$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/42804204-aefa-4fac-9d39-1599fa403e46/cbe750b5-a48d-3ed7-81f6-b93eb1a36401.roa File: cbe750b5-a48d-3ed7-81f6-b93eb1a36401.roa (raw, json) Hash identifier: h59bjRhdFKM2HbOlJmmSfp9GktLNisRFoNDvq4Mlmqg= Subject key identifier: B2:05:35:0F:91:29:80:7A:16:90:06:37:AD:F1:75:57:C5:3E:E4:FF Certificate issuer: /CN=42804204-aefa-4fac-9d39-1599fa403e46 Certificate serial: 010D0C9F4328584EE921F434D6D2BEB863779800 Authority key identifier: 05:7C:C8:2D:4B:F8:A8:69:AF:27:AA:08:87:17:16:12:50:B5:D4:70 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/42804204-aefa-4fac-9d39-1599fa403e46.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/42804204-aefa-4fac-9d39-1599fa403e46/cbe750b5-a48d-3ed7-81f6-b93eb1a36401.roa Signing time: Fri 21 Aug 2026 13:00:11 +0000 ROA not before: Fri 21 Aug 2026 13:00:11 +0000 ROA not after: Thu 19 Nov 2026 14:00:11 +0000 asID: 401414 IP address blocks: 23.128.76.0/24 maxlen: 24 2602:f7c6::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/42804204-aefa-4fac-9d39-1599fa403e46/42804204-aefa-4fac-9d39-1599fa403e46.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/42804204-aefa-4fac-9d39-1599fa403e46/42804204-aefa-4fac-9d39-1599fa403e46.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/42804204-aefa-4fac-9d39-1599fa403e46.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 27 Aug 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e9:21:f4:34:d6:d2:be:b8:63:77:98:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42804204-aefa-4fac-9d39-1599fa403e46 Validity Not Before: Aug 21 13:00:11 2026 GMT Not After : Nov 19 14:00:11 2026 GMT Subject: CN=9b1222fa-718a-4b53-8d0b-dcd7edcc26d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:1d:41:80:bc:40:08:ad:60:45:ba:e5:16:71: bc:53:6e:17:17:3a:40:f4:0d:27:8a:be:ee:61:9a: 13:17:a7:b2:76:71:9f:a2:ea:90:f8:1e:f5:ae:5b: 90:45:dd:0e:07:c9:a3:55:56:96:eb:ff:34:ad:44: 0e:6b:43:26:01:19:5d:00:6b:9e:15:ea:5d:5c:66: 81:8f:6c:d2:ae:92:75:f3:13:52:0e:8a:ae:e9:08: 9f:58:08:1b:5f:88:3d:1c:04:63:77:0a:a9:a7:d3: 7a:af:ee:f3:54:56:51:fe:c6:d7:43:67:04:06:3a: 89:18:37:c9:d5:55:60:52:f7:bc:aa:d5:96:eb:ad: 54:0f:cd:9d:b2:4e:8f:13:d9:75:57:6e:27:24:08: 2e:f9:3b:55:f0:81:74:d9:f1:ac:3a:54:4b:bb:60: 32:47:de:73:2d:12:50:d4:c8:a2:8b:11:38:3c:12: 32:3a:87:81:e1:12:02:5c:3c:9c:35:93:33:ac:f6: c3:ea:f9:c5:bc:9f:34:89:15:42:d5:71:ae:3f:bb: bb:cc:39:a9:c2:3e:c2:82:88:a8:0d:95:f2:b5:5b: 51:cf:d0:77:78:a2:e7:1e:df:5f:e1:6b:4a:ac:20: df:d1:92:db:bb:db:ae:8f:5a:dc:bf:a0:fb:75:31: 46:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:05:35:0F:91:29:80:7A:16:90:06:37:AD:F1:75:57:C5:3E:E4:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/42804204-aefa-4fac-9d39-1599fa403e46/cbe750b5-a48d-3ed7-81f6-b93eb1a36401.