$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b43c5615-9630-4bab-8258-f3b32e00f304/1f8b69fd-0f88-3d83-8616-5876e0d10640.roa File: 1f8b69fd-0f88-3d83-8616-5876e0d10640.roa (raw, json) Hash identifier: iYzs43cn0rCH/uQv1BO0iatU1iZkTS+jp+2t67Y5/KY= Subject key identifier: C5:BB:67:08:80:91:83:7E:7F:3E:42:34:30:A2:D7:2E:79:75:2B:C7 Certificate issuer: /CN=b43c5615-9630-4bab-8258-f3b32e00f304 Certificate serial: 010D0C9F4328584FA2C883FAA2352DB1B67D8D00 Authority key identifier: F8:68:64:D8:02:6E:DD:51:CD:3C:54:F5:81:BF:E8:A0:A1:30:FC:2C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b43c5615-9630-4bab-8258-f3b32e00f304.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b43c5615-9630-4bab-8258-f3b32e00f304/1f8b69fd-0f88-3d83-8616-5876e0d10640.roa Signing time: Tue 27 Oct 2026 01:00:14 +0000 ROA not before: Tue 27 Oct 2026 01:00:14 +0000 ROA not after: Mon 25 Jan 2027 02:00:14 +0000 asID: 36832 IP address blocks: 23.132.172.0/24 maxlen: 24 2602:f8c4::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b43c5615-9630-4bab-8258-f3b32e00f304/b43c5615-9630-4bab-8258-f3b32e00f304.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b43c5615-9630-4bab-8258-f3b32e00f304/b43c5615-9630-4bab-8258-f3b32e00f304.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b43c5615-9630-4bab-8258-f3b32e00f304.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:a2:c8:83:fa:a2:35:2d:b1:b6:7d:8d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b43c5615-9630-4bab-8258-f3b32e00f304 Validity Not Before: Oct 27 01:00:14 2026 GMT Not After : Jan 25 02:00:14 2027 GMT Subject: CN=82797cdf-d048-4cf9-8e97-ee5c1f849304 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:34:88:0f:04:b3:41:cc:21:39:ea:a1:03:fc: 2f:82:5d:d2:34:ba:7f:d6:01:81:ab:46:bb:01:8f: b1:7d:44:e0:7f:36:7f:a7:7b:a4:e5:42:8d:c9:bb: 58:8f:89:31:17:69:fe:67:5c:83:8d:5a:76:eb:bf: 41:00:b9:08:75:ae:a2:f2:94:27:74:04:e3:c0:98: 76:0f:dc:c7:df:33:c7:40:d9:64:90:7a:f5:3b:09: 72:88:49:81:ef:ce:ec:2c:d9:3c:aa:10:3f:db:0e: 4e:37:86:33:de:fd:6a:21:da:02:c5:fc:52:72:39: b1:67:dd:9c:31:45:c8:a1:5e:a2:5f:21:5b:34:8b: ea:ed:82:bf:1a:e5:6b:d6:69:1f:d1:b5:fb:6b:c4: 88:bc:26:ab:6b:06:a3:18:85:d4:db:30:a7:53:cd: 4f:20:13:de:19:6e:0a:57:6a:57:c9:64:e2:7a:d4: 0f:77:13:42:49:17:68:2c:55:31:93:26:5c:f6:8d: 1c:6d:e6:f6:37:af:f8:bd:de:1c:ad:f6:ff:65:e7: 9f:88:67:a5:1a:a7:e5:c9:ed:b8:7b:01:46:8e:ea: e6:ff:57:83:3a:01:02:77:5f:22:cb:2d:01:cf:f8: 10:a7:2c:41:98:1e:f7:fe:04:30:82:5d:e8:ac:9a: 89:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:BB:67:08:80:91:83:7E:7F:3E:42:34:30:A2:D7:2E:79:75:2B:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b43c5615-9630-4bab-8258-f3b32e00f304/1f8b69fd-0f88-3d83-8616-5876e0d10640.