$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b54409ec-efa1-4239-8321-5d6ff0ea596e/88b01f75-289b-3917-81b2-0639885fa215.roa File: 88b01f75-289b-3917-81b2-0639885fa215.roa (raw, json) Hash identifier: hKrjjYcvH2szZK2BvN5h5Mg9ZtJSuVFKAzgGSW23FzU= Subject key identifier: 83:D7:22:F2:FD:78:21:0D:92:4E:4D:E3:E6:8E:6B:5C:FB:D1:DE:22 Certificate issuer: /CN=b54409ec-efa1-4239-8321-5d6ff0ea596e Certificate serial: 010D0C9F4328584F4989F4A277A0739A69B86780 Authority key identifier: BB:C8:26:DF:56:C8:25:77:8C:03:3B:98:AB:BE:E7:A3:DB:16:8C:E8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b54409ec-efa1-4239-8321-5d6ff0ea596e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b54409ec-efa1-4239-8321-5d6ff0ea596e/88b01f75-289b-3917-81b2-0639885fa215.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 395367 IP address blocks: 23.137.60.0/24 maxlen: 24 2604:aa0::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b54409ec-efa1-4239-8321-5d6ff0ea596e/b54409ec-efa1-4239-8321-5d6ff0ea596e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b54409ec-efa1-4239-8321-5d6ff0ea596e/b54409ec-efa1-4239-8321-5d6ff0ea596e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b54409ec-efa1-4239-8321-5d6ff0ea596e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:89:f4:a2:77:a0:73:9a:69:b8:67:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b54409ec-efa1-4239-8321-5d6ff0ea596e Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=f9c5d008-1a70-44ba-9796-4f9130a9ba65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:f1:1c:8b:ec:81:2d:ec:b3:34:07:b2:50:e7: f3:a0:7a:aa:ff:35:41:65:e5:3a:e5:ea:f8:21:d5: 10:35:f0:40:0a:04:b2:a1:7f:59:b1:cb:47:1d:ca: 1d:0f:22:ee:57:a9:c6:ac:05:66:3c:a7:da:89:72: 78:62:8b:98:b9:0a:4d:be:af:aa:9f:d5:08:d2:e4: 4c:41:6d:12:a1:16:8f:c2:27:31:8c:5f:47:7e:f3: 24:9b:e1:7d:97:97:1d:66:ca:27:d5:98:cb:a9:82: 80:9b:8e:49:42:a2:b6:91:1f:79:93:40:bf:dc:36: c0:8f:cf:c7:e2:13:d6:1f:f1:63:52:60:3a:ae:6e: b2:70:cf:24:68:44:bb:b3:a3:20:cc:f5:83:9b:99: 39:36:2d:d7:61:fb:42:b8:59:68:9d:0b:98:78:ff: 7b:39:83:14:82:d0:6a:78:e3:b3:12:61:d3:1b:ce: a0:19:c3:48:98:1b:b6:27:3d:6a:62:7f:bf:5a:15: 89:ff:fe:ec:c5:70:2c:a9:eb:56:f5:1c:da:89:1e: 1d:c7:99:8b:83:99:8b:52:55:56:eb:fe:90:c8:ed: 7a:8a:64:d1:d6:0e:57:97:73:fb:df:e3:0a:e2:70: fc:5d:5e:8f:b4:5a:bd:b3:d0:6f:c7:60:54:97:1f: 84:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:D7:22:F2:FD:78:21:0D:92:4E:4D:E3:E6:8E:6B:5C:FB:D1:DE:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b54409ec-efa1-4239-8321-5d6ff0ea596e/88b01f75-289b-3917-81b2-0639885fa215.