$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/6e4a0a5e-aa44-4dce-87f2-8e9cedff1234/0cd96795-711f-3224-bca1-c93721dc2050.roa File: 0cd96795-711f-3224-bca1-c93721dc2050.roa (raw, json) Hash identifier: 2QVKsS3jAjAoX1w/9gBjN50+2n6VC9kZXbPsm5k7fSE= Subject key identifier: 16:E6:76:BF:95:92:52:F9:4E:F1:EB:FB:DE:BC:84:6E:C1:6E:CA:28 Certificate issuer: /CN=6e4a0a5e-aa44-4dce-87f2-8e9cedff1234 Certificate serial: 010D0C9F4328584F498936B5EFDD6F66E6D3D600 Authority key identifier: A4:40:0E:6F:80:B5:29:35:7D:D9:F8:B1:74:6E:D8:28:BD:D0:68:7A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/6e4a0a5e-aa44-4dce-87f2-8e9cedff1234.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/6e4a0a5e-aa44-4dce-87f2-8e9cedff1234/0cd96795-711f-3224-bca1-c93721dc2050.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 53359 IP address blocks: 23.152.132.0/24 maxlen: 24 2602:f446::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/6e4a0a5e-aa44-4dce-87f2-8e9cedff1234/6e4a0a5e-aa44-4dce-87f2-8e9cedff1234.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/6e4a0a5e-aa44-4dce-87f2-8e9cedff1234/6e4a0a5e-aa44-4dce-87f2-8e9cedff1234.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/6e4a0a5e-aa44-4dce-87f2-8e9cedff1234.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 18 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:89:36:b5:ef:dd:6f:66:e6:d3:d6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6e4a0a5e-aa44-4dce-87f2-8e9cedff1234 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=9e044d84-5b30-4998-8d56-60cf6e156db8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:10:34:f6:82:16:2b:19:c9:b6:06:57:19:55: 15:88:57:61:78:51:70:6d:37:87:7c:ca:b2:59:a2: e6:1c:9d:bb:ea:66:69:f4:0b:c4:34:7d:38:a3:10: 8e:02:a1:35:af:dc:43:52:34:c2:9f:2b:1b:7c:fb: dd:4c:59:25:f1:c1:e2:41:2c:da:7c:63:86:58:d2: 9e:24:43:d4:5a:e9:01:6c:73:50:d1:4b:35:76:73: c0:5b:e8:b7:df:b9:cf:a9:fe:01:12:4e:5f:35:f3: 26:4d:d1:33:0d:7f:ac:a2:1e:f8:08:2d:1a:bb:7b: dd:8b:51:b7:06:c4:11:7e:28:81:7d:c8:0e:6c:d2: 21:5f:87:48:11:0c:a3:8f:13:89:7a:91:1e:5a:69: e1:80:ea:21:bf:30:5a:93:a5:41:0c:67:21:ef:77: 03:94:bd:7d:c2:17:84:2e:bc:c7:37:c2:50:31:57: 3d:1a:46:23:f2:51:89:ab:d9:dd:0d:e8:0f:d4:97: 6f:e3:ec:98:35:96:97:ee:b9:a9:f4:e8:d2:ff:fd: 02:01:f3:2a:3e:05:4f:d4:b7:95:2e:22:55:ef:38: 2a:4d:65:c9:10:52:a8:8a:b1:d8:b9:20:cb:8d:20: ae:fd:9c:a3:b6:e0:88:7c:61:26:d5:95:45:2f:11: 05:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:E6:76:BF:95:92:52:F9:4E:F1:EB:FB:DE:BC:84:6E:C1:6E:CA:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/6e4a0a5e-aa44-4dce-87f2-8e9cedff1234/0cd96795-711f-3224-bca1-c93721dc2050.