$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5ddd1dc1-47e3-4a5e-af7f-944939d210c6/445b1c06-fec1-3b1f-850d-02ac65cc2ebb.roa File: 445b1c06-fec1-3b1f-850d-02ac65cc2ebb.roa (raw, json) Hash identifier: yOTYYkhlRW7O82mlNAGrWgbv/djOqzFvSkf9ewtDPS8= Subject key identifier: 90:85:CD:72:26:36:D1:3A:8E:74:30:69:87:97:EE:90:AD:27:39:6A Certificate issuer: /CN=5ddd1dc1-47e3-4a5e-af7f-944939d210c6 Certificate serial: 010D0C9F4328584ED001F85BFBE5E55714E87D80 Authority key identifier: 16:F5:A0:96:E3:BD:EE:DD:97:CA:25:D1:7B:F4:DF:FF:94:B3:84:C4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5ddd1dc1-47e3-4a5e-af7f-944939d210c6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5ddd1dc1-47e3-4a5e-af7f-944939d210c6/445b1c06-fec1-3b1f-850d-02ac65cc2ebb.roa Signing time: Wed 12 Aug 2026 13:00:12 +0000 ROA not before: Wed 12 Aug 2026 13:00:12 +0000 ROA not after: Tue 10 Nov 2026 14:00:12 +0000 asID: 401481 IP address blocks: 23.128.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5ddd1dc1-47e3-4a5e-af7f-944939d210c6/5ddd1dc1-47e3-4a5e-af7f-944939d210c6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5ddd1dc1-47e3-4a5e-af7f-944939d210c6/5ddd1dc1-47e3-4a5e-af7f-944939d210c6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5ddd1dc1-47e3-4a5e-af7f-944939d210c6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Sep 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d0:01:f8:5b:fb:e5:e5:57:14:e8:7d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ddd1dc1-47e3-4a5e-af7f-944939d210c6 Validity Not Before: Aug 12 13:00:12 2026 GMT Not After : Nov 10 14:00:12 2026 GMT Subject: CN=b89b1a1e-b40c-4662-9370-31bdfe22d0cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:5a:bb:38:c9:66:e2:1c:cf:cf:02:d1:8e:a3: 2e:52:37:6c:0f:67:6d:4b:82:15:dc:5f:9f:e3:58: 29:d3:94:12:44:21:6e:b3:df:47:8f:e8:76:15:fa: ae:80:b5:4f:95:e4:36:84:3d:d3:2b:24:6e:8a:e0: 8f:26:45:90:6d:ce:99:1b:a8:91:a7:47:f6:3c:08: a9:37:c9:99:24:1f:31:6a:ca:8c:37:de:06:c7:c8: f6:ea:39:d1:a7:16:54:23:87:22:15:cb:f5:cc:d3: 19:80:ce:63:9a:57:9b:9d:6c:7d:23:6f:24:08:f1: ad:b6:e9:88:3d:3d:3c:45:9f:be:6f:79:a0:25:0e: 6f:bc:f7:9f:d7:bd:44:05:48:43:b8:be:71:68:89: 94:ff:62:64:5d:be:92:63:bc:17:a2:8a:90:22:92: 77:85:3b:93:d4:c3:ee:a7:eb:a2:7f:b5:8e:a0:57: a9:77:fd:2b:09:71:8b:71:b3:34:99:32:3a:7a:42: cb:7c:84:49:85:61:b2:50:e6:6b:67:cc:10:f4:01: 8d:07:5c:5c:5f:aa:24:63:4e:df:7b:09:5a:c5:cd: f7:55:8c:9d:93:13:e2:9a:c1:60:96:e5:be:4c:6b: 00:7c:68:77:a6:49:74:9b:56:ed:67:0f:87:ec:5e: 20:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:85:CD:72:26:36:D1:3A:8E:74:30:69:87:97:EE:90:AD:27:39:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5ddd1dc1-47e3-4a5e-af7f-944939d210c6/445b1c06-fec1-3b1f-850d-02ac65cc2ebb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5ddd1dc1-47e3-4a5e-af7f-944939d210c6/5ddd1dc1-47e3-4a5e-af7f-944939d210c6.crl X509v3 Authority Key Identifier: keyid:16:F5:A0:96:E3:BD:EE:DD:97:CA:25:D1:7B:F4:DF:FF:94:B3:84:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5ddd1dc1-47e3-4a5e-af7f-944939d210c6.cer sbgp-ipAddrBlock: critical IPv4: 23.128.252.