$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/643134dd-25b5-4c16-b9b4-7167cf0012db/0fe2de25-b9f9-390d-9def-950bfe47e7b0.roa File: 0fe2de25-b9f9-390d-9def-950bfe47e7b0.roa (raw, json) Hash identifier: tGxSrk8wKzA7zB53bFNxaTdcxJ71ZE7XdyIu2mKfaM0= Subject key identifier: 76:C2:07:7C:01:5A:5B:85:F7:84:25:C4:19:08:92:CF:F2:F6:4B:1B Certificate issuer: /CN=643134dd-25b5-4c16-b9b4-7167cf0012db Certificate serial: 010D0C9F4328584F708828857AF4C58DD2246B00 Authority key identifier: 5E:45:8E:D0:77:EF:EA:BE:49:9B:26:91:96:2A:A6:35:75:FF:A5:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/643134dd-25b5-4c16-b9b4-7167cf0012db.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/643134dd-25b5-4c16-b9b4-7167cf0012db/0fe2de25-b9f9-390d-9def-950bfe47e7b0.roa Signing time: Fri 09 Oct 2026 01:00:12 +0000 ROA not before: Fri 09 Oct 2026 01:00:12 +0000 ROA not after: Thu 07 Jan 2027 02:00:12 +0000 asID: 401662 IP address blocks: 23.137.172.0/24 maxlen: 32 2602:f680::/40 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/643134dd-25b5-4c16-b9b4-7167cf0012db/643134dd-25b5-4c16-b9b4-7167cf0012db.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/643134dd-25b5-4c16-b9b4-7167cf0012db/643134dd-25b5-4c16-b9b4-7167cf0012db.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/643134dd-25b5-4c16-b9b4-7167cf0012db.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:70:88:28:85:7a:f4:c5:8d:d2:24:6b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=643134dd-25b5-4c16-b9b4-7167cf0012db Validity Not Before: Oct 9 01:00:12 2026 GMT Not After : Jan 7 02:00:12 2027 GMT Subject: CN=52240694-25f6-4b8a-a527-263a2eb85be6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:e1:7b:a3:24:ed:28:ab:dd:58:da:fa:e5:04: c6:e5:3b:d5:c4:ce:19:25:ad:bf:7a:df:30:66:43: 9e:da:cc:91:df:17:fe:6e:4c:26:5c:f4:5b:b0:02: a4:82:af:ac:ac:e2:96:ff:79:37:99:c5:ba:5b:74: 64:ad:aa:cb:44:da:26:de:73:7f:34:95:d4:d3:74: e3:38:4c:3b:7b:d2:9a:89:e0:4f:ad:94:7e:f1:3b: a7:49:c7:01:f0:57:73:3c:3f:3f:36:41:b8:72:0a: c9:d9:73:b9:8b:0f:ff:b5:8a:5b:a2:4d:e7:b9:32: ec:b4:a1:50:cb:36:8c:10:d4:93:88:27:43:83:f3: 19:27:0a:36:1f:cd:28:91:65:38:3b:76:89:44:05: e6:e7:3d:d8:a6:4e:fb:b8:63:1b:a9:2e:3c:60:ad: a0:3e:6a:42:3d:1f:ce:61:63:9b:f8:fa:7e:1d:c7: 53:cc:31:97:84:04:61:a3:e1:48:88:c5:8a:2b:5c: ff:39:aa:41:5f:40:70:81:f6:21:25:03:a3:87:f9: aa:57:1c:0d:3b:02:1e:bc:dd:3f:da:2f:06:56:65: 5f:1d:a8:f4:a4:2d:bb:9a:ba:ea:cd:9a:04:2d:39: a9:b5:fc:e5:1b:bb:bd:29:4e:5b:cd:88:f4:05:1c: 30:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:C2:07:7C:01:5A:5B:85:F7:84:25:C4:19:08:92:CF:F2:F6:4B:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/643134dd-25b5-4c16-b9b4-7167cf0012db/0fe2de25-b9f9-390d-9def-950bfe47e7b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/643134dd-25b5-4c16-b9b4-7167cf0012db/643134dd-25b5-4c16-b9b4-7167cf0012db.crl X509v3 Authority Key