$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c089ce8e-f176-4dd2-a57a-8a48cf6e42a9/a9d91080-59f3-3b8d-8a52-2f8cb4fb823f.roa File: a9d91080-59f3-3b8d-8a52-2f8cb4fb823f.roa (raw, json) Hash identifier: Q2fCa6AnwrND/kLHK/6Vnkwqzkab34X63pImNAWB5hM= Subject key identifier: AC:66:87:0F:B6:0C:15:71:04:96:B0:2D:72:AC:9A:6B:70:3F:8A:C8 Certificate issuer: /CN=c089ce8e-f176-4dd2-a57a-8a48cf6e42a9 Certificate serial: 010D0C9F4328584FA6F8763BE7A867E682148EA0 Authority key identifier: F7:79:F6:9C:64:D5:B8:F9:04:81:D9:47:AF:A8:DD:0C:A6:45:A0:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c089ce8e-f176-4dd2-a57a-8a48cf6e42a9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c089ce8e-f176-4dd2-a57a-8a48cf6e42a9/a9d91080-59f3-3b8d-8a52-2f8cb4fb823f.roa Signing time: Wed 28 Oct 2026 13:00:13 +0000 ROA not before: Wed 28 Oct 2026 13:00:13 +0000 ROA not after: Tue 26 Jan 2027 14:00:13 +0000 asID: 153391 IP address blocks: 23.129.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c089ce8e-f176-4dd2-a57a-8a48cf6e42a9/c089ce8e-f176-4dd2-a57a-8a48cf6e42a9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c089ce8e-f176-4dd2-a57a-8a48cf6e42a9/c089ce8e-f176-4dd2-a57a-8a48cf6e42a9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c089ce8e-f176-4dd2-a57a-8a48cf6e42a9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Nov 2026 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:a6:f8:76:3b:e7:a8:67:e6:82:14:8e:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c089ce8e-f176-4dd2-a57a-8a48cf6e42a9 Validity Not Before: Oct 28 13:00:13 2026 GMT Not After : Jan 26 14:00:13 2027 GMT Subject: CN=71b39d08-82da-4eda-ac8d-b87e93d129ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:45:2f:c4:3e:81:51:2e:af:b5:4b:95:df:9e: 8e:9a:f3:1f:5a:4d:42:e4:1f:d2:06:70:e0:28:5f: 57:22:64:a1:aa:5a:34:fa:d9:c8:cd:f1:f8:aa:99: 7f:bd:2c:5f:41:ad:dd:1a:37:d8:df:e3:1e:60:9a: 62:a1:92:76:c9:8e:46:6b:d6:e6:61:10:b8:b1:00: 0e:ff:79:7f:3a:ce:cf:55:37:f1:1f:64:0b:43:01: 6a:8b:63:b9:a9:78:ff:e3:39:f7:c3:48:35:fd:74: e1:22:04:37:c7:9a:62:cd:bc:ac:6d:6e:69:75:aa: 1b:cc:35:aa:74:1e:b4:d9:5d:cd:b2:64:71:1c:a8: 8d:e0:42:94:cd:0f:e9:ba:f4:5d:6a:f9:2a:bb:4e: 5e:d4:85:4e:de:47:1d:a6:b7:e1:b9:18:42:f0:d9: 2d:d2:cc:df:aa:b4:d0:7e:86:22:cf:0a:5f:3c:be: a8:85:15:42:bc:40:36:f0:7e:6b:e4:b7:84:eb:3c: 4f:6e:0a:f9:8c:03:8f:52:07:65:e3:e8:5e:37:a1: ba:87:43:c3:cc:4b:1f:3c:65:c5:f9:24:cc:e7:4d: ab:58:94:7c:89:dc:3f:44:4a:39:65:7c:18:37:5c: 9d:7d:e1:c4:cf:49:d0:1e:a8:74:83:7a:52:4c:c7: 5e:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:66:87:0F:B6:0C:15:71:04:96:B0:2D:72:AC:9A:6B:70:3F:8A:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c089ce8e-f176-4dd2-a57a-8a48cf6e42a9/a9d91080-59f3-3b8d-8a52-2f8cb4fb823f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c089ce8e-f176-4dd2-a57a-8a48cf6e42a9/c089ce8e-f176-4dd2-a57a-8a48cf6e42a9.crl X509v3 Authority Key Identifier: keyid:F7:79:F6:9C:64:D5:B8:F9:04:81:D9:47:AF:A8:DD:0C:A6:45:A0:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c089ce8e-f176-4dd2-a57a-8a48cf6e42a9.cer sbgp-ipAddrBlock: critical IPv4: 23.129.172.