$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/23f3c964-aab2-4965-9f55-d270cc840a73/0ea3fd91-deb2-3677-854f-64e931788b66.roa File: 0ea3fd91-deb2-3677-854f-64e931788b66.roa (raw, json) Hash identifier: R7WqdAaggBba5VuE7cT1JuVF6FYCekBQs0gDa+qBD5A= Subject key identifier: 8E:9C:57:50:DC:0B:A9:4E:DC:6C:93:66:61:BF:73:32:2F:7B:19:43 Certificate issuer: /CN=23f3c964-aab2-4965-9f55-d270cc840a73 Certificate serial: 010D0C9F4328584F4976F9E033B30B5DD1F3D800 Authority key identifier: 3B:43:D9:DB:E1:64:AD:7E:55:75:B1:27:1E:19:FF:64:55:A0:42:F3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/23f3c964-aab2-4965-9f55-d270cc840a73.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/23f3c964-aab2-4965-9f55-d270cc840a73/0ea3fd91-deb2-3677-854f-64e931788b66.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 30265 IP address blocks: 23.184.248.0/24 maxlen: 24 66.208.84.0/22 maxlen: 24 2602:f86e::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/23f3c964-aab2-4965-9f55-d270cc840a73/23f3c964-aab2-4965-9f55-d270cc840a73.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/23f3c964-aab2-4965-9f55-d270cc840a73/23f3c964-aab2-4965-9f55-d270cc840a73.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/23f3c964-aab2-4965-9f55-d270cc840a73.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:76:f9:e0:33:b3:0b:5d:d1:f3:d8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23f3c964-aab2-4965-9f55-d270cc840a73 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=17df4cf8-6da3-43f0-ba08-dd801ae34713 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:6a:b4:27:8f:ec:6f:db:43:fd:4a:58:a8:e4: 27:db:e5:81:ec:64:4c:74:32:1d:1e:b0:15:34:98: 8b:3c:44:49:f3:26:af:7f:7f:74:2d:fe:9f:5e:df: 98:e1:96:3e:1d:23:e0:aa:ea:5a:64:93:8f:10:7d: a0:60:86:3b:a7:1d:96:8b:4c:07:3f:0b:c4:88:e7: 62:25:92:0c:35:b6:ac:6d:97:70:ca:aa:a0:c2:39: a7:7d:4e:63:ad:93:b5:b3:54:2c:66:b7:cf:2f:6c: b3:59:6f:14:cf:b6:fc:22:28:8c:03:96:8b:45:25: 8d:7d:36:e1:2f:c0:b3:a5:46:6a:eb:ff:03:e5:9a: b7:fc:aa:da:f8:db:1c:9a:65:f9:32:76:36:2f:17: 77:ce:b0:d5:fd:62:84:80:c4:d6:1d:dc:4a:69:ac: 55:59:ce:fb:bb:08:94:1b:b3:84:98:e5:d8:a5:21: df:32:65:01:84:77:9b:de:6c:0c:f6:14:eb:63:d4: 2c:1e:59:4f:b8:a1:e9:0d:15:98:71:70:0d:94:d9: 1e:03:45:93:e4:9b:f0:83:ee:23:dc:5c:72:11:a8: 5c:31:2e:5c:ea:6b:cf:e4:b1:77:71:75:89:b9:86: b3:46:40:22:40:f8:41:e3:7f:05:40:0f:7d:66:a3: fe:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:9C:57:50:DC:0B:A9:4E:DC:6C:93:66:61:BF:73:32:2F:7B:19:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/23f3c964-aab2-4965-9f55-d270cc840a73/0ea3fd91-deb2-3677-854f-64e931788b66.