$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/513b9f91-8392-4631-810f-da15bbfd7385/1fb53b31-9777-3a1c-96a9-3cc5b4aa2a44.roa File: 1fb53b31-9777-3a1c-96a9-3cc5b4aa2a44.roa (raw, json) Hash identifier: XhGlhdv0NLToZ1mxd5Iys+vzEPw5pyl2H1t9E+qLuKg= Subject key identifier: 4E:33:30:5E:79:F4:70:19:89:D3:8A:B3:D8:74:7B:5F:27:8E:F6:4B Certificate issuer: /CN=513b9f91-8392-4631-810f-da15bbfd7385 Certificate serial: 010D0C9F4328584F1F924C6E46F510D6425B18C0 Authority key identifier: 8C:03:C8:1E:EB:54:6A:29:B9:BD:99:AA:F0:97:08:28:1F:C7:1E:48 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/513b9f91-8392-4631-810f-da15bbfd7385.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/513b9f91-8392-4631-810f-da15bbfd7385/1fb53b31-9777-3a1c-96a9-3cc5b4aa2a44.roa Signing time: Thu 10 Sep 2026 01:00:12 +0000 ROA not before: Thu 10 Sep 2026 01:00:12 +0000 ROA not after: Wed 09 Dec 2026 02:00:12 +0000 asID: 401617 IP address blocks: 23.132.252.0/24 maxlen: 24 2602:f72f::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/513b9f91-8392-4631-810f-da15bbfd7385/513b9f91-8392-4631-810f-da15bbfd7385.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/513b9f91-8392-4631-810f-da15bbfd7385/513b9f91-8392-4631-810f-da15bbfd7385.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/513b9f91-8392-4631-810f-da15bbfd7385.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 04 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:1f:92:4c:6e:46:f5:10:d6:42:5b:18:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=513b9f91-8392-4631-810f-da15bbfd7385 Validity Not Before: Sep 10 01:00:12 2026 GMT Not After : Dec 9 02:00:12 2026 GMT Subject: CN=0aae7824-1ef7-4590-87ad-61e83113a131 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:19:fb:fc:ea:a5:21:8c:72:e7:46:2a:6a:5f: f4:93:ec:b7:a7:aa:88:4b:dd:e7:cb:98:8a:f0:78: 96:ed:27:7b:dc:e6:cd:f2:9c:63:43:c7:17:a1:ea: 93:f7:ee:79:95:38:02:35:15:31:43:c4:b0:43:42: 49:fa:8c:d3:38:06:01:f6:cc:c7:36:f2:8a:34:b8: 86:e3:56:0d:3a:d7:0b:d6:69:3f:94:76:44:fd:ad: 55:20:a3:be:90:08:ee:bb:cc:8b:5d:95:61:ca:54: 93:26:16:9c:38:b9:16:fd:66:85:8c:4d:0b:24:43: 8b:64:00:be:bc:62:80:6f:ae:7a:38:52:4f:bd:e1: c4:5c:fd:5c:e3:23:5f:83:7f:29:db:76:8d:e0:67: b8:87:23:ba:bf:27:16:65:1e:eb:bc:02:07:99:99: 70:73:6e:e1:c6:bf:26:a8:7a:93:02:3b:21:bc:5a: 32:d1:50:a6:b4:bf:85:ee:e4:3f:6d:22:22:41:ed: cc:a2:51:c6:9c:79:a2:81:3d:d3:e7:e6:40:f2:78: 92:bd:90:f6:e7:57:27:c5:4e:98:d4:17:59:0f:c6: 9c:87:6a:af:f5:0a:55:f2:c1:0d:8c:64:db:fa:79: b3:b9:47:91:f1:fd:73:3b:3e:34:62:1b:a9:0a:b5: 78:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:33:30:5E:79:F4:70:19:89:D3:8A:B3:D8:74:7B:5F:27:8E:F6:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/513b9f91-8392-4631-810f-da15bbfd7385/1fb53b31-9777-3a1c-96a9-3cc5b4aa2a44.