$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/91a5f71b-bf1d-474c-b568-55393b7da475/01307e7f-cc1e-3508-a44c-557b2e686d06.roa File: 01307e7f-cc1e-3508-a44c-557b2e686d06.roa (raw, json) Hash identifier: cENoPZNunyf/SbTyHIp8ksDru9N3E9bTIQKViA1HnbQ= Subject key identifier: 2D:E3:EE:4B:3D:4D:17:D6:BF:A6:6D:73:75:57:B7:58:DB:F8:33:FC Certificate issuer: /CN=91a5f71b-bf1d-474c-b568-55393b7da475 Certificate serial: 010D0C9F4328584F5E62B0CD5FE3CB0A274C3100 Authority key identifier: E4:54:BF:12:DB:F3:85:A8:7A:77:C1:2C:DD:8C:47:AF:A4:DF:DD:84 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/91a5f71b-bf1d-474c-b568-55393b7da475.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/91a5f71b-bf1d-474c-b568-55393b7da475/01307e7f-cc1e-3508-a44c-557b2e686d06.roa Signing time: Fri 02 Oct 2026 13:00:13 +0000 ROA not before: Fri 02 Oct 2026 13:00:13 +0000 ROA not after: Thu 31 Dec 2026 14:00:13 +0000 asID: 401345 IP address blocks: 23.134.252.0/24 maxlen: 24 2602:f88e::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/91a5f71b-bf1d-474c-b568-55393b7da475/91a5f71b-bf1d-474c-b568-55393b7da475.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/91a5f71b-bf1d-474c-b568-55393b7da475/91a5f71b-bf1d-474c-b568-55393b7da475.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/91a5f71b-bf1d-474c-b568-55393b7da475.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5e:62:b0:cd:5f:e3:cb:0a:27:4c:31:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91a5f71b-bf1d-474c-b568-55393b7da475 Validity Not Before: Oct 2 13:00:13 2026 GMT Not After : Dec 31 14:00:13 2026 GMT Subject: CN=a088aa92-b543-4dd8-a3a6-bd152fae33c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:dc:9e:a3:9c:fa:ca:20:2b:db:8c:0c:ba:f2: 27:aa:94:ea:72:a1:12:48:96:4c:b8:20:bf:7e:a1: ac:97:e4:c3:3f:32:4c:b3:c9:08:a5:d6:18:00:23: a5:a7:44:31:d3:b8:bd:4e:a8:7a:d6:71:fe:6e:0e: 96:c8:9f:2c:1d:76:c8:0f:d8:53:65:86:6b:42:90: c6:c1:9a:ca:56:23:7e:31:26:ff:38:8d:d4:2b:81: 6a:69:24:a9:e5:14:8f:df:ee:10:49:43:04:7a:49: d7:b2:c9:19:a6:53:5d:ca:e2:b7:79:ef:e7:97:98: 28:99:58:48:13:57:20:56:37:8f:31:ca:f9:08:ed: 4f:e0:bb:09:34:9c:b4:ff:72:2a:58:64:61:cb:19: 6f:16:45:03:91:49:43:86:c7:3d:b8:ab:e1:94:68: 7a:f2:cc:c3:70:c4:27:b3:c8:ed:23:23:03:d0:5b: 24:9c:b6:70:2f:7f:8d:0f:2e:d3:2e:9e:e3:56:72: ee:89:51:dd:61:bd:5b:70:4a:bb:81:16:06:04:0c: 58:22:a6:5c:28:b1:31:34:38:57:76:fc:1a:03:03: cb:c1:70:c9:c4:18:5b:01:b0:f7:d1:78:b7:76:64: 9e:6b:31:2c:19:80:d3:ac:f3:ed:fb:a8:a7:d5:3b: 0d:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:E3:EE:4B:3D:4D:17:D6:BF:A6:6D:73:75:57:B7:58:DB:F8:33:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/91a5f71b-bf1d-474c-b568-55393b7da475/01307e7f-cc1e-3508-a44c-557b2e686d06.