$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1be7bcf5-0538-4a92-9aef-c460f15023b4/0bd8ae8c-926a-3326-b752-65b165f04694.roa File: 0bd8ae8c-926a-3326-b752-65b165f04694.roa (raw, json) Hash identifier: uRHKokeTLfIA+xrzpzf4TmKsZpPNH6GgnV7Jxc6LEi4= Subject key identifier: 84:04:F7:14:B4:C0:48:CA:07:DC:F4:67:77:12:1E:FB:DB:1C:C8:EA Certificate issuer: /CN=1be7bcf5-0538-4a92-9aef-c460f15023b4 Certificate serial: 010D0C9F4328584F4972B18DFE983B0F75D09700 Authority key identifier: 45:94:2A:B5:6A:9D:7E:36:8F:49:09:AC:A5:80:7B:74:DE:0D:B7:67 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1be7bcf5-0538-4a92-9aef-c460f15023b4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1be7bcf5-0538-4a92-9aef-c460f15023b4/0bd8ae8c-926a-3326-b752-65b165f04694.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 46365 IP address blocks: 23.152.56.0/24 maxlen: 24 198.135.179.0/24 maxlen: 24 2602:2cd::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1be7bcf5-0538-4a92-9aef-c460f15023b4/1be7bcf5-0538-4a92-9aef-c460f15023b4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1be7bcf5-0538-4a92-9aef-c460f15023b4/1be7bcf5-0538-4a92-9aef-c460f15023b4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1be7bcf5-0538-4a92-9aef-c460f15023b4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 Oct 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:72:b1:8d:fe:98:3b:0f:75:d0:97:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1be7bcf5-0538-4a92-9aef-c460f15023b4 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=16ab4ce1-e46b-4e73-bdf5-87fe6a1272f7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:62:56:ca:9f:c8:63:25:2d:4c:20:fc:4d:7f: f7:bf:70:43:d9:f1:78:ea:8d:42:82:2c:7c:94:63: e9:cb:61:05:ae:fa:09:f1:d5:14:92:4f:46:13:ac: 0a:e7:0d:46:03:27:45:04:1b:1c:d0:dc:8e:97:4d: df:75:01:78:af:5a:d4:3e:ea:f3:03:8a:e2:ac:6b: 33:af:38:aa:4f:3a:f3:bb:45:b2:d5:a5:ec:38:b8: 55:b3:5f:0d:30:7d:1b:ae:7a:89:56:db:26:1a:20: 29:96:ec:be:44:81:ed:b5:e4:1b:a2:fc:92:9c:ba: 98:1b:94:c9:df:d8:35:3a:26:01:fe:c2:c7:a2:7c: 0f:87:bc:6f:8e:b3:48:ea:3f:70:36:46:5f:6e:f0: e5:7b:bf:ca:66:16:f7:1b:27:84:08:a1:37:d2:ae: 9f:95:2c:78:46:eb:e1:db:35:0e:a7:c0:11:2f:d2: c7:d2:38:a5:b1:1c:5a:cf:13:6d:a5:2a:f3:46:3f: 22:0f:5f:33:cf:dc:60:32:65:3c:31:0a:b4:13:9f: c3:1b:cb:a6:87:0f:a9:a6:df:10:f4:8d:2f:66:f5: a9:8e:a9:6a:ee:ba:8e:96:ed:3f:bc:72:7f:f0:7f: 5a:9d:60:4b:cc:d0:8b:ed:48:9a:43:56:d2:52:7a: 5b:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:04:F7:14:B4:C0:48:CA:07:DC:F4:67:77:12:1E:FB:DB:1C:C8:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1be7bcf5-0538-4a92-9aef-c460f15023b4/0bd8ae8c-926a-3326-b752-65b165f04694.