$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6e3baee7-85dd-484a-bdbd-415ab1a6863a/f6fc2837-1a51-379a-8189-1dbe44a64528.roa File: f6fc2837-1a51-379a-8189-1dbe44a64528.roa (raw, json) Hash identifier: edUvDpjIy7tJ5in1X4ciIzRBwm3vOJlg0u5EJhR6yog= Subject key identifier: F3:B1:5C:26:0C:D3:84:FF:F6:59:AA:11:D3:54:AD:FE:BC:B2:D8:6B Certificate issuer: /CN=6e3baee7-85dd-484a-bdbd-415ab1a6863a Certificate serial: 010D0C9F4328584F498B97D554420B27D56E3880 Authority key identifier: 8C:0F:CC:9C:11:44:66:84:1E:92:EC:D4:61:8A:43:56:8D:22:E6:01 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6e3baee7-85dd-484a-bdbd-415ab1a6863a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6e3baee7-85dd-484a-bdbd-415ab1a6863a/f6fc2837-1a51-379a-8189-1dbe44a64528.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 396497 IP address blocks: 23.249.12.0/24 maxlen: 24 23.249.13.0/24 maxlen: 24 23.249.15.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6e3baee7-85dd-484a-bdbd-415ab1a6863a/6e3baee7-85dd-484a-bdbd-415ab1a6863a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6e3baee7-85dd-484a-bdbd-415ab1a6863a/6e3baee7-85dd-484a-bdbd-415ab1a6863a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6e3baee7-85dd-484a-bdbd-415ab1a6863a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:8b:97:d5:54:42:0b:27:d5:6e:38:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6e3baee7-85dd-484a-bdbd-415ab1a6863a Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=14d0e695-1606-407d-8731-892a67c31820 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:4e:50:e5:9a:d1:51:53:b8:43:58:d4:3b:5b: 60:4f:27:8e:67:79:0d:f9:f4:da:2f:b1:a4:5a:4a: 64:7b:10:32:c2:c9:09:91:99:93:0c:e4:e4:02:97: 65:6d:70:9c:36:0d:33:46:8a:1c:83:62:1b:92:ce: 2f:fb:a8:e1:5d:98:ba:cf:b7:92:a5:61:56:c0:d4: cf:df:03:95:9b:46:fb:da:88:75:82:64:6a:6e:61: 3e:2d:06:4b:be:f2:d3:bb:70:88:b0:89:44:14:02: d7:92:d2:79:57:98:58:40:1f:1e:af:77:93:b9:c2: c9:b3:4a:0f:ce:ae:10:96:df:0c:49:b4:d7:8d:b1: f4:14:9d:60:19:42:28:ad:6f:2d:2c:88:13:ed:99: 5d:a9:82:d7:1b:50:60:1b:a8:0c:c3:25:9c:d5:4a: c1:f4:3d:e6:a7:c4:13:03:87:db:41:67:60:dd:96: 32:d0:ad:f3:b8:ed:c8:4c:53:89:d9:d2:9a:f5:cd: fc:c0:7f:a4:e9:dc:28:6e:d1:08:6a:e0:3b:a8:da: 2d:35:31:c5:40:68:13:c6:be:26:6e:a3:ee:f3:e5: e2:d8:56:ea:ed:87:df:52:df:a0:1c:0e:98:21:70: 30:13:a8:ae:eb:11:e8:54:7a:08:fa:c2:b5:32:61: 47:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:B1:5C:26:0C:D3:84:FF:F6:59:AA:11:D3:54:AD:FE:BC:B2:D8:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6e3baee7-85dd-484a-bdbd-415ab1a6863a/f6fc2837-1a51-379a-8189-1dbe44a64528.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6e3baee7-85dd-484a-bdbd-415ab1a6863a/6e3baee7-85dd-484a-bdbd-415ab1a6863a.crl X509v3 Authority Key Identifier: keyid:8C:0F:CC:9C:11:44:66:84:1E:92:EC:D4:61:8A:43:56:8D:22:E6:01 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/6e3baee7-85dd-484a-bdbd-415ab1a6863a.cer sbgp-ipAddrBlock: critical IPv4: 23.249.12.0/23 23.249.15.