$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bdd46844-e081-4813-bfe2-0cfbeac92e08/ca4eafff-9365-3068-b787-140215783a30.roa File: ca4eafff-9365-3068-b787-140215783a30.roa (raw, json) Hash identifier: wuJ7L+zLEZCTIxySR5TFIUV0n4dzN0BkjiscyaxKYO4= Subject key identifier: A6:AC:00:31:A8:98:56:43:8B:21:3E:6F:C1:5F:D9:97:CD:08:FA:83 Certificate issuer: /CN=bdd46844-e081-4813-bfe2-0cfbeac92e08 Certificate serial: 010D0C9F4328584F4977455E9B88C25495F04BE0 Authority key identifier: FF:99:49:19:84:88:39:A6:03:55:7D:CC:8A:2D:A2:C6:77:B4:D5:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bdd46844-e081-4813-bfe2-0cfbeac92e08.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bdd46844-e081-4813-bfe2-0cfbeac92e08/ca4eafff-9365-3068-b787-140215783a30.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 401472 IP address blocks: 23.129.28.0/24 maxlen: 24 2602:f7af::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bdd46844-e081-4813-bfe2-0cfbeac92e08/bdd46844-e081-4813-bfe2-0cfbeac92e08.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bdd46844-e081-4813-bfe2-0cfbeac92e08/bdd46844-e081-4813-bfe2-0cfbeac92e08.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bdd46844-e081-4813-bfe2-0cfbeac92e08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:77:45:5e:9b:88:c2:54:95:f0:4b:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bdd46844-e081-4813-bfe2-0cfbeac92e08 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=ecf1258a-c83f-4e90-8fd0-767646584c63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:51:ea:d6:da:6a:00:d7:6e:b3:14:93:78:17: 87:9c:fe:d8:31:23:ad:86:55:88:79:58:96:38:a1: ea:21:2f:b7:30:8e:6d:c7:d2:e5:19:58:6b:f4:b3: 0a:c7:04:64:bb:60:b4:16:eb:3f:4c:e0:de:17:33: ac:8b:42:f0:67:9d:c0:28:97:0d:3a:d5:92:0d:ac: 82:92:64:a9:82:92:65:5f:58:53:0d:bc:7f:4d:6b: 1c:01:81:a2:ed:74:3d:01:3c:37:f8:dd:85:10:b3: cc:a5:cf:23:94:58:c3:df:e8:0e:ec:26:81:8a:d7: e5:da:66:06:32:88:9e:85:be:21:a4:37:96:b2:62: 94:69:ac:62:d9:d8:07:8a:60:9d:d3:6b:68:0b:4f: fe:ab:47:ba:3e:7e:c0:f2:af:57:b2:b3:82:3c:27: fb:4d:75:cc:da:cc:91:51:00:83:c0:4e:c2:e4:f4: 97:c0:ec:33:1a:b1:4b:9f:c9:e5:e6:99:57:95:9d: 82:e1:d4:1c:81:28:41:47:3b:0c:01:e1:93:12:03: 7b:1f:50:76:14:75:9f:24:88:81:7c:88:b6:a1:cf: 09:46:46:27:6b:f2:d5:10:35:50:1c:00:e7:45:ee: fa:79:9f:49:d1:60:bf:5f:9c:0a:46:0c:f3:3b:76: 37:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:AC:00:31:A8:98:56:43:8B:21:3E:6F:C1:5F:D9:97:CD:08:FA:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bdd46844-e081-4813-bfe2-0cfbeac92e08/ca4eafff-9365-3068-b787-140215783a30.