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/91a5f71b-bf1d-474c-b568-55393b7da475/91a5f71b-bf1d-474c-b568-55393b7da475.crl X509v3 Authority Key Identifier: keyid:E4:54:BF:12:DB:F3:85:A8:7A:77:C1:2C:DD:8C:47:AF:A4:DF:DD:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/91a5f71b-bf1d-474c-b568-55393b7da475.cer sbgp-ipAddrBlock: critical IPv4: 23.134.252.0/24 IPv6: 2602:f88e::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d5:33:d1:5b:32:f2:aa:7b:9d:3c:b3:19:18:fc:c9:ed:b7:e2: d3:42:1a:59:66:97:9f:6e:1f:cc:9b:8c:23:16:36:f4:44:2d: 46:ff:2f:60:3a:80:82:9a:b8:2f:fe:b4:a0:f8:d3:d6:0f:56: 73:8e:fa:67:af:31:f6:f8:6c:9d:59:5a:b0:f4:eb:a1:c9:98: 59:a8:b4:24:f2:63:cb:24:83:dd:81:12:f0:33:d9:4d:4d:86: 47:61:e7:5c:3f:dc:74:a7:ac:a5:ab:c0:e1:a6:4c:d3:80:91: 03:ba:c8:f5:b4:57:29:06:de:dc:b8:9f:d3:2a:7f:45:a1:1f: 63:33:18:93:55:bc:da:b9:1b:78:ac:f5:4f:f6:4d:3f:c1:ad: b9:8d:da:7b:a5:c0:82:a5:bb:a5:1b:dd:aa:d4:aa:11:e0:93: 94:73:f2:db:db:1c:e8:75:1b:60:48:bc:c8:1f:84:85:cd:5c: f2:c0:48:1e:c7:4e:78:23:08:37:06:dd:80:46:b6:6f:97:53: 31:ae:5b:5f:92:0b:45:e6:4c:73:f9:04:75:c7:09:5a:cf:7f: 4a:b5:93:52:c8:20:95:31:dd:8a:95:02:2e:7f:fb:a0:f3:6b: 46:bd:82:f3:43:e3:fa:0a:c7:43:97:ff:ba:fe:58:ab:07:72: a1:4b:03:69 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE9eYrDNX+PLCidMMQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTFhNWY3MWItYmYxZC00NzRjLWI1NjgtNTUzOTNiN2Rh NDc1MB4XDTI2MTAwMjEzMDAxM1oXDTI2MTIzMTE0MDAxM1owLzEtMCsGA1UEAxMk YTA4OGFhOTItYjU0My00ZGQ4LWEzYTYtYmQxNTJmYWUzM2M3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9dyeo5z6yiAr24wMuvInqpTqcqESSJZMuCC/ fqGsl+TDPzJMs8kIpdYYACOlp0Qx07i9Tqh61nH+bg6WyJ8sHXbID9hTZYZrQpDG wZrKViN+MSb/OI3UK4FqaSSp5RSP3+4QSUMEeknXsskZplNdyuK3ee/nl5gomVhI E1cgVjePMcr5CO1P4LsJNJy0/3IqWGRhyxlvFkUDkUlDhsc9uKvhlGh68szDcMQn s8jtIyMD0FsknLZwL3+NDy7TLp7jVnLuiVHdYb1bcEq7gRYGBAxYIqZcKLExNDhX dvwaAwPLwXDJxBhbAbD30Xi3dmSeazEsGYDTrPPt+6in1TsNawIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFC3j7ks9TRfWv6Ztc3VXt1jb+DP8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC85MWE1 ZjcxYi1iZjFkLTQ3NGMtYjU2OC01NTM5M2I3ZGE0NzUvMDEzMDdlN2YtY2MxZS0z NTA4LWE0NGMtNTU3YjJlNjg2ZDA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvOTFhNWY3MWItYmYxZC00NzRjLWI1 NjgtNTUzOTNiN2RhNDc1LzkxYTVmNzFiLWJmMWQtNDc0Yy1iNTY4LTU1MzkzYjdk YTQ3NS5jcmwwHwYDVR0jBBgwFoAU5FS/Etvzhah6d8Es3YxHr6Tf3YQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC85MWE1ZjcxYi1iZjFkLTQ3NGMtYjU2OC01NTM5 M2I3ZGE0NzUuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF4b8MA4E AgACMAgDBgAmAviOADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQDVM9FbMvKqe508sxkY/Mntt+LTQhpZZpef bh/Mm4wjFjb0RC1G/y9gOoCCmrgv/rSg+NPWD1ZzjvpnrzH2+GydWVqw9OuhyZhZ qLQk8mPLJIPdgRLwM9lNTYZHYedcP9x0p6ylq8DhpkzTgJEDusj1tFcpBt7cuJ/T Kn9FoR9jMxiTVbzauRt4rPVP9k0/wa25jdp7pcCCpbulG92q1KoR4JOUc/Lb2xzo dRtgSLzIH4SFzVzywEgex054Iwg3Bt2ARrZvl1MxrltfkgtF5kxz+QR1xwlaz39K tZNSyCCVMd2KlQIuf/ug82tGvYLzQ+P6CsdDl/+6/lirB3KhSwNp -----END CERTIFICATE-----Generated at Fri Oct 9 02:14:05 2026 by rpki-client