$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4aa1bbde-87c2-49af-9803-d7934d656ff3/fc89a642-5803-37de-88d2-fbe8648bdde9.roa File: fc89a642-5803-37de-88d2-fbe8648bdde9.roa (raw, json) Hash identifier: Z5uerYwmOCpaeBcvqUZbhFZIwkSHV0rpKND6iYvWh6A= Subject key identifier: 8D:3D:06:FE:03:8A:B2:26:DD:2F:80:E1:5B:91:F0:2A:17:78:45:F6 Certificate issuer: /CN=4aa1bbde-87c2-49af-9803-d7934d656ff3 Certificate serial: 010D0C9F4328584F119CFAFF708EE04DC98FF700 Authority key identifier: EC:8C:03:31:03:DC:6A:88:5B:2B:77:1B:9D:2E:FC:79:9A:DA:90:EB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4aa1bbde-87c2-49af-9803-d7934d656ff3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4aa1bbde-87c2-49af-9803-d7934d656ff3/fc89a642-5803-37de-88d2-fbe8648bdde9.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 397646 IP address blocks: 23.137.208.0/24 maxlen: 24 2602:fdcb::/36 maxlen: 37 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4aa1bbde-87c2-49af-9803-d7934d656ff3/4aa1bbde-87c2-49af-9803-d7934d656ff3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4aa1bbde-87c2-49af-9803-d7934d656ff3/4aa1bbde-87c2-49af-9803-d7934d656ff3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4aa1bbde-87c2-49af-9803-d7934d656ff3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 Oct 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:9c:fa:ff:70:8e:e0:4d:c9:8f:f7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4aa1bbde-87c2-49af-9803-d7934d656ff3 Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=6e250ed7-940e-4253-a8de-efa1a2a5156c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:6a:e1:44:b3:eb:84:58:87:58:35:aa:9f:6d: 1c:4c:a8:11:c9:7d:c8:18:6b:9f:22:14:0b:d9:b5: 78:32:69:dd:52:59:28:9f:8b:3c:f1:09:d4:e3:dd: b2:e1:23:06:7e:b4:49:91:f4:80:96:3e:f3:58:b2: 64:38:08:e1:e0:ea:60:38:ec:91:e2:cf:2e:df:43: 4f:7a:ff:1e:0c:24:ca:38:5d:36:ff:c8:87:22:88: 60:cc:88:5a:60:26:1d:9d:7a:23:99:a4:ec:4f:c2: 03:cb:9b:02:3b:86:46:d8:93:de:41:8b:2c:00:03: ec:13:3c:8f:0a:13:48:0a:43:a2:09:5c:8c:15:79: 91:be:36:ec:16:85:dd:2a:e9:ac:67:85:14:c5:92: 18:04:0a:7c:b2:61:96:37:dd:17:1e:4a:40:75:4f: 0b:50:8a:12:0c:70:84:55:1b:c9:92:c0:6c:0a:38: 1c:ee:62:1c:93:9b:34:65:bb:88:39:04:58:75:90: 1d:3f:71:2f:dd:99:f0:41:46:5e:81:03:6a:94:2a: 6f:04:20:a5:7b:3a:8e:43:c7:44:36:c6:66:8e:b8: 9c:56:1b:d4:5c:f6:b1:2d:e0:6d:ab:33:99:06:a2: e0:39:fd:2f:dd:1f:6b:c7:07:56:27:75:d1:93:5b: f8:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:3D:06:FE:03:8A:B2:26:DD:2F:80:E1:5B:91:F0:2A:17:78:45:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4aa1bbde-87c2-49af-9803-d7934d656ff3/fc89a642-5803-37de-88d2-fbe8648bdde9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4aa1bbde-87c2-49af-9803-d7934d656ff3/4aa1bbde-87c2-49af-9803-d7934d656ff3.crl X509v3 Authority Key Identifier: