$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d884379a-447d-445c-b465-3fe894aa66ec/663b6554-8ff3-3fd0-8d3f-daaf94e02477.roa File: 663b6554-8ff3-3fd0-8d3f-daaf94e02477.roa (raw, json) Hash identifier: W/3iSTV0HjhN3wFzZPbPbQk0bl3Nry4p7Pmh4Hc2Tdw= Subject key identifier: 98:ED:2E:32:5A:CE:CD:36:B4:53:85:B1:57:80:48:31:F0:DC:89:92 Certificate issuer: /CN=d884379a-447d-445c-b465-3fe894aa66ec Certificate serial: 010D0C9F4328584F7BB2E0EE34D7241686C45680 Authority key identifier: 09:A6:3F:83:7C:F4:68:CE:6F:E6:E0:59:4D:47:41:1F:98:E1:66:9C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d884379a-447d-445c-b465-3fe894aa66ec.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d884379a-447d-445c-b465-3fe894aa66ec/663b6554-8ff3-3fd0-8d3f-daaf94e02477.roa Signing time: Tue 13 Oct 2026 01:00:14 +0000 ROA not before: Tue 13 Oct 2026 01:00:14 +0000 ROA not after: Mon 11 Jan 2027 02:00:14 +0000 asID: 40712 IP address blocks: 23.134.244.0/24 maxlen: 24 2602:f6e2::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d884379a-447d-445c-b465-3fe894aa66ec/d884379a-447d-445c-b465-3fe894aa66ec.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d884379a-447d-445c-b465-3fe894aa66ec/d884379a-447d-445c-b465-3fe894aa66ec.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d884379a-447d-445c-b465-3fe894aa66ec.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Nov 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7b:b2:e0:ee:34:d7:24:16:86:c4:56:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d884379a-447d-445c-b465-3fe894aa66ec Validity Not Before: Oct 13 01:00:14 2026 GMT Not After : Jan 11 02:00:14 2027 GMT Subject: CN=52f8818b-7f14-40ef-a79e-fa601dff987c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:a0:13:3b:06:fb:79:73:53:47:cd:78:e8:4e: 72:21:04:a4:3b:af:ee:45:44:26:a5:bd:55:4c:80: 24:88:8f:9a:7b:84:20:ec:bb:0d:67:81:7e:51:e2: 5c:06:af:b1:f9:d9:ac:ba:dd:27:c9:aa:88:e0:cd: 8c:0c:ce:50:d3:f8:68:ed:1f:9f:df:b2:21:3f:14: 56:d5:71:33:6e:95:08:90:92:2f:fc:1b:e1:9c:9e: 25:f5:b0:66:24:dc:63:43:43:7d:7d:87:4a:bc:cc: a6:5d:48:06:a6:df:ab:27:91:ea:ba:c7:4b:00:76: 96:d8:91:64:32:e7:f1:43:70:fa:e9:ce:3b:a3:82: a6:80:ee:9d:da:b6:f2:52:da:a4:cd:25:cf:84:ff: e2:79:bd:a1:d9:c0:f1:88:05:d8:13:d9:5c:4f:b8: 96:3f:a3:e2:01:4f:ab:38:01:6b:5a:b8:22:e3:a3: 5c:af:fd:53:82:85:0f:d0:81:f8:24:1c:5d:2b:ef: 07:a2:8b:1a:85:af:7c:3c:fc:13:d2:e5:f1:d3:0d: 74:f7:0f:86:21:40:7d:8a:4d:42:e5:68:66:05:8b: b1:2a:a4:b6:77:e7:cb:75:f1:8b:66:78:7d:71:99: 7d:46:67:ec:83:f7:c2:5e:09:3a:0d:57:c7:4b:5a: 5e:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:ED:2E:32:5A:CE:CD:36:B4:53:85:B1:57:80:48:31:F0:DC:89:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d884379a-447d-445c-b465-3fe894aa66ec/663b6554-8ff3-3fd0-8d3f-daaf94e02477.