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/513b9f91-8392-4631-810f-da15bbfd7385/513b9f91-8392-4631-810f-da15bbfd7385.crl X509v3 Authority Key Identifier: keyid:8C:03:C8:1E:EB:54:6A:29:B9:BD:99:AA:F0:97:08:28:1F:C7:1E:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/513b9f91-8392-4631-810f-da15bbfd7385.cer sbgp-ipAddrBlock: critical IPv4: 23.132.252.0/24 IPv6: 2602:f72f::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:6a:1f:4f:1d:26:17:c9:51:31:80:75:57:11:2f:0e:4e:8a: 6c:c0:72:c5:51:00:2a:92:e4:31:51:e0:61:41:53:ff:5d:83: 99:c0:02:a3:f3:19:05:eb:9e:84:93:e6:38:f4:ee:f1:65:0c: 57:88:89:89:83:bd:58:ea:7e:c9:3b:5a:62:e8:42:8e:07:72: 91:f7:6a:42:a6:a8:bc:23:eb:08:89:ee:80:69:3d:a7:cc:98: 38:4d:38:c0:15:79:ce:96:7d:4d:e1:85:1b:41:d8:06:3e:78: 3c:a6:35:4f:48:dd:19:f2:99:82:0e:8b:74:b3:92:da:a5:3c: 50:e4:f5:ba:f0:7d:b6:a3:20:dc:49:45:98:57:22:ed:86:e5: 76:cf:86:b4:a9:91:93:a9:00:8e:d3:91:94:f7:df:5e:00:16: 7b:ca:1d:6b:4f:6f:53:b4:e8:7d:bc:c7:2a:d4:54:b3:e9:c2: 7c:07:fb:a6:3d:46:81:52:41:64:73:ab:d0:7a:b4:4b:f8:e5: 6c:99:00:de:80:5a:ae:11:c5:a8:24:73:ab:72:61:ff:62:6f: 8c:8f:95:fd:e1:55:eb:b7:96:58:d8:12:8e:14:9f:d9:2a:40: bf:34:35:ad:95:89:6f:9d:90:27:33:aa:a1:71:f3:87:4c:24: dc:39:c7:f2 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE8fkkxuRvUQ1kJbGMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTEzYjlmOTEtODM5Mi00NjMxLTgxMGYtZGExNWJiZmQ3 Mzg1MB4XDTI2MDkxMDAxMDAxMloXDTI2MTIwOTAyMDAxMlowLzEtMCsGA1UEAxMk MGFhZTc4MjQtMWVmNy00NTkwLTg3YWQtNjFlODMxMTNhMTMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhxn7/OqlIYxy50Yqal/0k+y3p6qIS93ny5iK 8HiW7Sd73ObN8pxjQ8cXoeqT9+55lTgCNRUxQ8SwQ0JJ+ozTOAYB9szHNvKKNLiG 41YNOtcL1mk/lHZE/a1VIKO+kAjuu8yLXZVhylSTJhacOLkW/WaFjE0LJEOLZAC+ vGKAb656OFJPveHEXP1c4yNfg38p23aN4Ge4hyO6vycWZR7rvAIHmZlwc27hxr8m qHqTAjshvFoy0VCmtL+F7uQ/bSIiQe3MolHGnHmigT3T5+ZA8niSvZD251cnxU6Y 1BdZD8ach2qv9QpV8sENjGTb+nmzuUeR8f1zOz40YhupCrV4/wIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFE4zMF559HAZidOKs9h0e18njvZLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi81MTNi OWY5MS04MzkyLTQ2MzEtODEwZi1kYTE1YmJmZDczODUvMWZiNTNiMzEtOTc3Ny0z YTFjLTk2YTktM2NjNWI0YWEyYTQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82MTVmZTFkZC1k ODI5LTRjODctYjJjYy01Njg5MzgxYTNjNDIvNTEzYjlmOTEtODM5Mi00NjMxLTgx MGYtZGExNWJiZmQ3Mzg1LzUxM2I5ZjkxLTgzOTItNDYzMS04MTBmLWRhMTViYmZk NzM4NS5jcmwwHwYDVR0jBBgwFoAUjAPIHutUaim5vZmq8JcIKB/HHkgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4 Ny1iMmNjLTU2ODkzODFhM2M0Mi81MTNiOWY5MS04MzkyLTQ2MzEtODEwZi1kYTE1 YmJmZDczODUuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF4T8MA4E AgACMAgDBgQmAvcvADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBdah9PHSYXyVExgHVXES8OTopswHLFUQAq kuQxUeBhQVP/XYOZwAKj8xkF656Ek+Y49O7xZQxXiImJg71Y6n7JO1pi6EKOB3KR 92pCpqi8I+sIie6AaT2nzJg4TTjAFXnOln1N4YUbQdgGPng8pjVPSN0Z8pmCDot0 s5LapTxQ5PW68H22oyDcSUWYVyLthuV2z4a0qZGTqQCO05GU999eABZ7yh1rT29T tOh9vMcq1FSz6cJ8B/umPUaBUkFkc6vQerRL+OVsmQDegFquEcWoJHOrcmH/Ym+M j5X94VXrt5ZY2BKOFJ/ZKkC/NDWtlYlvnZAnM6qhcfOHTCTcOcfy -----END CERTIFICATE-----Generated at Sat Oct 3 15:05:35 2026 by rpki-client