$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1aea854c-b5a0-4772-a924-0abe91b36c2c/7f0cdcdb-7fcd-33f5-bb3c-7454e6d16d34.roa File: 7f0cdcdb-7fcd-33f5-bb3c-7454e6d16d34.roa (raw, json) Hash identifier: PSxbm7+FAXWrvevheiBZc74M3xMwBHZfkjEvreXQjkY= Subject key identifier: 71:DF:02:7D:02:E9:46:2A:2D:78:CC:B1:16:A5:64:97:0C:4D:FB:D9 Certificate issuer: /CN=1aea854c-b5a0-4772-a924-0abe91b36c2c Certificate serial: 010D0C9F4328584F4C3D55A9FB4CEC1EB3AC9540 Authority key identifier: DE:AE:88:78:C8:B3:D7:23:38:79:B2:C7:BD:30:A8:F3:30:5D:5C:F8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1aea854c-b5a0-4772-a924-0abe91b36c2c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1aea854c-b5a0-4772-a924-0abe91b36c2c/7f0cdcdb-7fcd-33f5-bb3c-7454e6d16d34.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 17387 IP address blocks: 23.167.72.0/24 maxlen: 24 2602:fa46::/36 maxlen: 56 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1aea854c-b5a0-4772-a924-0abe91b36c2c/1aea854c-b5a0-4772-a924-0abe91b36c2c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1aea854c-b5a0-4772-a924-0abe91b36c2c/1aea854c-b5a0-4772-a924-0abe91b36c2c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1aea854c-b5a0-4772-a924-0abe91b36c2c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 Oct 2026 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:55:a9:fb:4c:ec:1e:b3:ac:95:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1aea854c-b5a0-4772-a924-0abe91b36c2c Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=ea55d260-f728-41f9-87fe-f33dbb3676af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:fe:71:62:b3:83:32:0d:4d:46:14:57:26:fe: c3:1c:a2:0b:07:a5:85:a6:5c:0a:2e:2b:48:9d:d3: d6:53:d9:39:e6:0e:05:53:80:fc:72:4f:d9:e7:3a: 5d:ab:a9:fa:fb:d6:b3:da:7c:75:5c:b6:aa:77:6c: 87:70:c3:23:7a:53:de:95:f6:c9:28:86:d6:6d:57: c8:57:91:3e:28:82:b5:c7:7d:fd:82:06:4a:f5:e8: 08:19:01:5d:74:b4:f6:b2:b0:42:c8:b9:ec:c1:b7: 2f:c4:ff:01:d0:88:17:9f:af:a0:08:f8:fc:91:28: bb:cc:14:3d:25:31:40:a2:2b:2f:6b:4a:8e:98:59: c7:ce:e2:44:4e:ab:d1:47:c1:60:a0:51:b4:f6:d1: 10:b1:84:33:ce:7d:77:d0:c2:8b:72:78:26:54:18: a9:43:26:e1:41:36:3a:21:b7:52:da:21:2e:ab:2d: e9:d2:cb:c6:e2:5b:68:fa:0a:01:17:be:19:56:f6: 68:d7:cd:ee:38:a1:80:9a:b4:5c:04:87:ab:cd:38: 1b:6e:ef:0f:63:b0:c7:32:40:83:8e:37:77:18:c0: 03:cf:09:a7:e7:9f:3e:ad:5d:4a:8a:cc:86:07:7d: d3:58:79:fc:a0:21:e6:78:4d:88:b8:35:1f:ee:a4: a5:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:DF:02:7D:02:E9:46:2A:2D:78:CC:B1:16:A5:64:97:0C:4D:FB:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1aea854c-b5a0-4772-a924-0abe91b36c2c/7f0cdcdb-7fcd-33f5-bb3c-7454e6d16d34.