$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7405a32c-964c-4b30-a008-0f287767e1c1/5b275a0a-d9b0-369e-92fe-dc4b840646a1.roa File: 5b275a0a-d9b0-369e-92fe-dc4b840646a1.roa (raw, json) Hash identifier: 9PTR1lOek7pW1ig1YOcdV0dD0nx3CtVgTXYo+NCxNwA= Subject key identifier: 2E:6E:79:E2:C5:59:80:F5:3C:7E:89:84:2D:41:77:91:6F:33:41:B7 Certificate issuer: /CN=7405a32c-964c-4b30-a008-0f287767e1c1 Certificate serial: 010D0C9F4328584EF87CBC608493A8760E336A80 Authority key identifier: E9:73:7B:15:CD:66:ED:A3:0B:68:66:43:71:94:52:08:13:F7:D8:58 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7405a32c-964c-4b30-a008-0f287767e1c1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7405a32c-964c-4b30-a008-0f287767e1c1/5b275a0a-d9b0-369e-92fe-dc4b840646a1.roa Signing time: Thu 27 Aug 2026 01:00:12 +0000 ROA not before: Thu 27 Aug 2026 01:00:12 +0000 ROA not after: Wed 25 Nov 2026 02:00:12 +0000 asID: 34939 IP address blocks: 23.247.212.0/24 maxlen: 24 23.247.213.0/24 maxlen: 24 23.247.214.0/24 maxlen: 24 23.247.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7405a32c-964c-4b30-a008-0f287767e1c1/7405a32c-964c-4b30-a008-0f287767e1c1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7405a32c-964c-4b30-a008-0f287767e1c1/7405a32c-964c-4b30-a008-0f287767e1c1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7405a32c-964c-4b30-a008-0f287767e1c1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 Oct 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f8:7c:bc:60:84:93:a8:76:0e:33:6a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7405a32c-964c-4b30-a008-0f287767e1c1 Validity Not Before: Aug 27 01:00:12 2026 GMT Not After : Nov 25 02:00:12 2026 GMT Subject: CN=a0d8b5e1-cfd9-429f-afc5-094b1c485d82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:9f:a6:ae:22:0b:3e:76:b7:bc:64:67:87:62: 3d:58:84:ab:81:07:e5:fb:64:92:ef:9d:7b:89:08: 78:7c:c0:5f:71:e5:4d:c1:59:6a:9c:05:7e:3d:19: ed:a8:f8:75:06:da:77:05:36:ae:83:69:5d:e3:c9: f4:69:20:af:70:a2:b7:ff:d0:e1:a1:37:9c:18:57: 69:b4:26:a0:c4:66:67:ba:44:ff:b6:3b:8e:d9:76: 4b:62:1b:ed:55:83:05:99:51:de:10:76:b9:84:93: 72:9a:37:b2:8b:b3:55:43:9b:a9:2b:03:2d:eb:f6: b9:f5:23:1d:08:cb:62:45:28:09:82:3b:73:1d:c3: 8a:69:e4:b2:07:b5:65:fd:14:4c:f5:83:67:ef:5b: 13:b6:a9:d2:34:34:d5:ba:01:40:25:a4:02:0d:e2: 58:e5:9f:8a:54:e2:6d:e9:3b:91:85:4d:20:54:58: 05:d9:2a:a6:b5:ff:ff:7a:2a:86:95:6f:57:f3:0b: c6:1e:a2:f1:4f:05:cc:08:70:dd:c2:6b:45:e2:5e: f4:4b:91:8a:e6:8b:93:05:9b:48:18:af:6b:d7:96: c8:b6:b7:8e:02:16:74:5a:68:a7:c7:de:09:97:e3: af:f2:f0:bc:d8:86:5b:42:74:01:29:af:5b:86:8a: 0d:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:6E:79:E2:C5:59:80:F5:3C:7E:89:84:2D:41:77:91:6F:33:41:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7405a32c-964c-4b30-a008-0f287767e1c1/5b275a0a-d9b0-369e-92fe-dc4b840646a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7405a32c-964c-4b30-a008-0f287767e1c1/7405a32c-964c-4b30-a008-0f287767e1c1.crl X509v3 Authority Key Identifier: keyid:E9:73:7B:15:CD:66:ED:A3:0B:68:66:43:71:94:52:08:13:F7:D8:58 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7405a32c-964c-4b30-a008-0f287767e1c1.cer sbgp-ipAddrBlock: critical IPv4: 23.247.212.