$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/cf31a15f-52b3-4240-9d85-0433b7d5171d/432fe983-298a-3c6b-b02e-7d9e60c3af7e.roa File: 432fe983-298a-3c6b-b02e-7d9e60c3af7e.roa (raw, json) Hash identifier: gK/txTU53eJ2KQFdJAKonhmJqVbTLFwcnwzdl5MXtLg= Subject key identifier: A2:61:44:E9:20:9B:75:18:51:2B:C7:DF:CB:5E:DE:6D:0B:05:8A:D7 Certificate issuer: /CN=cf31a15f-52b3-4240-9d85-0433b7d5171d Certificate serial: 010D0C9F4328584F3B7D1EA105CC62CE4AD70DC0 Authority key identifier: 9F:CF:3B:88:EA:F9:9B:CA:F6:B9:7D:46:EF:AF:C7:DD:02:C8:2F:16 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/cf31a15f-52b3-4240-9d85-0433b7d5171d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/cf31a15f-52b3-4240-9d85-0433b7d5171d/432fe983-298a-3c6b-b02e-7d9e60c3af7e.roa Signing time: Sun 20 Sep 2026 01:00:11 +0000 ROA not before: Sun 20 Sep 2026 01:00:11 +0000 ROA not after: Sat 19 Dec 2026 02:00:11 +0000 asID: 402681 IP address blocks: 23.246.152.0/22 maxlen: 22 2602:f35c::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/cf31a15f-52b3-4240-9d85-0433b7d5171d/cf31a15f-52b3-4240-9d85-0433b7d5171d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/cf31a15f-52b3-4240-9d85-0433b7d5171d/cf31a15f-52b3-4240-9d85-0433b7d5171d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/cf31a15f-52b3-4240-9d85-0433b7d5171d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3b:7d:1e:a1:05:cc:62:ce:4a:d7:0d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cf31a15f-52b3-4240-9d85-0433b7d5171d Validity Not Before: Sep 20 01:00:11 2026 GMT Not After : Dec 19 02:00:11 2026 GMT Subject: CN=d5d5ff44-6bb9-4fc7-a184-acabb9c3718d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:c1:32:19:2a:fd:d9:b5:bd:62:84:a2:62:3e: 58:dc:4b:cb:89:a8:c8:be:90:c4:a1:c7:30:45:15: 50:84:a4:33:82:46:3a:e8:40:78:b2:02:db:4f:82: ba:da:60:28:38:47:39:1d:a1:49:c6:bc:eb:58:98: 4c:d6:0a:fd:c9:5d:42:aa:ed:19:37:6b:b7:f6:4c: 53:a9:06:af:bf:74:90:72:29:5b:f9:58:f1:b2:8b: 12:7a:3a:cf:6e:08:d7:53:9b:bc:d0:bf:64:cb:f9: 9a:5d:05:61:cd:45:92:5f:93:0b:28:87:67:5b:a1: 82:1f:49:fc:62:b1:2f:ba:5f:b5:3e:a4:52:16:18: bf:a5:85:59:4b:0b:59:fd:0e:dc:75:8b:d7:ce:24: b9:57:a7:6a:7d:53:33:41:35:e6:4b:fc:e8:92:e7: c4:cc:7b:19:0d:aa:dc:80:c1:56:cf:65:fe:6d:88: b3:6a:14:f4:ff:b8:d1:b6:46:83:ff:5f:23:6e:e4: bc:b1:c5:e2:e7:88:c8:d3:d4:91:12:2b:46:b3:f9: 3a:8a:12:00:fe:e5:f3:08:3c:86:ba:0b:04:34:1b: 86:06:17:d4:59:fd:49:1d:39:c3:2a:5e:0d:e6:36: 79:ac:a7:3a:44:bb:04:15:f9:85:9b:e6:76:c0:e5: 94:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:61:44:E9:20:9B:75:18:51:2B:C7:DF:CB:5E:DE:6D:0B:05:8A:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/cf31a15f-52b3-4240-9d85-0433b7d5171d/432fe983-298a-3c6b-b02e-7d9e60c3af7e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/cf31a15f-52b3-4240-9d85-0433b7d5171d/cf31a15f-52b3-4240-9d85-0433b7d5171d.crl X509v3 Authority Key Identifier: