$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/81cd9c97-5b08-4e7d-aed6-1f599a35bd4a/7dc9f381-556f-3234-ab22-8ad7b4242933.roa File: 7dc9f381-556f-3234-ab22-8ad7b4242933.roa (raw, json) Hash identifier: S2iKORaowYOUrFL+OslHsR3YfA5I4v3Nw2mvC3m2Hi8= Subject key identifier: 53:91:94:47:FD:2D:CA:4E:95:97:CE:02:25:91:6E:0C:D0:28:85:4A Certificate issuer: /CN=81cd9c97-5b08-4e7d-aed6-1f599a35bd4a Certificate serial: 010D0C9F4328584F497646E316A9B2990FB3C080 Authority key identifier: 3F:C4:B6:12:11:14:13:C8:08:71:22:8A:AE:71:18:56:92:9C:DB:43 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/81cd9c97-5b08-4e7d-aed6-1f599a35bd4a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/81cd9c97-5b08-4e7d-aed6-1f599a35bd4a/7dc9f381-556f-3234-ab22-8ad7b4242933.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 27602 IP address blocks: 23.249.171.0/24 maxlen: 24 63.246.134.0/24 maxlen: 24 209.209.96.0/22 maxlen: 24 2604:f3c0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/81cd9c97-5b08-4e7d-aed6-1f599a35bd4a/81cd9c97-5b08-4e7d-aed6-1f599a35bd4a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/81cd9c97-5b08-4e7d-aed6-1f599a35bd4a/81cd9c97-5b08-4e7d-aed6-1f599a35bd4a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/81cd9c97-5b08-4e7d-aed6-1f599a35bd4a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:76:46:e3:16:a9:b2:99:0f:b3:c0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=81cd9c97-5b08-4e7d-aed6-1f599a35bd4a Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=430c1591-996b-411a-82c5-9f0a07ad4c25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:da:d9:80:57:42:e8:12:51:a6:a6:71:a4:31: 86:75:d9:fc:ff:57:b8:6e:d2:83:8e:b0:04:8f:76: dd:50:11:8f:7a:d6:03:06:e6:e5:49:ba:19:7b:92: 4b:3a:9c:06:ca:f3:11:4e:3e:d0:10:10:ef:d0:e1: b1:44:a4:f4:4a:49:ce:99:92:44:c6:8d:cc:4b:eb: 01:51:d1:d2:93:3a:89:44:64:bf:f1:f7:81:2d:95: dd:f0:dd:d7:ea:a4:33:fb:0d:50:e8:7b:70:aa:a0: 93:11:94:a3:49:32:3f:f2:5b:4e:45:9a:ca:dd:66: e3:42:ad:8e:fa:1a:a7:7d:f9:a2:02:63:0f:3e:ad: 26:ed:1a:e4:c3:f4:50:8a:00:df:45:f0:ed:2d:8e: f3:fe:98:f5:ea:c1:68:45:74:6a:fb:af:ff:be:a0: ce:86:00:6b:f4:46:1b:79:5e:66:f0:46:b0:42:c0: 17:02:ef:c3:fe:b9:19:78:88:34:ee:a4:fb:a9:a4: 31:f6:8b:75:75:7f:c4:b5:38:72:01:52:bf:85:0b: 4f:d6:61:c3:ec:ae:27:b8:36:49:a7:28:ce:d0:0b: ef:56:25:2a:5b:20:19:b6:08:c9:1f:f6:af:70:6e: af:1c:cb:12:ef:dc:16:ce:2f:5f:da:7c:e6:f2:00: 91:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:91:94:47:FD:2D:CA:4E:95:97:CE:02:25:91:6E:0C:D0:28:85:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/81cd9c97-5b08-4e7d-aed6-1f599a35bd4a/7dc9f381-556f-3234-ab22-8ad7b4242933.