$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/4a84870b-2f96-3dc1-9fbd-3f22ea27c4b6.roa File: 4a84870b-2f96-3dc1-9fbd-3f22ea27c4b6.roa (raw, json) Hash identifier: YvrfaXJYwNoXvJGGTcla7xtX4eR+Azy0BeKAYbkBY5Y= Subject key identifier: 76:8E:05:6E:37:EB:1A:3C:B3:D7:1A:6A:22:A3:A2:94:B8:6C:E8:30 Certificate issuer: /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Certificate serial: 010D0C9F4328584F554D69FEA119AFE39C2E0C00 Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/4a84870b-2f96-3dc1-9fbd-3f22ea27c4b6.roa Signing time: Tue 29 Sep 2026 06:55:08 +0000 ROA not before: Tue 29 Sep 2026 06:55:08 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 20473 IP address blocks: 23.231.20.0/23 maxlen: 24 50.2.94.0/23 maxlen: 24 50.2.205.0/24 maxlen: 24 170.130.216.0/24 maxlen: 24 173.232.71.0/24 maxlen: 24 173.232.91.0/24 maxlen: 24 173.232.105.0/24 maxlen: 24 173.232.116.0/24 maxlen: 24 173.232.164.0/24 maxlen: 24 173.232.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:55:4d:69:fe:a1:19:af:e3:9c:2e:0c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Validity Not Before: Sep 29 06:55:08 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=93b65fde-bbe6-4dac-a68b-9afa1d4296bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:8d:03:f0:b4:f4:a0:c3:68:11:d1:2f:79:79: 87:01:9d:a7:c7:ff:9f:4b:86:07:f1:ef:68:4a:4b: 8b:20:81:14:da:97:85:c0:7c:c2:a5:ba:9f:9a:0c: d6:1d:5e:b6:ff:49:b9:79:d2:19:ac:19:c6:40:3f: 43:43:b9:bd:68:49:e6:91:e3:00:a1:b2:da:ab:75: a1:95:9c:4e:26:f7:fd:f8:04:30:3e:d6:6e:60:e8: f6:67:bf:9e:5b:fb:4b:a2:f5:cd:a0:16:84:45:a6: e7:7a:be:c1:eb:8b:74:d3:da:b9:b8:89:3b:b8:8f: cd:e0:f0:f0:06:3d:fc:73:5b:d9:78:71:1d:ed:dd: a2:6e:90:8e:d3:9a:c9:67:a5:2f:c8:ed:a5:a2:c7: c4:ff:5a:5f:5a:54:01:6c:99:f6:2a:27:32:23:d4: 16:6c:d3:f4:cd:f1:46:bc:bc:19:44:8a:03:cf:ba: 19:77:49:5d:fe:dc:00:4a:e7:ef:20:a1:b9:0c:bf: 93:81:cf:26:f9:50:43:59:67:da:b5:7d:a7:d6:1b: 4f:75:75:b8:09:06:73:7d:5d:5d:2d:24:64:75:56: f6:be:c5:38:0f:82:7f:4e:26:7e:ec:17:7b:d3:68: 86:c0:a9:5c:e4:0a:89:15:d4:68:7e:fc:8a:97:34: 64:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:8E:05:6E:37:EB:1A:3C:B3:D7:1A:6A:22:A3:A2:94:B8:6C:E8:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/4a84870b-2f96-3dc1-9fbd-3f22ea27c4b6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl X509v3 Authority Key Identifier: keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer sbgp-ipAddrBlock: critical IPv4: 23.231.20.0/23 50.2.94.0/23 50.2.205.0/24 170.130.216.0/24 173.232.71.0/24 173.232.91.0/24 173.232.105.0/24 173.232.116.0/24 173.232.164.0/24 173.232.231.