$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fc035063-bc0b-41c0-9f50-9cfa0f9db697/2f4ee87e-0e82-31e9-8364-c88930e7d7e6.roa File: 2f4ee87e-0e82-31e9-8364-c88930e7d7e6.roa (raw, json) Hash identifier: rDg8Nv/zuA/YYzDXba8jmBkHhJGeGrn2uNxaXLeIuts= Subject key identifier: 92:F5:31:7B:FA:DC:38:DD:55:B5:5C:0B:A1:5B:C1:F2:07:83:4B:EC Certificate issuer: /CN=fc035063-bc0b-41c0-9f50-9cfa0f9db697 Certificate serial: 010D0C9F4328584F4975F3452592295677115200 Authority key identifier: 89:40:2D:A2:5D:38:A2:01:A7:FD:47:31:54:2A:8D:81:DF:4E:6A:2A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fc035063-bc0b-41c0-9f50-9cfa0f9db697.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fc035063-bc0b-41c0-9f50-9cfa0f9db697/2f4ee87e-0e82-31e9-8364-c88930e7d7e6.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 401468 IP address blocks: 23.128.124.0/24 maxlen: 24 192.43.161.0/24 maxlen: 24 2602:f9a0::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fc035063-bc0b-41c0-9f50-9cfa0f9db697/fc035063-bc0b-41c0-9f50-9cfa0f9db697.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fc035063-bc0b-41c0-9f50-9cfa0f9db697/fc035063-bc0b-41c0-9f50-9cfa0f9db697.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fc035063-bc0b-41c0-9f50-9cfa0f9db697.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:75:f3:45:25:92:29:56:77:11:52:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fc035063-bc0b-41c0-9f50-9cfa0f9db697 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=5821414a-267f-4e53-9c50-7efd0c7e2a0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:f8:34:3e:36:a9:0c:b3:74:e9:41:43:97:b2: 0f:e2:77:cb:e5:65:00:b8:7c:1f:63:10:5b:b4:d5: 49:76:09:cf:c8:01:f6:4c:ff:73:f7:1f:26:c0:49: 59:38:14:a5:58:51:b4:fb:56:db:b9:68:3b:ad:16: 9b:bc:71:d1:97:48:8e:82:d4:9d:94:38:13:a8:1f: 1c:2d:01:51:0e:81:4e:f9:74:95:2b:99:73:c5:ba: 87:73:db:90:4a:65:be:a1:3c:81:92:af:bd:00:ac: fd:d5:73:30:49:de:2b:93:4c:13:9d:3a:63:88:ca: 16:3f:f8:d3:70:85:f7:9f:1a:cb:c4:fe:50:de:55: 1c:d3:70:5c:97:bf:e1:77:e7:13:c0:c7:ad:1b:e7: 6d:22:d0:1e:58:f0:f4:85:07:98:7a:19:18:10:e5: 3e:5a:60:40:85:53:00:fc:a8:db:40:1b:c5:ea:3a: 35:35:4d:7a:2f:19:55:f6:59:04:3e:e5:85:8d:76: 46:3c:b1:90:3f:34:a6:43:35:97:f4:bb:85:45:a4: 10:d2:46:bd:83:fb:09:47:9f:68:d4:ee:76:7e:20: 3e:2e:ec:49:79:3a:0e:c4:db:14:13:4d:27:e1:92: 06:cb:68:69:96:f0:42:b3:c9:c6:7b:b3:80:25:f5: 1d:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:F5:31:7B:FA:DC:38:DD:55:B5:5C:0B:A1:5B:C1:F2:07:83:4B:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fc035063-bc0b-41c0-9f50-9cfa0f9db697/2f4ee87e-0e82-31e9-8364-c88930e7d7e6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fc035063-bc0b-41c0-9f50-9cfa0f9db697/fc035063-bc0b-41c0-9f50-9cfa0f9db697.crl X509v3 Authority Key Identifier: keyid:89:40:2D:A2:5D:38:A2:01:A7:FD:47:31:54:2A:8D:81:DF:4E:6A:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fc035063-bc0b-41c0-9f50-9cfa0f9db697.cer sbgp-ipAddrBlock: critical IPv4: 23.128.124.0/24 192.43.161.0/24 IPv6: 2602:f9a0::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:0e:7c:5b:d8:67:b1:6d:75:cf:d9:1f:87:5d:45:c7:e6:c4: 8c:d5:36:a1:4c:86:17:b9:f0:83:24:92:7a:46:3f:17:1b:77: 8c:82:48:cb:51:e7:88:d4:bb:b3:87:31:ff:ce:a4:73:b5:52: a3:01:45:c0:cb:8a:3a:16:a9:4f:a1:d6:67:1b:42:c6:2b:7e: ec:c6:d0:ca:e2:21:d0:17:75:de:ce:d1:0d:74:1e:70:dd:48: 8d:00:fc:ee:5b:13:f8:04:3d:29:28:fd:bb:95:14:ac:ec:df: cd:12:52:6d:1d:71:94:4f:22:64:57:98:98:1f:18:29:77:c0: 47:c5:9f:ea:d7:de:2e:f6:ca:33:29:66:79:fb:c5:b8:c6:69: 32:c9:aa:47:c0:67:18:d2:e2:41:8a:18:f4:a7:75:35:07:e0: 18:23:b1:bd:b6:f4:d5:89:57:33:d7:9d:23:26:e0:cf:8d:0c: 95:f1:62:59:71:7f:b2:80:f8:99:48:8e:66:94:69:fa:5c:e4: 30:95:77:4c:fe:74:30:fd:e5:72:55:f1:cb:ec:bc:d5:27:b1: bf:20:89:49:98:d0:2a:f8:06:54:00:e0:b6:30:81:53:a8:9c: bc:ad:75:81:89:e2:9d:8f:77:d9:12:82:ba:bd:92:ac:fd:31: 9d:c3:44:a9 -----BEGIN CERTIFICATE----- MIIGWTCCBUGgAwIBAgIUAQ0Mn0MoWE9JdfNFJZIpVncRUgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmMwMzUwNjMtYmMwYi00MWMwLTlmNTAtOWNmYTBmOWRi Njk3MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NTgyMTQxNGEtMjY3Zi00ZTUzLTljNTAtN2VmZDBjN2UyYTBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArvg0PjapDLN06UFDl7IP4nfL5WUAuHwfYxBb tNVJdgnPyAH2TP9z9x8mwElZOBSlWFG0+1bbuWg7rRabvHHRl0iOgtSdlDgTqB8c LQFRDoFO+XSVK5lzxbqHc9uQSmW+oTyBkq+9AKz91XMwSd4rk0wTnTpjiMoWP/jT cIX3nxrLxP5Q3lUc03Bcl7/hd+cTwMetG+dtItAeWPD0hQeYehkYEOU+WmBAhVMA /KjbQBvF6jo1NU16LxlV9lkEPuWFjXZGPLGQPzSmQzWX9LuFRaQQ0ka9g/sJR59o 1O52fiA+LuxJeToOxNsUE00n4ZIGy2hplvBCs8nGe7OAJfUdVwIDAQABo4IDazCC A2cwHQYDVR0OBBYEFJL1MXv63DjdVbVcC6FbwfIHg0vsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9mYzAz NTA2My1iYzBiLTQxYzAtOWY1MC05Y2ZhMGY5ZGI2OTcvMmY0ZWU4N2UtMGU4Mi0z MWU5LTgzNjQtYzg4OTMwZTdkN2U2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZmMwMzUwNjMtYmMwYi00MWMwLTlm NTAtOWNmYTBmOWRiNjk3L2ZjMDM1MDYzLWJjMGItNDFjMC05ZjUwLTljZmEwZjlk YjY5Ny5jcmwwHwYDVR0jBBgwFoAUiUAtol04ogGn/UcxVCqNgd9OaiowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9mYzAzNTA2My1iYzBiLTQxYzAtOWY1MC05Y2Zh MGY5ZGI2OTcuY2VyMDUGCCsGAQUFBwEHAQH/BCYwJDASBAIAATAMAwQAF4B8AwQA wCuhMA4EAgACMAgDBgAmAvmgADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBeDnxb2GexbXXP2R+HXUXH5sSM 1TahTIYXufCDJJJ6Rj8XG3eMgkjLUeeI1LuzhzH/zqRztVKjAUXAy4o6FqlPodZn G0LGK37sxtDK4iHQF3XeztENdB5w3UiNAPzuWxP4BD0pKP27lRSs7N/NElJtHXGU TyJkV5iYHxgpd8BHxZ/q194u9sozKWZ5+8W4xmkyyapHwGcY0uJBihj0p3U1B+AY I7G9tvTViVcz150jJuDPjQyV8WJZcX+ygPiZSI5mlGn6XOQwlXdM/nQw/eVyVfHL 7LzVJ7G/IIlJmNAq+AZUAOC2MIFTqJy8rXWBieKdj3fZEoK6vZKs/TGdw0Sp -----END CERTIFICATE-----Generated at Mon Sep 28 22:50:25 2026 by rpki-client