$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5ddd1dc1-47e3-4a5e-af7f-944939d210c6/dab42b6e-e789-3f0a-bb71-f3b311ab4e15.roa File: dab42b6e-e789-3f0a-bb71-f3b311ab4e15.roa (raw, json) Hash identifier: 1P++YZuLHrS2ziG6zbnRIH/JwggJ6ej7D1MbbB8ylBc= Subject key identifier: E9:5E:80:AB:01:F5:F0:9E:DD:C5:44:50:15:6D:DA:4A:16:55:45:18 Certificate issuer: /CN=5ddd1dc1-47e3-4a5e-af7f-944939d210c6 Certificate serial: 010D0C9F4328584F4C3D6858632C3617BE752F40 Authority key identifier: 16:F5:A0:96:E3:BD:EE:DD:97:CA:25:D1:7B:F4:DF:FF:94:B3:84:C4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5ddd1dc1-47e3-4a5e-af7f-944939d210c6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5ddd1dc1-47e3-4a5e-af7f-944939d210c6/dab42b6e-e789-3f0a-bb71-f3b311ab4e15.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 401561 IP address blocks: 23.128.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5ddd1dc1-47e3-4a5e-af7f-944939d210c6/5ddd1dc1-47e3-4a5e-af7f-944939d210c6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5ddd1dc1-47e3-4a5e-af7f-944939d210c6/5ddd1dc1-47e3-4a5e-af7f-944939d210c6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5ddd1dc1-47e3-4a5e-af7f-944939d210c6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:68:58:63:2c:36:17:be:75:2f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ddd1dc1-47e3-4a5e-af7f-944939d210c6 Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=85e8475f-fc9e-4b23-b656-d50b2200236d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:7a:06:bb:f6:37:c5:3a:57:7f:e4:4a:dc:84: 46:0d:6c:49:b3:a1:9c:22:e3:44:43:06:d8:90:46: a5:d7:0a:a5:1b:13:62:95:58:87:75:db:7a:a7:9a: 63:4a:7b:6a:81:6b:8c:83:f7:13:6f:88:aa:9b:b3: 2d:62:e2:26:ee:ce:63:8d:3e:59:de:7a:f6:98:07: 39:5e:2b:3b:7c:86:d8:25:c7:ac:41:0e:84:0c:a6: c4:dc:89:72:c0:d4:ff:ea:28:c8:9c:92:1b:ed:4f: fd:e7:79:23:f0:8e:d0:16:1f:e6:80:91:27:e2:17: 02:70:89:88:8d:a0:60:2b:c6:8c:b6:23:03:ef:da: 83:33:eb:8a:e7:0c:70:6e:67:52:72:8e:a9:eb:8d: 47:f6:d6:1f:87:0e:7f:33:0f:2a:3b:6b:33:dd:20: 3b:59:8f:74:5e:18:07:6c:9a:ca:f2:0b:d1:a4:83: 78:3b:96:b6:9f:8b:3e:ff:33:f9:b9:98:f0:84:47: f2:e0:4f:08:e6:f0:dc:1a:12:8a:c9:de:ed:c0:44: 5b:88:10:cf:56:bc:78:c8:fc:5e:97:be:ee:9b:87: 87:18:c3:fe:6a:41:23:71:6d:eb:29:00:d0:4a:c4: de:39:9a:5c:c7:47:68:5f:29:b8:e8:e1:c5:0b:92: 5b:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:5E:80:AB:01:F5:F0:9E:DD:C5:44:50:15:6D:DA:4A:16:55:45:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5ddd1dc1-47e3-4a5e-af7f-944939d210c6/dab42b6e-e789-3f0a-bb71-f3b311ab4e15.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5ddd1dc1-47e3-4a5e-af7f-944939d210c6/5ddd1dc1-47e3-4a5e-af7f-944939d210c6.crl X509v3 Authority Key Identifier: keyid:16:F5:A0:96:E3:BD:EE:DD:97:CA:25:D1:7B:F4:DF:FF:94:B3:84:C4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5ddd1dc1-47e3-4a5e-af7f-944939d210c6.cer sbgp-ipAddrBlock: critical IPv4: 23.128.252.