$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/221e0287-8ab4-430b-9f09-0c45fa8d7713/07cde65a-8315-3bb6-a153-68dd2ddfeb44.roa File: 07cde65a-8315-3bb6-a153-68dd2ddfeb44.roa (raw, json) Hash identifier: aWtYM6G44j6vQs6eXB7dvONHypu24VbCKN6alqTZLlE= Subject key identifier: 5A:3C:8C:58:42:B6:67:54:A5:56:06:F2:DE:38:AB:AC:32:7B:76:CA Certificate issuer: /CN=221e0287-8ab4-430b-9f09-0c45fa8d7713 Certificate serial: 010D0C9F4328584F549D4BA4EE67814AE9A58180 Authority key identifier: 1C:41:AB:05:6A:D1:71:0E:BC:C5:72:FD:CE:A1:81:DF:AE:DF:A7:7B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/221e0287-8ab4-430b-9f09-0c45fa8d7713.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/221e0287-8ab4-430b-9f09-0c45fa8d7713/07cde65a-8315-3bb6-a153-68dd2ddfeb44.roa Signing time: Tue 29 Sep 2026 01:00:12 +0000 ROA not before: Tue 29 Sep 2026 01:00:12 +0000 ROA not after: Mon 28 Dec 2026 02:00:12 +0000 asID: 398174 IP address blocks: 23.147.80.0/24 maxlen: 24 2602:802:7000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/221e0287-8ab4-430b-9f09-0c45fa8d7713/221e0287-8ab4-430b-9f09-0c45fa8d7713.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/221e0287-8ab4-430b-9f09-0c45fa8d7713/221e0287-8ab4-430b-9f09-0c45fa8d7713.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/221e0287-8ab4-430b-9f09-0c45fa8d7713.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:54:9d:4b:a4:ee:67:81:4a:e9:a5:81:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=221e0287-8ab4-430b-9f09-0c45fa8d7713 Validity Not Before: Sep 29 01:00:12 2026 GMT Not After : Dec 28 02:00:12 2026 GMT Subject: CN=67f7a5fc-8a5d-46b2-9331-5db66767c0a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:2f:a7:16:8d:96:ce:f4:ee:c6:90:74:d4:4b: 98:9d:8e:52:4a:30:f2:d2:b1:55:5d:39:ee:26:69: df:45:d6:e6:b5:0c:bd:ee:9a:7f:c0:56:8e:5e:0d: fe:fa:41:e6:9a:86:87:41:9d:68:13:e1:6e:4d:4e: 14:01:3d:79:ad:76:ef:79:58:de:30:39:da:8b:2a: 4f:b3:dc:93:2f:3b:bf:f0:d4:b6:fe:77:2f:2f:35: cb:ac:9d:14:c5:e2:2f:27:fd:ea:06:cc:d0:b2:2c: f7:ef:40:16:61:ea:f7:11:db:08:5a:79:5c:0e:bb: 88:f7:fd:eb:1c:f5:e9:d2:9d:32:41:33:98:16:ed: 3e:9c:82:39:f5:d8:c6:09:3e:9e:f0:d0:f3:74:cc: 50:eb:24:23:62:d2:7c:a7:bf:69:c4:ba:68:0f:a9: c8:a1:c0:42:56:b7:8b:ab:82:ba:25:42:e3:66:73: ce:a2:5f:4a:4a:a2:4f:e1:36:69:23:2c:a7:4b:f2: 71:c2:ff:63:51:34:9c:b7:2a:db:2b:80:dc:76:4d: 2d:42:1b:58:37:8b:5a:bc:86:2b:6d:88:e4:b7:c8: 32:9d:fd:5a:e5:cf:95:e8:7e:b7:57:4e:af:8b:bd: 77:4d:0a:a9:95:5d:d8:37:25:d7:2e:85:65:1c:b8: 2a:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:3C:8C:58:42:B6:67:54:A5:56:06:F2:DE:38:AB:AC:32:7B:76:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/221e0287-8ab4-430b-9f09-0c45fa8d7713/07cde65a-8315-3bb6-a153-68dd2ddfeb44.