$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0b35d1e4-863f-4e5d-8b1e-cda81c416971/4f62ed94-cb56-3676-93b3-049015d9490b.roa File: 4f62ed94-cb56-3676-93b3-049015d9490b.roa (raw, json) Hash identifier: lN4KcPHczFuioNjC2m4xUYunUWaoUxavRBhpOrCqJME= Subject key identifier: C3:FF:55:3B:76:38:95:01:D7:F7:A6:02:3E:0F:B0:E8:46:70:28:CE Certificate issuer: /CN=0b35d1e4-863f-4e5d-8b1e-cda81c416971 Certificate serial: 010D0C9F4328584F4974131AA4FCE5CD33A2EB00 Authority key identifier: E0:31:9F:31:68:22:28:34:85:A0:F3:9E:85:A7:6F:AA:E7:D9:28:C8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0b35d1e4-863f-4e5d-8b1e-cda81c416971.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0b35d1e4-863f-4e5d-8b1e-cda81c416971/4f62ed94-cb56-3676-93b3-049015d9490b.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 6939 IP address blocks: 23.171.48.0/24 maxlen: 24 172.111.40.0/22 maxlen: 22 2602:fcd7::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0b35d1e4-863f-4e5d-8b1e-cda81c416971/0b35d1e4-863f-4e5d-8b1e-cda81c416971.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0b35d1e4-863f-4e5d-8b1e-cda81c416971/0b35d1e4-863f-4e5d-8b1e-cda81c416971.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0b35d1e4-863f-4e5d-8b1e-cda81c416971.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:13:1a:a4:fc:e5:cd:33:a2:eb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b35d1e4-863f-4e5d-8b1e-cda81c416971 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=2a943980-fa95-4ca0-b15b-881b0e9d5776 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:03:04:9e:8b:8d:53:d9:19:c9:e2:f6:ff:b0: 5a:27:62:8e:77:d3:13:eb:df:dd:e8:07:fb:40:bf: 7b:4a:db:93:1e:0b:cf:f7:93:46:ff:a3:93:d4:c0: de:bc:24:ce:63:ae:71:2a:72:48:fb:ed:2d:1f:1c: 39:aa:ab:3d:d4:b6:72:85:ef:f4:d6:f7:62:95:6a: 56:d4:30:95:63:0e:ec:c1:2b:f1:fc:27:2e:aa:d7: 9f:28:7c:86:4e:fc:18:9a:7c:37:9a:81:07:e6:7f: c1:93:b8:4a:c3:2f:99:d8:d0:48:4b:54:98:e8:a0: b3:f1:5f:44:94:7a:d8:32:db:08:f2:0e:bd:94:77: 6c:0a:01:47:41:d6:6c:11:4e:1c:f6:7c:33:87:e4: e5:a7:e9:93:b5:b3:a2:6d:b3:61:48:9d:8e:7d:b5: 43:02:ac:cb:eb:4e:2b:25:31:f9:50:a0:95:50:18: c2:09:90:4b:13:09:8b:08:48:f3:61:5f:11:6d:35: 4e:26:8b:af:ec:1d:52:95:44:9d:f9:ae:91:89:2a: 12:0b:91:d3:78:c3:1d:f0:17:c9:32:6f:fb:c2:b3: 33:57:a6:49:37:5f:f4:58:45:06:69:36:05:0d:2d: 5a:3f:ce:7c:37:e4:c8:53:2a:cd:7a:b0:3b:d1:bf: 22:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:FF:55:3B:76:38:95:01:D7:F7:A6:02:3E:0F:B0:E8:46:70:28:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0b35d1e4-863f-4e5d-8b1e-cda81c416971/4f62ed94-cb56-3676-93b3-049015d9490b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0b35d1e4-863f-4e5d-8b1e-cda81c416971/0b35d1e4-863f-4e5d-8b1e-cda81c416971.crl X509v3 Authority Key Identifier: