$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5ddd1dc1-47e3-4a5e-af7f-944939d210c6/2f411f0a-4589-3467-ac67-d972f19f437f.roa File: 2f411f0a-4589-3467-ac67-d972f19f437f.roa (raw, json) Hash identifier: DDoDtX39/xGieiye1dmx6d9C2hHnZhmLBu3noQbwm8U= Subject key identifier: 58:75:EC:08:EB:3C:1A:9D:C5:54:E5:5D:4D:AD:A4:05:B7:3C:1A:92 Certificate issuer: /CN=5ddd1dc1-47e3-4a5e-af7f-944939d210c6 Certificate serial: 010D0C9F4328584F4C3D6B48DC98F1960B710780 Authority key identifier: 16:F5:A0:96:E3:BD:EE:DD:97:CA:25:D1:7B:F4:DF:FF:94:B3:84:C4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5ddd1dc1-47e3-4a5e-af7f-944939d210c6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5ddd1dc1-47e3-4a5e-af7f-944939d210c6/2f411f0a-4589-3467-ac67-d972f19f437f.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 399861 IP address blocks: 23.128.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5ddd1dc1-47e3-4a5e-af7f-944939d210c6/5ddd1dc1-47e3-4a5e-af7f-944939d210c6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5ddd1dc1-47e3-4a5e-af7f-944939d210c6/5ddd1dc1-47e3-4a5e-af7f-944939d210c6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5ddd1dc1-47e3-4a5e-af7f-944939d210c6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:6b:48:dc:98:f1:96:0b:71:07:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ddd1dc1-47e3-4a5e-af7f-944939d210c6 Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=ae38a498-c3bd-4f10-bce5-0e5a34ebe6c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:21:65:be:91:b3:f2:76:d2:d5:d7:c0:5b:64: a7:31:ad:59:7f:dd:9f:7a:59:d9:cc:2d:65:fe:66: d4:36:8a:96:ec:05:7e:cf:cb:3c:dd:d6:b2:ae:c6: dd:2a:be:41:29:b3:fd:ef:18:28:87:f2:11:ef:a4: 91:a7:14:52:ca:d1:0a:3d:0c:cd:db:4c:1d:cc:2c: ae:8c:35:d5:58:23:1d:cc:41:47:43:38:98:35:07: e3:92:29:1c:2f:23:6c:fc:cd:0a:a3:84:88:06:5d: 89:4a:f5:7f:94:94:e6:e9:60:c8:69:2a:10:dc:fe: 79:0f:52:a1:f0:b6:60:d7:90:f2:57:68:00:9b:ff: 0f:62:94:42:10:84:ec:53:aa:50:7b:31:0b:bd:f7: da:00:0f:6b:ed:8f:27:f6:d8:54:2d:b6:88:05:f8: fb:a6:18:c2:48:b3:be:14:03:7e:e4:7a:bb:7d:e9: c7:d5:a3:87:9f:5d:47:9a:18:b7:19:3f:45:b0:e4: 7b:01:e7:e7:d2:bc:2e:8c:2a:3b:8b:b6:c7:46:22: 93:96:68:7e:6a:dc:df:a9:a0:f7:87:18:03:56:be: c6:02:59:52:bf:dc:cd:c4:77:50:c5:85:75:1f:a9: 72:b1:21:ab:43:e7:68:15:d2:b4:90:95:2c:b3:d4: ca:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:75:EC:08:EB:3C:1A:9D:C5:54:E5:5D:4D:AD:A4:05:B7:3C:1A:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5ddd1dc1-47e3-4a5e-af7f-944939d210c6/2f411f0a-4589-3467-ac67-d972f19f437f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5ddd1dc1-47e3-4a5e-af7f-944939d210c6/5ddd1dc1-47e3-4a5e-af7f-944939d210c6.crl X509v3 Authority Key Identifier: keyid:16:F5:A0:96:E3:BD:EE:DD:97:CA:25:D1:7B:F4:DF:FF:94:B3:84:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5ddd1dc1-47e3-4a5e-af7f-944939d210c6.cer sbgp-ipAddrBlock: critical IPv4: 23.128.252.