$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6028c868-eff9-4fae-98a0-65a04b770a38/5c8284b3-6093-3b75-bce9-99db36f7bb7f.roa File: 5c8284b3-6093-3b75-bce9-99db36f7bb7f.roa (raw, json) Hash identifier: E3DUiX5e6JI28lsJ7lkSMMpS6e+P1Ntws/yHcN3ufQg= Subject key identifier: EC:6B:47:E1:75:6A:5A:AF:F1:27:97:E7:70:04:C8:CB:C8:C7:7E:6F Certificate issuer: /CN=6028c868-eff9-4fae-98a0-65a04b770a38 Certificate serial: 010D0C9F4328584F374D18447F312126B852F300 Authority key identifier: 8D:97:31:3B:2E:DB:3D:09:8A:2E:93:21:A4:D3:7D:36:A2:A0:F4:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6028c868-eff9-4fae-98a0-65a04b770a38.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6028c868-eff9-4fae-98a0-65a04b770a38/5c8284b3-6093-3b75-bce9-99db36f7bb7f.roa Signing time: Fri 18 Sep 2026 13:00:12 +0000 ROA not before: Fri 18 Sep 2026 13:00:12 +0000 ROA not after: Thu 17 Dec 2026 14:00:12 +0000 asID: 46177 IP address blocks: 23.136.228.0/24 maxlen: 24 2602:f696::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6028c868-eff9-4fae-98a0-65a04b770a38/6028c868-eff9-4fae-98a0-65a04b770a38.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6028c868-eff9-4fae-98a0-65a04b770a38/6028c868-eff9-4fae-98a0-65a04b770a38.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6028c868-eff9-4fae-98a0-65a04b770a38.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:37:4d:18:44:7f:31:21:26:b8:52:f3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6028c868-eff9-4fae-98a0-65a04b770a38 Validity Not Before: Sep 18 13:00:12 2026 GMT Not After : Dec 17 14:00:12 2026 GMT Subject: CN=96598f70-25d1-4ccc-aa85-b33be4c072e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:5a:eb:b3:d9:c2:78:6c:4f:a5:14:c8:6a:22: c9:44:95:80:00:19:82:95:a2:e6:7b:e3:43:39:a7: 73:45:97:0f:b4:eb:9c:8b:47:22:8e:5f:3f:49:96: 3a:c0:e7:bf:1b:0a:93:0c:fb:18:06:e5:70:5d:e3: dd:53:7d:fa:8e:28:c8:66:d7:5f:c1:76:e2:6b:af: ed:96:93:b4:40:95:fc:59:09:bf:8a:5a:2a:9a:0f: 13:e5:62:5b:26:65:33:fc:d0:4e:18:3e:d8:82:83: f3:d5:90:94:a5:4a:10:80:7e:13:e9:0c:9f:88:0b: 96:d3:b5:ec:7d:6b:bd:6e:f3:1b:c7:f2:87:a9:5d: e1:ba:78:e2:98:26:b1:51:88:46:94:42:2f:cb:e0: fa:f8:56:67:79:d2:a2:bd:a2:87:84:08:d2:01:5a: 20:6c:e1:40:cf:94:31:9d:d7:22:cc:9d:b3:a0:10: fd:27:51:4c:0b:a1:a2:95:39:ba:d5:d8:59:11:62: e3:08:07:8d:92:44:b2:aa:1d:a3:d5:f4:bd:99:d7: ef:a0:e6:d0:4a:74:d0:eb:a4:98:17:c3:d7:57:d6: fe:a4:25:9f:12:fe:fd:75:ae:01:88:ee:69:62:e8: 7a:9c:3b:61:b6:53:59:27:ad:5a:bd:6e:69:bd:fb: 46:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:6B:47:E1:75:6A:5A:AF:F1:27:97:E7:70:04:C8:CB:C8:C7:7E:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6028c868-eff9-4fae-98a0-65a04b770a38/5c8284b3-6093-3b75-bce9-99db36f7bb7f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6028c868-eff9-4fae-98a0-65a04b770a38/6028c868-eff9-4fae-98a0-65a04b770a38.crl X509v3 Authority Key