$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8afd8895-11e9-43d4-bb9f-64042b1d28f6/032fc1b0-b9ac-3c54-a6cb-bdb642ac00b0.roa File: 032fc1b0-b9ac-3c54-a6cb-bdb642ac00b0.roa (raw, json) Hash identifier: 2gmGAoV/hvwgUXnwTL+/QwV1bN3D9V9FLCihmFj/zs8= Subject key identifier: A7:4E:60:A2:BC:3A:A4:A3:9F:C2:13:FB:0F:8D:02:28:0B:07:05:22 Certificate issuer: /CN=8afd8895-11e9-43d4-bb9f-64042b1d28f6 Certificate serial: 010D0C9F4328584F2EED12086850C0FB6EA9D500 Authority key identifier: 18:95:AE:26:00:EB:E6:A0:60:EA:19:10:7B:59:96:7A:EE:E2:58:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8afd8895-11e9-43d4-bb9f-64042b1d28f6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8afd8895-11e9-43d4-bb9f-64042b1d28f6/032fc1b0-b9ac-3c54-a6cb-bdb642ac00b0.roa Signing time: Tue 15 Sep 2026 13:00:12 +0000 ROA not before: Tue 15 Sep 2026 13:00:12 +0000 ROA not after: Mon 14 Dec 2026 14:00:12 +0000 asID: 22597 IP address blocks: 23.159.120.0/24 maxlen: 24 2607:5fc0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8afd8895-11e9-43d4-bb9f-64042b1d28f6/8afd8895-11e9-43d4-bb9f-64042b1d28f6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8afd8895-11e9-43d4-bb9f-64042b1d28f6/8afd8895-11e9-43d4-bb9f-64042b1d28f6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8afd8895-11e9-43d4-bb9f-64042b1d28f6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:2e:ed:12:08:68:50:c0:fb:6e:a9:d5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8afd8895-11e9-43d4-bb9f-64042b1d28f6 Validity Not Before: Sep 15 13:00:12 2026 GMT Not After : Dec 14 14:00:12 2026 GMT Subject: CN=8e5871d3-f5b0-49d4-b136-b57219349937 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:a9:6b:b3:31:b6:3c:99:a8:53:26:80:f4:d7: 1d:5a:14:55:81:9d:28:2c:ae:ba:41:f0:96:6f:9c: c3:73:d2:fc:91:db:29:b6:0c:3b:fa:1b:14:41:2f: 3c:73:e7:2e:f1:46:aa:41:39:2d:8c:19:6b:d0:75: b8:6d:27:c6:50:2a:b2:e6:88:47:fe:03:27:8b:b2: b5:6d:fd:b2:3d:5e:f8:63:d9:46:af:b2:d6:0e:75: 7e:bb:95:2a:bc:0a:56:9f:64:a1:9b:13:91:eb:fe: b1:67:30:34:97:c4:1c:23:fc:84:96:78:68:a6:e6: ee:06:11:0a:9e:b4:f9:02:5a:e9:65:74:8e:6e:96: 23:aa:6d:3f:f4:72:2c:f1:19:b6:59:d0:63:c1:f9: ea:ff:4d:f1:52:3b:37:d5:04:94:2f:0e:7c:a8:9f: 81:65:fa:1b:b6:3d:41:bd:2b:59:58:36:16:4e:ab: 10:f3:ba:3b:f5:63:f8:18:99:3b:9b:ca:47:d6:98: c8:c0:6f:c0:41:ab:e3:12:f6:5a:3d:25:c0:d8:41: 4d:40:84:2f:cc:a1:2a:e0:4a:19:81:44:0a:a4:1a: 55:c8:ae:4a:79:86:a5:ec:c7:0f:32:98:ca:54:c6: 34:b8:75:39:99:ab:dd:d0:9e:09:c3:1a:3c:51:11: ba:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:4E:60:A2:BC:3A:A4:A3:9F:C2:13:FB:0F:8D:02:28:0B:07:05:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8afd8895-11e9-43d4-bb9f-64042b1d28f6/032fc1b0-b9ac-3c54-a6cb-bdb642ac00b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8afd8895-11e9-43d4-bb9f-64042b1d28f6/8afd8895-11e9-43d4-bb9f-64042b1d28f6.crl X509v3 Authority Key Identifier: