$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/686765eb-e888-49bd-ad42-3fca936861cc/72aee120-8ff7-3087-96ea-c958a4a865ad.roa File: 72aee120-8ff7-3087-96ea-c958a4a865ad.roa (raw, json) Hash identifier: Kew2HjKkJCB7O7l4DsHzN9EtCJhp5slDuX3tKfzp8fQ= Subject key identifier: 16:02:54:DC:79:1D:C3:B9:63:2E:C1:19:06:C5:3D:39:EA:72:98:92 Certificate issuer: /CN=686765eb-e888-49bd-ad42-3fca936861cc Certificate serial: 010D0C9F4328584EF44CCB3F9AF93B5A3DC27B40 Authority key identifier: 35:09:EE:88:5E:0F:63:24:51:3E:2A:1F:EA:62:73:9D:94:F8:40:A4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/686765eb-e888-49bd-ad42-3fca936861cc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/686765eb-e888-49bd-ad42-3fca936861cc/72aee120-8ff7-3087-96ea-c958a4a865ad.roa Signing time: Tue 25 Aug 2026 13:00:12 +0000 ROA not before: Tue 25 Aug 2026 13:00:12 +0000 ROA not after: Mon 23 Nov 2026 14:00:12 +0000 asID: 402160 IP address blocks: 23.149.220.0/24 maxlen: 24 2602:f513::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/686765eb-e888-49bd-ad42-3fca936861cc/686765eb-e888-49bd-ad42-3fca936861cc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/686765eb-e888-49bd-ad42-3fca936861cc/686765eb-e888-49bd-ad42-3fca936861cc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/686765eb-e888-49bd-ad42-3fca936861cc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f4:4c:cb:3f:9a:f9:3b:5a:3d:c2:7b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=686765eb-e888-49bd-ad42-3fca936861cc Validity Not Before: Aug 25 13:00:12 2026 GMT Not After : Nov 23 14:00:12 2026 GMT Subject: CN=1134cfcc-d4bb-4c26-93fa-5b9618d4acec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:2a:e5:81:ac:32:4e:66:a4:77:1b:bb:f5:84: ee:dd:2e:43:69:4c:ab:49:f0:8d:f5:27:9f:8e:2c: 3b:8c:7b:c3:d7:b0:b3:63:5f:75:df:cf:46:cf:59: a8:dc:12:f7:d4:08:d8:a5:d3:f5:27:20:0a:69:51: 92:98:45:73:a2:f2:32:4d:c0:cf:42:97:d2:93:ba: c2:dd:d9:39:f1:c4:16:5c:6c:0c:22:1a:6e:39:a6: b7:8e:49:41:88:f5:f3:e4:de:19:44:5b:54:19:bd: e0:9f:05:7e:59:a8:15:42:42:0e:e2:93:1e:ad:eb: a6:ae:5f:f4:fb:a2:9e:3a:a8:61:f4:93:8d:58:96: 32:f6:8a:f4:38:29:84:44:88:11:00:63:bf:0f:a1: df:35:e5:90:b2:93:d2:b4:b3:ee:c5:87:c7:9e:4d: 05:9a:6b:01:fc:9c:45:7b:07:a2:72:06:6a:d5:0e: 64:6c:32:a0:64:1c:70:17:4a:01:77:4b:a1:f1:c7: b1:91:cc:22:97:2c:de:f4:da:45:bd:2f:50:d7:0b: c6:99:81:3a:a0:6a:6f:72:cf:92:d6:b2:a7:00:8b: f7:35:85:2b:7d:01:15:ed:da:72:9c:d3:de:df:d8: 75:ca:34:c6:0d:1d:11:56:dd:cb:ae:d6:0d:25:da: 86:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:02:54:DC:79:1D:C3:B9:63:2E:C1:19:06:C5:3D:39:EA:72:98:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/686765eb-e888-49bd-ad42-3fca936861cc/72aee120-8ff7-3087-96ea-c958a4a865ad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/686765eb-e888-49bd-ad42-3fca936861cc/686765eb-e888-49bd-ad42-3fca936861cc.crl X509v3 Authority Key