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/81cd9c97-5b08-4e7d-aed6-1f599a35bd4a/81cd9c97-5b08-4e7d-aed6-1f599a35bd4a.crl X509v3 Authority Key Identifier: keyid:3F:C4:B6:12:11:14:13:C8:08:71:22:8A:AE:71:18:56:92:9C:DB:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/81cd9c97-5b08-4e7d-aed6-1f599a35bd4a.cer sbgp-ipAddrBlock: critical IPv4: 23.249.171.0/24 63.246.134.0/24 209.209.96.0/22 IPv6: 2604:f3c0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:b3:2b:cc:7a:d7:28:c8:90:c9:02:72:46:c0:a4:3a:8d:d2: a9:d3:83:55:e8:37:3d:1a:99:fe:ba:3f:70:ac:5f:0c:72:6d: 03:f2:3e:3a:a1:db:c9:4d:2a:e1:4d:37:98:3a:97:10:aa:49: e3:83:8a:29:e2:1d:de:62:c3:0b:c2:c9:10:a1:16:0c:2f:14: 09:1d:e8:84:20:30:4c:91:34:56:ca:61:19:62:1e:ac:dd:fb: bc:e9:c3:98:ba:25:76:c5:b7:85:5f:a5:ff:4a:7e:26:99:3d: c2:53:35:4f:d3:7e:0c:7a:9c:d5:d1:7e:2f:21:cc:80:42:05: 7c:3f:78:4b:06:80:7a:1e:67:ff:e7:e5:dc:93:8e:ec:d0:47: 7e:24:78:02:7f:27:ca:d4:f0:4a:ce:f3:ec:2b:c4:53:47:72: a6:1b:31:6d:87:f2:4e:30:e6:83:b2:80:4f:de:3d:94:99:1c: 3e:ab:a1:3e:bd:a1:f0:1e:37:90:46:1d:2f:0a:cb:71:ab:3c: d6:cb:4b:3f:cf:b0:2b:9f:18:a1:2c:72:92:41:5f:87:19:13: e9:92:71:a7:e4:2d:48:67:87:71:08:fd:cc:c2:1e:b9:e9:18: 14:e2:2e:81:63:c9:bd:ee:b5:ea:32:95:a4:a8:1f:9f:b0:2d: bd:1e:e7:fc -----BEGIN CERTIFICATE----- MIIGXjCCBUagAwIBAgIUAQ0Mn0MoWE9JdkbjFqmymQ+zwIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODFjZDljOTctNWIwOC00ZTdkLWFlZDYtMWY1OTlhMzVi ZDRhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NDMwYzE1OTEtOTk2Yi00MTFhLTgyYzUtOWYwYTA3YWQ0YzI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsdrZgFdC6BJRpqZxpDGGddn8/1e4btKDjrAE j3bdUBGPetYDBublSboZe5JLOpwGyvMRTj7QEBDv0OGxRKT0SknOmZJExo3MS+sB UdHSkzqJRGS/8feBLZXd8N3X6qQz+w1Q6HtwqqCTEZSjSTI/8ltORZrK3WbjQq2O +hqnffmiAmMPPq0m7Rrkw/RQigDfRfDtLY7z/pj16sFoRXRq+6//vqDOhgBr9EYb eV5m8EawQsAXAu/D/rkZeIg07qT7qaQx9ot1dX/EtThyAVK/hQtP1mHD7K4nuDZJ pyjO0AvvViUqWyAZtgjJH/avcG6vHMsS79wWzi9f2nzm8gCRiQIDAQABo4IDcDCC A2wwHQYDVR0OBBYEFFORlEf9LcpOlZfOAiWRbgzQKIVKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84MWNk OWM5Ny01YjA4LTRlN2QtYWVkNi0xZjU5OWEzNWJkNGEvN2RjOWYzODEtNTU2Zi0z MjM0LWFiMjItOGFkN2I0MjQyOTMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvODFjZDljOTctNWIwOC00ZTdkLWFl ZDYtMWY1OTlhMzViZDRhLzgxY2Q5Yzk3LTViMDgtNGU3ZC1hZWQ2LTFmNTk5YTM1 YmQ0YS5jcmwwHwYDVR0jBBgwFoAUP8S2EhEUE8gIcSKKrnEYVpKc20MwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy84MWNkOWM5Ny01YjA4LTRlN2QtYWVkNi0xZjU5 OWEzNWJkNGEuY2VyMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQAF/mrAwQA P/aGAwQC0dFgMA0EAgACMAcDBQAmBPPAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBADizK8x61yjIkMkCckbA pDqN0qnTg1XoNz0amf66P3CsXwxybQPyPjqh28lNKuFNN5g6lxCqSeODiiniHd5i wwvCyRChFgwvFAkd6IQgMEyRNFbKYRliHqzd+7zpw5i6JXbFt4Vfpf9KfiaZPcJT NU/Tfgx6nNXRfi8hzIBCBXw/eEsGgHoeZ//n5dyTjuzQR34keAJ/J8rU8ErO8+wr xFNHcqYbMW2H8k4w5oOygE/ePZSZHD6roT69ofAeN5BGHS8Ky3GrPNbLSz/PsCuf GKEscpJBX4cZE+mScafkLUhnh3EI/czCHrnpGBTiLoFjyb3uteoylaSoH5+wLb0e 5/w= -----END CERTIFICATE-----Generated at Wed Oct 7 22:42:55 2026 by rpki-client