$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/896f0624-c28d-44c0-93cf-3f879f877518/cde9ce8b-b7f9-3619-9dae-ba2d46cb9395.roa File: cde9ce8b-b7f9-3619-9dae-ba2d46cb9395.roa (raw, json) Hash identifier: wYOxj+Ff91NwwvtD1SXdZfVHLXCSyqvBEGrajJ5KriI= Subject key identifier: D2:F8:48:05:CA:8C:21:B7:BD:48:48:B8:5F:1F:C0:8A:71:D2:E3:86 Certificate issuer: /CN=896f0624-c28d-44c0-93cf-3f879f877518 Certificate serial: 010D0C9F4328584F23C2551C688AC73E603B86A0 Authority key identifier: AE:65:9C:F0:57:7D:5C:5C:89:D1:60:E9:01:2F:27:A1:AB:B6:AF:0B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/896f0624-c28d-44c0-93cf-3f879f877518.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/896f0624-c28d-44c0-93cf-3f879f877518/cde9ce8b-b7f9-3619-9dae-ba2d46cb9395.roa Signing time: Fri 11 Sep 2026 13:00:12 +0000 ROA not before: Fri 11 Sep 2026 13:00:12 +0000 ROA not after: Thu 10 Dec 2026 14:00:12 +0000 asID: 400503 IP address blocks: 23.133.56.0/24 maxlen: 24 23.133.57.0/24 maxlen: 24 2602:fbb4::/40 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/896f0624-c28d-44c0-93cf-3f879f877518/896f0624-c28d-44c0-93cf-3f879f877518.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/896f0624-c28d-44c0-93cf-3f879f877518/896f0624-c28d-44c0-93cf-3f879f877518.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/896f0624-c28d-44c0-93cf-3f879f877518.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 03 Oct 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:23:c2:55:1c:68:8a:c7:3e:60:3b:86:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=896f0624-c28d-44c0-93cf-3f879f877518 Validity Not Before: Sep 11 13:00:12 2026 GMT Not After : Dec 10 14:00:12 2026 GMT Subject: CN=011c8fb4-e309-4909-812f-1b1d318d6ebc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:8f:72:43:db:f5:72:b9:d8:77:93:42:36:25: c6:72:16:2d:c3:06:ac:23:c5:23:af:ac:eb:24:bc: 73:39:01:8a:8c:6a:d0:9f:ad:2b:e6:fd:05:71:af: 12:4c:13:3e:df:c3:65:49:4b:17:18:0c:09:86:e5: 9a:b9:b9:bb:4c:57:80:86:f1:f1:2e:63:a1:5f:51: c6:63:fe:e5:e2:b3:e5:f8:2c:91:20:fe:ba:84:35: 9a:f1:7e:d7:a4:d1:b6:74:f5:49:66:3e:5e:50:01: 79:8b:28:04:41:c1:01:eb:6c:5b:a9:1a:4b:28:01: bd:9f:e3:5b:8b:97:aa:0d:ad:70:fb:5b:1c:2e:2a: d7:ce:d9:60:35:f2:2d:c3:f6:2f:87:44:97:14:32: 74:3e:75:28:7e:b3:1b:46:15:32:dd:a6:2f:6a:ed: 1b:44:97:8f:4c:a2:18:37:d8:13:94:63:f8:89:b3: a6:61:4b:26:e9:28:b0:31:ce:5e:11:26:51:4a:82: 21:b8:b5:5a:10:4b:84:e0:3e:b2:8e:08:3f:c0:ff: 16:d6:e5:3b:d5:7b:7a:ff:26:cc:d9:b5:2d:40:e4: 76:51:fe:87:54:76:d4:af:d1:5f:3b:04:ae:f9:08: 1d:85:13:ee:7a:ab:24:c5:79:ea:84:03:a1:47:01: 10:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:F8:48:05:CA:8C:21:B7:BD:48:48:B8:5F:1F:C0:8A:71:D2:E3:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/896f0624-c28d-44c0-93cf-3f879f877518/cde9ce8b-b7f9-3619-9dae-ba2d46cb9395.