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:8a:28:54:ee:69:38:a2:09:39:4e:64:78:ca:44:a8:55:b7: dc:48:c5:77:c3:92:14:2e:bb:49:72:b8:bb:14:39:3c:5c:31: 54:e9:dd:9b:31:02:c9:c3:e8:a8:15:3f:56:99:11:a0:71:cd: d9:65:b2:de:1c:77:34:2b:78:b4:23:7b:11:ee:3f:a7:3f:c7: 68:8c:54:c0:4f:38:8a:10:6f:f5:3b:0b:e4:31:0b:b8:01:3d: 67:69:8d:84:0b:7e:cc:0c:de:3e:26:61:b4:cd:35:7d:1c:c1: 67:e4:c0:74:8c:5c:f3:b8:cd:44:ba:85:3d:7a:87:a4:0b:8d: 9a:e4:f9:18:88:a1:45:94:66:c2:17:f7:54:f8:f6:7d:bb:ef: 02:3c:bd:3f:86:fd:57:55:53:85:3a:30:13:05:64:5d:02:ca: 30:51:cc:39:81:26:d7:17:dc:a2:c9:1d:99:37:f5:d2:d4:20: 6e:bb:c1:cc:85:29:c3:a2:81:1b:b7:92:ef:d8:2a:ce:52:c4: e2:ee:41:ed:89:50:81:14:d2:e3:77:88:39:72:bc:0a:1d:d7: bf:22:3c:d1:a1:4e:74:06:21:4e:fb:d1:14:7c:95:32:c4:a5: 03:d6:44:45:2c:1e:00:42:70:b0:53:9c:38:c5:ea:a3:59:a7: f7:eb:b3:bb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+m+HY756hn5oIUjqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzA4OWNlOGUtZjE3Ni00ZGQyLWE1N2EtOGE0OGNmNmU0 MmE5MB4XDTI2MTAyODEzMDAxM1oXDTI3MDEyNjE0MDAxM1owLzEtMCsGA1UEAxMk NzFiMzlkMDgtODJkYS00ZWRhLWFjOGQtYjg3ZTkzZDEyOWVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhEUvxD6BUS6vtUuV356OmvMfWk1C5B/SBnDg KF9XImShqlo0+tnIzfH4qpl/vSxfQa3dGjfY3+MeYJpioZJ2yY5Ga9bmYRC4sQAO /3l/Os7PVTfxH2QLQwFqi2O5qXj/4zn3w0g1/XThIgQ3x5pizbysbW5pdaobzDWq dB602V3NsmRxHKiN4EKUzQ/puvRdavkqu05e1IVO3kcdprfhuRhC8Nkt0szfqrTQ foYizwpfPL6ohRVCvEA28H5r5LeE6zxPbgr5jAOPUgdl4+heN6G6h0PDzEsfPGXF +STM502rWJR8idw/REo5ZXwYN1ydfeHEz0nQHqh0g3pSTMdecQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKxmhw+2DBVxBJawLXKsmmtwP4rIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9jMDg5 Y2U4ZS1mMTc2LTRkZDItYTU3YS04YTQ4Y2Y2ZTQyYTkvYTlkOTEwODAtNTlmMy0z YjhkLThhNTItMmY4Y2I0ZmI4MjNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYzA4OWNlOGUtZjE3Ni00ZGQyLWE1 N2EtOGE0OGNmNmU0MmE5L2MwODljZThlLWYxNzYtNGRkMi1hNTdhLThhNDhjZjZl NDJhOS5jcmwwHwYDVR0jBBgwFoAU93n2nGTVuPkEgdlHr6jdDKZFoHgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9jMDg5Y2U4ZS1mMTc2LTRkZDItYTU3YS04YTQ4 Y2Y2ZTQyYTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4GsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ6KKFTuaTiiCTlOZHjKRKhVt9xIxXfDkhQuu0lyuLsUOTxcMVTp3Zsx AsnD6KgVP1aZEaBxzdllst4cdzQreLQjexHuP6c/x2iMVMBPOIoQb/U7C+QxC7gB PWdpjYQLfswM3j4mYbTNNX0cwWfkwHSMXPO4zUS6hT16h6QLjZrk+RiIoUWUZsIX 91T49n277wI8vT+G/VdVU4U6MBMFZF0CyjBRzDmBJtcX3KLJHZk39dLUIG67wcyF KcOigRu3ku/YKs5SxOLuQe2JUIEU0uN3iDlyvAod178iPNGhTnQGIU770RR8lTLE pQPWREUsHgBCcLBTnDjF6qNZp/frs7s= -----END CERTIFICATE-----Generated at Sun Nov 15 09:57:19 2026 by rpki-client