$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d884379a-447d-445c-b465-3fe894aa66ec/663b6554-8ff3-3fd0-8d3f-daaf94e02477.roa File: 663b6554-8ff3-3fd0-8d3f-daaf94e02477.roa (raw, json) Hash identifier: 0mdgUx7Tz7bE9lVOELZ8fwNdVWvm1Hai6u/pILfOFvw= Subject key identifier: 05:B3:EE:0F:1C:23:2A:AC:42:07:1A:18:FC:72:10:52:DD:24:FA:7C Certificate issuer: /CN=d884379a-447d-445c-b465-3fe894aa66ec Certificate serial: 010D0C9F4328584ED9C73D359F70A3A1D0C33B00 Authority key identifier: 09:A6:3F:83:7C:F4:68:CE:6F:E6:E0:59:4D:47:41:1F:98:E1:66:9C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d884379a-447d-445c-b465-3fe894aa66ec.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d884379a-447d-445c-b465-3fe894aa66ec/663b6554-8ff3-3fd0-8d3f-daaf94e02477.roa Signing time: Sun 16 Aug 2026 01:00:14 +0000 ROA not before: Sun 16 Aug 2026 01:00:14 +0000 ROA not after: Sat 14 Nov 2026 02:00:14 +0000 asID: 40712 IP address blocks: 23.134.244.0/24 maxlen: 24 2602:f6e2::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d884379a-447d-445c-b465-3fe894aa66ec/d884379a-447d-445c-b465-3fe894aa66ec.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d884379a-447d-445c-b465-3fe894aa66ec/d884379a-447d-445c-b465-3fe894aa66ec.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d884379a-447d-445c-b465-3fe894aa66ec.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Sep 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d9:c7:3d:35:9f:70:a3:a1:d0:c3:3b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d884379a-447d-445c-b465-3fe894aa66ec Validity Not Before: Aug 16 01:00:14 2026 GMT Not After : Nov 14 02:00:14 2026 GMT Subject: CN=2da5d503-460a-47e2-bcc7-03faf066e11d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:7a:44:5e:46:c0:59:9a:bf:14:a8:88:f5:29: dd:87:a7:7e:12:68:ff:df:95:e2:0a:81:ba:5e:d9: 33:d5:19:48:9f:95:e2:92:a1:a6:43:05:9e:62:88: 13:3a:6f:e4:9d:91:c7:f0:5a:3b:52:79:19:4f:e5: d0:51:e1:f5:70:49:8d:6a:68:ab:4a:06:08:87:54: 8e:b3:d5:47:c7:20:32:0e:ee:60:d6:c5:24:21:b4: f4:d5:3b:eb:5f:b8:0f:81:f3:55:e7:bf:90:61:27: 3a:7a:13:2b:85:7c:a4:79:b0:53:e7:de:c0:63:d8: 2b:89:b4:8a:ef:a9:51:5a:1e:e4:ec:84:8d:a9:7c: 89:25:e5:59:97:a3:a0:0a:19:8e:62:0e:13:1d:6e: 47:16:09:5a:1b:66:fe:d1:61:28:88:26:61:31:23: fb:0c:b1:33:7a:8e:14:2e:b3:d1:d5:6c:60:99:80: 68:a7:56:c5:5d:3b:d3:bd:40:6b:ba:ad:a6:55:57: 5e:2d:4b:f7:b7:cd:14:d9:a5:32:b7:b6:fe:87:1f: e6:8c:1c:d9:13:51:5e:8d:75:81:a0:29:7e:59:9f: 72:d8:7d:12:d3:f5:7a:64:a4:38:c9:e4:6d:ed:e6: db:2c:7c:65:48:ab:ac:00:97:0f:90:96:99:f8:65: e1:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:B3:EE:0F:1C:23:2A:AC:42:07:1A:18:FC:72:10:52:DD:24:FA:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d884379a-447d-445c-b465-3fe894aa66ec/663b6554-8ff3-3fd0-8d3f-daaf94e02477.