keyid:18:95:AE:26:00:EB:E6:A0:60:EA:19:10:7B:59:96:7A:EE:E2:58:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8afd8895-11e9-43d4-bb9f-64042b1d28f6.cer sbgp-ipAddrBlock: critical IPv4: 23.159.120.0/24 IPv6: 2607:5fc0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:1f:95:e4:c6:df:28:03:c5:89:f8:8d:53:85:83:b7:f8:80: 33:3b:4b:50:08:6e:ac:84:29:0b:17:4f:78:50:5f:df:8a:74: f2:19:46:3d:d9:6b:89:b5:9e:9e:83:ed:1e:65:44:37:4e:80: 18:8a:98:b8:e5:be:1f:b7:53:01:b5:d2:26:e2:89:f2:b6:88: 20:59:6c:90:76:a9:e2:3c:1f:53:fb:18:fe:d8:40:e1:e5:b6: 15:38:eb:dc:35:7a:9b:42:a4:d4:60:0b:54:c5:d1:8c:f8:d4: b0:3d:94:6a:19:38:26:6c:1b:e0:ea:b6:3b:48:7b:54:c4:ff: 1e:7a:00:eb:42:6c:07:02:42:1e:fe:35:14:92:a8:ba:84:e8: 59:96:0f:4f:f3:41:d0:d3:ea:96:04:19:94:27:2b:c2:74:21: b8:62:1d:66:c7:10:7a:f3:0b:a9:2e:cc:d2:8c:ed:97:83:e3: e9:15:d1:46:ca:ca:e6:db:69:92:e4:ca:cc:73:14:86:28:d5: 36:5b:93:2e:76:c2:1b:38:3c:9e:dd:82:e2:f2:bb:95:8a:a5: d8:ce:11:43:a8:22:13:9b:bf:24:ce:f1:9f:53:cc:c9:c9:c1: 49:25:1a:e4:88:4a:86:5f:05:69:b7:ed:db:fc:c8:eb:06:cd: 76:e2:45:49 -----BEGIN CERTIFICATE----- MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWE8u7RIIaFDA+26p1QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGFmZDg4OTUtMTFlOS00M2Q0LWJiOWYtNjQwNDJiMWQy OGY2MB4XDTI2MDkxNTEzMDAxMloXDTI2MTIxNDE0MDAxMlowLzEtMCsGA1UEAxMk OGU1ODcxZDMtZjViMC00OWQ0LWIxMzYtYjU3MjE5MzQ5OTM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7alrszG2PJmoUyaA9NcdWhRVgZ0oLK66QfCW b5zDc9L8kdsptgw7+hsUQS88c+cu8UaqQTktjBlr0HW4bSfGUCqy5ohH/gMni7K1 bf2yPV74Y9lGr7LWDnV+u5UqvApWn2ShmxOR6/6xZzA0l8QcI/yElnhopubuBhEK nrT5AlrpZXSObpYjqm0/9HIs8Rm2WdBjwfnq/03xUjs31QSULw58qJ+BZfobtj1B vStZWDYWTqsQ87o79WP4GJk7m8pH1pjIwG/AQavjEvZaPSXA2EFNQIQvzKEq4EoZ gUQKpBpVyK5KeYal7McPMpjKVMY0uHU5mavd0J4Jwxo8URG6KwIDAQABo4IDZDCC A2AwHQYDVR0OBBYEFKdOYKK8OqSjn8IT+w+NAigLBwUiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi84YWZk ODg5NS0xMWU5LTQzZDQtYmI5Zi02NDA0MmIxZDI4ZjYvMDMyZmMxYjAtYjlhYy0z YzU0LWE2Y2ItYmRiNjQyYWMwMGIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOGFmZDg4OTUtMTFlOS00M2Q0LWJi OWYtNjQwNDJiMWQyOGY2LzhhZmQ4ODk1LTExZTktNDNkNC1iYjlmLTY0MDQyYjFk MjhmNi5jcmwwHwYDVR0jBBgwFoAUGJWuJgDr5qBg6hkQe1mWeu7iWBcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi84YWZkODg5NS0xMWU5LTQzZDQtYmI5Zi02NDA0 MmIxZDI4ZjYuY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAF594MA0E AgACMAcDBQAmB1/AMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0 bWwwDQYJKoZIhvcNAQELBQADggEBAG4fleTG3ygDxYn4jVOFg7f4gDM7S1AIbqyE KQsXT3hQX9+KdPIZRj3Za4m1np6D7R5lRDdOgBiKmLjlvh+3UwG10ibiifK2iCBZ bJB2qeI8H1P7GP7YQOHlthU469w1eptCpNRgC1TF0Yz41LA9lGoZOCZsG+DqtjtI e1TE/x56AOtCbAcCQh7+NRSSqLqE6FmWD0/zQdDT6pYEGZQnK8J0IbhiHWbHEHrz C6kuzNKM7ZeD4+kV0UbKyubbaZLkysxzFIYo1TZbky52whs4PJ7dguLyu5WKpdjO EUOoIhObvyTO8Z9TzMnJwUklGuSISoZfBWm37dv8yOsGzXbiRUk= -----END CERTIFICATE-----Generated at Sun Sep 27 16:50:42 2026 by rpki-client