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/23f3c964-aab2-4965-9f55-d270cc840a73/23f3c964-aab2-4965-9f55-d270cc840a73.crl X509v3 Authority Key Identifier: keyid:3B:43:D9:DB:E1:64:AD:7E:55:75:B1:27:1E:19:FF:64:55:A0:42:F3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/23f3c964-aab2-4965-9f55-d270cc840a73.cer sbgp-ipAddrBlock: critical IPv4: 23.184.248.0/24 66.208.84.0/22 IPv6: 2602:f86e::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:d5:41:e8:62:99:7a:b9:2f:2a:7b:0a:d8:56:a3:ca:e3:55: 38:32:e3:02:2b:c8:09:de:39:9a:0b:e3:5e:2e:34:2b:bd:82: d2:fb:3f:16:21:dc:24:43:20:86:c0:f5:ba:11:cd:34:1a:b3: 65:a3:f4:cd:50:09:dc:70:a0:78:9b:ea:7a:4c:b8:db:53:ce: 2f:33:91:26:43:6c:2c:16:e4:33:3a:2f:22:c8:42:10:1c:80: d4:f7:ce:01:9d:86:1a:c6:af:a2:28:09:2b:89:97:c7:3f:0b: 77:73:93:89:a0:c7:23:ec:6b:00:e4:cd:fc:9d:e9:69:03:b7: a1:90:57:ae:b9:fd:bb:2d:ca:9b:ae:e8:5c:ee:a3:1b:00:95: 44:ed:64:70:06:37:46:ed:1b:01:c9:29:7d:eb:15:7a:8c:0f: 6d:0e:8c:59:2b:80:64:26:ca:97:a4:47:bf:4f:db:71:07:d1: df:19:31:16:e9:e7:1e:ee:c5:c9:c3:e4:d9:95:b7:09:85:47: 40:21:cb:d3:38:c6:7f:6b:d7:e5:09:84:0b:56:bd:13:cd:1b: 48:91:b5:88:31:a3:01:6a:db:9d:d4:df:4d:c8:6b:58:19:c8: d7:98:2d:3d:c4:14:54:eb:6c:04:dd:e7:d8:cb:8e:d0:a7:96: 25:38:13:84 -----BEGIN CERTIFICATE----- MIIGWTCCBUGgAwIBAgIUAQ0Mn0MoWE9JdvngM7MLXdHz2AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNmM2M5NjQtYWFiMi00OTY1LTlmNTUtZDI3MGNjODQw YTczMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MTdkZjRjZjgtNmRhMy00M2YwLWJhMDgtZGQ4MDFhZTM0NzEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApGq0J4/sb9tD/UpYqOQn2+WB7GRMdDIdHrAV NJiLPERJ8yavf390Lf6fXt+Y4ZY+HSPgqupaZJOPEH2gYIY7px2Wi0wHPwvEiOdi JZIMNbasbZdwyqqgwjmnfU5jrZO1s1QsZrfPL2yzWW8Uz7b8IiiMA5aLRSWNfTbh L8CzpUZq6/8D5Zq3/Kra+NscmmX5MnY2Lxd3zrDV/WKEgMTWHdxKaaxVWc77uwiU G7OEmOXYpSHfMmUBhHeb3mwM9hTrY9QsHllPuKHpDRWYcXANlNkeA0WT5Jvwg+4j 3FxyEahcMS5c6mvP5LF3cXWJuYazRkAiQPhB438FQA99ZqP+rwIDAQABo4IDazCC A2cwHQYDVR0OBBYEFI6cV1DcC6lO3GyTZmG/czIvexlDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8yM2Yz Yzk2NC1hYWIyLTQ5NjUtOWY1NS1kMjcwY2M4NDBhNzMvMGVhM2ZkOTEtZGViMi0z Njc3LTg1NGYtNjRlOTMxNzg4YjY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMjNmM2M5NjQtYWFiMi00OTY1LTlm NTUtZDI3MGNjODQwYTczLzIzZjNjOTY0LWFhYjItNDk2NS05ZjU1LWQyNzBjYzg0 MGE3My5jcmwwHwYDVR0jBBgwFoAUO0PZ2+FkrX5VdbEnHhn/ZFWgQvMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS8yM2YzYzk2NC1hYWIyLTQ5NjUtOWY1NS1kMjcw Y2M4NDBhNzMuY2VyMDUGCCsGAQUFBwEHAQH/BCYwJDASBAIAATAMAwQAF7j4AwQC QtBUMA4EAgACMAgDBgQmAvhuADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBC1UHoYpl6uS8qewrYVqPK41U4 MuMCK8gJ3jmaC+NeLjQrvYLS+z8WIdwkQyCGwPW6Ec00GrNlo/TNUAnccKB4m+p6 TLjbU84vM5EmQ2wsFuQzOi8iyEIQHIDU984BnYYaxq+iKAkriZfHPwt3c5OJoMcj 7GsA5M38nelpA7ehkFeuuf27Lcqbruhc7qMbAJVE7WRwBjdG7RsBySl96xV6jA9t DoxZK4BkJsqXpEe/T9txB9HfGTEW6ece7sXJw+TZlbcJhUdAIcvTOMZ/a9flCYQL Vr0TzRtIkbWIMaMBatud1N9NyGtYGcjXmC09xBRU62wE3efYy47Qp5YlOBOE -----END CERTIFICATE-----Generated at Mon Sep 28 14:27:48 2026 by rpki-client