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d884379a-447d-445c-b465-3fe894aa66ec/d884379a-447d-445c-b465-3fe894aa66ec.crl X509v3 Authority Key Identifier: keyid:09:A6:3F:83:7C:F4:68:CE:6F:E6:E0:59:4D:47:41:1F:98:E1:66:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d884379a-447d-445c-b465-3fe894aa66ec.cer sbgp-ipAddrBlock: critical IPv4: 23.134.244.0/24 IPv6: 2602:f6e2::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:2e:6f:c7:36:b6:a4:da:2a:f9:33:67:99:b0:78:a9:ca:60: f6:2b:2f:c9:2b:42:17:0a:d1:dc:16:65:26:92:fd:34:20:29: bc:f5:92:9e:c7:71:e4:09:c3:5f:dd:ae:9b:3d:90:82:db:93: c0:6e:cb:b1:52:c6:2b:c1:69:a3:7e:57:03:23:83:9d:11:f2: 32:a0:f0:82:df:bf:5b:3c:fe:51:42:97:32:05:14:2c:aa:2f: a1:b7:29:2c:b3:7f:d6:3e:cc:5a:e5:a9:1d:a8:31:dc:e5:6e: 20:64:9c:cb:ab:34:c3:3b:be:d0:14:28:90:85:74:ef:49:bf: 9a:81:a6:5d:72:78:1d:67:00:4c:6b:4b:90:d9:95:70:f3:94: aa:91:a4:ea:ce:88:b5:7f:c3:df:31:c4:50:6f:3c:79:be:e9: 82:ea:01:60:b4:f2:63:36:2e:47:92:2c:66:55:2c:7c:51:36: 2f:2e:0a:58:09:f1:0e:80:79:57:06:66:83:58:6f:c0:a8:cc: cf:58:59:e7:58:83:98:f2:de:66:09:2f:4f:b6:fc:6a:40:de: cd:3c:e2:3f:e2:5d:5d:ac:e3:0c:f9:7b:f2:4f:ee:d4:9f:4c: 11:1b:73:15:21:98:88:b9:c9:0f:1a:59:7c:5e:76:6f:7f:3e: b8:d0:07:d9 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE7Zxz01n3CjodDDOwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDg4NDM3OWEtNDQ3ZC00NDVjLWI0NjUtM2ZlODk0YWE2 NmVjMB4XDTI2MDgxNjAxMDAxNFoXDTI2MTExNDAyMDAxNFowLzEtMCsGA1UEAxMk MmRhNWQ1MDMtNDYwYS00N2UyLWJjYzctMDNmYWYwNjZlMTFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlXpEXkbAWZq/FKiI9Sndh6d+Emj/35XiCoG6 Xtkz1RlIn5XikqGmQwWeYogTOm/knZHH8Fo7UnkZT+XQUeH1cEmNamirSgYIh1SO s9VHxyAyDu5g1sUkIbT01TvrX7gPgfNV57+QYSc6ehMrhXykebBT597AY9gribSK 76lRWh7k7ISNqXyJJeVZl6OgChmOYg4THW5HFglaG2b+0WEoiCZhMSP7DLEzeo4U LrPR1WxgmYBop1bFXTvTvUBruq2mVVdeLUv3t80U2aUyt7b+hx/mjBzZE1FejXWB oCl+WZ9y2H0S0/V6ZKQ4yeRt7ebbLHxlSKusAJcPkJaZ+GXhpwIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFAWz7g8cIyqsQgcaGPxyEFLdJPp8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kODg0 Mzc5YS00NDdkLTQ0NWMtYjQ2NS0zZmU4OTRhYTY2ZWMvNjYzYjY1NTQtOGZmMy0z ZmQwLThkM2YtZGFhZjk0ZTAyNDc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZDg4NDM3OWEtNDQ3ZC00NDVjLWI0 NjUtM2ZlODk0YWE2NmVjL2Q4ODQzNzlhLTQ0N2QtNDQ1Yy1iNDY1LTNmZTg5NGFh NjZlYy5jcmwwHwYDVR0jBBgwFoAUCaY/g3z0aM5v5uBZTUdBH5jhZpwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9kODg0Mzc5YS00NDdkLTQ0NWMtYjQ2NS0zZmU4 OTRhYTY2ZWMuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF4b0MA4E AgACMAgDBgQmAvbiADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB6Lm/HNrak2ir5M2eZsHipymD2Ky/JK0IX CtHcFmUmkv00ICm89ZKex3HkCcNf3a6bPZCC25PAbsuxUsYrwWmjflcDI4OdEfIy oPCC379bPP5RQpcyBRQsqi+htykss3/WPsxa5akdqDHc5W4gZJzLqzTDO77QFCiQ hXTvSb+agaZdcngdZwBMa0uQ2ZVw85SqkaTqzoi1f8PfMcRQbzx5vumC6gFgtPJj Ni5HkixmVSx8UTYvLgpYCfEOgHlXBmaDWG/AqMzPWFnnWIOY8t5mCS9PtvxqQN7N POI/4l1drOMM+XvyT+7Un0wRG3MVIZiIuckPGll8XnZvfz640AfZ -----END CERTIFICATE-----Generated at Fri Sep 11 17:46:54 2026 by rpki-client