keyid:E0:31:9F:31:68:22:28:34:85:A0:F3:9E:85:A7:6F:AA:E7:D9:28:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0b35d1e4-863f-4e5d-8b1e-cda81c416971.cer sbgp-ipAddrBlock: critical IPv4: 23.171.48.0/24 172.111.40.0/22 IPv6: 2602:fcd7::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:08:15:c8:5e:34:13:d1:e3:95:ec:9b:c9:9c:34:c4:32:db: d7:6c:7a:87:e1:d1:96:e8:08:30:3a:93:1e:fd:7e:bd:2a:d6: 04:ab:1c:22:95:3c:6d:4d:a8:14:67:cc:ab:74:8f:30:7b:b2: e4:3c:99:25:36:50:be:c4:6e:35:e9:8a:94:5e:3a:02:15:13: a7:9d:26:1a:da:77:e5:a9:9b:4a:1e:fc:3c:ae:fb:87:9a:7b: e9:d2:93:59:3c:75:f9:04:28:84:83:26:5f:09:16:98:aa:d0: 30:6e:2a:96:3a:4b:c1:b4:cf:af:86:78:50:15:b9:cb:4e:06: 0c:ad:4f:fc:51:8f:09:7d:d9:64:03:e2:09:79:28:60:92:35: dc:e0:ce:7a:95:18:02:52:c0:20:7b:74:15:30:0c:ec:8b:23: 29:9e:53:2a:c4:bd:71:75:71:ba:2b:e4:99:ac:2f:f0:f3:6d: 17:33:42:85:18:f1:1d:48:20:be:0e:93:59:e9:f1:84:2b:96: 30:d6:56:e9:ce:5e:a1:d5:fa:52:95:29:18:0f:58:ec:38:d5: d0:db:5a:cd:bc:1d:ae:ce:a6:5b:27:42:49:c0:7a:29:49:12: e2:c1:51:0b:06:d4:9f:8a:9d:bd:0d:52:4d:b3:c3:f0:ce:88: 5e:0b:1c:84 -----BEGIN CERTIFICATE----- MIIGWTCCBUGgAwIBAgIUAQ0Mn0MoWE9JdBMapPzlzTOi6wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGIzNWQxZTQtODYzZi00ZTVkLThiMWUtY2RhODFjNDE2 OTcxMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MmE5NDM5ODAtZmE5NS00Y2EwLWIxNWItODgxYjBlOWQ1Nzc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjwMEnouNU9kZyeL2/7BaJ2KOd9MT69/d6Af7 QL97StuTHgvP95NG/6OT1MDevCTOY65xKnJI++0tHxw5qqs91LZyhe/01vdilWpW 1DCVYw7swSvx/CcuqtefKHyGTvwYmnw3moEH5n/Bk7hKwy+Z2NBIS1SY6KCz8V9E lHrYMtsI8g69lHdsCgFHQdZsEU4c9nwzh+Tlp+mTtbOibbNhSJ2OfbVDAqzL604r JTH5UKCVUBjCCZBLEwmLCEjzYV8RbTVOJouv7B1SlUSd+a6RiSoSC5HTeMMd8BfJ Mm/7wrMzV6ZJN1/0WEUGaTYFDS1aP858N+TIUyrNerA70b8igwIDAQABo4IDazCC A2cwHQYDVR0OBBYEFMP/VTt2OJUB1/emAj4PsOhGcCjOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8wYjM1 ZDFlNC04NjNmLTRlNWQtOGIxZS1jZGE4MWM0MTY5NzEvNGY2MmVkOTQtY2I1Ni0z Njc2LTkzYjMtMDQ5MDE1ZDk0OTBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMGIzNWQxZTQtODYzZi00ZTVkLThi MWUtY2RhODFjNDE2OTcxLzBiMzVkMWU0LTg2M2YtNGU1ZC04YjFlLWNkYTgxYzQx Njk3MS5jcmwwHwYDVR0jBBgwFoAU4DGfMWgiKDSFoPOehadvqufZKMgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8wYjM1ZDFlNC04NjNmLTRlNWQtOGIxZS1jZGE4 MWM0MTY5NzEuY2VyMDUGCCsGAQUFBwEHAQH/BCYwJDASBAIAATAMAwQAF6swAwQC rG8oMA4EAgACMAgDBgQmAvzXADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAUCBXIXjQT0eOV7JvJnDTEMtvX bHqH4dGW6AgwOpMe/X69KtYEqxwilTxtTagUZ8yrdI8we7LkPJklNlC+xG416YqU XjoCFROnnSYa2nflqZtKHvw8rvuHmnvp0pNZPHX5BCiEgyZfCRaYqtAwbiqWOkvB tM+vhnhQFbnLTgYMrU/8UY8JfdlkA+IJeShgkjXc4M56lRgCUsAge3QVMAzsiyMp nlMqxL1xdXG6K+SZrC/w820XM0KFGPEdSCC+DpNZ6fGEK5Yw1lbpzl6h1fpSlSkY D1jsONXQ21rNvB2uzqZbJ0JJwHopSRLiwVELBtSfip29DVJNs8PwzoheCxyE -----END CERTIFICATE-----Generated at Fri Sep 25 17:57:55 2026 by rpki-client