$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb/4c7be311-6f85-3b93-8242-963a4e63a1ab.roa File: 4c7be311-6f85-3b93-8242-963a4e63a1ab.roa (raw, json) Hash identifier: kYUz/ghBRKjsdp5x/UYjOzDhYwnKuK4bLA7DvcpWvY8= Subject key identifier: 4B:4E:97:FB:81:95:68:C4:96:29:06:0E:62:BF:0A:25:29:05:84:3C Certificate issuer: /CN=ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb Certificate serial: 010D0C9F4328584F497749C74151754D914B22F0 Authority key identifier: 3E:74:CA:C3:2A:55:30:FC:12:F0:74:86:AC:0C:26:F3:75:48:5A:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb/4c7be311-6f85-3b93-8242-963a4e63a1ab.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 32595 IP address blocks: 23.172.201.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:77:49:c7:41:51:75:4d:91:4b:22:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=8e9f0bd4-55f6-4e1d-b383-3d11490b4b92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:e0:77:35:00:8a:37:a7:6c:ff:07:58:c0:3c: 29:64:31:62:6c:42:61:2c:50:77:3b:53:7c:7a:55: d3:33:71:74:ed:ea:e0:be:3e:6e:77:f5:e6:f6:85: 3b:0e:39:48:30:aa:1c:52:e5:55:95:c2:4d:c6:e9: 51:89:c4:f5:9d:62:63:35:8a:cb:5a:89:61:80:ff: 3e:2b:2d:d0:b7:a8:d4:47:8e:f8:a4:3e:68:eb:c7: 6b:65:ba:84:03:4c:bd:0c:82:2c:10:85:a7:c7:e1: e7:b2:62:09:10:c9:c4:dd:8e:f8:d3:be:50:a6:70: 1b:9e:97:ea:3c:88:11:7f:8f:30:f5:ed:15:90:0d: 4b:0b:ff:f3:e9:0b:ba:92:ca:7d:82:f2:11:95:24: 94:a8:de:3d:df:fe:99:b9:d9:9b:e6:f2:5b:e9:a7: 03:84:5d:76:52:07:41:dd:5f:75:b8:8f:89:28:f5: 14:5d:bc:35:c5:c0:f9:39:36:27:79:73:5d:91:a2: e6:cf:6c:61:d7:5f:1a:76:62:59:9e:77:d3:a0:3b: ab:5b:7e:1e:23:b0:d7:8a:b8:b2:1c:5f:23:62:c0: 4f:38:81:f0:4d:7d:ff:c5:f2:28:36:58:9b:e9:b6: 9f:95:c0:7b:0a:1e:1b:e9:32:ed:80:39:3a:90:7b: 0b:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:4E:97:FB:81:95:68:C4:96:29:06:0E:62:BF:0A:25:29:05:84:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb/4c7be311-6f85-3b93-8242-963a4e63a1ab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb.crl X509v3 Authority Key Identifier: keyid:3E:74:CA:C3:2A:55:30:FC:12:F0:74:86:AC:0C:26:F3:75:48:5A:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce0acc85-4dc1-4ddc-8ebb-598f3cbc0efb.cer sbgp-ipAddrBlock: critical IPv4: 23.172.201.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:d5:96:ca:4f:98:bd:c4:42:b8:b1:b3:82:ec:5b:73:7c:d7: db:29:82:52:50:ad:6d:f4:47:b5:e0:a2:3a:2a:0c:d1:fe:0b: 52:47:c4:71:16:95:33:c4:d7:a4:ce:09:0c:8e:f0:e2:88:b3: 12:c8:16:23:da:45:8a:ef:ba:6c:06:6f:63:e6:d1:d9:2a:f9: 73:8e:e6:d8:d5:3f:18:01:ff:0c:7f:68:76:51:fc:64:a6:92: f7:f1:5a:c2:78:f7:f2:dd:e1:1b:b7:24:6b:bb:59:0f:94:74: 94:74:eb:2f:b1:63:6e:d7:44:91:96:b7:f8:f5:60:30:38:f6: 9b:7f:fb:dc:72:9e:ed:95:18:a5:f8:94:c6:f4:84:12:a8:da: 01:7c:f2:e9:e8:d5:8a:ce:2c:c2:db:27:54:26:13:6d:cf:1a: 25:15:eb:c5:a1:e8:4c:be:a6:19:a0:00:00:1c:63:7b:e9:74: cd:6b:64:6c:04:bd:54:0e:5b:03:96:f8:d7:a2:f2:a3:7e:4d: 68:90:2c:f9:eb:68:96:44:2b:bf:82:d7:15:40:6c:76:c9:fd: 6e:dd:1e:34:6b:ae:7f:e9:e9:5c:df:f2:18:4c:ab:5d:a4:39: 66:62:77:9f:36:39:e2:f7:6d:ab:41:c6:38:93:65:a8:9e:1f: 73:9f:bd:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jd0nHQVF1TZFLIvAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2UwYWNjODUtNGRjMS00ZGRjLThlYmItNTk4ZjNjYmMw ZWZiMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk OGU5ZjBiZDQtNTVmNi00ZTFkLWIzODMtM2QxMTQ5MGI0YjkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgOB3NQCKN6ds/wdYwDwpZDFibEJhLFB3O1N8 elXTM3F07ergvj5ud/Xm9oU7DjlIMKocUuVVlcJNxulRicT1nWJjNYrLWolhgP8+ Ky3Qt6jUR474pD5o68drZbqEA0y9DIIsEIWnx+HnsmIJEMnE3Y74075QpnAbnpfq PIgRf48w9e0VkA1LC//z6Qu6ksp9gvIRlSSUqN493/6Zudmb5vJb6acDhF12UgdB 3V91uI+JKPUUXbw1xcD5OTYneXNdkaLmz2xh118admJZnnfToDurW34eI7DXiriy HF8jYsBPOIHwTX3/xfIoNlib6baflcB7Ch4b6TLtgDk6kHsL3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEtOl/uBlWjElikGDmK/CiUpBYQ8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9jZTBh Y2M4NS00ZGMxLTRkZGMtOGViYi01OThmM2NiYzBlZmIvNGM3YmUzMTEtNmY4NS0z YjkzLTgyNDItOTYzYTRlNjNhMWFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvY2UwYWNjODUtNGRjMS00ZGRjLThl YmItNTk4ZjNjYmMwZWZiL2NlMGFjYzg1LTRkYzEtNGRkYy04ZWJiLTU5OGYzY2Jj MGVmYi5jcmwwHwYDVR0jBBgwFoAUPnTKwypVMPwS8HSGrAwm83VIWo0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9jZTBhY2M4NS00ZGMxLTRkZGMtOGViYi01OThm M2NiYzBlZmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6zJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAETVlspPmL3EQrixs4LsW3N819spglJQrW30R7XgojoqDNH+C1JHxHEW lTPE16TOCQyO8OKIsxLIFiPaRYrvumwGb2Pm0dkq+XOO5tjVPxgB/wx/aHZR/GSm kvfxWsJ49/Ld4Ru3JGu7WQ+UdJR06y+xY27XRJGWt/j1YDA49pt/+9xynu2VGKX4 lMb0hBKo2gF88uno1YrOLMLbJ1QmE23PGiUV68Wh6Ey+phmgAAAcY3vpdM1rZGwE vVQOWwOW+Nei8qN+TWiQLPnraJZEK7+C1xVAbHbJ/W7dHjRrrn/p6Vzf8hhMq12k OWZid582OeL3batBxjiTZaieH3Ofvf0= -----END CERTIFICATE-----Generated at Fri Sep 25 11:04:11 2026 by rpki-client