$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0cb0d156-0906-405d-9cea-d599952bae65/68843ff3-a8da-31f6-b5d6-05acbd6adf94.roa File: 68843ff3-a8da-31f6-b5d6-05acbd6adf94.roa (raw, json) Hash identifier: qxI/ODK9z/XoKSWYd/5VOw5R9I3WSmpf/foJ8jdFMP4= Subject key identifier: 21:BB:13:89:A6:ED:E9:A8:00:97:52:54:E5:54:2B:3E:B0:1D:A7:1D Certificate issuer: /CN=0cb0d156-0906-405d-9cea-d599952bae65 Certificate serial: 010D0C9F4328584F054DAD1BBFF847A5DBDA2F80 Authority key identifier: 61:75:AD:68:36:B0:9C:A3:C5:D3:D2:C7:09:97:B5:B6:3A:1E:AC:B2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0cb0d156-0906-405d-9cea-d599952bae65.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0cb0d156-0906-405d-9cea-d599952bae65/68843ff3-a8da-31f6-b5d6-05acbd6adf94.roa Signing time: Mon 31 Aug 2026 15:11:00 +0000 ROA not before: Mon 31 Aug 2026 15:11:00 +0000 ROA not after: Sun 29 Nov 2026 16:11:00 +0000 asID: 46705 IP address blocks: 23.171.40.0/24 maxlen: 24 2607:88c0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0cb0d156-0906-405d-9cea-d599952bae65/0cb0d156-0906-405d-9cea-d599952bae65.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0cb0d156-0906-405d-9cea-d599952bae65/0cb0d156-0906-405d-9cea-d599952bae65.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0cb0d156-0906-405d-9cea-d599952bae65.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:05:4d:ad:1b:bf:f8:47:a5:db:da:2f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0cb0d156-0906-405d-9cea-d599952bae65 Validity Not Before: Aug 31 15:11:00 2026 GMT Not After : Nov 29 16:11:00 2026 GMT Subject: CN=99a70154-cdb3-4a4e-b440-db2237b06aee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:a6:24:49:b3:de:84:fd:68:91:4e:e8:b7:76: b1:ef:af:ae:97:88:49:24:f3:16:dd:64:39:76:11: d1:19:ef:4f:73:b4:9f:11:89:8d:3e:df:e8:54:73: 17:51:4b:2e:44:fc:f8:78:5a:1b:60:d8:81:e5:e4: 7b:e3:a7:c1:db:06:87:12:87:60:4f:18:96:91:5f: 6a:db:e3:7d:59:64:df:00:e1:2f:97:24:ed:8e:06: 1b:c8:cd:36:8d:e1:8b:40:aa:b2:7f:56:06:b2:9d: 2a:c8:84:b7:84:65:87:ef:61:81:c4:9c:59:14:15: a6:71:28:95:e7:ff:4c:05:62:ae:73:b1:50:df:4b: 1a:28:b3:88:53:bd:5c:7e:8b:21:f4:e7:58:64:17: 06:e0:83:3c:25:18:9e:ec:6a:1c:be:12:34:f7:5c: 82:5a:f6:f9:72:3f:32:d1:03:e4:6e:5a:64:e3:40: 9d:ca:12:bc:78:a2:1a:28:8c:3b:a6:0e:aa:6b:83: ae:fd:45:21:36:1a:4e:27:23:bd:ab:f0:8e:f6:8f: 07:89:42:7b:b9:f2:a8:98:de:3c:fa:0d:b6:90:85: cf:28:62:84:4a:30:39:75:f2:2f:4e:2d:7a:36:0c: d1:50:fb:95:2f:25:8f:d4:ce:1b:ca:56:3d:a7:71: 5f:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:BB:13:89:A6:ED:E9:A8:00:97:52:54:E5:54:2B:3E:B0:1D:A7:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0cb0d156-0906-405d-9cea-d599952bae65/68843ff3-a8da-31f6-b5d6-05acbd6adf94.