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b54409ec-efa1-4239-8321-5d6ff0ea596e/b54409ec-efa1-4239-8321-5d6ff0ea596e.crl X509v3 Authority Key Identifier: keyid:BB:C8:26:DF:56:C8:25:77:8C:03:3B:98:AB:BE:E7:A3:DB:16:8C:E8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b54409ec-efa1-4239-8321-5d6ff0ea596e.cer sbgp-ipAddrBlock: critical IPv4: 23.137.60.0/24 IPv6: 2604:aa0::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:c4:7c:6d:e6:e6:b7:83:be:12:d4:33:0f:23:04:52:6d:1b: 27:64:ec:30:e2:64:fd:7c:19:4b:bb:41:17:70:ba:b2:d9:0f: f3:4a:a6:88:f4:5d:98:56:d9:cd:17:87:de:c1:34:13:34:fb: 64:e2:ef:0c:92:38:24:b5:b4:f5:60:a6:24:b5:9e:48:c6:a6: 36:20:4b:d1:fb:b7:13:ef:fc:4c:58:3d:d7:32:d6:9c:f8:44: 48:7d:e6:e1:7a:01:22:80:4a:de:29:7c:e2:33:5c:6f:b0:6c: 30:ad:1d:9d:a2:fb:48:ff:95:d4:eb:a4:de:26:62:a7:ac:67: 3a:ec:05:52:91:31:5a:a2:0b:23:10:94:af:27:e8:b9:6c:bc: 92:22:ea:ad:80:d9:08:cd:b0:d3:1f:91:4d:ff:59:45:f7:77: e7:7f:52:e3:ee:5a:a5:78:d1:e1:27:58:d1:19:67:c0:f7:a0: b2:9e:f5:55:42:ea:90:b4:e4:0b:e3:17:25:c1:71:17:6b:90: be:25:61:84:45:95:00:2e:e4:2e:14:0e:1d:06:5b:48:5f:87: d2:a1:76:e0:65:e3:fc:c8:d6:39:5e:90:fa:55:f2:10:2d:d3: 38:da:f6:b5:cc:28:1b:32:db:23:fa:4b:f4:99:6d:68:45:41: 8e:4d:80:e6 -----BEGIN CERTIFICATE----- MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWE9JifSid6Bzmmm4Z4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjU0NDA5ZWMtZWZhMS00MjM5LTgzMjEtNWQ2ZmYwZWE1 OTZlMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZjljNWQwMDgtMWE3MC00NGJhLTk3OTYtNGY5MTMwYTliYTY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmvEci+yBLeyzNAeyUOfzoHqq/zVBZeU65er4 IdUQNfBACgSyoX9ZsctHHcodDyLuV6nGrAVmPKfaiXJ4YouYuQpNvq+qn9UI0uRM QW0SoRaPwicxjF9HfvMkm+F9l5cdZson1ZjLqYKAm45JQqK2kR95k0C/3DbAj8/H 4hPWH/FjUmA6rm6ycM8kaES7s6MgzPWDm5k5Ni3XYftCuFlonQuYeP97OYMUgtBq eOOzEmHTG86gGcNImBu2Jz1qYn+/WhWJ//7sxXAsqetW9RzaiR4dx5mLg5mLUlVW 6/6QyO16imTR1g5Xl3P73+MK4nD8XV6PtFq9s9Bvx2BUlx+EPwIDAQABo4IDZDCC A2AwHQYDVR0OBBYEFIPXIvL9eCENkk5N4+aOa1z70d4iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9iNTQ0 MDllYy1lZmExLTQyMzktODMyMS01ZDZmZjBlYTU5NmUvODhiMDFmNzUtMjg5Yi0z OTE3LTgxYjItMDYzOTg4NWZhMjE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYjU0NDA5ZWMtZWZhMS00MjM5LTgz MjEtNWQ2ZmYwZWE1OTZlL2I1NDQwOWVjLWVmYTEtNDIzOS04MzIxLTVkNmZmMGVh NTk2ZS5jcmwwHwYDVR0jBBgwFoAUu8gm31bIJXeMAzuYq77no9sWjOgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9iNTQ0MDllYy1lZmExLTQyMzktODMyMS01ZDZm ZjBlYTU5NmUuY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAF4k8MA0E AgACMAcDBQAmBAqgMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0 bWwwDQYJKoZIhvcNAQELBQADggEBAIzEfG3m5reDvhLUMw8jBFJtGydk7DDiZP18 GUu7QRdwurLZD/NKpoj0XZhW2c0Xh97BNBM0+2Ti7wySOCS1tPVgpiS1nkjGpjYg S9H7txPv/ExYPdcy1pz4REh95uF6ASKASt4pfOIzXG+wbDCtHZ2i+0j/ldTrpN4m YqesZzrsBVKRMVqiCyMQlK8n6LlsvJIi6q2A2QjNsNMfkU3/WUX3d+d/UuPuWqV4 0eEnWNEZZ8D3oLKe9VVC6pC05AvjFyXBcRdrkL4lYYRFlQAu5C4UDh0GW0hfh9Kh duBl4/zI1jlekPpV8hAt0zja9rXMKBsy2yP6S/SZbWhFQY5NgOY= -----END CERTIFICATE-----Generated at Sun Oct 4 18:39:17 2026 by rpki-client