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:41:e7:a7:8a:4a:1a:18:ba:77:35:1e:1b:f5:d8:6f:ea:1f: 6d:33:f6:15:0d:c9:48:75:08:83:da:69:42:a0:18:39:5f:2e: f0:22:a8:76:60:3b:36:c9:cc:e7:2f:21:89:ce:50:23:39:54: 92:9d:3a:63:f0:d0:db:1d:ad:7a:2d:7e:3b:a4:d6:25:d7:14: bc:be:9d:80:17:46:0c:a3:23:6d:04:31:b8:1c:66:eb:33:a1: 15:12:aa:5e:10:6a:72:c5:1c:ba:37:90:06:c0:a5:50:bd:05: f2:65:b8:d6:8d:bb:1e:db:39:1e:5a:63:d3:3b:96:ee:da:b7: 14:39:19:6c:65:92:da:93:16:68:78:1a:5c:04:ca:a0:01:14: 56:51:be:51:f9:c3:c4:b4:b1:6b:12:a0:0c:ed:f0:a0:c4:92: f8:be:dd:d6:df:03:66:18:ca:61:5a:60:84:d4:0a:59:14:a2: c0:22:09:dd:ca:0d:f5:fa:1f:ba:4d:37:56:03:85:9f:4e:79: 87:5b:ff:81:c3:1b:05:0f:9b:c5:85:e1:1b:85:1d:fa:e1:ac: 9e:fc:41:7d:41:2f:9b:a8:2a:4c:df:41:3d:1f:c5:f3:99:7d: 8b:da:2d:4a:de:c6:c6:03:f1:e7:50:88:59:53:da:ae:bd:78: c7:fb:a4:d1 -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE9Ji5fVVEILJ9VuOIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmUzYmFlZTctODVkZC00ODRhLWJkYmQtNDE1YWIxYTY4 NjNhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MTRkMGU2OTUtMTYwNi00MDdkLTg3MzEtODkyYTY3YzMxODIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiU5Q5ZrRUVO4Q1jUO1tgTyeOZ3kN+fTaL7Gk WkpkexAywskJkZmTDOTkApdlbXCcNg0zRoocg2Ibks4v+6jhXZi6z7eSpWFWwNTP 3wOVm0b72oh1gmRqbmE+LQZLvvLTu3CIsIlEFALXktJ5V5hYQB8er3eTucLJs0oP zq4Qlt8MSbTXjbH0FJ1gGUIorW8tLIgT7ZldqYLXG1BgG6gMwyWc1UrB9D3mp8QT A4fbQWdg3ZYy0K3zuO3ITFOJ2dKa9c38wH+k6dwobtEIauA7qNotNTHFQGgTxr4m bqPu8+Xi2Fbq7YffUt+gHA6YIXAwE6iu6xHoVHoI+sK1MmFHFwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFPOxXCYM04T/9lmqEdNUrf68sthrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi82ZTNi YWVlNy04NWRkLTQ4NGEtYmRiZC00MTVhYjFhNjg2M2EvZjZmYzI4MzctMWE1MS0z NzlhLTgxODktMWRiZTQ0YTY0NTI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvNmUzYmFlZTctODVkZC00ODRhLWJk YmQtNDE1YWIxYTY4NjNhLzZlM2JhZWU3LTg1ZGQtNDg0YS1iZGJkLTQxNWFiMWE2 ODYzYS5jcmwwHwYDVR0jBBgwFoAUjA/MnBFEZoQekuzUYYpDVo0i5gEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi82ZTNiYWVlNy04NWRkLTQ4NGEtYmRiZC00MTVh YjFhNjg2M2EuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBF/kMAwQA F/kPMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAANB56eKShoYunc1Hhv12G/qH20z9hUNyUh1CIPaaUKgGDlf LvAiqHZgOzbJzOcvIYnOUCM5VJKdOmPw0NsdrXotfjuk1iXXFLy+nYAXRgyjI20E MbgcZuszoRUSql4QanLFHLo3kAbApVC9BfJluNaNux7bOR5aY9M7lu7atxQ5GWxl ktqTFmh4GlwEyqABFFZRvlH5w8S0sWsSoAzt8KDEkvi+3dbfA2YYymFaYITUClkU osAiCd3KDfX6H7pNN1YDhZ9OeYdb/4HDGwUPm8WF4RuFHfrhrJ78QX1BL5uoKkzf QT0fxfOZfYvaLUrexsYD8edQiFlT2q69eMf7pNE= -----END CERTIFICATE-----Generated at Thu Oct 8 19:36:04 2026 by rpki-client