$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3b4a441f-5d0b-4813-836e-2aefd54b0ca1/10ce69d0-e9f7-39e7-b7c7-889e71bd1973.roa File: 10ce69d0-e9f7-39e7-b7c7-889e71bd1973.roa (raw, json) Hash identifier: yRQDVgED45TpxY6E3jPfsx6Zosxetc6OaRDacH2jcgs= Subject key identifier: 65:62:BF:1C:50:0B:96:DB:6D:49:57:81:2C:A0:18:79:79:3F:4D:C6 Certificate issuer: /CN=3b4a441f-5d0b-4813-836e-2aefd54b0ca1 Certificate serial: 010D0C9F4328584F498BFFA9A14F59C5C8939200 Authority key identifier: 85:34:EB:7B:3B:7C:EB:37:2E:52:AB:90:8E:9F:CB:FD:3E:0A:16:9F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3b4a441f-5d0b-4813-836e-2aefd54b0ca1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3b4a441f-5d0b-4813-836e-2aefd54b0ca1/10ce69d0-e9f7-39e7-b7c7-889e71bd1973.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 211686 IP address blocks: 23.131.252.0/24 maxlen: 24 2602:f744::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3b4a441f-5d0b-4813-836e-2aefd54b0ca1/3b4a441f-5d0b-4813-836e-2aefd54b0ca1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3b4a441f-5d0b-4813-836e-2aefd54b0ca1/3b4a441f-5d0b-4813-836e-2aefd54b0ca1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3b4a441f-5d0b-4813-836e-2aefd54b0ca1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:8b:ff:a9:a1:4f:59:c5:c8:93:92:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b4a441f-5d0b-4813-836e-2aefd54b0ca1 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=6ef57d40-9a62-4051-b277-c485a71735ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:dd:e0:a0:2c:4e:71:ff:cb:22:8d:53:3e:2b: 65:e7:c1:c6:eb:b3:36:0f:3a:17:9f:b5:0f:03:3c: 95:27:27:4f:15:9e:e2:a2:bf:d3:c3:4e:7a:af:95: 60:dc:f9:a1:0d:a7:49:20:43:0b:63:42:65:26:36: d5:6b:0c:70:19:b2:c0:80:a8:d5:0b:36:bc:08:82: f2:60:0d:48:03:c2:75:ec:1d:90:27:5c:c6:1d:32: ee:3d:4e:24:9f:51:93:14:bf:14:13:48:ee:9f:1f: c7:42:39:72:5f:1f:91:3d:81:47:37:4b:13:6d:ce: a8:0d:68:ec:19:e3:21:0b:75:ae:0b:23:12:0a:25: 6b:22:fd:47:06:74:e4:e6:21:73:e1:14:b3:d2:e1: 6b:06:d3:f5:3a:a9:0f:57:ba:c2:9e:2e:d8:d7:24: d0:bf:5d:52:78:66:b2:4c:b5:62:11:43:e1:05:50: d7:e1:24:72:5d:16:bb:af:8c:d6:ab:9c:a9:8b:75: f8:07:d8:91:87:ce:86:f7:bf:78:f1:c6:4c:32:cf: e5:c4:fc:62:75:89:50:1b:22:d8:84:79:a9:88:d9: e2:41:95:85:e2:3c:90:db:f8:c6:f4:20:29:21:38: a2:ad:27:f2:a2:aa:4d:91:8c:68:d9:e0:19:fb:89: 98:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:62:BF:1C:50:0B:96:DB:6D:49:57:81:2C:A0:18:79:79:3F:4D:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3b4a441f-5d0b-4813-836e-2aefd54b0ca1/10ce69d0-e9f7-39e7-b7c7-889e71bd1973.