$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5ddd1dc1-47e3-4a5e-af7f-944939d210c6/445b1c06-fec1-3b1f-850d-02ac65cc2ebb.roa File: 445b1c06-fec1-3b1f-850d-02ac65cc2ebb.roa (raw, json) Hash identifier: 5hdBnn9eYMDDzYlMjgd8b7b1dJwsR7PE81zNjWaFF9g= Subject key identifier: F1:75:69:E6:57:3B:66:A6:66:E3:2F:2A:47:BE:72:8D:01:83:3F:48 Certificate issuer: /CN=5ddd1dc1-47e3-4a5e-af7f-944939d210c6 Certificate serial: 010D0C9F4328584F71EDA701D54F67A662EFBC80 Authority key identifier: 16:F5:A0:96:E3:BD:EE:DD:97:CA:25:D1:7B:F4:DF:FF:94:B3:84:C4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5ddd1dc1-47e3-4a5e-af7f-944939d210c6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5ddd1dc1-47e3-4a5e-af7f-944939d210c6/445b1c06-fec1-3b1f-850d-02ac65cc2ebb.roa Signing time: Fri 09 Oct 2026 13:00:13 +0000 ROA not before: Fri 09 Oct 2026 13:00:13 +0000 ROA not after: Thu 07 Jan 2027 14:00:13 +0000 asID: 401481 IP address blocks: 23.128.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5ddd1dc1-47e3-4a5e-af7f-944939d210c6/5ddd1dc1-47e3-4a5e-af7f-944939d210c6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5ddd1dc1-47e3-4a5e-af7f-944939d210c6/5ddd1dc1-47e3-4a5e-af7f-944939d210c6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5ddd1dc1-47e3-4a5e-af7f-944939d210c6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:71:ed:a7:01:d5:4f:67:a6:62:ef:bc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ddd1dc1-47e3-4a5e-af7f-944939d210c6 Validity Not Before: Oct 9 13:00:13 2026 GMT Not After : Jan 7 14:00:13 2027 GMT Subject: CN=1ffef3f0-fbb0-4fbf-8acf-7c26b60d808e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:56:9c:7b:0b:94:09:7e:43:23:ad:ff:e7:5c: b1:b2:52:44:11:ee:e8:e6:a3:42:ea:0f:ac:29:88: d1:28:9d:24:0b:95:fa:c3:7a:db:94:36:ab:17:3c: 00:83:71:c7:b4:f4:01:c2:d7:5a:39:63:b7:fb:94: 75:04:2f:41:03:7b:9d:d4:3a:e7:fc:2b:02:43:4f: c0:18:74:88:95:2e:c0:09:99:d8:33:af:8a:4a:99: e2:b8:8e:9b:a4:c6:09:dd:dc:e3:06:3d:6c:c5:e1: f2:c6:6f:9d:bd:34:96:e0:c6:1b:e4:76:02:3c:3a: 48:0e:aa:9b:0a:a0:22:c5:c0:d7:1a:b9:ca:02:f9: 15:52:1b:aa:bc:23:2c:ec:30:88:ac:02:b1:06:34: 9b:c5:99:d4:7a:74:a4:04:80:c6:b1:83:29:69:d6: 73:19:91:57:77:0c:75:be:3a:b9:51:d6:ed:58:8f: 05:9d:cc:aa:ea:2f:64:74:a6:96:35:1e:a1:76:a8: 6e:11:07:67:1d:4e:1c:c3:b2:e3:9a:d8:0d:48:14: 21:49:7b:78:7d:d2:86:8b:93:ea:eb:12:aa:6a:33: 7a:de:ba:da:48:35:c8:7b:c8:d3:96:7e:bc:59:6c: f3:92:bc:33:30:38:61:ee:71:3b:0f:2b:35:8e:8f: 51:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:75:69:E6:57:3B:66:A6:66:E3:2F:2A:47:BE:72:8D:01:83:3F:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5ddd1dc1-47e3-4a5e-af7f-944939d210c6/445b1c06-fec1-3b1f-850d-02ac65cc2ebb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5ddd1dc1-47e3-4a5e-af7f-944939d210c6/5ddd1dc1-47e3-4a5e-af7f-944939d210c6.crl X509v3 Authority Key Identifier: keyid:16:F5:A0:96:E3:BD:EE:DD:97:CA:25:D1:7B:F4:DF:FF:94:B3:84:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5ddd1dc1-47e3-4a5e-af7f-944939d210c6.cer sbgp-ipAddrBlock: critical IPv4: 23.128.252.