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d6:88:d4:fd:b6:d0:39:57:64:4b:0c:d1:32:26:bf:8c:c8:80: 74:65:f6:59:4d:74:4d:e7:17:3f:94:27:42:f9:f5:30:13:a3: b2:2f:50:13:60:34:c1:95:27:2e:2a:b6:70:d1:5a:6b:14:e1: 2e:09:cf:3c:28:9f:45:a1:58:c2:47:32:0e:50:fd:9a:c9:fa: c7:be:30:3f:62:3a:7c:d5:d5:ee:3c:01:24:08:6c:b1:98:e4: d1:8d:e2:0d:a4:dd:62:66:07:fb:8e:0a:1f:0d:65:d0:05:9d: 86:22:65:41:f2:ab:72:27:2f:2a:76:bb:2e:b4:1e:c2:94:0c: c4:75:29:47:19:48:3a:a5:27:db:7a:a1:34:b4:9d:b7:e5:ee: 90:c7:e0:62:79:f7:5c:76:89:94:e3:35:bc:0c:77:b3:dd:61: 87:68:c2:a5:1d:ef:a4:12:39:e9:d6:73:23:aa:fa:1d:42:ed: 7a:25:99:94:e0:75:c3:ae:20:a3:c7:46:b1:e5:35:b9:f9:36: b5:1e:36:c4:f0:b3:09:7b:95:4d:09:9b:13:5d:c7:3b:31:be: ca:00:58:ee:c2:46:e4:11:f9:d3:ed:31:6f:3f:fc:99:d4:3d: 98:5c:0e:1a:bd:4d:24:9e:c5:f6:52:77:6b:2c:a4:36:1e:a8: 75:69:0d:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPWhYYyw2F751L0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWRkZDFkYzEtNDdlMy00YTVlLWFmN2YtOTQ0OTM5ZDIx MGM2MB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk ODVlODQ3NWYtZmM5ZS00YjIzLWI2NTYtZDUwYjIyMDAyMzZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApXoGu/Y3xTpXf+RK3IRGDWxJs6GcIuNEQwbY kEal1wqlGxNilViHddt6p5pjSntqgWuMg/cTb4iqm7MtYuIm7s5jjT5Z3nr2mAc5 Xis7fIbYJcesQQ6EDKbE3IlywNT/6ijInJIb7U/953kj8I7QFh/mgJEn4hcCcImI jaBgK8aMtiMD79qDM+uK5wxwbmdSco6p641H9tYfhw5/Mw8qO2sz3SA7WY90XhgH bJrK8gvRpIN4O5a2n4s+/zP5uZjwhEfy4E8I5vDcGhKKyd7twERbiBDPVrx4yPxe l77um4eHGMP+akEjcW3rKQDQSsTeOZpcx0doXym46OHFC5Jb0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOlegKsB9fCe3cVEUBVt2koWVUUYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi81ZGRk MWRjMS00N2UzLTRhNWUtYWY3Zi05NDQ5MzlkMjEwYzYvZGFiNDJiNmUtZTc4OS0z ZjBhLWJiNzEtZjNiMzExYWI0ZTE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNWRkZDFkYzEtNDdlMy00YTVlLWFm N2YtOTQ0OTM5ZDIxMGM2LzVkZGQxZGMxLTQ3ZTMtNGE1ZS1hZjdmLTk0NDkzOWQy MTBjNi5jcmwwHwYDVR0jBBgwFoAUFvWgluO97t2XyiXRe/Tf/5SzhMQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi81ZGRkMWRjMS00N2UzLTRhNWUtYWY3Zi05NDQ5 MzlkMjEwYzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4D8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANaI1P220DlXZEsM0TImv4zIgHRl9llNdE3nFz+UJ0L59TATo7IvUBNg NMGVJy4qtnDRWmsU4S4Jzzwon0WhWMJHMg5Q/ZrJ+se+MD9iOnzV1e48ASQIbLGY 5NGN4g2k3WJmB/uOCh8NZdAFnYYiZUHyq3InLyp2uy60HsKUDMR1KUcZSDqlJ9t6 oTS0nbfl7pDH4GJ591x2iZTjNbwMd7PdYYdowqUd76QSOenWcyOq+h1C7XolmZTg dcOuIKPHRrHlNbn5NrUeNsTwswl7lU0JmxNdxzsxvsoAWO7CRuQR+dPtMW8//JnU PZhcDhq9TSSexfZSd2sspDYeqHVpDQA= -----END CERTIFICATE-----Generated at Sun Sep 27 00:31:29 2026 by rpki-client