Identifier: keyid:35:09:EE:88:5E:0F:63:24:51:3E:2A:1F:EA:62:73:9D:94:F8:40:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/686765eb-e888-49bd-ad42-3fca936861cc.cer sbgp-ipAddrBlock: critical IPv4: 23.149.220.0/24 IPv6: 2602:f513::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:0f:8e:76:38:77:e2:8f:58:79:8d:6a:fb:e4:67:a8:1b:f1: 18:f1:78:38:c8:54:fb:5a:06:29:67:fe:ea:0a:ff:01:de:7a: ae:48:d4:28:c5:cf:26:ab:a8:51:8f:a6:56:e8:82:9e:ac:ba: 0e:1e:58:e5:e8:44:85:14:c3:d8:b8:42:71:e4:1d:fe:4a:0b: 66:f1:3b:45:dd:0d:e5:8f:e9:62:8e:63:1e:03:51:e1:5c:5b: 90:f1:22:f1:01:43:ac:6a:a6:b9:0f:6a:ac:5b:88:05:bf:58: 36:3c:71:34:a9:7a:40:84:ff:cc:a2:cd:f5:4b:2a:8b:1f:b2: 72:39:10:b6:d8:61:e2:e5:3a:b9:3f:c1:4c:71:06:5b:58:70: a2:52:cf:74:fb:36:ec:4f:ef:68:21:b5:b7:a9:f3:e4:21:1f: 06:bd:97:3d:9c:c2:e1:02:0d:41:fe:2b:62:f6:00:e4:9f:4d: 0c:af:31:d4:8d:9f:e7:d3:a8:2e:af:8e:32:d3:67:3c:b7:52: fb:76:2b:f5:49:1d:d1:4a:d1:b7:88:02:08:78:a9:22:8d:c1: 3d:12:2d:8b:bf:10:e9:75:ff:b3:79:e4:45:bd:50:93:f3:71: 42:3c:b5:52:cd:dc:7c:04:0b:ad:4a:7b:c6:77:32:30:bc:25: 05:3c:47:83 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE70TMs/mvk7Wj3Ce0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjg2NzY1ZWItZTg4OC00OWJkLWFkNDItM2ZjYTkzNjg2 MWNjMB4XDTI2MDgyNTEzMDAxMloXDTI2MTEyMzE0MDAxMlowLzEtMCsGA1UEAxMk MTEzNGNmY2MtZDRiYi00YzI2LTkzZmEtNWI5NjE4ZDRhY2VjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjSrlgawyTmakdxu79YTu3S5DaUyrSfCN9Sef jiw7jHvD17CzY191389Gz1mo3BL31AjYpdP1JyAKaVGSmEVzovIyTcDPQpfSk7rC 3dk58cQWXGwMIhpuOaa3jklBiPXz5N4ZRFtUGb3gnwV+WagVQkIO4pMereumrl/0 +6KeOqhh9JONWJYy9or0OCmERIgRAGO/D6HfNeWQspPStLPuxYfHnk0FmmsB/JxF eweicgZq1Q5kbDKgZBxwF0oBd0uh8cexkcwilyze9NpFvS9Q1wvGmYE6oGpvcs+S 1rKnAIv3NYUrfQEV7dpynNPe39h1yjTGDR0RVt3LrtYNJdqGWwIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFBYCVNx5HcO5Yy7BGQbFPTnqcpiSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS82ODY3 NjVlYi1lODg4LTQ5YmQtYWQ0Mi0zZmNhOTM2ODYxY2MvNzJhZWUxMjAtOGZmNy0z MDg3LTk2ZWEtYzk1OGE0YTg2NWFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvNjg2NzY1ZWItZTg4OC00OWJkLWFk NDItM2ZjYTkzNjg2MWNjLzY4Njc2NWViLWU4ODgtNDliZC1hZDQyLTNmY2E5MzY4 NjFjYy5jcmwwHwYDVR0jBBgwFoAUNQnuiF4PYyRRPiof6mJznZT4QKQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS82ODY3NjVlYi1lODg4LTQ5YmQtYWQ0Mi0zZmNh OTM2ODYxY2MuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF5XcMA4E AgACMAgDBgAmAvUTADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCTD452OHfij1h5jWr75GeoG/EY8Xg4yFT7 WgYpZ/7qCv8B3nquSNQoxc8mq6hRj6ZW6IKerLoOHljl6ESFFMPYuEJx5B3+Sgtm 8TtF3Q3lj+lijmMeA1HhXFuQ8SLxAUOsaqa5D2qsW4gFv1g2PHE0qXpAhP/Mos31 SyqLH7JyORC22GHi5Tq5P8FMcQZbWHCiUs90+zbsT+9oIbW3qfPkIR8GvZc9nMLh Ag1B/iti9gDkn00MrzHUjZ/n06gur44y02c8t1L7div1SR3RStG3iAIIeKkijcE9 Ei2LvxDpdf+zeeRFvVCT83FCPLVSzdx8BAutSnvGdzIwvCUFPEeD -----END CERTIFICATE-----Generated at Mon Aug 31 11:11:25 2026 by rpki-client