0-9a41-65296d90d0c2.cer sbgp-ipAddrBlock: critical IPv4: 23.136.180.0/24 IPv6: 2602:f69c::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:b6:64:b0:58:0f:67:cd:9a:2a:e1:4d:8d:8e:93:85:86:df: 5c:b0:ac:3d:9f:ae:17:4b:20:9e:40:db:bb:d3:b4:f0:e9:4d: 73:78:69:71:bf:5e:5a:fb:92:94:c9:2f:2d:fb:16:6c:47:71: bf:0d:d7:08:ea:58:8a:9b:8f:63:e5:d7:80:7e:0f:6b:1d:2f: ae:94:65:cf:9e:3e:ce:f3:6c:26:d2:e8:f7:9a:f2:7d:79:78: 25:1a:5a:c3:24:7b:d6:13:23:f5:3f:9c:9f:60:47:7c:f7:a1: aa:80:e8:f2:dd:f5:99:b5:c3:ec:7b:ed:8f:1c:f7:ef:99:5c: 6e:12:dc:bd:b2:dd:b2:b5:2f:1a:b9:02:d7:7d:16:46:c1:fe: dd:65:d7:b9:3f:3f:eb:c8:31:47:1f:bc:4e:71:83:c8:a1:22: 11:55:2f:87:cb:78:a4:09:98:b5:b0:12:16:4a:4e:d4:b0:92: d2:5a:70:7a:a9:92:fb:78:82:12:e4:51:c2:58:dc:42:10:c9: 27:25:c3:93:7f:d2:33:75:cb:fd:a4:07:58:3b:3a:cf:89:6d: b0:e5:4b:63:79:37:b3:dd:ab:7d:dc:bb:71:2c:1f:6d:a8:ef: 9e:ec:c2:ff:db:8c:8e:4d:cc:a5:1f:31:42:1a:8a:80:2f:9d: 1f:0e:a5:3d -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE6nhvFrdNuv7DMkj0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTk4N2M0NDYtNWZjMi00NGIwLTlhNDEtNjUyOTZkOTBk MGMyMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk NDA4NTVhZmItNDAxNy00YTEyLTg3ZWItYzNkYTQ3MzY3OGJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqcMUA8RB1dogvTImilRihtXWtXh+inZUsM/t OGUbLB7/0Pd28TLEWoqq97ojvSUBKObgaFGLBkvIcnxZ25jUfPuM9IoE0Ec1nPQj 7ivymi7FfnhhlaVnigTmUfjuC+1snytQDfvO38PUCqFiLySjUbrpMdMVkw7lh4Z/ 8qv+TXxYfRGBdhLxE4ffWOeb4wCuokICtJ4jy8+HDxbDH1somutl/0BSP4whTTOB D1BIXvEJYXX0W4onlMMr95ME8dHN6hOpZNfrOSjQQYMlgwS7crhffV/OOLANgmfR rKbzVFuqnNeZOm+WZPz2bWsFcAWEPFh93P3BZBYQssEtltrZcQIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFJ4kLB6ogTSxUxJ+bBZelp5m+sllMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9hOTg3 YzQ0Ni01ZmMyLTQ0YjAtOWE0MS02NTI5NmQ5MGQwYzIvYTk3MzZjMmQtYjM1My0z MDMyLWJlMGYtNjIyNzI1NDBlMGFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYTk4N2M0NDYtNWZjMi00NGIwLTlh NDEtNjUyOTZkOTBkMGMyL2E5ODdjNDQ2LTVmYzItNDRiMC05YTQxLTY1Mjk2ZDkw ZDBjMi5jcmwwHwYDVR0jBBgwFoAUxJHHXynaUqrFsgOR3kSUROTsNNEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9hOTg3YzQ0Ni01ZmMyLTQ0YjAtOWE0MS02NTI5 NmQ5MGQwYzIuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF4i0MA4E AgACMAgDBgAmAvacADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAttmSwWA9nzZoq4U2NjpOFht9csKw9n64X SyCeQNu707Tw6U1zeGlxv15a+5KUyS8t+xZsR3G/DdcI6liKm49j5deAfg9rHS+u lGXPnj7O82wm0uj3mvJ9eXglGlrDJHvWEyP1P5yfYEd896GqgOjy3fWZtcPse+2P HPfvmVxuEty9st2ytS8auQLXfRZGwf7dZde5Pz/ryDFHH7xOcYPIoSIRVS+Hy3ik CZi1sBIWSk7UsJLSWnB6qZL7eIIS5FHCWNxCEMknJcOTf9Izdcv9pAdYOzrPiW2w 5UtjeTez3at93LtxLB9tqO+e7ML/24yOTcylHzFCGoqAL50fDqU9 -----END CERTIFICATE-----Generated at Wed Aug 26 12:22:29 2026 by rpki-client