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3b4a441f-5d0b-4813-836e-2aefd54b0ca1/3b4a441f-5d0b-4813-836e-2aefd54b0ca1.crl X509v3 Authority Key Identifier: keyid:85:34:EB:7B:3B:7C:EB:37:2E:52:AB:90:8E:9F:CB:FD:3E:0A:16:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3b4a441f-5d0b-4813-836e-2aefd54b0ca1.cer sbgp-ipAddrBlock: critical IPv4: 23.131.252.0/24 IPv6: 2602:f744::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:01:22:61:d7:27:63:24:52:ba:8b:38:6e:33:61:a2:41:61: d7:2f:2e:1b:4c:2f:34:01:70:7c:9a:72:76:aa:7f:0b:53:03: 78:fa:c8:de:67:67:ba:50:63:f9:59:80:6d:05:4f:20:6e:fd: 9e:e4:94:07:98:67:94:90:ad:d8:fa:52:fb:b0:19:ef:c3:bb: 0e:6e:23:59:04:8b:de:c5:9f:49:c7:71:c0:40:46:fd:8c:ed: 86:48:4b:36:36:a3:58:50:65:f8:e3:24:e9:b4:cd:e0:c7:74: f3:30:95:ac:36:bc:4a:ba:41:ea:80:71:b1:d6:1b:e5:e9:51: 47:32:62:8e:72:8a:3d:3d:d8:48:1d:db:2a:83:91:df:69:e2: 9b:a7:b0:f8:83:66:11:2c:77:d6:48:e4:3b:e8:dd:be:ed:30: d2:1b:41:35:01:c7:94:c9:d5:bc:23:aa:e0:41:c4:02:d4:99: 87:18:f4:df:bd:80:ac:8f:22:75:f5:3c:cd:2b:02:37:7d:90: 6f:6e:54:a5:34:78:d2:7a:ce:c4:c9:a0:f3:c7:09:16:db:66: 28:3a:0c:c2:aa:dd:9b:26:05:1a:88:a7:e9:cd:86:a7:b0:9f: cf:0d:6b:2e:7e:67:d2:89:11:ae:2f:4d:46:5f:f5:bb:fc:1f: a1:a6:82:5a -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE9Ji/+poU9ZxciTkgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2I0YTQ0MWYtNWQwYi00ODEzLTgzNmUtMmFlZmQ1NGIw Y2ExMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NmVmNTdkNDAtOWE2Mi00MDUxLWIyNzctYzQ4NWE3MTczNWVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmN3goCxOcf/LIo1TPitl58HG67M2DzoXn7UP AzyVJydPFZ7ior/Tw056r5Vg3PmhDadJIEMLY0JlJjbVawxwGbLAgKjVCza8CILy YA1IA8J17B2QJ1zGHTLuPU4kn1GTFL8UE0junx/HQjlyXx+RPYFHN0sTbc6oDWjs GeMhC3WuCyMSCiVrIv1HBnTk5iFz4RSz0uFrBtP1OqkPV7rCni7Y1yTQv11SeGay TLViEUPhBVDX4SRyXRa7r4zWq5ypi3X4B9iRh86G97948cZMMs/lxPxidYlQGyLY hHmpiNniQZWF4jyQ2/jG9CApITiirSfyoqpNkYxo2eAZ+4mYIQIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFGVivxxQC5bbbUlXgSygGHl5P03GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8zYjRh NDQxZi01ZDBiLTQ4MTMtODM2ZS0yYWVmZDU0YjBjYTEvMTBjZTY5ZDAtZTlmNy0z OWU3LWI3YzctODg5ZTcxYmQxOTczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvM2I0YTQ0MWYtNWQwYi00ODEzLTgz NmUtMmFlZmQ1NGIwY2ExLzNiNGE0NDFmLTVkMGItNDgxMy04MzZlLTJhZWZkNTRi MGNhMS5jcmwwHwYDVR0jBBgwFoAUhTTrezt86zcuUquQjp/L/T4KFp8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8zYjRhNDQxZi01ZDBiLTQ4MTMtODM2ZS0yYWVm ZDU0YjBjYTEuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF4P8MA4E AgACMAgDBgAmAvdEADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQARASJh1ydjJFK6izhuM2GiQWHXLy4bTC80 AXB8mnJ2qn8LUwN4+sjeZ2e6UGP5WYBtBU8gbv2e5JQHmGeUkK3Y+lL7sBnvw7sO biNZBIvexZ9Jx3HAQEb9jO2GSEs2NqNYUGX44yTptM3gx3TzMJWsNrxKukHqgHGx 1hvl6VFHMmKOcoo9PdhIHdsqg5HfaeKbp7D4g2YRLHfWSOQ76N2+7TDSG0E1AceU ydW8I6rgQcQC1JmHGPTfvYCsjyJ19TzNKwI3fZBvblSlNHjSes7EyaDzxwkW22Yo OgzCqt2bJgUaiKfpzYansJ/PDWsufmfSiRGuL01GX/W7/B+hpoJa -----END CERTIFICATE-----Generated at Sun Sep 27 08:32:20 2026 by rpki-client