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/6e4a0a5e-aa44-4dce-87f2-8e9cedff1234/6e4a0a5e-aa44-4dce-87f2-8e9cedff1234.crl X509v3 Authority Key Identifier: keyid:A4:40:0E:6F:80:B5:29:35:7D:D9:F8:B1:74:6E:D8:28:BD:D0:68:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/6e4a0a5e-aa44-4dce-87f2-8e9cedff1234.cer sbgp-ipAddrBlock: critical IPv4: 23.152.132.0/24 IPv6: 2602:f446::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:76:fe:43:03:21:21:ad:9a:25:69:53:e2:08:ac:04:ee:58: 57:a1:77:fb:ff:c1:e2:d7:b9:9f:af:9e:6e:dc:4b:c0:a5:9f: ac:7e:d9:2e:19:02:51:49:49:26:72:bc:9b:a9:db:06:df:72: 4d:b2:97:e8:eb:d6:d6:85:44:d8:2a:68:d1:a0:b6:49:19:e3: d0:2a:20:f7:0d:ff:a1:a3:0e:f9:cd:2a:d3:c2:4a:33:c5:77: dd:02:8b:3c:c3:db:f2:09:51:ba:32:a2:94:f6:06:b6:18:c4: 54:cb:3d:7a:7c:f2:f0:b6:15:47:dc:76:ac:e1:85:14:cf:76: 83:fb:58:31:26:8a:74:aa:e5:5b:57:54:5a:7f:d4:05:c6:d8: 18:29:6c:97:26:7a:9f:a1:eb:cf:de:38:f5:e6:f4:5b:b3:e8: 3d:93:96:b0:78:b0:34:9e:96:6b:95:c9:85:23:5f:29:2e:b7: 02:9f:e7:1c:e3:98:47:a7:26:99:8a:75:5e:cd:c7:c5:9c:60: ac:6f:b7:2e:bd:e9:fb:6c:e4:70:0e:58:6e:34:f8:d9:bc:d6: 61:47:ab:2c:45:3a:8e:7b:96:ac:a3:c6:44:76:8d:2f:2c:14: 5a:16:6a:2d:47:15:48:62:5b:34:73:28:b2:4a:d4:96:8b:39: 5a:ad:77:64 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE9JiTa1791vZubT1gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmU0YTBhNWUtYWE0NC00ZGNlLTg3ZjItOGU5Y2VkZmYx MjM0MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk OWUwNDRkODQtNWIzMC00OTk4LThkNTYtNjBjZjZlMTU2ZGI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuxA09oIWKxnJtgZXGVUViFdheFFwbTeHfMqy WaLmHJ276mZp9AvENH04oxCOAqE1r9xDUjTCnysbfPvdTFkl8cHiQSzafGOGWNKe JEPUWukBbHNQ0Us1dnPAW+i337nPqf4BEk5fNfMmTdEzDX+soh74CC0au3vdi1G3 BsQRfiiBfcgObNIhX4dIEQyjjxOJepEeWmnhgOohvzBak6VBDGch73cDlL19wheE LrzHN8JQMVc9GkYj8lGJq9ndDegP1Jdv4+yYNZaX7rmp9OjS//0CAfMqPgVP1LeV LiJV7zgqTWXJEFKoirHYuSDLjSCu/ZyjtuCIfGEm1ZVFLxEF1QIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFBbmdr+VklL5TvHr+968hG7BbsooMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS82ZTRh MGE1ZS1hYTQ0LTRkY2UtODdmMi04ZTljZWRmZjEyMzQvMGNkOTY3OTUtNzExZi0z MjI0LWJjYTEtYzkzNzIxZGMyMDUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvNmU0YTBhNWUtYWE0NC00ZGNlLTg3 ZjItOGU5Y2VkZmYxMjM0LzZlNGEwYTVlLWFhNDQtNGRjZS04N2YyLThlOWNlZGZm MTIzNC5jcmwwHwYDVR0jBBgwFoAUpEAOb4C1KTV92fixdG7YKL3QaHowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS82ZTRhMGE1ZS1hYTQ0LTRkY2UtODdmMi04ZTlj ZWRmZjEyMzQuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF5iEMA4E AgACMAgDBgAmAvRGADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQARdv5DAyEhrZolaVPiCKwE7lhXoXf7/8Hi 17mfr55u3EvApZ+sftkuGQJRSUkmcrybqdsG33JNspfo69bWhUTYKmjRoLZJGePQ KiD3Df+how75zSrTwkozxXfdAos8w9vyCVG6MqKU9ga2GMRUyz16fPLwthVH3Has 4YUUz3aD+1gxJop0quVbV1Raf9QFxtgYKWyXJnqfoevP3jj15vRbs+g9k5aweLA0 npZrlcmFI18pLrcCn+cc45hHpyaZinVezcfFnGCsb7cuven7bORwDlhuNPjZvNZh R6ssRTqOe5aso8ZEdo0vLBRaFmotRxVIYls0cyiyStSWizlarXdk -----END CERTIFICATE-----Generated at Sat Oct 17 12:08:39 2026 by rpki-client