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b43c5615-9630-4bab-8258-f3b32e00f304/b43c5615-9630-4bab-8258-f3b32e00f304.crl X509v3 Authority Key Identifier: keyid:F8:68:64:D8:02:6E:DD:51:CD:3C:54:F5:81:BF:E8:A0:A1:30:FC:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b43c5615-9630-4bab-8258-f3b32e00f304.cer sbgp-ipAddrBlock: critical IPv4: 23.132.172.0/24 IPv6: 2602:f8c4::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:25:a2:e4:6e:20:23:11:35:66:1c:90:fa:c4:30:c5:5f:7e: 59:ea:b4:75:1f:e1:00:f9:bb:b7:5b:e6:af:1f:63:a1:e0:16: a2:e1:b9:eb:82:95:1b:bd:d8:74:01:fa:ee:85:b1:58:ec:e4: 62:47:59:57:b4:54:54:3e:df:c4:ea:d1:76:e9:04:f1:f8:e9: 8b:05:d1:c3:33:ea:cd:6a:60:19:61:11:52:1c:73:76:cb:31: eb:19:d6:36:6c:88:7a:3d:dc:35:75:40:13:b9:77:cd:04:99: e6:02:64:aa:0f:08:16:43:0a:08:b6:30:dd:81:dd:04:d3:dc: 07:f8:0d:12:b2:ef:e2:ac:3a:be:c8:65:cf:47:09:66:df:22: f6:ae:d1:3a:aa:31:a7:65:4d:fc:3c:a7:4e:1e:58:0f:4e:53: e3:b9:5b:32:61:6a:c9:4b:fc:73:42:95:58:71:d3:e9:33:68: 88:64:8a:54:de:0b:10:73:d2:dd:ab:86:b5:91:c8:e6:df:17: 4e:e1:0c:74:01:a8:5e:0f:85:42:66:f4:22:1e:20:cd:fb:57: df:93:fd:1c:74:ed:8c:7d:86:e2:17:a2:88:d5:8c:01:2a:95: 71:6e:25:a8:ba:d6:1f:46:c9:35:d5:b5:a6:be:fe:97:fb:20: 11:b8:26:e2 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE+iyIP6ojUtsbZ9jQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjQzYzU2MTUtOTYzMC00YmFiLTgyNTgtZjNiMzJlMDBm MzA0MB4XDTI2MTAyNzAxMDAxNFoXDTI3MDEyNTAyMDAxNFowLzEtMCsGA1UEAxMk ODI3OTdjZGYtZDA0OC00Y2Y5LThlOTctZWU1YzFmODQ5MzA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1DSIDwSzQcwhOeqhA/wvgl3SNLp/1gGBq0a7 AY+xfUTgfzZ/p3uk5UKNybtYj4kxF2n+Z1yDjVp2679BALkIda6i8pQndATjwJh2 D9zH3zPHQNlkkHr1OwlyiEmB787sLNk8qhA/2w5ON4Yz3v1qIdoCxfxScjmxZ92c MUXIoV6iXyFbNIvq7YK/GuVr1mkf0bX7a8SIvCarawajGIXU2zCnU81PIBPeGW4K V2pXyWTietQPdxNCSRdoLFUxkyZc9o0cbeb2N6/4vd4crfb/ZeefiGelGqflye24 ewFGjurm/1eDOgECd18iyy0Bz/gQpyxBmB73/gQwgl3orJqJdQIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFMW7ZwiAkYN+fz5CNDCi1y55dSvHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9iNDNj NTYxNS05NjMwLTRiYWItODI1OC1mM2IzMmUwMGYzMDQvMWY4YjY5ZmQtMGY4OC0z ZDgzLTg2MTYtNTg3NmUwZDEwNjQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYjQzYzU2MTUtOTYzMC00YmFiLTgy NTgtZjNiMzJlMDBmMzA0L2I0M2M1NjE1LTk2MzAtNGJhYi04MjU4LWYzYjMyZTAw ZjMwNC5jcmwwHwYDVR0jBBgwFoAU+Ghk2AJu3VHNPFT1gb/ooKEw/CwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9iNDNjNTYxNS05NjMwLTRiYWItODI1OC1mM2Iz MmUwMGYzMDQuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF4SsMA4E AgACMAgDBgAmAvjEADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAOJaLkbiAjETVmHJD6xDDFX35Z6rR1H+EA +bu3W+avH2Oh4Bai4bnrgpUbvdh0AfruhbFY7ORiR1lXtFRUPt/E6tF26QTx+OmL BdHDM+rNamAZYRFSHHN2yzHrGdY2bIh6Pdw1dUATuXfNBJnmAmSqDwgWQwoItjDd gd0E09wH+A0Ssu/irDq+yGXPRwlm3yL2rtE6qjGnZU38PKdOHlgPTlPjuVsyYWrJ S/xzQpVYcdPpM2iIZIpU3gsQc9Ldq4a1kcjm3xdO4Qx0AaheD4VCZvQiHiDN+1ff k/0cdO2MfYbiF6KI1YwBKpVxbiWoutYfRsk11bWmvv6X+yARuCbi -----END CERTIFICATE-----Generated at Sun Nov 1 23:21:06 2026 by rpki-client