$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ac65e460-1633-4b44-9dc5-be303c8b3f09/05d4b98b-2470-3505-8f81-b5b2106e3230.roa File: 05d4b98b-2470-3505-8f81-b5b2106e3230.roa (raw, json) Hash identifier: OiMvTnS1zAzEaM13z1yC8Vv8e2yyqU2BzG4oGVupIHE= Subject key identifier: 11:09:7B:35:8B:5D:23:E8:90:A4:CB:B5:68:20:ED:72:07:BE:17:46 Certificate issuer: /CN=ac65e460-1633-4b44-9dc5-be303c8b3f09 Certificate serial: 010D0C9F4328584F4972A11EBC07FD03AAD25700 Authority key identifier: 20:A0:6F:E0:40:2F:37:1F:59:03:00:DD:95:67:73:32:9F:7E:CC:2D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ac65e460-1633-4b44-9dc5-be303c8b3f09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ac65e460-1633-4b44-9dc5-be303c8b3f09/05d4b98b-2470-3505-8f81-b5b2106e3230.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 197362 IP address blocks: 23.134.52.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ac65e460-1633-4b44-9dc5-be303c8b3f09/ac65e460-1633-4b44-9dc5-be303c8b3f09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ac65e460-1633-4b44-9dc5-be303c8b3f09/ac65e460-1633-4b44-9dc5-be303c8b3f09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ac65e460-1633-4b44-9dc5-be303c8b3f09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 Oct 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:72:a1:1e:bc:07:fd:03:aa:d2:57:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac65e460-1633-4b44-9dc5-be303c8b3f09 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=fc9d49f8-a0d8-4597-aca8-16af9c9ccc5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:f6:4a:b5:a8:a6:68:b7:2d:bb:0b:42:22:e0: 9e:7b:8d:e5:0e:4c:20:62:20:8f:d7:58:87:85:74: c2:80:9b:b9:41:23:eb:38:95:3f:16:f7:56:46:58: 24:3d:60:eb:5d:fc:9e:51:0c:ec:81:f4:2d:f2:41: cf:cb:de:5e:7e:1b:d8:9d:dd:32:ae:f1:9e:f8:4d: 72:69:3a:a1:14:31:c4:7d:ad:f1:01:ef:3c:9d:ea: 46:cb:0e:78:39:6a:fa:66:26:40:63:95:f1:3c:83: 89:73:7d:cd:dc:3e:6b:3e:c2:74:4c:03:0a:b8:30: a3:9b:fd:3c:41:fc:8e:84:31:9e:95:d4:3b:87:87: 9b:8c:b0:ac:5d:9f:62:3b:5a:b9:84:fa:cf:a2:2b: 5b:2e:8b:c9:08:5e:4a:ce:7b:4e:c6:64:3a:ae:9e: 32:c5:a9:6a:78:27:bc:4b:08:90:fe:2d:67:5a:b5: 07:20:55:c3:31:d1:b4:7d:8f:04:4f:26:40:09:4f: cf:d9:99:01:99:40:e7:3c:32:2b:42:1e:ac:d7:c0: 62:62:33:f1:80:33:cf:67:19:95:5a:f0:f8:6c:1f: ef:35:a7:b6:da:8c:36:15:c3:5d:6f:63:aa:63:f1: 7c:fb:0b:22:a9:50:09:d9:34:9c:55:7d:15:4d:65: c6:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:09:7B:35:8B:5D:23:E8:90:A4:CB:B5:68:20:ED:72:07:BE:17:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ac65e460-1633-4b44-9dc5-be303c8b3f09/05d4b98b-2470-3505-8f81-b5b2106e3230.