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d884379a-447d-445c-b465-3fe894aa66ec/d884379a-447d-445c-b465-3fe894aa66ec.crl X509v3 Authority Key Identifier: keyid:09:A6:3F:83:7C:F4:68:CE:6F:E6:E0:59:4D:47:41:1F:98:E1:66:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d884379a-447d-445c-b465-3fe894aa66ec.cer sbgp-ipAddrBlock: critical IPv4: 23.134.244.0/24 IPv6: 2602:f6e2::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:9b:76:f7:bc:15:60:3a:da:51:ee:a9:a4:94:2d:13:c7:39: 46:99:14:e2:21:db:c3:0b:fe:19:43:d9:04:a4:15:6e:76:00: ad:8a:f2:cc:94:a8:e1:19:68:95:88:6d:b3:70:9a:76:f6:7f: 7c:91:82:ce:4a:6c:c1:5a:98:08:68:25:92:8d:c4:23:fc:fc: 79:16:79:5c:d9:f3:25:5c:2a:9c:c6:a5:c5:85:08:d0:f0:c4: b2:6f:5e:6a:79:7f:b3:45:85:0e:fa:99:7f:db:9e:e4:d4:7a: 47:91:c4:d0:16:6a:87:e1:b3:cb:45:32:9e:13:d0:f1:ac:f8: fd:87:11:e0:dc:75:98:dd:0e:86:a5:e5:24:43:72:7f:65:76: 70:c8:eb:d3:94:50:53:c3:3e:b2:6b:7e:30:82:21:55:b2:4f: 32:cf:0c:f4:60:7c:9b:f4:f2:bb:98:fe:cf:ad:e4:37:f3:d4: ac:de:ce:ae:b9:e2:d6:88:e1:fe:f4:48:f0:d7:5c:4d:6b:1e: 2a:9a:13:8a:ad:44:f7:15:c1:a0:0d:7a:bd:49:ed:20:96:8e: da:11:bf:f7:25:a4:c8:53:37:a9:33:fa:f1:45:78:53:17:52: 12:7a:85:24:de:3c:82:ae:3a:e0:cd:bc:8e:d2:f3:6d:74:1c: f4:bb:22:97 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE97suDuNNckFobEVoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDg4NDM3OWEtNDQ3ZC00NDVjLWI0NjUtM2ZlODk0YWE2 NmVjMB4XDTI2MTAxMzAxMDAxNFoXDTI3MDExMTAyMDAxNFowLzEtMCsGA1UEAxMk NTJmODgxOGItN2YxNC00MGVmLWE3OWUtZmE2MDFkZmY5ODdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjqATOwb7eXNTR8146E5yIQSkO6/uRUQmpb1V TIAkiI+ae4Qg7LsNZ4F+UeJcBq+x+dmsut0nyaqI4M2MDM5Q0/ho7R+f37IhPxRW 1XEzbpUIkJIv/BvhnJ4l9bBmJNxjQ0N9fYdKvMymXUgGpt+rJ5HqusdLAHaW2JFk MufxQ3D66c47o4KmgO6d2rbyUtqkzSXPhP/ieb2h2cDxiAXYE9lcT7iWP6PiAU+r OAFrWrgi46Ncr/1TgoUP0IH4JBxdK+8Hoosaha98PPwT0uXx0w109w+GIUB9ik1C 5WhmBYuxKqS2d+fLdfGLZnh9cZl9Rmfsg/fCXgk6DVfHS1pe/wIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFJjtLjJazs02tFOFsVeASDHw3ImSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kODg0 Mzc5YS00NDdkLTQ0NWMtYjQ2NS0zZmU4OTRhYTY2ZWMvNjYzYjY1NTQtOGZmMy0z ZmQwLThkM2YtZGFhZjk0ZTAyNDc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZDg4NDM3OWEtNDQ3ZC00NDVjLWI0 NjUtM2ZlODk0YWE2NmVjL2Q4ODQzNzlhLTQ0N2QtNDQ1Yy1iNDY1LTNmZTg5NGFh NjZlYy5jcmwwHwYDVR0jBBgwFoAUCaY/g3z0aM5v5uBZTUdBH5jhZpwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9kODg0Mzc5YS00NDdkLTQ0NWMtYjQ2NS0zZmU4 OTRhYTY2ZWMuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF4b0MA4E AgACMAgDBgQmAvbiADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA8m3b3vBVgOtpR7qmklC0TxzlGmRTiIdvD C/4ZQ9kEpBVudgCtivLMlKjhGWiViG2zcJp29n98kYLOSmzBWpgIaCWSjcQj/Px5 Fnlc2fMlXCqcxqXFhQjQ8MSyb15qeX+zRYUO+pl/257k1HpHkcTQFmqH4bPLRTKe E9DxrPj9hxHg3HWY3Q6GpeUkQ3J/ZXZwyOvTlFBTwz6ya34wgiFVsk8yzwz0YHyb 9PK7mP7PreQ389Ss3s6uueLWiOH+9Ejw11xNax4qmhOKrUT3FcGgDXq9Se0glo7a Eb/3JaTIUzepM/rxRXhTF1ISeoUk3jyCrjrgzbyO0vNtdBz0uyKX -----END CERTIFICATE-----Generated at Mon Nov 2 18:53:56 2026 by rpki-client