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:5b:e4:d6:b7:11:48:27:e4:b8:cc:c2:42:c3:f8:e7:50:1e: 9e:a2:6b:d6:d8:7a:87:0e:c0:00:b3:69:bb:b6:05:98:43:22: 10:f0:63:0e:ff:27:95:8e:b9:f3:24:79:3d:ca:7e:5a:95:26: 06:b0:fb:72:a0:d0:e8:bc:af:a1:a7:99:7b:73:ce:5c:9d:ae: e8:e2:ac:01:2e:f5:d7:d1:4a:64:b8:12:5d:d1:9b:0d:8e:d8: bc:92:64:10:96:09:e3:67:4e:d7:58:22:03:1b:67:a1:ea:fd: b4:47:fb:0d:99:a9:6f:c8:69:48:8d:ae:11:f6:0f:09:59:2e: 90:d0:85:f8:af:9a:e2:59:a7:36:ab:58:cd:47:ab:01:7e:f1: 1e:cc:dd:5c:05:b9:08:af:af:b9:7f:37:cf:01:82:47:82:da: 52:43:89:7f:e3:10:46:b8:f5:e5:fb:14:9c:df:04:a6:56:6f: 16:42:55:86:ac:18:fc:68:64:a6:f4:f0:45:94:86:9d:06:2c: ff:f5:fa:d2:83:b8:db:82:e9:93:db:b2:ef:e3:41:0e:0b:64: dc:eb:0c:cb:14:4d:9b:d4:e7:b9:57:36:94:d4:02:b6:89:4e: 39:54:5a:9a:7f:4d:f3:76:3f:19:07:55:9b:ad:d8:9d:40:08: 29:c7:0b:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPWtI3JjxlgtxB4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWRkZDFkYzEtNDdlMy00YTVlLWFmN2YtOTQ0OTM5ZDIx MGM2MB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk YWUzOGE0OTgtYzNiZC00ZjEwLWJjZTUtMGU1YTM0ZWJlNmM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsCFlvpGz8nbS1dfAW2SnMa1Zf92felnZzC1l /mbUNoqW7AV+z8s83dayrsbdKr5BKbP97xgoh/IR76SRpxRSytEKPQzN20wdzCyu jDXVWCMdzEFHQziYNQfjkikcLyNs/M0Ko4SIBl2JSvV/lJTm6WDIaSoQ3P55D1Kh 8LZg15DyV2gAm/8PYpRCEITsU6pQezELvffaAA9r7Y8n9thULbaIBfj7phjCSLO+ FAN+5Hq7fenH1aOHn11Hmhi3GT9FsOR7Aefn0rwujCo7i7bHRiKTlmh+atzfqaD3 hxgDVr7GAllSv9zNxHdQxYV1H6lysSGrQ+doFdK0kJUss9TKdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFh17AjrPBqdxVTlXU2tpAW3PBqSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi81ZGRk MWRjMS00N2UzLTRhNWUtYWY3Zi05NDQ5MzlkMjEwYzYvMmY0MTFmMGEtNDU4OS0z NDY3LWFjNjctZDk3MmYxOWY0MzdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNWRkZDFkYzEtNDdlMy00YTVlLWFm N2YtOTQ0OTM5ZDIxMGM2LzVkZGQxZGMxLTQ3ZTMtNGE1ZS1hZjdmLTk0NDkzOWQy MTBjNi5jcmwwHwYDVR0jBBgwFoAUFvWgluO97t2XyiXRe/Tf/5SzhMQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi81ZGRkMWRjMS00N2UzLTRhNWUtYWY3Zi05NDQ5 MzlkMjEwYzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4D8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF9b5Na3EUgn5LjMwkLD+OdQHp6ia9bYeocOwACzabu2BZhDIhDwYw7/ J5WOufMkeT3KflqVJgaw+3Kg0Oi8r6GnmXtzzlydrujirAEu9dfRSmS4El3Rmw2O 2LySZBCWCeNnTtdYIgMbZ6Hq/bRH+w2ZqW/IaUiNrhH2DwlZLpDQhfivmuJZpzar WM1HqwF+8R7M3VwFuQivr7l/N88BgkeC2lJDiX/jEEa49eX7FJzfBKZWbxZCVYas GPxoZKb08EWUhp0GLP/1+tKDuNuC6ZPbsu/jQQ4LZNzrDMsUTZvU57lXNpTUAraJ TjlUWpp/TfN2PxkHVZut2J1ACCnHC6M= -----END CERTIFICATE-----Generated at Sat Sep 26 05:40:08 2026 by rpki-client