$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2da4b7dc-6e43-4290-86d6-84e81139f164/1bb1529f-7f44-304c-af4e-b0c3d8d0efe1.roa File: 1bb1529f-7f44-304c-af4e-b0c3d8d0efe1.roa (raw, json) Hash identifier: 3teXTei9iZiGdCTX7Zpucx1tr6mfkW290K3K+5031h0= Subject key identifier: 6A:BC:02:12:AF:DE:53:BD:92:AE:00:66:8A:DF:EB:96:7E:05:EA:CE Certificate issuer: /CN=2da4b7dc-6e43-4290-86d6-84e81139f164 Certificate serial: 010D0C9F4328584F49890069EBF0F08561202840 Authority key identifier: 5A:2D:E2:5F:49:C9:A9:97:CE:89:B2:57:BE:A4:1F:20:8E:0E:2E:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2da4b7dc-6e43-4290-86d6-84e81139f164.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2da4b7dc-6e43-4290-86d6-84e81139f164/1bb1529f-7f44-304c-af4e-b0c3d8d0efe1.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 399861 IP address blocks: 23.130.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2da4b7dc-6e43-4290-86d6-84e81139f164/2da4b7dc-6e43-4290-86d6-84e81139f164.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2da4b7dc-6e43-4290-86d6-84e81139f164/2da4b7dc-6e43-4290-86d6-84e81139f164.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2da4b7dc-6e43-4290-86d6-84e81139f164.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:89:00:69:eb:f0:f0:85:61:20:28:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2da4b7dc-6e43-4290-86d6-84e81139f164 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=d94e2d11-5489-422a-9f6a-393d477adff6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:26:03:c0:60:e6:5d:1d:77:c0:b9:e4:a0:c5: 6d:81:28:92:61:c7:47:26:9f:4b:91:71:c9:22:ba: ae:c7:a7:7d:7a:8c:d3:89:ca:4f:6b:8c:1d:86:6e: ee:53:43:17:52:35:1c:c4:6b:ee:bd:26:c0:59:33: 55:d5:63:6d:0b:ce:d1:78:d1:cc:1b:91:c5:cd:16: b7:37:1d:fa:49:89:8a:31:75:4f:bf:a1:a9:5f:4c: 65:75:0e:bd:f5:b8:99:21:cf:e2:08:f9:ef:56:56: 0f:d9:09:4f:09:7a:be:03:aa:cc:93:6c:6a:a9:55: 04:9f:5b:31:c8:02:9a:aa:b6:52:ec:3f:79:79:c3: 54:4e:b5:6d:6f:a4:3b:85:15:f1:e6:76:0c:93:ff: 9b:fe:0d:d6:e6:84:8b:80:aa:81:23:33:ab:3d:2e: a1:47:14:c4:90:fd:e0:74:b3:cb:af:a0:44:45:59: 40:eb:76:52:6e:f4:6e:b9:f3:bc:ac:dc:32:25:a8: f5:54:cf:3e:c7:a4:dd:a0:cf:d5:b6:2c:76:fc:aa: 62:66:68:64:4c:85:63:46:87:8d:08:b1:c8:3f:70: b5:bf:7d:51:58:95:3f:81:1c:34:fd:2a:09:f3:c3: b5:98:d0:57:71:ad:5e:e2:c3:bc:b0:3a:cd:e3:af: 5a:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:BC:02:12:AF:DE:53:BD:92:AE:00:66:8A:DF:EB:96:7E:05:EA:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2da4b7dc-6e43-4290-86d6-84e81139f164/1bb1529f-7f44-304c-af4e-b0c3d8d0efe1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2da4b7dc-6e43-4290-86d6-84e81139f164/2da4b7dc-6e43-4290-86d6-84e81139f164.crl X509v3 Authority Key Identifier: keyid:5A:2D:E2:5F:49:C9:A9:97:CE:89:B2:57:BE:A4:1F:20:8E:0E:2E:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2da4b7dc-6e43-4290-86d6-84e81139f164.cer sbgp-ipAddrBlock: critical IPv4: 23.130.236.