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1aea854c-b5a0-4772-a924-0abe91b36c2c/1aea854c-b5a0-4772-a924-0abe91b36c2c.crl X509v3 Authority Key Identifier: keyid:DE:AE:88:78:C8:B3:D7:23:38:79:B2:C7:BD:30:A8:F3:30:5D:5C:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/1aea854c-b5a0-4772-a924-0abe91b36c2c.cer sbgp-ipAddrBlock: critical IPv4: 23.167.72.0/24 IPv6: 2602:fa46::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:bc:83:60:6c:dc:6c:26:a0:9d:c5:f6:ea:4a:be:0d:3c:c1: c8:9f:3b:24:79:2e:15:2e:62:88:24:8d:15:b2:43:52:48:9b: 0d:52:53:a9:ad:00:d5:69:1f:be:13:12:38:33:2b:e5:04:ac: 2c:31:28:30:01:fd:23:eb:a8:29:6e:1f:6a:5b:a0:7a:c1:62: 63:28:59:65:11:91:c8:86:ac:3d:f9:01:fe:a8:1e:74:61:ab: 7b:12:a3:2b:27:6c:f0:24:b6:d0:3c:92:dc:82:4a:ce:40:5d: f9:55:d7:9a:40:5f:8a:7a:27:60:6f:ab:cd:69:a2:0d:57:77: 41:d6:c0:89:64:da:22:b4:99:16:11:11:9f:e1:a4:3b:1e:d3: f6:00:78:ab:13:a7:ed:7c:23:23:ca:ca:0b:42:47:f0:3e:02: e0:be:18:34:e1:81:d6:9d:44:05:38:d6:1a:98:b1:00:d2:1a: 4b:93:c0:ce:6b:30:7f:29:a3:17:35:6e:74:39:70:e5:83:b6: da:48:a2:57:d6:c3:28:03:63:9b:25:69:b4:95:83:bd:57:34: a3:aa:21:69:b0:03:17:f6:1f:7f:be:3b:51:e0:ff:48:de:7e: 86:8b:c4:d3:9f:d3:bf:b6:6b:d8:72:f0:af:93:50:d9:fe:2e: 6d:9f:28:22 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE9MPVWp+0zsHrOslUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWFlYTg1NGMtYjVhMC00NzcyLWE5MjQtMGFiZTkxYjM2 YzJjMB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk ZWE1NWQyNjAtZjcyOC00MWY5LTg3ZmUtZjMzZGJiMzY3NmFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmv5xYrODMg1NRhRXJv7DHKILB6WFplwKLitI ndPWU9k55g4FU4D8ck/Z5zpdq6n6+9az2nx1XLaqd2yHcMMjelPelfbJKIbWbVfI V5E+KIK1x339ggZK9egIGQFddLT2srBCyLnswbcvxP8B0IgXn6+gCPj8kSi7zBQ9 JTFAoisva0qOmFnHzuJETqvRR8FgoFG09tEQsYQzzn130MKLcngmVBipQybhQTY6 IbdS2iEuqy3p0svG4lto+goBF74ZVvZo183uOKGAmrRcBIerzTgbbu8PY7DHMkCD jjd3GMADzwmn558+rV1KisyGB33TWHn8oCHmeE2IuDUf7qSlcQIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFHHfAn0C6UYqLXjMsRalZJcMTfvZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8xYWVh ODU0Yy1iNWEwLTQ3NzItYTkyNC0wYWJlOTFiMzZjMmMvN2YwY2RjZGItN2ZjZC0z M2Y1LWJiM2MtNzQ1NGU2ZDE2ZDM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMWFlYTg1NGMtYjVhMC00NzcyLWE5 MjQtMGFiZTkxYjM2YzJjLzFhZWE4NTRjLWI1YTAtNDc3Mi1hOTI0LTBhYmU5MWIz NmMyYy5jcmwwHwYDVR0jBBgwFoAU3q6IeMiz1yM4ebLHvTCo8zBdXPgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS8xYWVhODU0Yy1iNWEwLTQ3NzItYTkyNC0wYWJl OTFiMzZjMmMuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF6dIMA4E AgACMAgDBgQmAvpGADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAdvINgbNxsJqCdxfbqSr4NPMHInzskeS4V LmKIJI0VskNSSJsNUlOprQDVaR++ExI4MyvlBKwsMSgwAf0j66gpbh9qW6B6wWJj KFllEZHIhqw9+QH+qB50Yat7EqMrJ2zwJLbQPJLcgkrOQF35VdeaQF+Keidgb6vN aaINV3dB1sCJZNoitJkWERGf4aQ7HtP2AHirE6ftfCMjysoLQkfwPgLgvhg04YHW nUQFONYamLEA0hpLk8DOazB/KaMXNW50OXDlg7baSKJX1sMoA2ObJWm0lYO9VzSj qiFpsAMX9h9/vjtR4P9I3n6Gi8TTn9O/tmvYcvCvk1DZ/i5tnygi -----END CERTIFICATE-----Generated at Sun Oct 4 21:36:36 2026 by rpki-client