$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/1523b54c-b22c-38bf-bbf2-ea364411cb5f.roa File: 1523b54c-b22c-38bf-bbf2-ea364411cb5f.roa (raw, json) Hash identifier: 6KtdaTbzGRnO9s2rStF35Nf4Tc+2Sc2DlueafEAymOQ= Subject key identifier: C0:9D:15:43:EC:5E:58:FF:FE:D7:0D:1B:63:35:BD:65:C3:F3:EF:52 Certificate issuer: /CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370 Certificate serial: 010D0C9F4328584F119D059453DAE5238D0E4300 Authority key identifier: 1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/1523b54c-b22c-38bf-bbf2-ea364411cb5f.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 25645 IP address blocks: 23.249.96.0/21 maxlen: 21 23.249.104.0/21 maxlen: 21 23.249.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:9d:05:94:53:da:e5:23:8d:0e:43:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370 Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=cb776591-24fa-4c9d-81f2-7d2cda9e1123 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:1b:22:fb:89:19:1a:13:55:54:d8:61:9a:1c: ff:0d:27:b7:70:81:37:d8:f6:cd:38:f5:b6:c8:52: 90:c2:94:85:6c:4a:20:94:4e:2e:9a:a6:dc:07:02: fb:3c:ad:15:dc:8b:f4:f0:f7:90:54:63:35:1f:5a: 8c:4a:02:36:de:ef:05:55:b9:9a:2f:85:95:f5:13: 66:4f:b1:57:19:1e:0b:40:5d:99:20:da:6d:8f:90: 4a:c8:0d:f7:a8:c6:0e:a1:58:44:ed:97:e6:c7:9d: 0d:1d:27:a4:b2:49:5f:4a:c2:e1:05:59:9e:ed:ad: 5e:fe:91:47:c1:4c:92:e6:ca:be:09:6b:fe:ff:b7: df:8b:90:b0:35:2a:87:01:b9:f4:74:c0:ea:36:cc: af:4b:3e:02:ec:23:a9:44:86:a0:d0:8a:0e:01:84: ac:14:9b:68:54:09:6e:7a:42:0c:0c:20:90:3c:d5: 4c:e7:38:46:84:ff:07:b2:26:bf:07:20:df:d0:47: 15:f9:8d:35:f9:cb:a2:e8:03:25:08:03:55:92:ca: 84:e0:e0:cb:f2:bc:ec:dc:4c:57:90:b1:33:a3:0f: f7:52:ee:ae:a4:4e:be:d2:41:0a:e4:42:93:ef:ba: 7f:62:9d:e7:29:6b:99:16:3c:15:c4:28:b6:8e:1f: 0c:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:9D:15:43:EC:5E:58:FF:FE:D7:0D:1B:63:35:BD:65:C3:F3:EF:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/1523b54c-b22c-38bf-bbf2-ea364411cb5f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl X509v3 Authority Key Identifier: keyid:1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer sbgp-ipAddrBlock: critical IPv4: 23.249.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:62:a4:e5:48:66:e1:7d:6c:f9:41:cd:92:b3:6c:b1:97:ff: 48:ff:1c:99:f0:88:82:6f:5a:89:f3:27:10:33:d3:21:4b:63: bc:59:5c:76:da:87:aa:4f:bc:d6:16:ec:fb:81:d7:ec:87:b2: 87:ae:af:ad:ac:76:b3:bb:1a:d2:53:5e:13:45:cc:50:e5:9e: 96:85:32:4c:5b:4a:68:ca:81:8a:73:30:e5:5c:9d:2b:94:33: 29:2c:5a:a1:e8:d4:e7:0b:a8:d8:5e:21:86:5f:e0:ab:15:00: 06:1f:0b:b3:93:5a:09:f0:2d:90:90:24:26:93:bd:91:14:04: 37:22:9c:eb:68:4e:44:7d:cb:7a:a8:93:1a:83:26:fe:86:4e: 9d:28:eb:bd:5c:1a:08:30:41:58:e9:2d:62:ee:22:3b:58:82: db:2f:43:34:e9:a8:ed:91:9c:de:74:b7:06:64:8b:63:c6:c7: cf:c6:86:04:b5:f4:e1:f6:78:25:10:48:f4:dc:a8:dc:57:f9: 81:98:10:80:92:09:d7:8f:17:22:dd:c8:fc:01:01:ce:9e:40: c3:31:57:61:26:c6:fa:5d:64:22:6e:37:fb:c3:1a:26:5b:d2: 8b:dc:11:7a:55:b7:65:06:65:ad:4b:b6:74:34:8c:0b:07:cf: ef:9c:a1:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8RnQWUU9rlI40OQwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjNiYzZiNjQtY2E4My00NTI1LTlmMWItNTczMWI2YzY4 MzcwMB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk Y2I3NzY1OTEtMjRmYS00YzlkLTgxZjItN2QyY2RhOWUxMTIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgBsi+4kZGhNVVNhhmhz/DSe3cIE32PbNOPW2 yFKQwpSFbEoglE4umqbcBwL7PK0V3Iv08PeQVGM1H1qMSgI23u8FVbmaL4WV9RNm T7FXGR4LQF2ZINptj5BKyA33qMYOoVhE7Zfmx50NHSeksklfSsLhBVme7a1e/pFH wUyS5sq+CWv+/7ffi5CwNSqHAbn0dMDqNsyvSz4C7COpRIag0IoOAYSsFJtoVAlu ekIMDCCQPNVM5zhGhP8Hsia/ByDf0EcV+Y01+cui6AMlCANVksqE4ODL8rzs3ExX kLEzow/3Uu6upE6+0kEK5EKT77p/Yp3nKWuZFjwVxCi2jh8MjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMCdFUPsXlj//tcNG2M1vWXD8+9SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mM2Jj NmI2NC1jYTgzLTQ1MjUtOWYxYi01NzMxYjZjNjgzNzAvMTUyM2I1NGMtYjIyYy0z OGJmLWJiZjItZWEzNjQ0MTFjYjVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjNiYzZiNjQtY2E4My00NTI1LTlm MWItNTczMWI2YzY4MzcwL2YzYmM2YjY0LWNhODMtNDUyNS05ZjFiLTU3MzFiNmM2 ODM3MC5jcmwwHwYDVR0jBBgwFoAUGooG3FhpS+fgJJqk0bP6H9jgWx4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9mM2JjNmI2NC1jYTgzLTQ1MjUtOWYxYi01NzMx YjZjNjgzNzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEF/lgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIpipOVIZuF9bPlBzZKzbLGX/0j/HJnwiIJvWonzJxAz0yFLY7xZXHba h6pPvNYW7PuB1+yHsoeur62sdrO7GtJTXhNFzFDlnpaFMkxbSmjKgYpzMOVcnSuU MyksWqHo1OcLqNheIYZf4KsVAAYfC7OTWgnwLZCQJCaTvZEUBDcinOtoTkR9y3qo kxqDJv6GTp0o671cGggwQVjpLWLuIjtYgtsvQzTpqO2RnN50twZki2PGx8/GhgS1 9OH2eCUQSPTcqNxX+YGYEICSCdePFyLdyPwBAc6eQMMxV2EmxvpdZCJuN/vDGiZb 0ovcEXpVt2UGZa1LtnQ0jAsHz++coRE= -----END CERTIFICATE-----Generated at Thu Sep 24 23:14:19 2026 by rpki-client