$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d4fa172e-2779-4878-8bd3-1b92d7a18cea/c29da368-12a4-3190-8fb2-2391e3134074.roa File: c29da368-12a4-3190-8fb2-2391e3134074.roa (raw, json) Hash identifier: fJEe4/j1/jRG5gqeX0HmmRbRRU+g41nOET8EjXBsHEM= Subject key identifier: 19:0B:20:84:F4:A6:26:85:8C:C6:AA:83:B8:53:A0:7C:F0:1A:1D:EA Certificate issuer: /CN=d4fa172e-2779-4878-8bd3-1b92d7a18cea Certificate serial: 010D0C9F4328584F49747D09CE365C10CFAF2B80 Authority key identifier: 79:CD:4E:A1:93:4C:0F:C7:E9:3A:EE:E2:33:F1:FB:A9:13:3E:AF:7A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d4fa172e-2779-4878-8bd3-1b92d7a18cea.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d4fa172e-2779-4878-8bd3-1b92d7a18cea/c29da368-12a4-3190-8fb2-2391e3134074.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 395656 IP address blocks: 23.134.100.0/24 maxlen: 24 2602:f6ef::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d4fa172e-2779-4878-8bd3-1b92d7a18cea/d4fa172e-2779-4878-8bd3-1b92d7a18cea.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d4fa172e-2779-4878-8bd3-1b92d7a18cea/d4fa172e-2779-4878-8bd3-1b92d7a18cea.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d4fa172e-2779-4878-8bd3-1b92d7a18cea.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:7d:09:ce:36:5c:10:cf:af:2b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d4fa172e-2779-4878-8bd3-1b92d7a18cea Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=17ae724e-a534-4c32-b223-88d9833899d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:7c:c3:2c:f0:24:61:7f:47:02:ff:83:6b:c1: 5e:43:3a:50:1f:4d:5a:b2:7c:e9:11:9e:d2:73:7c: 7e:10:c3:51:2f:41:1a:44:78:28:bf:b6:68:65:e5: 24:6f:8b:6d:f4:3e:66:c4:06:db:8d:ea:35:7f:8b: c9:e3:09:ac:24:84:dd:6b:1b:66:25:86:10:2e:ae: a1:39:b0:c3:19:17:b9:b9:bd:70:3e:32:51:98:6c: 7d:2e:de:27:04:88:6c:05:2c:f9:0c:0c:16:27:3c: 5d:df:32:8d:ef:54:2e:c3:45:54:ee:60:3d:18:69: 95:66:1d:77:4f:0b:26:ea:3e:c6:93:cc:97:07:34: c5:ba:ae:7b:9d:1c:9d:22:0f:75:5c:46:90:6e:c2: 4b:2d:d9:3e:ae:20:36:61:2d:d0:04:7e:3b:2c:09: 39:a4:31:86:38:be:32:c2:c3:08:65:4d:2d:cd:21: 90:81:15:1f:ac:5e:fa:c4:a1:ef:01:df:ba:2c:0f: a0:b6:8b:4e:eb:26:8e:05:58:1d:e7:be:ac:25:8c: 1e:47:0b:ee:70:47:aa:4b:f0:b2:ad:3c:dd:7d:b2: 80:27:99:41:52:f8:62:7c:ef:d8:ea:92:29:70:4c: 25:58:ea:67:df:46:7d:36:c9:16:8b:19:c7:22:b6: c0:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:0B:20:84:F4:A6:26:85:8C:C6:AA:83:B8:53:A0:7C:F0:1A:1D:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d4fa172e-2779-4878-8bd3-1b92d7a18cea/c29da368-12a4-3190-8fb2-2391e3134074.