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0cb0d156-0906-405d-9cea-d599952bae65/0cb0d156-0906-405d-9cea-d599952bae65.crl X509v3 Authority Key Identifier: keyid:61:75:AD:68:36:B0:9C:A3:C5:D3:D2:C7:09:97:B5:B6:3A:1E:AC:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/0cb0d156-0906-405d-9cea-d599952bae65.cer sbgp-ipAddrBlock: critical IPv4: 23.171.40.0/24 IPv6: 2607:88c0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:1f:c0:c2:2f:2c:a9:f7:70:d8:4d:8d:30:b1:d3:26:99:6d: d8:0e:2d:b0:cb:9b:92:ed:28:62:ba:1b:84:5a:d3:be:6e:9d: 17:b2:97:6f:70:32:c9:52:2e:2d:df:fd:63:fe:07:f0:ba:ed: e2:de:6f:a1:ba:cf:6f:59:f8:70:b5:77:de:6f:cb:84:0a:fe: 5d:3a:65:ce:91:a3:7a:87:9e:f5:12:f0:17:8c:7b:3e:94:44: 1f:13:34:b0:da:af:60:5a:ce:7a:b3:56:85:62:d5:aa:a3:2f: 4e:42:87:e2:8f:ce:aa:64:de:73:6c:9d:47:12:36:de:fc:a3: f4:4b:ba:28:d4:5b:1b:86:91:2d:be:dd:20:c8:ef:f6:90:2b: 02:ee:09:40:95:4f:cb:1d:be:9f:bd:37:b5:e5:9c:25:76:b1: 34:12:1c:f4:35:80:bd:59:5c:de:0e:cd:ab:be:82:6b:2b:ab: 4f:bc:06:74:df:78:de:f0:ee:64:64:72:7b:0e:10:c4:15:d5: 52:6b:9f:b5:98:c0:6f:ce:b8:41:0a:59:ac:d3:99:1f:1e:1c: 23:3f:fd:41:77:21:70:05:9e:ee:f7:7e:57:ae:25:84:e7:20: 4f:24:34:40:37:f4:47:7f:b8:46:2e:36:6c:bf:7a:47:c3:9d: 4e:34:1b:20 -----BEGIN CERTIFICATE----- MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWE8FTa0bv/hHpdvaL4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGNiMGQxNTYtMDkwNi00MDVkLTljZWEtZDU5OTk1MmJh ZTY1MB4XDTI2MDgzMTE1MTEwMFoXDTI2MTEyOTE2MTEwMFowLzEtMCsGA1UEAxMk OTlhNzAxNTQtY2RiMy00YTRlLWI0NDAtZGIyMjM3YjA2YWVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoqYkSbPehP1okU7ot3ax76+ul4hJJPMW3WQ5 dhHRGe9Pc7SfEYmNPt/oVHMXUUsuRPz4eFobYNiB5eR746fB2waHEodgTxiWkV9q 2+N9WWTfAOEvlyTtjgYbyM02jeGLQKqyf1YGsp0qyIS3hGWH72GBxJxZFBWmcSiV 5/9MBWKuc7FQ30saKLOIU71cfosh9OdYZBcG4IM8JRie7GocvhI091yCWvb5cj8y 0QPkblpk40CdyhK8eKIaKIw7pg6qa4Ou/UUhNhpOJyO9q/CO9o8HiUJ7ufKomN48 +g22kIXPKGKESjA5dfIvTi16NgzRUPuVLyWP1M4bylY9p3FfAQIDAQABo4IDZDCC A2AwHQYDVR0OBBYEFCG7E4mm7emoAJdSVOVUKz6wHacdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8wY2Iw ZDE1Ni0wOTA2LTQwNWQtOWNlYS1kNTk5OTUyYmFlNjUvNjg4NDNmZjMtYThkYS0z MWY2LWI1ZDYtMDVhY2JkNmFkZjk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMGNiMGQxNTYtMDkwNi00MDVkLTlj ZWEtZDU5OTk1MmJhZTY1LzBjYjBkMTU2LTA5MDYtNDA1ZC05Y2VhLWQ1OTk5NTJi YWU2NS5jcmwwHwYDVR0jBBgwFoAUYXWtaDawnKPF09LHCZe1tjoerLIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8wY2IwZDE1Ni0wOTA2LTQwNWQtOWNlYS1kNTk5 OTUyYmFlNjUuY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAF6soMA0E AgACMAcDBQAmB4jAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0 bWwwDQYJKoZIhvcNAQELBQADggEBAAYfwMIvLKn3cNhNjTCx0yaZbdgOLbDLm5Lt KGK6G4Ra075unReyl29wMslSLi3f/WP+B/C67eLeb6G6z29Z+HC1d95vy4QK/l06 Zc6Ro3qHnvUS8BeMez6URB8TNLDar2BaznqzVoVi1aqjL05Ch+KPzqpk3nNsnUcS Nt78o/RLuijUWxuGkS2+3SDI7/aQKwLuCUCVT8sdvp+9N7XlnCV2sTQSHPQ1gL1Z XN4Ozau+gmsrq0+8BnTfeN7w7mRkcnsOEMQV1VJrn7WYwG/OuEEKWazTmR8eHCM/ /UF3IXAFnu73fleuJYTnIE8kNEA39Ed/uEYuNmy/ekfDnU40GyA= -----END CERTIFICATE-----Generated at Sat Sep 26 08:15:06 2026 by rpki-client