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/42804204-aefa-4fac-9d39-1599fa403e46/42804204-aefa-4fac-9d39-1599fa403e46.crl X509v3 Authority Key Identifier: keyid:05:7C:C8:2D:4B:F8:A8:69:AF:27:AA:08:87:17:16:12:50:B5:D4:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/42804204-aefa-4fac-9d39-1599fa403e46.cer sbgp-ipAddrBlock: critical IPv4: 23.128.76.0/24 IPv6: 2602:f7c6::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:3f:48:7c:42:4c:d3:47:5e:68:52:f1:0b:eb:9e:d6:83:28: 3e:c6:f0:e0:e2:0b:a3:dd:c2:63:84:8f:ab:e2:ab:c7:ee:86: b6:a2:e2:ee:39:e1:47:c3:37:53:2f:a0:c4:c5:9d:91:8c:17: 6f:ec:18:9c:6d:17:c3:1c:6f:d3:c4:50:9d:d7:ea:20:45:b5: 0b:27:18:7e:c3:d6:05:06:d4:0e:be:17:26:cb:4f:6d:c7:c6: 7b:a6:bf:89:cf:db:af:f6:85:c7:7b:2c:24:e4:25:ef:15:4f: 7c:b7:93:a3:3a:62:5b:0a:9f:f6:80:97:98:5f:43:30:55:d5: 52:e6:ff:36:91:50:e1:f6:00:d1:96:2b:f0:5c:56:96:b0:fe: 11:6c:a6:33:38:56:64:d7:98:8b:d0:a4:8d:99:9b:fb:68:e9: d3:12:cd:5d:b2:52:3a:96:1d:f4:60:7f:7b:13:fc:66:cc:6d: e3:bd:e2:4a:b0:01:8d:10:a3:2b:a6:f2:ac:59:ff:6b:76:86: e2:09:2d:f7:4a:b7:fe:f4:8e:9e:b9:a5:0b:6a:a6:56:b1:59: 73:cb:3f:32:7f:6e:2c:d4:f7:12:d7:28:c1:05:cc:45:bb:ee: 9f:49:60:10:37:a5:9c:87:af:f8:03:7d:40:45:dc:10:5a:4a: 14:3e:49:80 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE7pIfQ01tK+uGN3mAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDI4MDQyMDQtYWVmYS00ZmFjLTlkMzktMTU5OWZhNDAz ZTQ2MB4XDTI2MDgyMTEzMDAxMVoXDTI2MTExOTE0MDAxMVowLzEtMCsGA1UEAxMk OWIxMjIyZmEtNzE4YS00YjUzLThkMGItZGNkN2VkY2MyNmQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4R1BgLxACK1gRbrlFnG8U24XFzpA9A0nir7u YZoTF6eydnGfouqQ+B71rluQRd0OB8mjVVaW6/80rUQOa0MmARldAGueFepdXGaB j2zSrpJ18xNSDoqu6QifWAgbX4g9HARjdwqpp9N6r+7zVFZR/sbXQ2cEBjqJGDfJ 1VVgUve8qtWW661UD82dsk6PE9l1V24nJAgu+TtV8IF02fGsOlRLu2AyR95zLRJQ 1MiiixE4PBIyOoeB4RICXDycNZMzrPbD6vnFvJ80iRVC1XGuP7u7zDmpwj7Cgoio DZXytVtRz9B3eKLnHt9f4WtKrCDf0ZLbu9uuj1rcv6D7dTFGEwIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFLIFNQ+RKYB6FpAGN63xdVfFPuT/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi80Mjgw NDIwNC1hZWZhLTRmYWMtOWQzOS0xNTk5ZmE0MDNlNDYvY2JlNzUwYjUtYTQ4ZC0z ZWQ3LTgxZjYtYjkzZWIxYTM2NDAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNDI4MDQyMDQtYWVmYS00ZmFjLTlk MzktMTU5OWZhNDAzZTQ2LzQyODA0MjA0LWFlZmEtNGZhYy05ZDM5LTE1OTlmYTQw M2U0Ni5jcmwwHwYDVR0jBBgwFoAUBXzILUv4qGmvJ6oIhxcWElC11HAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi80MjgwNDIwNC1hZWZhLTRmYWMtOWQzOS0xNTk5 ZmE0MDNlNDYuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF4BMMA4E AgACMAgDBgAmAvfGADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQByP0h8QkzTR15oUvEL657Wgyg+xvDg4guj 3cJjhI+r4qvH7oa2ouLuOeFHwzdTL6DExZ2RjBdv7BicbRfDHG/TxFCd1+ogRbUL Jxh+w9YFBtQOvhcmy09tx8Z7pr+Jz9uv9oXHeywk5CXvFU98t5OjOmJbCp/2gJeY X0MwVdVS5v82kVDh9gDRlivwXFaWsP4RbKYzOFZk15iL0KSNmZv7aOnTEs1dslI6 lh30YH97E/xmzG3jveJKsAGNEKMrpvKsWf9rdobiCS33Srf+9I6euaULaqZWsVlz yz8yf24s1PcS1yjBBcxFu+6fSWAQN6Wch6/4A31ARdwQWkoUPkmA -----END CERTIFICATE-----Generated at Tue Aug 25 21:16:26 2026 by rpki-client