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:72:c4:2f:75:5e:58:dc:c6:b0:1c:70:77:40:f3:e1:66:5a: 9e:41:a5:54:1e:ec:4b:a7:87:00:0b:03:fe:11:24:3a:fe:e9: e3:5b:3a:d7:8a:34:f9:aa:13:8f:a5:0c:58:6f:9d:ae:b3:a9: 5e:f5:29:29:4a:e6:d9:17:ef:d2:7f:8c:1b:9a:83:e6:75:e2: 47:77:79:ae:99:10:09:75:35:1e:6c:a3:9d:84:e7:3c:48:0e: 9d:98:44:e1:85:81:eb:7e:35:19:46:83:88:a9:67:90:3f:64: c3:ea:29:a3:23:d7:21:90:2f:42:6b:dd:9d:66:e8:ed:d3:48: fe:ae:64:52:97:e9:93:94:9c:01:57:60:ea:e0:e5:51:1a:f2: bd:31:5c:fe:6f:cb:f6:e4:a8:02:44:4c:4a:ac:2c:31:56:b7: b1:20:d7:43:9e:b4:13:4a:69:70:20:b4:03:e2:d2:72:c4:21: f3:43:a4:c8:23:63:57:24:87:67:b1:55:a6:ee:0b:b7:b1:3a: 9a:c5:1d:98:37:ed:5a:88:b2:11:db:8e:ef:22:01:15:d0:25: 55:7b:bc:a6:99:98:ef:92:42:8f:a2:97:d8:70:e1:3c:bd:6a: 8e:c6:67:60:19:a3:11:64:26:90:70:97:8a:c2:76:4d:5c:f0: c7:91:26:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE74fLxghJOodg4zaoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzQwNWEzMmMtOTY0Yy00YjMwLWEwMDgtMGYyODc3Njdl MWMxMB4XDTI2MDgyNzAxMDAxMloXDTI2MTEyNTAyMDAxMlowLzEtMCsGA1UEAxMk YTBkOGI1ZTEtY2ZkOS00MjlmLWFmYzUtMDk0YjFjNDg1ZDgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi5+mriILPna3vGRnh2I9WISrgQfl+2SS7517 iQh4fMBfceVNwVlqnAV+PRntqPh1Btp3BTaug2ld48n0aSCvcKK3/9DhoTecGFdp tCagxGZnukT/tjuO2XZLYhvtVYMFmVHeEHa5hJNymjeyi7NVQ5upKwMt6/a59SMd CMtiRSgJgjtzHcOKaeSyB7Vl/RRM9YNn71sTtqnSNDTVugFAJaQCDeJY5Z+KVOJt 6TuRhU0gVFgF2Sqmtf//eiqGlW9X8wvGHqLxTwXMCHDdwmtF4l70S5GK5ouTBZtI GK9r15bItreOAhZ0Wminx94Jl+Ov8vC82IZbQnQBKa9bhooNKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC5ueeLFWYD1PH6JhC1Bd5FvM0G3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83NDA1 YTMyYy05NjRjLTRiMzAtYTAwOC0wZjI4Nzc2N2UxYzEvNWIyNzVhMGEtZDliMC0z NjllLTkyZmUtZGM0Yjg0MDY0NmExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNzQwNWEzMmMtOTY0Yy00YjMwLWEw MDgtMGYyODc3NjdlMWMxLzc0MDVhMzJjLTk2NGMtNGIzMC1hMDA4LTBmMjg3NzY3 ZTFjMS5jcmwwHwYDVR0jBBgwFoAU6XN7Fc1m7aMLaGZDcZRSCBP32FgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83NDA1YTMyYy05NjRjLTRiMzAtYTAwOC0wZjI4 Nzc2N2UxYzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF/fUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABByxC91XljcxrAccHdA8+FmWp5BpVQe7EunhwALA/4RJDr+6eNbOteK NPmqE4+lDFhvna6zqV71KSlK5tkX79J/jBuag+Z14kd3ea6ZEAl1NR5so52E5zxI Dp2YROGFget+NRlGg4ipZ5A/ZMPqKaMj1yGQL0Jr3Z1m6O3TSP6uZFKX6ZOUnAFX YOrg5VEa8r0xXP5vy/bkqAJETEqsLDFWt7Eg10OetBNKaXAgtAPi0nLEIfNDpMgj Y1ckh2exVabuC7exOprFHZg37VqIshHbju8iARXQJVV7vKaZmO+SQo+il9hw4Ty9 ao7GZ2AZoxFkJpBwl4rCdk1c8MeRJr0= -----END CERTIFICATE-----Generated at Tue Oct 6 01:20:01 2026 by rpki-client