$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ce3f1cab-5a87-4be3-8a2e-fc12e5ee6319/5519e4f6-5a45-36a9-9ac1-79f93fdae779.roa File: 5519e4f6-5a45-36a9-9ac1-79f93fdae779.roa (raw, json) Hash identifier: lAyI9OogU8TV3ASPyrUDR6lViSjQYa7hgBVcgdpAWC4= Subject key identifier: 35:48:E0:10:D0:BA:14:FC:D9:50:32:84:81:CD:B4:75:34:51:12:49 Certificate issuer: /CN=ce3f1cab-5a87-4be3-8a2e-fc12e5ee6319 Certificate serial: 010D0C9F4328584F3CE2A2C9258B038D905B0580 Authority key identifier: 95:56:29:DD:34:D3:01:75:63:6E:F7:37:07:EC:8B:3C:6E:B3:72:36 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ce3f1cab-5a87-4be3-8a2e-fc12e5ee6319.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ce3f1cab-5a87-4be3-8a2e-fc12e5ee6319/5519e4f6-5a45-36a9-9ac1-79f93fdae779.roa Signing time: Sun 20 Sep 2026 13:00:12 +0000 ROA not before: Sun 20 Sep 2026 13:00:12 +0000 ROA not after: Sat 19 Dec 2026 14:00:12 +0000 asID: 26939 IP address blocks: 23.130.220.0/24 maxlen: 24 2602:f76b::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ce3f1cab-5a87-4be3-8a2e-fc12e5ee6319/ce3f1cab-5a87-4be3-8a2e-fc12e5ee6319.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ce3f1cab-5a87-4be3-8a2e-fc12e5ee6319/ce3f1cab-5a87-4be3-8a2e-fc12e5ee6319.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ce3f1cab-5a87-4be3-8a2e-fc12e5ee6319.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 Oct 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3c:e2:a2:c9:25:8b:03:8d:90:5b:05:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ce3f1cab-5a87-4be3-8a2e-fc12e5ee6319 Validity Not Before: Sep 20 13:00:12 2026 GMT Not After : Dec 19 14:00:12 2026 GMT Subject: CN=74853531-3570-431f-a2ff-bc844b941787 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:a7:ff:5a:40:21:0e:73:75:04:d6:5a:84:d5: 5c:84:1f:6f:dc:d5:91:2f:f3:80:cd:81:b8:af:ce: 27:b9:24:8b:d1:4f:01:5d:71:c0:78:b1:4d:a5:25: c3:0b:7f:54:9a:68:a2:11:63:9e:16:8d:be:ee:e4: df:4b:27:e0:30:e7:76:4e:51:22:f7:cf:e6:cc:00: 29:9f:d1:49:c7:37:15:5d:1d:dc:9a:98:c0:c1:32: dd:4a:00:53:3d:76:a4:42:34:7a:6b:6a:eb:30:e8: cb:c6:51:5a:ca:05:6d:35:bf:f2:b6:9b:c4:c1:29: e5:b1:39:24:cc:98:77:e5:e0:61:d8:7e:0d:d9:29: ff:e8:29:62:7a:6b:9b:76:4d:26:c4:57:dc:3a:54: c1:65:88:66:77:f3:d3:77:76:1a:0c:c4:d9:5c:92: fe:87:54:50:42:b1:91:34:e5:23:4e:cc:e0:f0:5b: c7:1f:30:e0:15:96:c7:be:74:8c:c6:05:5e:0a:44: 5a:61:74:63:c5:1d:9c:e4:d6:40:0a:d7:64:db:39: 13:26:c9:ac:6f:0c:ae:32:84:81:1f:50:f8:e5:e6: 65:95:54:cb:69:1f:f6:05:5f:37:db:7b:72:38:53: c9:5f:90:7d:93:3b:5d:72:f8:a3:3b:df:ec:b9:8f: 72:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:48:E0:10:D0:BA:14:FC:D9:50:32:84:81:CD:B4:75:34:51:12:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ce3f1cab-5a87-4be3-8a2e-fc12e5ee6319/5519e4f6-5a45-36a9-9ac1-79f93fdae779.