Identifier: keyid:8D:97:31:3B:2E:DB:3D:09:8A:2E:93:21:A4:D3:7D:36:A2:A0:F4:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6028c868-eff9-4fae-98a0-65a04b770a38.cer sbgp-ipAddrBlock: critical IPv4: 23.136.228.0/24 IPv6: 2602:f696::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:ae:7c:96:1d:a6:a1:76:22:47:5a:c9:b4:fb:55:7e:69:b8: e3:0f:da:2c:c9:f1:b1:2e:b8:5f:1d:37:82:12:03:3e:9d:13: a5:f8:b8:4f:7c:f5:63:57:60:12:35:3a:f4:88:80:03:1c:3f: 39:bf:58:2e:ba:4f:13:0f:d3:e4:fd:db:d8:7b:39:f8:f3:d0: 49:64:7f:fd:05:11:a4:18:ff:a8:a5:4e:46:02:3f:d0:9e:25: 4a:c4:7f:e6:99:d2:26:0b:2a:a2:b6:b8:b5:1d:e0:86:13:95: 78:8c:6a:48:d3:bd:ae:79:78:55:f9:57:f1:61:f2:59:8c:d5: b8:20:72:fc:c6:1c:58:32:19:a8:35:de:d5:4d:25:1f:d2:f7: 03:2e:22:b1:88:76:38:69:d2:78:32:95:ea:8e:bb:60:cc:b5: dc:c8:a2:43:d4:ee:de:54:11:23:68:43:3b:32:cc:d8:1d:bd: 8a:92:ec:42:4a:08:5a:3e:fe:10:50:c3:b0:25:53:e7:78:17: b8:fb:38:d7:d8:69:91:be:fd:15:96:21:5f:9d:3c:57:84:5d: 61:06:37:a7:14:93:f4:6b:78:ca:0f:ae:22:5e:cb:f9:31:60: f8:88:d4:4a:4c:f8:72:48:c7:a3:fd:c7:89:11:1b:76:23:02: 71:ac:b4:07 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE83TRhEfzEhJrhS8wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjAyOGM4NjgtZWZmOS00ZmFlLTk4YTAtNjVhMDRiNzcw YTM4MB4XDTI2MDkxODEzMDAxMloXDTI2MTIxNzE0MDAxMlowLzEtMCsGA1UEAxMk OTY1OThmNzAtMjVkMS00Y2NjLWFhODUtYjMzYmU0YzA3MmUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuVrrs9nCeGxPpRTIaiLJRJWAABmClaLme+ND OadzRZcPtOuci0cijl8/SZY6wOe/GwqTDPsYBuVwXePdU336jijIZtdfwXbia6/t lpO0QJX8WQm/iloqmg8T5WJbJmUz/NBOGD7YgoPz1ZCUpUoQgH4T6QyfiAuW07Xs fWu9bvMbx/KHqV3hunjimCaxUYhGlEIvy+D6+FZnedKivaKHhAjSAVogbOFAz5Qx ndcizJ2zoBD9J1FMC6GilTm61dhZEWLjCAeNkkSyqh2j1fS9mdfvoObQSnTQ66SY F8PXV9b+pCWfEv79da4BiO5pYuh6nDthtlNZJ61avW5pvftGUwIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFOxrR+F1alqv8SeX53AEyMvIx35vMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi82MDI4 Yzg2OC1lZmY5LTRmYWUtOThhMC02NWEwNGI3NzBhMzgvNWM4Mjg0YjMtNjA5My0z Yjc1LWJjZTktOTlkYjM2ZjdiYjdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvNjAyOGM4NjgtZWZmOS00ZmFlLTk4 YTAtNjVhMDRiNzcwYTM4LzYwMjhjODY4LWVmZjktNGZhZS05OGEwLTY1YTA0Yjc3 MGEzOC5jcmwwHwYDVR0jBBgwFoAUjZcxOy7bPQmKLpMhpNN9NqKg9KIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi82MDI4Yzg2OC1lZmY5LTRmYWUtOThhMC02NWEw NGI3NzBhMzguY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF4jkMA4E AgACMAgDBgAmAvaWADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBarnyWHaahdiJHWsm0+1V+abjjD9osyfGx LrhfHTeCEgM+nROl+LhPfPVjV2ASNTr0iIADHD85v1guuk8TD9Pk/dvYezn489BJ ZH/9BRGkGP+opU5GAj/QniVKxH/mmdImCyqitri1HeCGE5V4jGpI072ueXhV+Vfx YfJZjNW4IHL8xhxYMhmoNd7VTSUf0vcDLiKxiHY4adJ4MpXqjrtgzLXcyKJD1O7e VBEjaEM7MszYHb2KkuxCSghaPv4QUMOwJVPneBe4+zjX2GmRvv0VliFfnTxXhF1h BjenFJP0a3jKD64iXsv5MWD4iNRKTPhySMej/ceJERt2IwJxrLQH -----END CERTIFICATE-----Generated at Fri Sep 25 05:01:40 2026 by rpki-client