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/896f0624-c28d-44c0-93cf-3f879f877518/896f0624-c28d-44c0-93cf-3f879f877518.crl X509v3 Authority Key Identifier: keyid:AE:65:9C:F0:57:7D:5C:5C:89:D1:60:E9:01:2F:27:A1:AB:B6:AF:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/896f0624-c28d-44c0-93cf-3f879f877518.cer sbgp-ipAddrBlock: critical IPv4: 23.133.56.0/23 IPv6: 2602:fbb4::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:51:bb:7f:d0:37:f1:ee:53:1f:14:ab:c7:44:6d:57:50:ff: 00:a9:53:b0:c9:cc:7b:4a:73:f2:b4:3d:4f:98:e4:58:21:be: 98:7e:a0:fd:ab:84:69:9e:9c:76:fd:b8:67:71:2b:20:73:3c: 49:d1:80:a0:3b:b8:57:fc:63:1e:0e:d3:7f:65:8f:61:5a:c9: 3b:ac:bb:f5:09:e1:6e:72:90:0f:4e:5e:b7:a9:8c:32:46:f2: 5e:c1:e3:c8:14:d4:9c:48:e3:05:0e:61:73:f1:2f:e9:38:92: b1:ef:7a:f7:ab:06:af:5f:b9:75:9d:30:03:d6:8c:11:bd:14: b5:42:e0:10:24:36:60:ee:00:76:7a:c0:45:ca:3b:ac:cb:31: 49:9e:cf:c7:e0:b5:d0:ca:34:f8:f1:79:2f:a9:83:d4:32:d3: 68:55:9f:6d:f4:8b:c5:39:c9:c5:bc:f2:1a:72:8d:8b:93:2e: f9:95:dc:2e:ba:d1:2d:24:5e:ab:19:d4:c0:34:26:15:8b:36: be:1d:5d:cf:0c:7a:0a:e2:d4:73:26:6b:a7:89:42:cd:04:de: e4:ae:f3:eb:86:c4:b9:e4:c2:2f:4c:71:e7:82:2e:28:5b:34: 8b:df:14:94:88:09:19:87:e8:0b:e3:39:6e:27:d2:9e:87:58: 2a:bb:ff:54 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE8jwlUcaIrHPmA7hqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODk2ZjA2MjQtYzI4ZC00NGMwLTkzY2YtM2Y4NzlmODc3 NTE4MB4XDTI2MDkxMTEzMDAxMloXDTI2MTIxMDE0MDAxMlowLzEtMCsGA1UEAxMk MDExYzhmYjQtZTMwOS00OTA5LTgxMmYtMWIxZDMxOGQ2ZWJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Y9yQ9v1crnYd5NCNiXGchYtwwasI8Ujr6zr JLxzOQGKjGrQn60r5v0Fca8STBM+38NlSUsXGAwJhuWaubm7TFeAhvHxLmOhX1HG Y/7l4rPl+CyRIP66hDWa8X7XpNG2dPVJZj5eUAF5iygEQcEB62xbqRpLKAG9n+Nb i5eqDa1w+1scLirXztlgNfItw/Yvh0SXFDJ0PnUofrMbRhUy3aYvau0bRJePTKIY N9gTlGP4ibOmYUsm6SiwMc5eESZRSoIhuLVaEEuE4D6yjgg/wP8W1uU71Xt6/ybM 2bUtQOR2Uf6HVHbUr9FfOwSu+QgdhRPueqskxXnqhAOhRwEQIQIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFNL4SAXKjCG3vUhIuF8fwIpx0uOGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OTZm MDYyNC1jMjhkLTQ0YzAtOTNjZi0zZjg3OWY4Nzc1MTgvY2RlOWNlOGItYjdmOS0z NjE5LTlkYWUtYmEyZDQ2Y2I5Mzk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODk2ZjA2MjQtYzI4ZC00NGMwLTkz Y2YtM2Y4NzlmODc3NTE4Lzg5NmYwNjI0LWMyOGQtNDRjMC05M2NmLTNmODc5Zjg3 NzUxOC5jcmwwHwYDVR0jBBgwFoAUrmWc8Fd9XFyJ0WDpAS8noau2rwswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OTZmMDYyNC1jMjhkLTQ0YzAtOTNjZi0zZjg3 OWY4Nzc1MTguY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQBF4U4MA4E AgACMAgDBgAmAvu0ADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAFUbt/0Dfx7lMfFKvHRG1XUP8AqVOwycx7 SnPytD1PmORYIb6YfqD9q4Rpnpx2/bhncSsgczxJ0YCgO7hX/GMeDtN/ZY9hWsk7 rLv1CeFucpAPTl63qYwyRvJewePIFNScSOMFDmFz8S/pOJKx73r3qwavX7l1nTAD 1owRvRS1QuAQJDZg7gB2esBFyjusyzFJns/H4LXQyjT48XkvqYPUMtNoVZ9t9IvF OcnFvPIaco2Lky75ldwuutEtJF6rGdTANCYViza+HV3PDHoK4tRzJmuniULNBN7k rvPrhsS55MIvTHHngi4oWzSL3xSUiAkZh+gL4zluJ9Keh1gqu/9U -----END CERTIFICATE-----Generated at Fri Oct 2 14:36:53 2026 by rpki-client