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:4e:15:e3:07:4e:8a:b3:92:1a:fe:63:6c:b4:e7:fd:3e:52: d5:2e:94:d7:86:f9:29:34:12:fa:5f:e9:1d:10:3f:40:96:ce: bf:2e:db:fd:d1:e6:42:26:7a:4d:c9:e6:c0:40:08:9e:1a:54: 33:8f:0a:88:07:16:9c:de:0d:08:04:77:9c:31:21:c9:44:9d: 7a:c7:1a:1c:73:df:f8:d4:04:ea:48:13:90:e1:ed:71:d7:fd: b2:b6:dc:c8:48:21:aa:ed:a2:9c:fc:d3:ae:ed:13:20:62:ba: 31:c1:1f:c9:1e:2b:8b:c9:ce:a1:c9:9c:2f:d9:6e:1b:29:81: eb:e4:58:14:51:ac:bb:f1:06:3f:f4:bf:2e:24:d9:92:72:30: c7:b9:2a:ed:d5:b5:69:9d:88:db:c2:27:90:58:ff:ca:d2:04: 2b:af:00:cc:d4:37:67:d4:05:ea:a2:25:50:c6:7f:db:ee:8b: a3:fd:27:ff:32:0e:00:e5:90:e9:7b:7e:94:32:16:cb:24:7a: f3:cf:bd:46:7a:6e:a4:f9:52:66:a6:cc:0b:19:cc:04:4a:6e: 52:57:82:6b:eb:92:41:e7:a9:b3:25:fa:ea:9b:2c:29:95:55: d3:59:4e:9c:c5:2c:34:d5:5b:ec:91:c8:03:5a:ef:5d:27:9b: 0d:21:b0:aa -----BEGIN CERTIFICATE----- MIIGeTCCBWGgAwIBAgIUAQ0Mn0MoWE9VTWn+oRmv45wuDAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZWYxMmUtODk1My00MzgwLWIxNmQtMjhiYTJhYTE1 YzE3MB4XDTI2MDkyOTA2NTUwOFoXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk OTNiNjVmZGUtYmJlNi00ZGFjLWE2OGItOWFmYTFkNDI5NmJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA740D8LT0oMNoEdEveXmHAZ2nx/+fS4YH8e9o SkuLIIEU2peFwHzCpbqfmgzWHV62/0m5edIZrBnGQD9DQ7m9aEnmkeMAobLaq3Wh lZxOJvf9+AQwPtZuYOj2Z7+eW/tLovXNoBaERabner7B64t009q5uIk7uI/N4PDw Bj38c1vZeHEd7d2ibpCO05rJZ6UvyO2losfE/1pfWlQBbJn2KicyI9QWbNP0zfFG vLwZRIoDz7oZd0ld/twASufvIKG5DL+Tgc8m+VBDWWfatX2n1htPdXW4CQZzfV1d LSRkdVb2vsU4D4J/TiZ+7Bd702iGwKlc5AqJFdRofvyKlzRkvwIDAQABo4IDizCC A4cwHQYDVR0OBBYEFHaOBW436xo8s9caaiKjopS4bOgwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhl ZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJhMmFhMTVjMTcvNGE4NDg3MGItMmY5Ni0z ZGMxLTlmYmQtM2YyMmVhMjdjNGI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y4ZWYxMmUtODk1My00MzgwLWIx NmQtMjhiYTJhYTE1YzE3LzNmOGVmMTJlLTg5NTMtNDM4MC1iMTZkLTI4YmEyYWEx NWMxNy5jcmwwHwYDVR0jBBgwFoAURmDx/IALEkbguuKi0tarLtFQVHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhlZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJh MmFhMTVjMTcuY2VyMFUGCCsGAQUFBwEHAQH/BEYwRDBCBAIAATA8AwQBF+cUAwQB MgJeAwQAMgLNAwQAqoLYAwQArehHAwQArehbAwQArehpAwQAreh0AwQAreikAwQA rejnMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAEJOFeMHToqzkhr+Y2y05/0+UtUulNeG+Sk0Evpf6R0QP0CW zr8u2/3R5kImek3J5sBACJ4aVDOPCogHFpzeDQgEd5wxIclEnXrHGhxz3/jUBOpI E5Dh7XHX/bK23MhIIartopz8067tEyBiujHBH8keK4vJzqHJnC/ZbhspgevkWBRR rLvxBj/0vy4k2ZJyMMe5Ku3VtWmdiNvCJ5BY/8rSBCuvAMzUN2fUBeqiJVDGf9vu i6P9J/8yDgDlkOl7fpQyFsskevPPvUZ6bqT5UmamzAsZzARKblJXgmvrkkHnqbMl +uqbLCmVVdNZTpzFLDTVW+yRyANa710nmw0hsKo= -----END CERTIFICATE-----Generated at Sat Oct 3 17:44:38 2026 by rpki-client