$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/cf849384-a1f0-358f-8cff-6f887dcd91a0.roa File: cf849384-a1f0-358f-8cff-6f887dcd91a0.roa (raw, json) Hash identifier: bUPE4C23eTITO/2li4Vt1BXygE284gqdQF6mr3Tb2aQ= Subject key identifier: CE:05:61:8E:A5:9F:C2:46:11:56:EE:32:B2:0B:CB:CD:C9:19:1A:3B Certificate issuer: /CN=517b063f-7f88-4d7a-a5ad-1e487692f063 Certificate serial: 010D0C9F4328584F497547A93CDE9F577638A95C Authority key identifier: 05:B3:28:19:86:22:30:05:BE:7D:0B:F3:FC:83:22:27:9E:3B:8D:5C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/cf849384-a1f0-358f-8cff-6f887dcd91a0.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 152156 IP address blocks: 23.249.28.0/23 maxlen: 24 23.249.30.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/517b063f-7f88-4d7a-a5ad-1e487692f063.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/517b063f-7f88-4d7a-a5ad-1e487692f063.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:75:47:a9:3c:de:9f:57:76:38:a9:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=517b063f-7f88-4d7a-a5ad-1e487692f063 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=ea2fa5f9-7a94-45bd-ba37-383f36c9d0c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:48:e2:97:2e:4e:ff:59:69:15:c1:84:fa:2d: e7:d7:33:df:1b:00:e5:2d:d2:11:21:66:7e:11:45: cc:5b:c3:b2:f9:20:d9:a4:6b:9d:bc:73:ff:cb:d4: 39:95:a0:18:e8:d8:b5:e3:4d:0a:76:9a:7f:ed:3b: 91:63:a2:f6:fd:b3:f3:2b:ba:21:5a:6a:ff:ee:b2: 10:fc:2c:90:97:3d:f8:9c:72:ba:23:95:42:a6:34: 9c:6b:83:aa:0b:f4:24:65:ef:b6:72:9a:e6:88:6d: c5:a8:f1:32:a5:60:b4:90:48:c3:4d:b8:25:3f:bb: 28:df:06:79:2b:b2:f5:89:38:50:3b:b5:4d:85:94: fe:00:ad:a8:f5:7b:2c:82:65:10:61:60:75:71:37: ad:84:73:46:b8:65:12:88:0d:0c:1b:e6:a6:a6:82: 90:ec:5b:af:89:10:76:da:11:5b:61:e9:3e:43:9b: 73:06:1b:80:8b:14:5d:6f:6e:5c:4d:e5:3f:8e:ac: ad:4b:12:0d:2c:92:6f:b3:6f:ae:0d:c0:2f:31:d3: f1:fa:fc:7d:a6:43:81:35:df:01:db:e3:6a:48:31: a3:c5:66:87:5e:61:12:01:13:2e:56:44:45:64:4f: 3e:c1:9e:96:9f:88:ae:44:88:f6:3c:b1:e5:f9:cd: 5e:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:05:61:8E:A5:9F:C2:46:11:56:EE:32:B2:0B:CB:CD:C9:19:1A:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/cf849384-a1f0-358f-8cff-6f887dcd91a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063/517b063f-7f88-4d7a-a5ad-1e487692f063.crl X509v3 Authority Key Identifier: keyid:05:B3:28:19:86:22:30:05:BE:7D:0B:F3:FC:83:22:27:9E:3B:8D:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/517b063f-7f88-4d7a-a5ad-1e487692f063.cer sbgp-ipAddrBlock: critical IPv4: 23.249.28.