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:f9:b8:ed:67:a7:9c:4f:d6:72:7b:1b:af:1a:11:26:ec:d2: 39:ff:4a:c3:d3:15:ff:e4:61:bd:e9:ea:75:d6:b5:76:85:7c: 58:a6:00:cb:95:18:f8:57:08:9e:1b:ed:f3:b4:1e:ae:91:e0: 1e:c2:cd:1e:09:f5:a8:fc:d0:79:97:c3:a8:61:cf:1d:f9:f4: eb:21:30:71:db:36:17:47:1a:fe:b2:ca:25:ae:42:2d:64:ed: 3e:2f:8c:2c:09:7b:01:58:0a:b0:ec:ea:6d:81:3c:69:22:1f: c4:a1:52:3b:e6:cd:78:f7:46:1c:93:50:dc:ff:5d:cf:cc:8f: 9f:eb:ce:44:cb:77:4c:aa:12:20:ec:ad:81:08:2d:92:fe:92: 33:35:ea:5d:86:d2:1b:79:fe:4c:98:87:8d:3a:43:b1:4f:39: 8e:7f:74:80:a2:3f:a3:d6:40:39:75:dd:02:a2:e7:f2:14:54: 3a:a6:ca:13:ce:23:94:c7:2f:30:dc:c1:82:ae:dc:4b:20:24: 51:d8:5e:4b:d8:2a:04:d3:b4:d7:a5:ae:41:12:41:e6:60:72: 0e:05:71:7f:fb:7a:98:08:ae:ad:0a:65:5d:e7:80:80:09:44: c5:e8:9e:a4:67:f9:8a:bf:17:d2:73:c4:73:e4:e6:c9:c2:fd: df:de:12:ea -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JiQBp6/DwhWEgKEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmRhNGI3ZGMtNmU0My00MjkwLTg2ZDYtODRlODExMzlm MTY0MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZDk0ZTJkMTEtNTQ4OS00MjJhLTlmNmEtMzkzZDQ3N2FkZmY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6yYDwGDmXR13wLnkoMVtgSiSYcdHJp9LkXHJ Irqux6d9eozTicpPa4wdhm7uU0MXUjUcxGvuvSbAWTNV1WNtC87ReNHMG5HFzRa3 Nx36SYmKMXVPv6GpX0xldQ699biZIc/iCPnvVlYP2QlPCXq+A6rMk2xqqVUEn1sx yAKaqrZS7D95ecNUTrVtb6Q7hRXx5nYMk/+b/g3W5oSLgKqBIzOrPS6hRxTEkP3g dLPLr6BERVlA63ZSbvRuufO8rNwyJaj1VM8+x6TdoM/Vtix2/KpiZmhkTIVjRoeN CLHIP3C1v31RWJU/gRw0/SoJ88O1mNBXca1e4sO8sDrN469aVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGq8AhKv3lO9kq4AZorf65Z+BerOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8yZGE0 YjdkYy02ZTQzLTQyOTAtODZkNi04NGU4MTEzOWYxNjQvMWJiMTUyOWYtN2Y0NC0z MDRjLWFmNGUtYjBjM2Q4ZDBlZmUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMmRhNGI3ZGMtNmU0My00MjkwLTg2 ZDYtODRlODExMzlmMTY0LzJkYTRiN2RjLTZlNDMtNDI5MC04NmQ2LTg0ZTgxMTM5 ZjE2NC5jcmwwHwYDVR0jBBgwFoAUWi3iX0nJqZfOibJXvqQfII4OLs8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8yZGE0YjdkYy02ZTQzLTQyOTAtODZkNi04NGU4 MTEzOWYxNjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4LsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADX5uO1np5xP1nJ7G68aESbs0jn/SsPTFf/kYb3p6nXWtXaFfFimAMuV GPhXCJ4b7fO0Hq6R4B7CzR4J9aj80HmXw6hhzx359OshMHHbNhdHGv6yyiWuQi1k 7T4vjCwJewFYCrDs6m2BPGkiH8ShUjvmzXj3RhyTUNz/Xc/Mj5/rzkTLd0yqEiDs rYEILZL+kjM16l2G0ht5/kyYh406Q7FPOY5/dICiP6PWQDl13QKi5/IUVDqmyhPO I5THLzDcwYKu3EsgJFHYXkvYKgTTtNelrkESQeZgcg4FcX/7epgIrq0KZV3ngIAJ RMXonqRn+Yq/F9JzxHPk5snC/d/eEuo= -----END CERTIFICATE-----Generated at Mon Oct 12 22:23:00 2026 by rpki-client