keyid:9F:CF:3B:88:EA:F9:9B:CA:F6:B9:7D:46:EF:AF:C7:DD:02:C8:2F:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/cf31a15f-52b3-4240-9d85-0433b7d5171d.cer sbgp-ipAddrBlock: critical IPv4: 23.246.152.0/22 IPv6: 2602:f35c::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:e5:aa:9c:46:0b:f5:86:59:ee:ab:7a:0a:bd:e1:c7:1a:17: 22:19:20:f4:6e:a7:3a:1b:1b:53:6d:5a:c9:0b:a8:65:1c:4b: b9:5d:20:8b:11:d3:cf:85:e7:f4:bf:e8:5e:25:15:ef:d6:c5: 56:eb:0a:ce:48:3d:0f:1e:6c:9c:ff:19:80:6b:11:96:1a:0b: 56:0b:c7:35:a5:36:0d:64:bb:79:0d:8e:04:fa:f9:18:e8:41: 2e:4c:d6:1b:b3:96:15:af:14:b9:69:42:d8:34:d4:d2:6c:e9: 93:ac:d1:7b:0e:36:8e:a3:9e:38:9c:28:76:2b:f0:f9:35:d4: 51:a6:2a:05:ea:69:da:b0:86:73:e6:f8:30:ec:f0:b2:2f:7f: 29:72:cc:95:36:bb:d8:62:ec:19:ea:a4:66:a4:e1:b9:6b:21: e7:c5:a4:9b:b9:c0:cb:87:64:e9:51:17:fb:d6:f9:7f:e2:79: 67:7d:10:ef:a4:e2:7c:31:07:a7:c9:44:63:af:39:b4:c4:90: a6:af:a9:d3:39:10:0d:98:9c:c7:be:99:02:4b:22:ac:9a:a0: 34:b6:b1:15:02:37:a5:ca:02:aa:7e:bf:a9:8d:56:21:2b:97: 15:60:56:61:7c:cf:8d:10:88:28:3d:3c:d1:ab:3c:e7:0c:62: 24:8d:0a:07 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE87fR6hBcxizkrXDcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2YzMWExNWYtNTJiMy00MjQwLTlkODUtMDQzM2I3ZDUx NzFkMB4XDTI2MDkyMDAxMDAxMVoXDTI2MTIxOTAyMDAxMVowLzEtMCsGA1UEAxMk ZDVkNWZmNDQtNmJiOS00ZmM3LWExODQtYWNhYmI5YzM3MThkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi8EyGSr92bW9YoSiYj5Y3EvLiajIvpDEoccw RRVQhKQzgkY66EB4sgLbT4K62mAoOEc5HaFJxrzrWJhM1gr9yV1Cqu0ZN2u39kxT qQavv3SQcilb+VjxsosSejrPbgjXU5u80L9ky/maXQVhzUWSX5MLKIdnW6GCH0n8 YrEvul+1PqRSFhi/pYVZSwtZ/Q7cdYvXziS5V6dqfVMzQTXmS/zokufEzHsZDarc gMFWz2X+bYizahT0/7jRtkaD/18jbuS8scXi54jI09SREitGs/k6ihIA/uXzCDyG ugsENBuGBhfUWf1JHTnDKl4N5jZ5rKc6RLsEFfmFm+Z2wOWU6QIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFKJhROkgm3UYUSvH38te3m0LBYrXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi9jZjMx YTE1Zi01MmIzLTQyNDAtOWQ4NS0wNDMzYjdkNTE3MWQvNDMyZmU5ODMtMjk4YS0z YzZiLWIwMmUtN2Q5ZTYwYzNhZjdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82MTVmZTFkZC1k ODI5LTRjODctYjJjYy01Njg5MzgxYTNjNDIvY2YzMWExNWYtNTJiMy00MjQwLTlk ODUtMDQzM2I3ZDUxNzFkL2NmMzFhMTVmLTUyYjMtNDI0MC05ZDg1LTA0MzNiN2Q1 MTcxZC5jcmwwHwYDVR0jBBgwFoAUn887iOr5m8r2uX1G76/H3QLILxYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4 Ny1iMmNjLTU2ODkzODFhM2M0Mi9jZjMxYTE1Zi01MmIzLTQyNDAtOWQ4NS0wNDMz YjdkNTE3MWQuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQCF/aYMA4E AgACMAgDBgQmAvNcADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBb5aqcRgv1hlnuq3oKveHHGhciGSD0bqc6 GxtTbVrJC6hlHEu5XSCLEdPPhef0v+heJRXv1sVW6wrOSD0PHmyc/xmAaxGWGgtW C8c1pTYNZLt5DY4E+vkY6EEuTNYbs5YVrxS5aULYNNTSbOmTrNF7DjaOo544nCh2 K/D5NdRRpioF6mnasIZz5vgw7PCyL38pcsyVNrvYYuwZ6qRmpOG5ayHnxaSbucDL h2TpURf71vl/4nlnfRDvpOJ8MQenyURjrzm0xJCmr6nTORANmJzHvpkCSyKsmqA0 trEVAjelygKqfr+pjVYhK5cVYFZhfM+NEIgoPTzRqzznDGIkjQoH -----END CERTIFICATE-----Generated at Sat Sep 26 23:38:25 2026 by rpki-client