$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d1c406c-fcae-4d83-9c1a-5c930e814683/a3508acf-6acf-30f7-b8c0-a8d81b0e41df.roa File: a3508acf-6acf-30f7-b8c0-a8d81b0e41df.roa (raw, json) Hash identifier: WN37wzKlpxYwPUew2NcOUYnkPGPAdYzf1Gl0envyH9Y= Subject key identifier: 66:1A:B9:E6:83:D5:84:DA:10:FB:77:71:D6:83:9F:9A:18:EF:BB:01 Certificate issuer: /CN=3d1c406c-fcae-4d83-9c1a-5c930e814683 Certificate serial: 010D0C9F4328584F49773B12E70AAC3530A4DA50 Authority key identifier: 9A:E4:16:BE:62:8E:A9:D2:ED:EA:9F:D7:48:81:B2:B5:31:0D:A1:5A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d1c406c-fcae-4d83-9c1a-5c930e814683.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d1c406c-fcae-4d83-9c1a-5c930e814683/a3508acf-6acf-30f7-b8c0-a8d81b0e41df.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 401473 IP address blocks: 23.128.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d1c406c-fcae-4d83-9c1a-5c930e814683/3d1c406c-fcae-4d83-9c1a-5c930e814683.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d1c406c-fcae-4d83-9c1a-5c930e814683/3d1c406c-fcae-4d83-9c1a-5c930e814683.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d1c406c-fcae-4d83-9c1a-5c930e814683.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 Oct 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:77:3b:12:e7:0a:ac:35:30:a4:da:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3d1c406c-fcae-4d83-9c1a-5c930e814683 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=b93a1d10-b4d6-428d-9351-c2d1abc9243c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:cd:ef:b1:fd:a1:37:31:a8:e0:b4:dd:69:a5: bb:d2:26:b3:66:1e:52:d0:9c:41:44:bf:11:5a:4b: ee:4b:96:e4:5e:4f:4a:b3:43:83:75:cf:6e:99:45: 76:21:04:72:9c:98:a9:81:c8:6c:f1:de:be:b6:ed: 0f:0c:91:ef:e1:d3:c2:58:24:89:cc:c8:6f:ca:8e: d4:17:4c:bd:b0:7b:22:37:86:cb:5a:44:5d:60:29: a0:db:e6:ff:30:94:6e:0c:e2:77:f7:a8:02:51:46: 61:71:0d:94:29:8c:e4:ec:16:ea:6b:61:3d:be:7d: 78:da:49:81:ae:f3:60:b5:e7:bc:88:c0:be:77:25: 58:cc:71:2a:64:53:86:60:ad:4b:87:fe:54:db:09: 98:63:e6:3d:23:e5:db:50:80:e7:95:c7:73:6e:d0: 09:21:6b:81:b3:73:11:0a:fa:17:30:69:19:ef:30: ac:8a:58:6a:18:56:4b:a0:31:f7:88:db:81:aa:d2: 54:6a:4b:d3:46:2c:7e:fb:20:5e:2c:62:78:e4:fa: dc:07:48:ea:1c:93:bd:a8:95:98:b2:52:29:09:04: ad:87:04:10:9f:a6:43:e8:9b:ea:bb:e4:0f:83:5f: 43:a3:1b:01:f7:ef:47:ac:21:dd:94:38:2d:28:50: 91:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:1A:B9:E6:83:D5:84:DA:10:FB:77:71:D6:83:9F:9A:18:EF:BB:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d1c406c-fcae-4d83-9c1a-5c930e814683/a3508acf-6acf-30f7-b8c0-a8d81b0e41df.