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1be7bcf5-0538-4a92-9aef-c460f15023b4/1be7bcf5-0538-4a92-9aef-c460f15023b4.crl X509v3 Authority Key Identifier: keyid:45:94:2A:B5:6A:9D:7E:36:8F:49:09:AC:A5:80:7B:74:DE:0D:B7:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1be7bcf5-0538-4a92-9aef-c460f15023b4.cer sbgp-ipAddrBlock: critical IPv4: 23.152.56.0/24 198.135.179.0/24 IPv6: 2602:2cd::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:f2:7e:7b:0a:f0:df:b0:05:ed:8c:a2:a2:e4:f6:14:b5:d8: 41:21:60:cb:16:f9:f9:d3:be:59:a5:f7:25:98:fe:e8:9b:48: 6a:55:c6:1c:58:0b:59:ca:da:0b:84:63:17:7c:4a:50:76:c9: 18:c7:60:19:70:ff:87:62:60:4e:25:3c:89:2c:13:95:35:11: 14:83:94:ea:d4:fa:3e:c8:b5:d5:3d:ac:92:58:36:ea:71:25: b8:4b:6f:a5:ce:f4:f7:4c:a9:34:26:7b:53:11:b9:7c:27:e0: ce:19:3c:d9:bf:36:b3:6f:8f:41:3c:9f:69:9f:7a:e9:78:50: ad:29:71:3a:5b:ba:36:3d:2a:79:91:87:1f:41:65:62:12:92: 93:a1:51:9c:c7:56:32:64:f8:bb:c1:4f:40:d3:02:e0:94:77: 4c:67:aa:cb:a9:64:9e:ff:4b:01:02:ff:e8:68:66:e8:51:08: d0:b9:1c:c6:de:80:4d:46:0a:0d:79:54:ab:43:97:0d:29:77: 6a:13:bc:ce:02:12:2e:e7:16:12:e3:02:77:34:ce:30:58:f8: af:03:60:0e:9c:45:ac:91:24:ff:2e:68:f7:bc:56:4f:fd:02: 38:8f:4a:8d:04:62:6e:54:17:d1:7f:ec:7b:82:05:47:2e:90: bc:63:65:f3 -----BEGIN CERTIFICATE----- MIIGWTCCBUGgAwIBAgIUAQ0Mn0MoWE9JcrGN/pg7D3XQlwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWJlN2JjZjUtMDUzOC00YTkyLTlhZWYtYzQ2MGYxNTAy M2I0MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MTZhYjRjZTEtZTQ2Yi00ZTczLWJkZjUtODdmZTZhMTI3MmY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlGJWyp/IYyUtTCD8TX/3v3BD2fF46o1Cgix8 lGPpy2EFrvoJ8dUUkk9GE6wK5w1GAydFBBsc0NyOl03fdQF4r1rUPurzA4rirGsz rziqTzrzu0Wy1aXsOLhVs18NMH0brnqJVtsmGiApluy+RIHtteQbovySnLqYG5TJ 39g1OiYB/sLHonwPh7xvjrNI6j9wNkZfbvDle7/KZhb3GyeECKE30q6flSx4Ruvh 2zUOp8ARL9LH0jilsRxazxNtpSrzRj8iD18zz9xgMmU8MQq0E5/DG8umhw+ppt8Q 9I0vZvWpjqlq7rqOlu0/vHJ/8H9anWBLzNCL7UiaQ1bSUnpbdwIDAQABo4IDazCC A2cwHQYDVR0OBBYEFIQE9xS0wEjKB9z0Z3cSHvvbHMjqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8xYmU3 YmNmNS0wNTM4LTRhOTItOWFlZi1jNDYwZjE1MDIzYjQvMGJkOGFlOGMtOTI2YS0z MzI2LWI3NTItNjViMTY1ZjA0Njk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMWJlN2JjZjUtMDUzOC00YTkyLTlh ZWYtYzQ2MGYxNTAyM2I0LzFiZTdiY2Y1LTA1MzgtNGE5Mi05YWVmLWM0NjBmMTUw MjNiNC5jcmwwHwYDVR0jBBgwFoAURZQqtWqdfjaPSQmspYB7dN4Nt2cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8xYmU3YmNmNS0wNTM4LTRhOTItOWFlZi1jNDYw ZjE1MDIzYjQuY2VyMDUGCCsGAQUFBwEHAQH/BCYwJDASBAIAATAMAwQAF5g4AwQA xoezMA4EAgACMAgDBgQmAgLNADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAE8n57CvDfsAXtjKKi5PYUtdhB IWDLFvn5075ZpfclmP7om0hqVcYcWAtZytoLhGMXfEpQdskYx2AZcP+HYmBOJTyJ LBOVNREUg5Tq1Po+yLXVPaySWDbqcSW4S2+lzvT3TKk0JntTEbl8J+DOGTzZvzaz b49BPJ9pn3rpeFCtKXE6W7o2PSp5kYcfQWViEpKToVGcx1YyZPi7wU9A0wLglHdM Z6rLqWSe/0sBAv/oaGboUQjQuRzG3oBNRgoNeVSrQ5cNKXdqE7zOAhIu5xYS4wJ3 NM4wWPivA2AOnEWskST/Lmj3vFZP/QI4j0qNBGJuVBfRf+x7ggVHLpC8Y2Xz -----END CERTIFICATE-----Generated at Wed Sep 30 20:10:16 2026 by rpki-client