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:18:f5:e8:51:6e:ee:3f:81:1b:0d:f6:47:85:ae:c1:45:17: af:9b:c0:92:e9:e0:db:7e:9d:95:f9:14:a3:ca:87:f9:a1:db: 1a:0c:b9:37:b5:9a:0d:f3:61:92:ec:7d:d8:56:85:c4:83:66: f6:d6:5d:de:73:31:22:83:ce:1d:4e:98:bb:bb:49:2c:f0:b9: be:98:ec:b8:3b:d8:af:27:53:d2:de:3c:a3:06:68:47:fe:3f: 07:99:b1:9b:7e:22:9d:b9:56:f7:0e:f0:47:5d:1e:b4:ae:a0: 1d:70:2d:d6:41:b4:1b:51:1d:a2:f0:04:0e:0d:7e:b4:ba:27: 4f:dc:f7:97:e8:9f:5a:a5:0b:72:74:21:19:a4:78:29:74:68: ba:25:ad:bc:0d:82:de:5a:01:5b:04:eb:eb:22:92:7f:f2:99: 80:d9:05:7b:55:4b:08:65:27:2d:1d:d8:21:c7:e6:bd:29:0f: a6:0a:84:bc:88:09:b5:b9:8e:2b:24:a6:e3:8a:6c:5b:ca:60: 37:1c:1b:39:50:7c:35:24:ee:e8:2c:62:e8:00:76:3e:4c:0f: 28:96:0e:e2:71:1a:39:82:0c:d1:02:9c:38:20:a8:ad:38:a9: 9a:85:aa:f8:d8:1c:6b:a9:e7:1c:8c:2f:a2:62:53:b6:17:b7: cb:26:99:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9x7acB1U9npmLvvIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWRkZDFkYzEtNDdlMy00YTVlLWFmN2YtOTQ0OTM5ZDIx MGM2MB4XDTI2MTAwOTEzMDAxM1oXDTI3MDEwNzE0MDAxM1owLzEtMCsGA1UEAxMk MWZmZWYzZjAtZmJiMC00ZmJmLThhY2YtN2MyNmI2MGQ4MDhlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjVacewuUCX5DI63/51yxslJEEe7o5qNC6g+s KYjRKJ0kC5X6w3rblDarFzwAg3HHtPQBwtdaOWO3+5R1BC9BA3ud1Drn/CsCQ0/A GHSIlS7ACZnYM6+KSpniuI6bpMYJ3dzjBj1sxeHyxm+dvTSW4MYb5HYCPDpIDqqb CqAixcDXGrnKAvkVUhuqvCMs7DCIrAKxBjSbxZnUenSkBIDGsYMpadZzGZFXdwx1 vjq5UdbtWI8Fncyq6i9kdKaWNR6hdqhuEQdnHU4cw7LjmtgNSBQhSXt4fdKGi5Pq 6xKqajN63rraSDXIe8jTln68WWzzkrwzMDhh7nE7Dys1jo9RrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPF1aeZXO2amZuMvKke+co0Bgz9IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi81ZGRk MWRjMS00N2UzLTRhNWUtYWY3Zi05NDQ5MzlkMjEwYzYvNDQ1YjFjMDYtZmVjMS0z YjFmLTg1MGQtMDJhYzY1Y2MyZWJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNWRkZDFkYzEtNDdlMy00YTVlLWFm N2YtOTQ0OTM5ZDIxMGM2LzVkZGQxZGMxLTQ3ZTMtNGE1ZS1hZjdmLTk0NDkzOWQy MTBjNi5jcmwwHwYDVR0jBBgwFoAUFvWgluO97t2XyiXRe/Tf/5SzhMQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi81ZGRkMWRjMS00N2UzLTRhNWUtYWY3Zi05NDQ5 MzlkMjEwYzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4D8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADAY9ehRbu4/gRsN9keFrsFFF6+bwJLp4Nt+nZX5FKPKh/mh2xoMuTe1 mg3zYZLsfdhWhcSDZvbWXd5zMSKDzh1OmLu7SSzwub6Y7Lg72K8nU9LePKMGaEf+ PweZsZt+Ip25VvcO8EddHrSuoB1wLdZBtBtRHaLwBA4NfrS6J0/c95fon1qlC3J0 IRmkeCl0aLolrbwNgt5aAVsE6+sikn/ymYDZBXtVSwhlJy0d2CHH5r0pD6YKhLyI CbW5jiskpuOKbFvKYDccGzlQfDUk7ugsYugAdj5MDyiWDuJxGjmCDNECnDggqK04 qZqFqvjYHGup5xyML6JiU7YXt8smmTQ= -----END CERTIFICATE-----Generated at Wed Nov 4 04:37:50 2026 by rpki-client