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/221e0287-8ab4-430b-9f09-0c45fa8d7713/221e0287-8ab4-430b-9f09-0c45fa8d7713.crl X509v3 Authority Key Identifier: keyid:1C:41:AB:05:6A:D1:71:0E:BC:C5:72:FD:CE:A1:81:DF:AE:DF:A7:7B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/221e0287-8ab4-430b-9f09-0c45fa8d7713.cer sbgp-ipAddrBlock: critical IPv4: 23.147.80.0/24 IPv6: 2602:802:7000::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:20:2a:88:43:b2:2f:16:16:38:91:d7:f1:ec:9b:80:63:1f: b3:78:49:60:bc:56:4f:4e:de:54:f3:a7:ab:cd:4e:72:1e:82: 6b:3f:dc:21:22:6e:b1:5e:28:03:7b:cf:5c:17:f1:ff:e2:0f: e0:14:4f:c6:84:8b:b2:3e:87:d6:cd:2a:ba:ae:f6:ab:e8:e8: 9f:d7:05:b5:5c:56:b0:e8:5f:9b:ef:1f:b4:9f:45:2a:e9:f6: c6:c3:ac:8a:db:30:bf:b4:c6:00:e2:1f:f5:ea:ae:18:66:ea: f6:30:c0:a2:f9:f5:68:e6:fc:d1:e0:fc:f3:e3:6a:1f:af:25: 4c:e6:f9:4f:a7:03:bf:05:37:d8:b0:92:0d:3a:10:b9:05:7d: 86:ac:a3:4f:df:56:14:73:aa:0a:15:9b:3f:6d:d2:11:c4:37: 57:5d:db:6e:30:69:25:bc:c5:4d:74:9b:d7:e3:b6:e0:e7:17: a3:0b:51:f4:30:23:97:8a:f0:46:d6:83:53:c7:89:c0:20:77: 6d:36:41:d7:a6:32:52:6b:22:24:e9:85:60:49:6d:96:fa:5b: ef:03:32:24:e1:65:2f:95:3e:08:28:9a:2c:9a:0c:5a:03:64: 9a:8d:7e:d9:16:2e:2f:78:ae:4a:06:fa:6d:20:55:94:4a:1b: 80:3f:10:3c -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE9UnUuk7meBSumlgYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjIxZTAyODctOGFiNC00MzBiLTlmMDktMGM0NWZhOGQ3 NzEzMB4XDTI2MDkyOTAxMDAxMloXDTI2MTIyODAyMDAxMlowLzEtMCsGA1UEAxMk NjdmN2E1ZmMtOGE1ZC00NmIyLTkzMzEtNWRiNjY3NjdjMGE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkS+nFo2WzvTuxpB01EuYnY5SSjDy0rFVXTnu JmnfRdbmtQy97pp/wFaOXg3++kHmmoaHQZ1oE+FuTU4UAT15rXbveVjeMDnaiypP s9yTLzu/8NS2/ncvLzXLrJ0UxeIvJ/3qBszQsiz370AWYer3EdsIWnlcDruI9/3r HPXp0p0yQTOYFu0+nII59djGCT6e8NDzdMxQ6yQjYtJ8p79pxLpoD6nIocBCVreL q4K6JULjZnPOol9KSqJP4TZpIyynS/Jxwv9jUTSctyrbK4Dcdk0tQhtYN4tavIYr bYjkt8gynf1a5c+V6H63V06vi713TQqplV3YNyXXLoVlHLgq6wIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFFo8jFhCtmdUpVYG8t44q6wye3bKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8yMjFl MDI4Ny04YWI0LTQzMGItOWYwOS0wYzQ1ZmE4ZDc3MTMvMDdjZGU2NWEtODMxNS0z YmI2LWExNTMtNjhkZDJkZGZlYjQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMjIxZTAyODctOGFiNC00MzBiLTlm MDktMGM0NWZhOGQ3NzEzLzIyMWUwMjg3LThhYjQtNDMwYi05ZjA5LTBjNDVmYThk NzcxMy5jcmwwHwYDVR0jBBgwFoAUHEGrBWrRcQ68xXL9zqGB367fp3swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8yMjFlMDI4Ny04YWI0LTQzMGItOWYwOS0wYzQ1 ZmE4ZDc3MTMuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF5NQMA4E AgACMAgDBgAmAggCcDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBUICqIQ7IvFhY4kdfx7JuAYx+zeElgvFZP Tt5U86erzU5yHoJrP9whIm6xXigDe89cF/H/4g/gFE/GhIuyPofWzSq6rvar6Oif 1wW1XFaw6F+b7x+0n0Uq6fbGw6yK2zC/tMYA4h/16q4YZur2MMCi+fVo5vzR4Pzz 42ofryVM5vlPpwO/BTfYsJINOhC5BX2GrKNP31YUc6oKFZs/bdIRxDdXXdtuMGkl vMVNdJvX47bg5xejC1H0MCOXivBG1oNTx4nAIHdtNkHXpjJSayIk6YVgSW2W+lvv AzIk4WUvlT4IKJosmgxaA2SajX7ZFi4veK5KBvptIFWUShuAPxA8 -----END CERTIFICATE-----Generated at Fri Oct 9 11:53:15 2026 by rpki-client