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d4fa172e-2779-4878-8bd3-1b92d7a18cea/d4fa172e-2779-4878-8bd3-1b92d7a18cea.crl X509v3 Authority Key Identifier: keyid:79:CD:4E:A1:93:4C:0F:C7:E9:3A:EE:E2:33:F1:FB:A9:13:3E:AF:7A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/d4fa172e-2779-4878-8bd3-1b92d7a18cea.cer sbgp-ipAddrBlock: critical IPv4: 23.134.100.0/24 IPv6: 2602:f6ef::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:39:e4:4f:96:cf:3b:39:61:da:4c:12:af:52:f5:cb:df:d5: 0d:0a:a3:f8:52:0a:8c:7e:21:87:cc:55:ca:fd:7d:62:dc:6f: 62:7a:df:11:24:ac:e7:f0:d0:4d:5b:05:e8:e6:6d:83:dd:a1: d1:59:1e:dd:40:b2:7f:5e:c7:13:8f:2a:f2:50:62:85:12:fc: dd:97:02:23:ba:68:68:bf:71:b6:02:a1:1a:ad:f5:5c:81:ac: 95:7d:92:fa:4b:cf:b4:3d:99:c2:28:a1:da:09:9f:b5:74:79: 20:eb:cb:52:17:0c:a9:35:4f:c0:b1:e6:43:3c:50:fa:60:3e: ad:8c:b0:48:61:23:69:2a:5e:fa:e9:94:1e:32:0a:30:52:42: 31:55:fa:df:ef:2d:ad:09:c0:8e:aa:c1:db:27:db:f0:af:6d: b0:10:ea:14:d5:b5:d0:01:d1:99:ac:cd:94:e6:49:a7:72:3f: 8a:6f:31:19:d2:d2:c8:87:f4:7f:3c:22:8c:1f:b5:f2:1a:99: 18:2e:e5:02:33:fd:de:f5:4f:34:5c:18:67:16:f8:02:2a:4a: 36:e8:c7:07:74:4b:28:d4:e2:2f:25:03:c1:ed:b9:3a:39:38: b6:9c:23:77:7d:27:1b:48:c6:ff:0f:f4:b0:06:01:f5:97:9f: 03:fb:c6:47 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE9JdH0JzjZcEM+vK4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDRmYTE3MmUtMjc3OS00ODc4LThiZDMtMWI5MmQ3YTE4 Y2VhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MTdhZTcyNGUtYTUzNC00YzMyLWIyMjMtODhkOTgzMzg5OWQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA63zDLPAkYX9HAv+Da8FeQzpQH01asnzpEZ7S c3x+EMNRL0EaRHgov7ZoZeUkb4tt9D5mxAbbjeo1f4vJ4wmsJITdaxtmJYYQLq6h ObDDGRe5ub1wPjJRmGx9Lt4nBIhsBSz5DAwWJzxd3zKN71Quw0VU7mA9GGmVZh13 Twsm6j7Gk8yXBzTFuq57nRydIg91XEaQbsJLLdk+riA2YS3QBH47LAk5pDGGOL4y wsMIZU0tzSGQgRUfrF76xKHvAd+6LA+gtotO6yaOBVgd576sJYweRwvucEeqS/Cy rTzdfbKAJ5lBUvhifO/Y6pIpcEwlWOpn30Z9NskWixnHIrbAywIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFBkLIIT0piaFjMaqg7hToHzwGh3qMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9kNGZh MTcyZS0yNzc5LTQ4NzgtOGJkMy0xYjkyZDdhMThjZWEvYzI5ZGEzNjgtMTJhNC0z MTkwLThmYjItMjM5MWUzMTM0MDc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvZDRmYTE3MmUtMjc3OS00ODc4LThi ZDMtMWI5MmQ3YTE4Y2VhL2Q0ZmExNzJlLTI3NzktNDg3OC04YmQzLTFiOTJkN2Ex OGNlYS5jcmwwHwYDVR0jBBgwFoAUec1OoZNMD8fpOu7iM/H7qRM+r3owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9kNGZhMTcyZS0yNzc5LTQ4NzgtOGJkMy0xYjky ZDdhMThjZWEuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF4ZkMA4E AgACMAgDBgAmAvbvADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBdOeRPls87OWHaTBKvUvXL39UNCqP4UgqM fiGHzFXK/X1i3G9iet8RJKzn8NBNWwXo5m2D3aHRWR7dQLJ/XscTjyryUGKFEvzd lwIjumhov3G2AqEarfVcgayVfZL6S8+0PZnCKKHaCZ+1dHkg68tSFwypNU/AseZD PFD6YD6tjLBIYSNpKl766ZQeMgowUkIxVfrf7y2tCcCOqsHbJ9vwr22wEOoU1bXQ AdGZrM2U5kmncj+KbzEZ0tLIh/R/PCKMH7XyGpkYLuUCM/3e9U80XBhnFvgCKko2 6McHdEso1OIvJQPB7bk6OTi2nCN3fScbSMb/D/SwBgH1l58D+8ZH -----END CERTIFICATE-----Generated at Sat Sep 26 14:09:29 2026 by rpki-client