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:42:8a:e2:2c:10:00:ce:3f:2c:9e:01:ff:8d:73:25:b9:fa: 1c:fe:10:b4:8b:3c:6a:44:87:09:f3:a3:2a:58:93:fc:f1:c2: ff:58:a3:7e:0e:21:c3:1c:35:a3:ee:26:6c:8f:2f:80:24:01: 35:76:a6:b5:c7:ae:0b:7e:0f:19:0f:2a:36:a9:af:79:3a:5c: 45:d6:d3:72:18:3a:37:e1:0d:8a:8b:7f:9b:91:27:96:99:61: 15:3d:c5:ea:06:8c:e7:f2:fc:60:11:3a:4e:7e:4e:af:c1:a8: f6:10:40:0d:c3:b0:0e:85:0e:14:4b:2a:a9:f0:9d:2c:35:98: 70:de:47:29:7e:29:43:47:41:ba:32:bc:0b:73:e2:6a:6f:92: 58:f3:e5:fc:ec:c6:10:20:e9:b5:05:48:5f:00:df:24:3d:56: b6:84:cf:12:c4:cc:9c:f8:38:23:2b:f2:ab:d2:4d:1e:07:6f: db:7b:ad:5b:ff:f6:c1:12:ae:46:de:3e:32:e6:84:70:1b:74: 6f:b6:59:cc:b6:ce:48:84:43:a4:f8:4a:6e:ae:84:b9:3a:ae: 35:80:76:62:9c:92:c2:4f:b9:f0:46:6a:da:a1:c7:9b:48:24: d1:18:8e:d1:bb:cc:7a:69:35:91:7b:cf:02:7f:cb:44:b8:95: 2e:22:c4:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdUepPN6fV3Y4qVwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTE3YjA2M2YtN2Y4OC00ZDdhLWE1YWQtMWU0ODc2OTJm MDYzMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZWEyZmE1ZjktN2E5NC00NWJkLWJhMzctMzgzZjM2YzlkMGM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiEjily5O/1lpFcGE+i3n1zPfGwDlLdIRIWZ+ EUXMW8Oy+SDZpGudvHP/y9Q5laAY6Ni1400Kdpp/7TuRY6L2/bPzK7ohWmr/7rIQ /CyQlz34nHK6I5VCpjSca4OqC/QkZe+2cprmiG3FqPEypWC0kEjDTbglP7so3wZ5 K7L1iThQO7VNhZT+AK2o9XssgmUQYWB1cTethHNGuGUSiA0MG+ampoKQ7FuviRB2 2hFbYek+Q5tzBhuAixRdb25cTeU/jqytSxINLJJvs2+uDcAvMdPx+vx9pkOBNd8B 2+NqSDGjxWaHXmESARMuVkRFZE8+wZ6Wn4iuRIj2PLHl+c1eywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM4FYY6ln8JGEVbuMrILy83JGRo7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81MTdi MDYzZi03Zjg4LTRkN2EtYTVhZC0xZTQ4NzY5MmYwNjMvY2Y4NDkzODQtYTFmMC0z NThmLThjZmYtNmY4ODdkY2Q5MWEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNTE3YjA2M2YtN2Y4OC00ZDdhLWE1 YWQtMWU0ODc2OTJmMDYzLzUxN2IwNjNmLTdmODgtNGQ3YS1hNWFkLTFlNDg3Njky ZjA2My5jcmwwHwYDVR0jBBgwFoAUBbMoGYYiMAW+fQvz/IMiJ547jVwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi81MTdiMDYzZi03Zjg4LTRkN2EtYTVhZC0xZTQ4 NzY5MmYwNjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF/kcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACBCiuIsEADOPyyeAf+NcyW5+hz+ELSLPGpEhwnzoypYk/zxwv9Yo34O IcMcNaPuJmyPL4AkATV2prXHrgt+DxkPKjapr3k6XEXW03IYOjfhDYqLf5uRJ5aZ YRU9xeoGjOfy/GAROk5+Tq/BqPYQQA3DsA6FDhRLKqnwnSw1mHDeRyl+KUNHQboy vAtz4mpvkljz5fzsxhAg6bUFSF8A3yQ9VraEzxLEzJz4OCMr8qvSTR4Hb9t7rVv/ 9sESrkbePjLmhHAbdG+2Wcy2zkiEQ6T4Sm6uhLk6rjWAdmKcksJPufBGatqhx5tI JNEYjtG7zHppNZF7zwJ/y0S4lS4ixDc= -----END CERTIFICATE-----Generated at Fri Sep 25 14:32:20 2026 by rpki-client