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ac65e460-1633-4b44-9dc5-be303c8b3f09/ac65e460-1633-4b44-9dc5-be303c8b3f09.crl X509v3 Authority Key Identifier: keyid:20:A0:6F:E0:40:2F:37:1F:59:03:00:DD:95:67:73:32:9F:7E:CC:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ac65e460-1633-4b44-9dc5-be303c8b3f09.cer sbgp-ipAddrBlock: critical IPv4: 23.134.52.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:68:c6:47:49:55:d3:fd:4e:e9:81:79:f4:9f:1c:07:86:b2: 1d:7d:e9:f5:eb:71:03:5f:7a:11:52:33:6d:ed:54:d5:11:6f: 10:ed:b9:a0:aa:ff:5b:30:3b:13:fe:ff:44:b4:25:03:11:1b: 69:cf:bb:5b:53:4a:bd:3d:1b:cd:fa:fd:ae:71:60:72:3c:8a: da:2a:f7:e2:b8:ae:88:c3:c8:eb:4a:b1:d1:41:7b:6b:e5:2e: ad:20:ab:36:c8:1b:ed:b5:49:79:b6:d5:b9:31:c5:1b:00:09: ae:a6:db:ee:d0:ba:45:6e:7a:9b:79:52:5b:27:c3:37:c4:e9: 75:3c:42:fd:e0:b6:e4:eb:4e:e3:28:4c:96:c1:32:60:30:99: 27:73:01:c3:77:a3:14:f4:4f:e0:89:05:c2:8f:0e:44:1e:6e: 69:cf:eb:e8:01:f0:6e:2a:d5:9d:86:31:21:c3:fa:dd:d4:07: 20:8a:fa:2a:b6:e9:2a:4d:65:0d:a5:d2:9f:b6:c2:e3:2b:e5: 9c:5a:85:40:6a:6e:fb:48:1e:9d:b6:1f:1b:97:6f:45:68:c8: ee:97:f4:0e:0b:51:4b:4b:b8:1a:b2:35:f0:83:cb:9a:45:43: b4:ba:a8:1c:07:5b:95:0d:bc:d1:90:99:d9:bb:e6:72:8c:7e: 0b:76:d5:ac -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JcqEevAf9A6rSVwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWM2NWU0NjAtMTYzMy00YjQ0LTlkYzUtYmUzMDNjOGIz ZjA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZmM5ZDQ5ZjgtYTBkOC00NTk3LWFjYTgtMTZhZjljOWNjYzVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqPZKtaimaLctuwtCIuCee43lDkwgYiCP11iH hXTCgJu5QSPrOJU/FvdWRlgkPWDrXfyeUQzsgfQt8kHPy95efhvYnd0yrvGe+E1y aTqhFDHEfa3xAe88nepGyw54OWr6ZiZAY5XxPIOJc33N3D5rPsJ0TAMKuDCjm/08 QfyOhDGeldQ7h4ebjLCsXZ9iO1q5hPrPoitbLovJCF5KzntOxmQ6rp4yxalqeCe8 SwiQ/i1nWrUHIFXDMdG0fY8ETyZACU/P2ZkBmUDnPDIrQh6s18BiYjPxgDPPZxmV WvD4bB/vNae22ow2FcNdb2OqY/F8+wsiqVAJ2TScVX0VTWXGkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBEJezWLXSPokKTLtWgg7XIHvhdGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hYzY1 ZTQ2MC0xNjMzLTRiNDQtOWRjNS1iZTMwM2M4YjNmMDkvMDVkNGI5OGItMjQ3MC0z NTA1LThmODEtYjViMjEwNmUzMjMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYWM2NWU0NjAtMTYzMy00YjQ0LTlk YzUtYmUzMDNjOGIzZjA5L2FjNjVlNDYwLTE2MzMtNGI0NC05ZGM1LWJlMzAzYzhi M2YwOS5jcmwwHwYDVR0jBBgwFoAUIKBv4EAvNx9ZAwDdlWdzMp9+zC0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9hYzY1ZTQ2MC0xNjMzLTRiNDQtOWRjNS1iZTMw M2M4YjNmMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4Y0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHFoxkdJVdP9TumBefSfHAeGsh196fXrcQNfehFSM23tVNURbxDtuaCq /1swOxP+/0S0JQMRG2nPu1tTSr09G836/a5xYHI8itoq9+K4rojDyOtKsdFBe2vl Lq0gqzbIG+21SXm21bkxxRsACa6m2+7QukVuept5UlsnwzfE6XU8Qv3gtuTrTuMo TJbBMmAwmSdzAcN3oxT0T+CJBcKPDkQebmnP6+gB8G4q1Z2GMSHD+t3UByCK+iq2 6SpNZQ2l0p+2wuMr5ZxahUBqbvtIHp22HxuXb0VoyO6X9A4LUUtLuBqyNfCDy5pF Q7S6qBwHW5UNvNGQmdm75nKMfgt21aw= -----END CERTIFICATE-----Generated at Wed Sep 30 01:04:46 2026 by rpki-client