$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3c126bd3-337a-46ea-8aab-c2cd7594edf9/a611323c-5d49-3b79-a1f9-62dc57283557.roa File: a611323c-5d49-3b79-a1f9-62dc57283557.roa (raw, json) Hash identifier: iE1eeogwEwlzwbEkLpU/B5pgr4Sol9gRI4p6ba8QOtQ= Subject key identifier: 93:E4:EA:F1:46:FB:38:64:49:3D:DB:F9:30:A8:B1:EA:AC:CD:19:B2 Certificate issuer: /CN=3c126bd3-337a-46ea-8aab-c2cd7594edf9 Certificate serial: 010D0C9F4328584F49734FAFEC76F18B6105A080 Authority key identifier: 1C:39:7D:D2:AA:2B:C3:BB:B1:39:4D:AC:AC:48:73:70:52:F9:0A:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3c126bd3-337a-46ea-8aab-c2cd7594edf9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3c126bd3-337a-46ea-8aab-c2cd7594edf9/a611323c-5d49-3b79-a1f9-62dc57283557.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 210000 IP address blocks: 23.128.140.0/24 maxlen: 24 2602:f7b3::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3c126bd3-337a-46ea-8aab-c2cd7594edf9/3c126bd3-337a-46ea-8aab-c2cd7594edf9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3c126bd3-337a-46ea-8aab-c2cd7594edf9/3c126bd3-337a-46ea-8aab-c2cd7594edf9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3c126bd3-337a-46ea-8aab-c2cd7594edf9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 Oct 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:4f:af:ec:76:f1:8b:61:05:a0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c126bd3-337a-46ea-8aab-c2cd7594edf9 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=8c9ae914-bf89-486a-9333-437b4466a09d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:16:e0:d7:92:29:d9:e5:7c:20:77:72:c6:9c: 5a:a5:97:4e:87:9c:ba:ee:56:4f:ac:13:ce:fc:cb: 40:dd:95:6b:b4:63:60:5c:3a:7e:30:15:92:68:da: 9f:d6:a4:dd:40:21:11:b8:3c:c8:ec:65:bd:2c:6e: 23:bd:37:b8:11:bd:91:cb:5a:70:3a:62:b2:64:8d: af:65:1e:76:cb:00:38:08:38:a7:18:f7:6b:cd:5c: 34:3f:35:62:e1:cd:60:7f:94:24:1e:4c:92:bd:d5: 9a:e9:08:5c:2c:77:5d:4a:ca:77:a2:57:55:4b:44: f8:b6:cf:77:41:5d:24:b3:cb:e4:91:ca:cd:f7:11: 7d:7d:09:88:cb:8e:c7:12:3b:ee:66:c3:73:8a:8b: e1:46:dc:9a:a3:a4:68:c5:d9:6c:89:70:26:85:d1: 01:6f:b1:14:82:72:90:66:33:d2:84:86:e8:77:8f: 2d:43:e3:10:4d:5a:7b:e7:34:25:34:73:0d:e9:6a: 42:7a:ea:60:13:7d:6c:f5:67:4e:69:22:a8:3c:62: f5:75:c0:6a:a7:23:96:6d:c7:7b:0c:9a:72:e3:f3: 4b:e6:24:16:fe:bb:c4:cb:d6:ee:26:fe:a7:f4:2e: 0c:46:6b:da:fd:a5:4c:81:aa:02:4c:05:95:18:02: 7c:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:E4:EA:F1:46:FB:38:64:49:3D:DB:F9:30:A8:B1:EA:AC:CD:19:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3c126bd3-337a-46ea-8aab-c2cd7594edf9/a611323c-5d49-3b79-a1f9-62dc57283557.