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d1c406c-fcae-4d83-9c1a-5c930e814683/3d1c406c-fcae-4d83-9c1a-5c930e814683.crl X509v3 Authority Key Identifier: keyid:9A:E4:16:BE:62:8E:A9:D2:ED:EA:9F:D7:48:81:B2:B5:31:0D:A1:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d1c406c-fcae-4d83-9c1a-5c930e814683.cer sbgp-ipAddrBlock: critical IPv4: 23.128.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:b6:b2:1b:cf:0f:74:b9:44:13:5f:8a:f2:23:18:13:09:4a: 37:5a:4b:4c:51:14:a4:24:98:1f:76:d3:03:e2:ec:44:24:46: 7b:47:86:ce:b4:18:47:3b:d7:62:c7:4f:98:57:61:aa:5d:8f: 95:16:78:05:ab:5a:9e:52:3c:19:67:ca:d2:27:17:8a:05:a6: 31:9c:16:11:2c:10:08:22:70:45:21:37:0f:af:c9:d3:04:9b: d7:3f:8f:51:c7:ed:67:84:c9:3e:9c:c0:1f:e2:25:b8:7c:aa: 38:db:56:99:b1:4a:31:2c:34:69:20:3e:7f:04:05:fe:e0:16: 10:a5:25:f9:1b:e3:0b:8b:ce:41:1d:7f:ae:3e:53:d2:2b:8a: 64:99:9a:59:74:e0:2a:24:7c:ec:33:6e:d0:aa:3c:1b:80:40: 97:5d:b5:f4:0b:c7:2d:52:4d:58:ee:b5:89:62:90:b5:18:f6: 1a:59:c2:e0:be:32:23:18:26:14:dc:a0:83:55:ee:c6:fa:19: 91:4a:a1:81:3f:f9:8a:66:8f:e7:bc:c4:c8:81:2a:4d:11:43: cc:3b:73:ee:58:e0:4f:97:21:57:13:14:53:e3:31:88:b7:20: 36:2c:20:98:0e:41:fc:4f:f4:e5:65:6b:26:57:c6:77:a5:5b: f9:fc:e9:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdzsS5wqsNTCk2lAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2QxYzQwNmMtZmNhZS00ZDgzLTljMWEtNWM5MzBlODE0 NjgzMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YjkzYTFkMTAtYjRkNi00MjhkLTkzNTEtYzJkMWFiYzkyNDNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg83vsf2hNzGo4LTdaaW70iazZh5S0JxBRL8R WkvuS5bkXk9Ks0ODdc9umUV2IQRynJipgchs8d6+tu0PDJHv4dPCWCSJzMhvyo7U F0y9sHsiN4bLWkRdYCmg2+b/MJRuDOJ396gCUUZhcQ2UKYzk7Bbqa2E9vn142kmB rvNgtee8iMC+dyVYzHEqZFOGYK1Lh/5U2wmYY+Y9I+XbUIDnlcdzbtAJIWuBs3MR CvoXMGkZ7zCsilhqGFZLoDH3iNuBqtJUakvTRix++yBeLGJ45PrcB0jqHJO9qJWY slIpCQSthwQQn6ZD6Jvqu+QPg19DoxsB9+9HrCHdlDgtKFCRUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGYaueaD1YTaEPt3cdaDn5oY77sBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8zZDFj NDA2Yy1mY2FlLTRkODMtOWMxYS01YzkzMGU4MTQ2ODMvYTM1MDhhY2YtNmFjZi0z MGY3LWI4YzAtYThkODFiMGU0MWRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvM2QxYzQwNmMtZmNhZS00ZDgzLTlj MWEtNWM5MzBlODE0NjgzLzNkMWM0MDZjLWZjYWUtNGQ4My05YzFhLTVjOTMwZTgx NDY4My5jcmwwHwYDVR0jBBgwFoAUmuQWvmKOqdLt6p/XSIGytTENoVowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8zZDFjNDA2Yy1mY2FlLTRkODMtOWMxYS01Yzkz MGU4MTQ2ODMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4DcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEu2shvPD3S5RBNfivIjGBMJSjdaS0xRFKQkmB920wPi7EQkRntHhs60 GEc712LHT5hXYapdj5UWeAWrWp5SPBlnytInF4oFpjGcFhEsEAgicEUhNw+vydME m9c/j1HH7WeEyT6cwB/iJbh8qjjbVpmxSjEsNGkgPn8EBf7gFhClJfkb4wuLzkEd f64+U9IrimSZmll04CokfOwzbtCqPBuAQJddtfQLxy1STVjutYlikLUY9hpZwuC+ MiMYJhTcoINV7sb6GZFKoYE/+Ypmj+e8xMiBKk0RQ8w7c+5Y4E+XIVcTFFPjMYi3 IDYsIJgOQfxP9OVlayZXxnelW/n86Zg= -----END CERTIFICATE-----Generated at Tue Oct 13 19:49:11 2026 by rpki-client