Identifier: keyid:5E:45:8E:D0:77:EF:EA:BE:49:9B:26:91:96:2A:A6:35:75:FF:A5:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/643134dd-25b5-4c16-b9b4-7167cf0012db.cer sbgp-ipAddrBlock: critical IPv4: 23.137.172.0/24 IPv6: 2602:f680::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:06:65:1d:24:63:25:87:37:4c:39:d3:01:d9:7a:b8:10:d6: 1f:09:7c:6a:a8:6d:2d:f1:f5:b0:4c:31:54:2e:9c:07:8c:eb: 9b:bd:cc:51:e1:1a:ea:71:04:1c:b2:bc:00:70:df:d0:c8:bb: 95:2e:37:30:89:e9:d4:13:a0:ff:20:a6:1b:6f:df:90:38:64: e1:35:3a:47:f0:52:26:ec:f6:af:dd:88:31:67:2c:08:e3:7c: 6a:95:a8:61:8f:3c:cd:13:19:df:52:a5:10:35:86:27:23:d8: 46:21:a5:69:cb:6e:57:56:ff:08:33:7d:74:66:c3:fd:c6:d9: 59:69:20:d1:05:ff:d9:00:df:94:72:ef:ef:a6:36:5b:ee:44: c6:47:a8:51:7e:8a:df:a5:7a:93:db:4e:70:c0:92:7e:91:bf: 66:61:b5:fc:eb:1a:c7:0d:3a:22:36:6d:83:0c:79:95:64:fe: 43:18:c8:7e:26:8d:56:b3:e0:91:df:a2:40:8b:23:cb:e4:d8: e2:d9:05:50:78:34:38:6a:be:de:16:dc:c1:09:11:36:df:2f: 34:cb:9a:32:f2:10:60:cf:fd:1b:15:a1:e5:3e:b4:d6:58:d3: f6:c1:47:5c:a9:75:34:32:2e:75:7b:13:1d:ca:f5:4f:08:fc: 4a:46:71:51 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE9wiCiFevTFjdIkawAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjQzMTM0ZGQtMjViNS00YzE2LWI5YjQtNzE2N2NmMDAx MmRiMB4XDTI2MTAwOTAxMDAxMloXDTI3MDEwNzAyMDAxMlowLzEtMCsGA1UEAxMk NTIyNDA2OTQtMjVmNi00YjhhLWE1MjctMjYzYTJlYjg1YmU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiOF7oyTtKKvdWNr65QTG5TvVxM4ZJa2/et8w ZkOe2syR3xf+bkwmXPRbsAKkgq+srOKW/3k3mcW6W3RkrarLRNom3nN/NJXU03Tj OEw7e9KaieBPrZR+8TunSccB8FdzPD8/NkG4cgrJ2XO5iw//tYpbok3nuTLstKFQ yzaMENSTiCdDg/MZJwo2H80okWU4O3aJRAXm5z3Ypk77uGMbqS48YK2gPmpCPR/O YWOb+Pp+HcdTzDGXhARho+FIiMWKK1z/OapBX0BwgfYhJQOjh/mqVxwNOwIevN0/ 2i8GVmVfHaj0pC27mrrqzZoELTmptfzlG7u9KU5bzYj0BRwwzQIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFHbCB3wBWluF94QlxBkIks/y9ksbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi82NDMx MzRkZC0yNWI1LTRjMTYtYjliNC03MTY3Y2YwMDEyZGIvMGZlMmRlMjUtYjlmOS0z OTBkLTlkZWYtOTUwYmZlNDdlN2IwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvNjQzMTM0ZGQtMjViNS00YzE2LWI5 YjQtNzE2N2NmMDAxMmRiLzY0MzEzNGRkLTI1YjUtNGMxNi1iOWI0LTcxNjdjZjAw MTJkYi5jcmwwHwYDVR0jBBgwFoAUXkWO0Hfv6r5JmyaRliqmNXX/pR8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi82NDMxMzRkZC0yNWI1LTRjMTYtYjliNC03MTY3 Y2YwMDEyZGIuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF4msMA4E AgACMAgDBgAmAvaAADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBNBmUdJGMlhzdMOdMB2Xq4ENYfCXxqqG0t 8fWwTDFULpwHjOubvcxR4RrqcQQcsrwAcN/QyLuVLjcwienUE6D/IKYbb9+QOGTh NTpH8FIm7Pav3YgxZywI43xqlahhjzzNExnfUqUQNYYnI9hGIaVpy25XVv8IM310 ZsP9xtlZaSDRBf/ZAN+Ucu/vpjZb7kTGR6hRforfpXqT205wwJJ+kb9mYbX86xrH DToiNm2DDHmVZP5DGMh+Jo1Ws+CR36JAiyPL5Nji2QVQeDQ4ar7eFtzBCRE23y80 y5oy8hBgz/0bFaHlPrTWWNP2wUdcqXU0Mi51exMdyvVPCPxKRnFR -----END CERTIFICATE-----Generated at Mon Oct 12 02:12:18 2026 by rpki-client