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ce3f1cab-5a87-4be3-8a2e-fc12e5ee6319/ce3f1cab-5a87-4be3-8a2e-fc12e5ee6319.crl X509v3 Authority Key Identifier: keyid:95:56:29:DD:34:D3:01:75:63:6E:F7:37:07:EC:8B:3C:6E:B3:72:36 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ce3f1cab-5a87-4be3-8a2e-fc12e5ee6319.cer sbgp-ipAddrBlock: critical IPv4: 23.130.220.0/24 IPv6: 2602:f76b::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:05:94:fd:79:43:e6:ed:6c:b2:5c:36:a8:57:c7:04:fd:64: 47:80:cb:43:a9:1b:49:9c:fc:fc:79:f4:c3:f5:04:13:23:ba: c2:ea:1c:0b:7d:fb:7e:22:6b:91:ca:ed:33:d8:14:d0:b1:ed: a0:f1:8f:b1:6a:79:37:b0:02:b4:02:d8:70:c4:3f:75:b4:ef: 65:59:25:1b:16:54:ef:0c:7c:6d:36:58:16:a6:d6:6b:63:ef: 60:7f:b4:33:58:11:79:0e:8d:ec:9d:a7:c1:e3:41:7a:f5:a1: e4:6b:10:5a:52:97:84:8c:72:15:c7:0d:2b:a7:d5:f6:60:d6: 72:72:1b:a3:b7:9d:5e:7e:d6:6a:06:2e:27:91:da:34:cc:5a: 3c:88:da:8c:53:14:fb:3b:60:db:60:c1:c5:b4:09:2c:ea:63: 3c:61:cb:ca:02:b8:13:42:7f:5a:73:fa:ee:32:1c:34:dd:aa: e5:86:46:dc:e9:02:71:85:b5:8c:dd:f3:81:f2:e9:d7:b2:9b: 15:50:40:df:bf:3f:d2:96:f3:41:dd:97:a1:9e:42:34:65:8d: ec:68:e8:05:1f:62:27:01:61:a9:ac:c3:4f:52:a5:df:ed:84: ec:75:86:19:ed:49:00:9b:f6:69:35:ea:b5:59:f5:fb:93:09: 3c:30:1e:b3 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE884qLJJYsDjZBbBYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2UzZjFjYWItNWE4Ny00YmUzLThhMmUtZmMxMmU1ZWU2 MzE5MB4XDTI2MDkyMDEzMDAxMloXDTI2MTIxOTE0MDAxMlowLzEtMCsGA1UEAxMk NzQ4NTM1MzEtMzU3MC00MzFmLWEyZmYtYmM4NDRiOTQxNzg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgKf/WkAhDnN1BNZahNVchB9v3NWRL/OAzYG4 r84nuSSL0U8BXXHAeLFNpSXDC39UmmiiEWOeFo2+7uTfSyfgMOd2TlEi98/mzAAp n9FJxzcVXR3cmpjAwTLdSgBTPXakQjR6a2rrMOjLxlFaygVtNb/ytpvEwSnlsTkk zJh35eBh2H4N2Sn/6Cliemubdk0mxFfcOlTBZYhmd/PTd3YaDMTZXJL+h1RQQrGR NOUjTszg8FvHHzDgFZbHvnSMxgVeCkRaYXRjxR2c5NZACtdk2zkTJsmsbwyuMoSB H1D45eZllVTLaR/2BV8323tyOFPJX5B9kztdcvijO9/suY9yzwIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFDVI4BDQuhT82VAyhIHNtHU0URJJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZTNm MWNhYi01YTg3LTRiZTMtOGEyZS1mYzEyZTVlZTYzMTkvNTUxOWU0ZjYtNWE0NS0z NmE5LTlhYzEtNzlmOTNmZGFlNzc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2UzZjFjYWItNWE4Ny00YmUzLThh MmUtZmMxMmU1ZWU2MzE5L2NlM2YxY2FiLTVhODctNGJlMy04YTJlLWZjMTJlNWVl NjMxOS5jcmwwHwYDVR0jBBgwFoAUlVYp3TTTAXVjbvc3B+yLPG6zcjYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZTNmMWNhYi01YTg3LTRiZTMtOGEyZS1mYzEy ZTVlZTYzMTkuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF4LcMA4E AgACMAgDBgQmAvdrADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCnBZT9eUPm7WyyXDaoV8cE/WRHgMtDqRtJ nPz8efTD9QQTI7rC6hwLfft+ImuRyu0z2BTQse2g8Y+xank3sAK0AthwxD91tO9l WSUbFlTvDHxtNlgWptZrY+9gf7QzWBF5Do3snafB40F69aHkaxBaUpeEjHIVxw0r p9X2YNZychujt51eftZqBi4nkdo0zFo8iNqMUxT7O2DbYMHFtAks6mM8YcvKArgT Qn9ac/ruMhw03arlhkbc6QJxhbWM3fOB8unXspsVUEDfvz/SlvNB3ZehnkI0ZY3s aOgFH2InAWGprMNPUqXf7YTsdYYZ7UkAm/ZpNeq1WfX7kwk8MB6z -----END CERTIFICATE-----Generated at Thu Oct 8 20:52:38 2026 by rpki-client