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3c126bd3-337a-46ea-8aab-c2cd7594edf9/3c126bd3-337a-46ea-8aab-c2cd7594edf9.crl X509v3 Authority Key Identifier: keyid:1C:39:7D:D2:AA:2B:C3:BB:B1:39:4D:AC:AC:48:73:70:52:F9:0A:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3c126bd3-337a-46ea-8aab-c2cd7594edf9.cer sbgp-ipAddrBlock: critical IPv4: 23.128.140.0/24 IPv6: 2602:f7b3::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:ba:b4:43:84:d5:be:5a:3a:ce:5c:8a:b6:02:d7:9d:a8:82: 98:9d:86:77:a9:95:f1:d7:bc:c1:49:82:16:28:95:79:ac:4c: 52:a9:91:e1:e3:36:50:dc:73:81:30:26:fc:03:e2:8f:17:bc: 2c:73:7b:56:96:a8:fd:cd:71:13:27:ac:2f:5b:4d:0e:2d:b4: b0:78:71:88:3e:d9:ef:9f:bf:bd:6a:19:f3:f5:e8:9f:84:20: ff:06:50:cc:25:64:88:14:54:2f:30:6b:f6:c5:5c:db:e7:ae: 1d:ef:cb:ba:ac:f0:0a:c4:56:37:44:f5:a6:23:c4:35:66:e1: 36:9e:d1:92:59:3b:1a:4a:60:26:48:03:b1:89:b2:67:f4:44: b9:f3:da:1f:ca:22:f1:62:f5:20:bb:31:bd:43:04:42:af:b9: 0b:c2:a3:95:a6:95:20:42:25:a0:6d:01:0d:ff:0e:3a:b3:5d: 4c:0b:45:64:b8:05:92:f0:3c:38:13:ba:7b:d4:9f:dc:e0:ba: e3:9a:6a:15:04:bd:0f:c3:60:a9:23:d5:7a:f3:0b:d5:0d:c9: a1:f9:24:cc:8f:a2:bc:4c:63:e5:0e:88:8b:05:96:0e:0a:7b: 45:72:7f:eb:12:83:07:0a:86:f9:75:aa:92:68:7d:46:cf:c1: 89:65:75:12 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE9Jc0+v7Hbxi2EFoIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2MxMjZiZDMtMzM3YS00NmVhLThhYWItYzJjZDc1OTRl ZGY5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk OGM5YWU5MTQtYmY4OS00ODZhLTkzMzMtNDM3YjQ0NjZhMDlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqRbg15Ip2eV8IHdyxpxapZdOh5y67lZPrBPO /MtA3ZVrtGNgXDp+MBWSaNqf1qTdQCERuDzI7GW9LG4jvTe4Eb2Ry1pwOmKyZI2v ZR52ywA4CDinGPdrzVw0PzVi4c1gf5QkHkySvdWa6QhcLHddSsp3oldVS0T4ts93 QV0ks8vkkcrN9xF9fQmIy47HEjvuZsNziovhRtyao6RoxdlsiXAmhdEBb7EUgnKQ ZjPShIbod48tQ+MQTVp75zQlNHMN6WpCeupgE31s9WdOaSKoPGL1dcBqpyOWbcd7 DJpy4/NL5iQW/rvEy9buJv6n9C4MRmva/aVMgaoCTAWVGAJ8yQIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFJPk6vFG+zhkST3b+TCoseqszRmyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8zYzEy NmJkMy0zMzdhLTQ2ZWEtOGFhYi1jMmNkNzU5NGVkZjkvYTYxMTMyM2MtNWQ0OS0z Yjc5LWExZjktNjJkYzU3MjgzNTU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvM2MxMjZiZDMtMzM3YS00NmVhLThh YWItYzJjZDc1OTRlZGY5LzNjMTI2YmQzLTMzN2EtNDZlYS04YWFiLWMyY2Q3NTk0 ZWRmOS5jcmwwHwYDVR0jBBgwFoAUHDl90qorw7uxOU2srEhzcFL5CnAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8zYzEyNmJkMy0zMzdhLTQ2ZWEtOGFhYi1jMmNk NzU5NGVkZjkuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF4CMMA4E AgACMAgDBgAmAvezADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBYurRDhNW+WjrOXIq2AtedqIKYnYZ3qZXx 17zBSYIWKJV5rExSqZHh4zZQ3HOBMCb8A+KPF7wsc3tWlqj9zXETJ6wvW00OLbSw eHGIPtnvn7+9ahnz9eifhCD/BlDMJWSIFFQvMGv2xVzb564d78u6rPAKxFY3RPWm I8Q1ZuE2ntGSWTsaSmAmSAOxibJn9ES589ofyiLxYvUguzG9QwRCr7kLwqOVppUg QiWgbQEN/w46s11MC0VkuAWS8Dw4E7p71J/c4LrjmmoVBL0Pw2CpI9V68wvVDcmh +STMj6K8TGPlDoiLBZYOCntFcn/rEoMHCob5daqSaH1Gz8GJZXUS -----END CERTIFICATE-----Generated at Mon Oct 5 14:38:10 2026 by rpki-client