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d2:02:66:e2:c1:e8:47:73:df:b5:2d:8f:b1:c7:30:dd:b0:30: fe:c5:e1:2f:cf:49:b5:67:6d:8a:87:b7:4e:3a:a2:f5:c6:65: 7f:e9:2d:5c:ec:83:f5:37:6a:b7:e1:85:72:73:39:34:34:0a: 2c:34:69:e9:55:2c:3b:e7:9c:23:01:10:11:d9:e4:fb:e5:f8: d3:fd:51:37:eb:66:7d:83:d2:51:e0:0c:d9:f5:1c:32:f5:03: 6b:34:78:6b:2d:4f:d7:9c:c3:27:cc:ec:f7:71:9d:99:1a:7d: c5:f9:f3:54:fe:89:c9:50:dd:6a:22:84:8b:16:0c:c4:e0:98: 1f:53:4a:93:58:0a:09:56:17:7d:bb:ba:ff:18:49:6c:a2:ba: bc:8b:4a:b4:a1:05:1f:9d:e1:02:16:79:8a:7f:33:c3:19:bf: eb:91:18:cd:d1:47:97:db:77:0d:4b:6d:03:40:1f:f7:a6:ab: 47:f0:bc:a4:da:e9:c4:e9:e3:d2:2a:97:54:a2:42:78:ee:ba: f5:70:c0:7c:b0:8a:1b:a6:57:54:34:40:be:76:9a:42:18:a6: 31:ec:11:38:aa:c3:eb:cf:d4:97:82:26:02:c5:87:6a:ac:c1: 21:92:28:e3:fa:84:23:3d:29:78:a5:b9:cc:c3:ec:07:38:4d: 9f:06:64:1f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7QAfhb++XlVxTofYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWRkZDFkYzEtNDdlMy00YTVlLWFmN2YtOTQ0OTM5ZDIx MGM2MB4XDTI2MDgxMjEzMDAxMloXDTI2MTExMDE0MDAxMlowLzEtMCsGA1UEAxMk Yjg5YjFhMWUtYjQwYy00NjYyLTkzNzAtMzFiZGZlMjJkMGNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApFq7OMlm4hzPzwLRjqMuUjdsD2dtS4IV3F+f 41gp05QSRCFus99Hj+h2FfqugLVPleQ2hD3TKyRuiuCPJkWQbc6ZG6iRp0f2PAip N8mZJB8xasqMN94Gx8j26jnRpxZUI4ciFcv1zNMZgM5jmlebnWx9I28kCPGttumI PT08RZ++b3mgJQ5vvPef171EBUhDuL5xaImU/2JkXb6SY7wXooqQIpJ3hTuT1MPu p+uif7WOoFepd/0rCXGLcbM0mTI6ekLLfIRJhWGyUOZrZ8wQ9AGNB1xcX6okY07f ewlaxc33VYydkxPimsFgluW+TGsAfGh3pkl0m1btZw+H7F4g1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJCFzXImNtE6jnQwaYeX7pCtJzlqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi81ZGRk MWRjMS00N2UzLTRhNWUtYWY3Zi05NDQ5MzlkMjEwYzYvNDQ1YjFjMDYtZmVjMS0z YjFmLTg1MGQtMDJhYzY1Y2MyZWJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNWRkZDFkYzEtNDdlMy00YTVlLWFm N2YtOTQ0OTM5ZDIxMGM2LzVkZGQxZGMxLTQ3ZTMtNGE1ZS1hZjdmLTk0NDkzOWQy MTBjNi5jcmwwHwYDVR0jBBgwFoAUFvWgluO97t2XyiXRe/Tf/5SzhMQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi81ZGRkMWRjMS00N2UzLTRhNWUtYWY3Zi05NDQ5 MzlkMjEwYzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4D8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANICZuLB6Edz37Utj7HHMN2wMP7F4S/PSbVnbYqHt046ovXGZX/pLVzs g/U3arfhhXJzOTQ0Ciw0aelVLDvnnCMBEBHZ5Pvl+NP9UTfrZn2D0lHgDNn1HDL1 A2s0eGstT9ecwyfM7PdxnZkafcX581T+iclQ3WoihIsWDMTgmB9TSpNYCglWF327 uv8YSWyiuryLSrShBR+d4QIWeYp/M8MZv+uRGM3RR5fbdw1LbQNAH/emq0fwvKTa 6cTp49Iql1SiQnjuuvVwwHywihumV1Q0QL52mkIYpjHsETiqw+vP1JeCJgLFh2qs wSGSKOP6hCM9KXiluczD7Ac4TZ8GZB8= -----END CERTIFICATE-----Generated at Fri Sep 11 21:35:19 2026 by rpki-client