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bdd46844-e081-4813-bfe2-0cfbeac92e08/bdd46844-e081-4813-bfe2-0cfbeac92e08.crl X509v3 Authority Key Identifier: keyid:FF:99:49:19:84:88:39:A6:03:55:7D:CC:8A:2D:A2:C6:77:B4:D5:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bdd46844-e081-4813-bfe2-0cfbeac92e08.cer sbgp-ipAddrBlock: critical IPv4: 23.129.28.0/24 IPv6: 2602:f7af::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:20:e4:de:5b:23:ab:4c:6a:d0:d1:c1:fe:1c:52:6d:5c:99: 0e:cb:5e:1e:86:3c:56:b2:52:fd:76:c5:88:2b:2d:2b:a3:e9: 59:9c:34:c9:d9:91:68:e3:ae:93:57:33:25:4c:50:9a:ac:6a: 6d:f0:bb:54:3c:29:4b:2f:a4:d4:f8:c5:9a:e7:4b:a3:61:69: 13:a7:52:c1:cd:9e:4a:1e:78:a0:88:78:62:64:c2:de:cf:66: 14:1d:58:d8:e7:f1:97:b4:b4:50:ba:34:52:7a:dd:2e:30:fa: 45:5f:eb:ac:61:61:71:32:1f:ed:60:ad:bf:bb:25:4f:29:15: 0d:23:e5:23:0e:1d:13:f3:bd:0d:94:b4:d7:b2:13:e7:5d:de: 8b:88:f1:f8:23:ea:72:83:a8:55:97:e5:56:92:4f:b7:78:56: d7:97:16:c2:97:4c:34:13:6d:94:84:30:ff:87:68:6e:c5:ec: f1:a2:69:37:35:9d:3a:39:87:0e:a9:dd:0e:9a:47:43:ad:f3: 94:46:a2:35:d2:d3:3a:9d:32:93:7b:22:94:d4:70:dc:9c:09: dc:41:6a:7f:8e:0c:c8:eb:d4:39:f2:a2:1a:ba:f6:21:b2:ef: 7c:db:3a:89:5a:34:73:04:21:8a:9e:ce:ca:3b:96:f9:42:99: cc:5f:93:0d -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE9Jd0Vem4jCVJXwS+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmRkNDY4NDQtZTA4MS00ODEzLWJmZTItMGNmYmVhYzky ZTA4MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZWNmMTI1OGEtYzgzZi00ZTkwLThmZDAtNzY3NjQ2NTg0YzYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgVHq1tpqANdusxSTeBeHnP7YMSOthlWIeViW OKHqIS+3MI5tx9LlGVhr9LMKxwRku2C0Fus/TODeFzOsi0LwZ53AKJcNOtWSDayC kmSpgpJlX1hTDbx/TWscAYGi7XQ9ATw3+N2FELPMpc8jlFjD3+gO7CaBitfl2mYG Moiehb4hpDeWsmKUaaxi2dgHimCd02toC0/+q0e6Pn7A8q9XsrOCPCf7TXXM2syR UQCDwE7C5PSXwOwzGrFLn8nl5plXlZ2C4dQcgShBRzsMAeGTEgN7H1B2FHWfJIiB fIi2oc8JRkYna/LVEDVQHADnRe76eZ9J0WC/X5wKRgzzO3Y3TQIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFKasADGomFZDiyE+b8Ff2ZfNCPqDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iZGQ0 Njg0NC1lMDgxLTQ4MTMtYmZlMi0wY2ZiZWFjOTJlMDgvY2E0ZWFmZmYtOTM2NS0z MDY4LWI3ODctMTQwMjE1NzgzYTMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYmRkNDY4NDQtZTA4MS00ODEzLWJm ZTItMGNmYmVhYzkyZTA4L2JkZDQ2ODQ0LWUwODEtNDgxMy1iZmUyLTBjZmJlYWM5 MmUwOC5jcmwwHwYDVR0jBBgwFoAU/5lJGYSIOaYDVX3Mii2ixne01bQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iZGQ0Njg0NC1lMDgxLTQ4MTMtYmZlMi0wY2Zi ZWFjOTJlMDguY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF4EcMA4E AgACMAgDBgAmAvevADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBlIOTeWyOrTGrQ0cH+HFJtXJkOy14ehjxW slL9dsWIKy0ro+lZnDTJ2ZFo466TVzMlTFCarGpt8LtUPClLL6TU+MWa50ujYWkT p1LBzZ5KHnigiHhiZMLez2YUHVjY5/GXtLRQujRSet0uMPpFX+usYWFxMh/tYK2/ uyVPKRUNI+UjDh0T870NlLTXshPnXd6LiPH4I+pyg6hVl+VWkk+3eFbXlxbCl0w0 E22UhDD/h2huxezxomk3NZ06OYcOqd0OmkdDrfOURqI10tM6nTKTeyKU1HDcnAnc QWp/jgzI69Q58qIauvYhsu982zqJWjRzBCGKns7KO5b5QpnMX5MN -----END CERTIFICATE-----Generated at Sat Sep 26 11:03:58 2026 by rpki-client