$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/f6d3af20-aa3b-364a-bd4e-8767595f1004.roa File: f6d3af20-aa3b-364a-bd4e-8767595f1004.roa (raw, json) Hash identifier: 1uxzdo8jptm9h8aeVu3NHep05QbPin+Zn7tU0lhKNko= Subject key identifier: D1:3B:54:FB:43:59:DC:07:FA:8D:2F:39:84:16:DE:B1:98:E5:59:A6 Certificate issuer: /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Certificate serial: 010D0C9F4328584FD25C0932EADBDCE88DC95680 Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/f6d3af20-aa3b-364a-bd4e-8767595f1004.roa Signing time: Fri 13 Nov 2026 02:00:14 +0000 ROA not before: Fri 13 Nov 2026 02:00:14 +0000 ROA not after: Thu 11 Feb 2027 02:00:14 +0000 asID: 54858 IP address blocks: 23.252.48.0/20 maxlen: 29 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:d2:5c:09:32:ea:db:dc:e8:8d:c9:56:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989 Validity Not Before: Nov 13 02:00:14 2026 GMT Not After : Feb 11 02:00:14 2027 GMT Subject: CN=dbf30750-2ce9-4f5d-9398-c036573a5196 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:2d:f8:ef:db:32:da:75:66:29:09:9a:db:99: 38:10:5f:18:85:84:c1:c7:9a:e0:55:e3:94:84:7d: ca:63:73:d2:ff:f1:f2:c5:36:e5:51:30:f5:44:4d: 0c:d3:77:6b:62:e5:1e:ea:69:2b:58:75:8a:3e:c4: ed:ed:82:da:57:24:86:1f:8e:05:3c:be:58:8e:cf: c7:9c:da:83:1d:2e:28:41:df:55:b2:3c:2c:c7:8d: d0:f4:00:39:d9:d3:70:65:52:4f:6f:42:13:c0:de: 9b:32:82:1b:2b:fb:19:77:dd:82:30:80:57:e0:b1: 27:77:07:1a:cd:f9:de:94:39:91:30:54:56:b2:8b: 4f:18:44:13:0f:d2:65:81:19:68:f1:52:fb:9e:b0: 46:76:a2:c9:c9:fa:f5:b8:cd:b0:9c:58:92:50:7b: f2:f8:1d:d1:ae:b6:14:cb:bf:4f:9b:08:e6:13:6e: 6d:13:bd:c9:d6:71:3b:ac:5d:fe:32:70:97:1c:32: 20:b0:c1:98:c9:85:d4:c1:1f:53:6e:4e:8b:7d:c4: f2:4b:71:2a:1e:66:70:b9:d8:6e:84:a4:13:c5:f5: d6:56:9d:98:6d:48:1f:e0:04:3d:78:ac:8e:da:43: bf:c4:1c:4d:3e:0d:5c:49:df:60:08:62:ed:22:42: 14:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:3B:54:FB:43:59:DC:07:FA:8D:2F:39:84:16:DE:B1:98:E5:59:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/f6d3af20-aa3b-364a-bd4e-8767595f1004.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl X509v3 Authority Key Identifier: keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer sbgp-ipAddrBlock: critical IPv4: 23.252.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:ce:8d:50:aa:43:89:bf:05:a6:22:ce:1b:cc:49:e8:39:47: ee:e7:e1:02:6e:c8:44:5e:67:7f:59:53:64:e9:00:9c:9b:b6: b0:44:1d:0b:fc:57:ec:0c:0f:90:1b:49:52:09:6f:9e:47:ef: b5:89:69:b4:dc:96:5d:44:b8:74:d6:a6:ad:29:46:5b:c5:d5: 02:92:4a:1d:d0:d2:37:e0:e3:64:92:79:7c:30:be:40:57:a5: 9e:70:db:40:43:1e:42:79:cc:e8:9c:d1:80:ac:fa:33:d1:a6: 9b:42:31:32:ff:37:c5:eb:07:dd:e6:be:4f:1d:a4:b6:ba:38: 79:be:d8:d1:62:4d:9b:f1:ed:9e:cd:60:7f:d5:3e:d0:ab:43: a1:06:dc:0c:61:24:38:66:f6:98:56:f5:34:ec:00:f7:b6:21: ec:0f:b5:83:d6:50:4f:9a:6e:64:8b:73:66:0c:85:e5:b2:db: b5:d0:7c:f8:f9:34:38:86:17:20:a5:5f:18:f1:5c:19:c7:ec: 0c:50:e4:12:0b:5d:fc:28:01:99:26:c8:46:49:07:7b:0b:15: e6:25:c1:c5:6b:a4:d2:59:27:0b:60:aa:57:23:d8:cf:d1:6a: c3:b0:e6:9b:13:38:ca:29:01:7c:47:de:34:92:10:62:4d:ec: ee:26:20:2c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE/SXAky6tvc6I3JVoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk OTg5MB4XDTI2MTExMzAyMDAxNFoXDTI3MDIxMTAyMDAxNFowLzEtMCsGA1UEAxMk ZGJmMzA3NTAtMmNlOS00ZjVkLTkzOTgtYzAzNjU3M2E1MTk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjy3479sy2nVmKQma25k4EF8YhYTBx5rgVeOU hH3KY3PS//HyxTblUTD1RE0M03drYuUe6mkrWHWKPsTt7YLaVySGH44FPL5Yjs/H nNqDHS4oQd9Vsjwsx43Q9AA52dNwZVJPb0ITwN6bMoIbK/sZd92CMIBX4LEndwca zfnelDmRMFRWsotPGEQTD9JlgRlo8VL7nrBGdqLJyfr1uM2wnFiSUHvy+B3RrrYU y79PmwjmE25tE73J1nE7rF3+MnCXHDIgsMGYyYXUwR9Tbk6LfcTyS3EqHmZwudhu hKQTxfXWVp2YbUgf4AQ9eKyO2kO/xBxNPg1cSd9gCGLtIkIU7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNE7VPtDWdwH+o0vOYQW3rGY5VmmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvZjZkM2FmMjAtYWEzYi0z NjRhLWJkNGUtODc2NzU5NWYxMDA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2 MTdiZGQ5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEF/wwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABDOjVCqQ4m/BaYizhvMSeg5R+7n4QJuyEReZ39ZU2TpAJybtrBEHQv8 V+wMD5AbSVIJb55H77WJabTcll1EuHTWpq0pRlvF1QKSSh3Q0jfg42SSeXwwvkBX pZ5w20BDHkJ5zOic0YCs+jPRpptCMTL/N8XrB93mvk8dpLa6OHm+2NFiTZvx7Z7N YH/VPtCrQ6EG3AxhJDhm9phW9TTsAPe2IewPtYPWUE+abmSLc2YMheWy27XQfPj5 NDiGFyClXxjxXBnH7AxQ5BILXfwoAZkmyEZJB3sLFeYlwcVrpNJZJwtgqlcj2M/R asOw5psTOMopAXxH3jSSEGJN7O4mICw= -----END CERTIFICATE-----Generated at Sun Nov 15 15:05:32 2026 by rpki-client