keyid:EC:8C:03:31:03:DC:6A:88:5B:2B:77:1B:9D:2E:FC:79:9A:DA:90:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4aa1bbde-87c2-49af-9803-d7934d656ff3.cer sbgp-ipAddrBlock: critical IPv4: 23.137.208.0/24 IPv6: 2602:fdcb::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:19:34:62:8d:25:c5:0b:42:3c:9f:11:ad:65:68:2d:fc:18: 4f:cb:b1:b8:f2:b0:dd:68:c6:ae:c0:63:37:8e:b4:16:31:e6: 98:04:d3:31:c1:f0:e7:61:c5:5f:b5:f1:91:c0:dd:35:77:82: f5:b4:24:02:7f:2c:fa:a9:f2:9c:14:7e:44:15:b0:02:74:a0: 31:15:34:56:ce:c7:db:c7:83:ab:05:21:8d:b8:dc:32:81:d7: 70:7d:5d:a1:3a:48:0b:09:f3:3c:f0:dc:0d:6d:eb:be:d8:01: 4d:12:4e:82:72:5c:57:04:1b:0a:ab:53:12:dc:9c:22:1c:63: a4:bd:c5:42:2e:46:45:bd:b9:30:02:33:8c:a0:e1:41:21:30: c2:94:7b:54:f9:fa:11:85:e4:e0:e2:d2:ea:da:89:c8:d2:4a: a1:26:f8:76:ea:2f:5e:5a:08:36:17:d8:ff:f9:d8:03:02:3d: c2:0a:95:01:22:e5:be:f9:90:df:fe:3d:69:8a:ef:6b:e3:e5: 5a:d9:c3:a8:a9:ea:b7:6d:2f:65:42:57:11:49:68:21:89:28: e2:f6:2b:50:74:ff:f5:d6:7b:ad:50:b9:76:cb:bb:d7:8c:81: 97:fe:5c:6b:dc:07:95:a7:b4:9b:13:ec:17:24:31:9c:56:c3: b7:66:1b:18 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE8RnPr/cI7gTcmP9wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFhMWJiZGUtODdjMi00OWFmLTk4MDMtZDc5MzRkNjU2 ZmYzMB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk NmUyNTBlZDctOTQwZS00MjUzLWE4ZGUtZWZhMWEyYTUxNTZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm2rhRLPrhFiHWDWqn20cTKgRyX3IGGufIhQL 2bV4MmndUlkon4s88QnU492y4SMGfrRJkfSAlj7zWLJkOAjh4OpgOOyR4s8u30NP ev8eDCTKOF02/8iHIohgzIhaYCYdnXojmaTsT8IDy5sCO4ZG2JPeQYssAAPsEzyP ChNICkOiCVyMFXmRvjbsFoXdKumsZ4UUxZIYBAp8smGWN90XHkpAdU8LUIoSDHCE VRvJksBsCjgc7mIck5s0ZbuIOQRYdZAdP3Ev3ZnwQUZegQNqlCpvBCClezqOQ8dE NsZmjricVhvUXPaxLeBtqzOZBqLgOf0v3R9rxwdWJ3XRk1v4pQIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFI09Bv4DirIm3S+A4VuR8CoXeEX2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80YWEx YmJkZS04N2MyLTQ5YWYtOTgwMy1kNzkzNGQ2NTZmZjMvZmM4OWE2NDItNTgwMy0z N2RlLTg4ZDItZmJlODY0OGJkZGU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGFhMWJiZGUtODdjMi00OWFmLTk4 MDMtZDc5MzRkNjU2ZmYzLzRhYTFiYmRlLTg3YzItNDlhZi05ODAzLWQ3OTM0ZDY1 NmZmMy5jcmwwHwYDVR0jBBgwFoAU7IwDMQPcaohbK3cbnS78eZrakOswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80YWExYmJkZS04N2MyLTQ5YWYtOTgwMy1kNzkz NGQ2NTZmZjMuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF4nQMA4E AgACMAgDBgQmAv3LADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAYGTRijSXFC0I8nxGtZWgt/BhPy7G48rDd aMauwGM3jrQWMeaYBNMxwfDnYcVftfGRwN01d4L1tCQCfyz6qfKcFH5EFbACdKAx FTRWzsfbx4OrBSGNuNwygddwfV2hOkgLCfM88NwNbeu+2AFNEk6CclxXBBsKq1MS 3JwiHGOkvcVCLkZFvbkwAjOMoOFBITDClHtU+foRheTg4tLq2onI0kqhJvh26i9e Wgg2F9j/+dgDAj3CCpUBIuW++ZDf/j1piu9r4+Va2cOoqeq3bS9lQlcRSWghiSji 9itQdP/11nutULl2y7vXjIGX/lxr3AeVp7SbE+wXJDGcVsO3ZhsY -----END CERTIFICATE-----Generated at Sat Oct 3 22:39:56 2026 by rpki-client