$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4acd1d4c-d0c2-4520-9ddb-f466e3339ce3/035ffd39-1a72-349c-a0e6-876140194bdd.roa File: 035ffd39-1a72-349c-a0e6-876140194bdd.roa (raw, json) Hash identifier: gI42YlgTGhzoQi/sVjj0wfQa+cLxQZdYztueN0thU3s= Subject key identifier: A8:D7:55:11:21:5C:E1:3C:CC:40:3F:FB:13:9A:E0:38:2C:A9:ED:DE Certificate issuer: /CN=4acd1d4c-d0c2-4520-9ddb-f466e3339ce3 Certificate serial: 010D0C9F4328584F49731DCC0612AE51F6312F80 Authority key identifier: 05:3F:7A:43:24:90:34:BD:18:8A:A2:86:A5:E5:EA:5A:9C:4D:D0:48 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4acd1d4c-d0c2-4520-9ddb-f466e3339ce3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4acd1d4c-d0c2-4520-9ddb-f466e3339ce3/035ffd39-1a72-349c-a0e6-876140194bdd.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 398915 IP address blocks: 23.172.104.0/24 maxlen: 24 2607:7a40::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4acd1d4c-d0c2-4520-9ddb-f466e3339ce3/4acd1d4c-d0c2-4520-9ddb-f466e3339ce3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4acd1d4c-d0c2-4520-9ddb-f466e3339ce3/4acd1d4c-d0c2-4520-9ddb-f466e3339ce3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4acd1d4c-d0c2-4520-9ddb-f466e3339ce3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:1d:cc:06:12:ae:51:f6:31:2f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4acd1d4c-d0c2-4520-9ddb-f466e3339ce3 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=0850bd9f-6741-4ba8-8da0-2baef5967320 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:79:97:3d:46:f8:34:5f:7e:fb:97:d8:3e:09: 1a:7b:d5:89:8c:b9:54:bb:72:88:9f:f8:b3:6f:01: 79:ef:fd:31:1a:62:bb:7d:de:d0:91:72:9c:9a:75: 80:ac:24:51:f3:ee:77:7a:b0:17:b0:d4:3b:34:75: dc:55:48:6a:34:c8:63:15:9b:7a:87:66:ac:7b:8e: c2:2f:c5:35:d7:89:61:81:6a:52:d0:22:5e:dd:ec: 15:b6:e7:4f:14:73:bd:40:15:f1:bd:a3:28:91:a7: a7:33:0a:77:52:11:19:fa:3b:2a:36:1c:b6:fd:95: 3c:a7:35:19:36:76:90:f5:f9:a5:7a:70:56:7b:0a: 73:ba:21:e5:66:c6:1e:f9:d8:7a:4a:1b:81:78:57: 21:8b:e2:d2:a6:dd:93:d2:bd:13:21:ba:1b:1b:fd: 9e:7e:cd:6f:be:4b:77:81:7b:02:59:ec:a4:d2:47: 92:fe:f9:bf:2f:a9:ef:00:c3:21:b8:2a:cf:26:c7: e8:28:2a:f1:46:66:82:2c:bf:5a:30:59:7b:84:81: 0d:0d:c3:ad:dc:aa:fc:fa:f2:db:dc:db:20:8e:48: d0:a2:1b:45:6f:49:f3:91:a7:b2:03:61:76:19:13: f9:c3:d5:c0:5a:aa:bb:f6:8d:0c:96:fb:f1:7e:26: 16:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:D7:55:11:21:5C:E1:3C:CC:40:3F:FB:13:9A:E0:38:2C:A9:ED:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4acd1d4c-d0c2-4520-9ddb-f466e3339ce3/035ffd39-1a72-349c-a0e6-876140194bdd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4acd1d4c-d0c2-4520-9ddb-f466e3339ce3/4acd1d4c-d0c2-4520-9ddb-f466e3339ce3.crl X509v3 Authority Key Identifier: keyid:05:3F:7A:43:24:90:34:BD:18:8A:A2:86:A5:E5:EA:5A:9C:4D:D0:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4acd1d4c-d0c2-4520-9ddb-f466e3339ce3.cer sbgp-ipAddrBlock: critical IPv4: 23.172.104.0/24 IPv6: 2607:7a40::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:1a:7b:62:9a:e0:7b:c3:04:11:d6:87:64:f6:a5:a5:9e:65: 51:8f:4b:58:4e:ce:4e:f1:12:da:79:a7:87:a8:a9:0a:83:d6: dd:11:d5:aa:a7:e9:70:e7:e8:3a:6c:94:09:1a:15:03:03:a2: e4:77:83:1f:b3:2b:3f:6f:d5:67:4a:97:88:2b:d6:3e:4d:61: dc:4f:8e:bf:5b:42:7e:36:90:64:d4:1a:3c:26:7f:ed:5c:75: 63:ec:4e:a2:fb:84:9c:69:07:11:f4:6d:28:71:4c:1f:28:a9: 82:65:40:ce:16:78:da:b1:5a:f6:69:c7:50:19:c5:d7:2e:b7: e7:d2:96:40:62:7c:e3:4b:96:14:4d:1d:d3:eb:4a:0f:f9:4b: 0b:45:25:8e:b2:43:4b:d7:ec:31:d6:63:fa:d1:91:96:b3:57: 0a:90:f9:14:65:76:95:77:dd:1b:29:30:41:6b:ca:17:e7:df: f0:64:24:f3:41:71:a4:87:35:5a:da:75:fd:47:02:c9:10:0d: b1:9e:ed:ef:92:1f:44:4e:f1:2d:ce:2e:10:d6:ea:c9:6a:b7: ad:fc:55:ec:e9:d4:ca:9f:2c:d4:ff:65:a9:0d:d6:b8:ce:7c: 7f:51:7c:0c:59:c3:a0:a6:f1:b5:ad:5c:07:75:61:44:8e:1a: 8e:b6:4e:b1 -----BEGIN CERTIFICATE----- MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWE9Jcx3MBhKuUfYxL4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFjZDFkNGMtZDBjMi00NTIwLTlkZGItZjQ2NmUzMzM5 Y2UzMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MDg1MGJkOWYtNjc0MS00YmE4LThkYTAtMmJhZWY1OTY3MzIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh3mXPUb4NF9++5fYPgkae9WJjLlUu3KIn/iz bwF57/0xGmK7fd7QkXKcmnWArCRR8+53erAXsNQ7NHXcVUhqNMhjFZt6h2ase47C L8U114lhgWpS0CJe3ewVtudPFHO9QBXxvaMokaenMwp3UhEZ+jsqNhy2/ZU8pzUZ NnaQ9fmlenBWewpzuiHlZsYe+dh6ShuBeFchi+LSpt2T0r0TIbobG/2efs1vvkt3 gXsCWeyk0keS/vm/L6nvAMMhuCrPJsfoKCrxRmaCLL9aMFl7hIENDcOt3Kr8+vLb 3NsgjkjQohtFb0nzkaeyA2F2GRP5w9XAWqq79o0MlvvxfiYWxQIDAQABo4IDZDCC A2AwHQYDVR0OBBYEFKjXVREhXOE8zEA/+xOa4Dgsqe3eMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS80YWNk MWQ0Yy1kMGMyLTQ1MjAtOWRkYi1mNDY2ZTMzMzljZTMvMDM1ZmZkMzktMWE3Mi0z NDljLWEwZTYtODc2MTQwMTk0YmRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvNGFjZDFkNGMtZDBjMi00NTIwLTlk ZGItZjQ2NmUzMzM5Y2UzLzRhY2QxZDRjLWQwYzItNDUyMC05ZGRiLWY0NjZlMzMz OWNlMy5jcmwwHwYDVR0jBBgwFoAUBT96QySQNL0YiqKGpeXqWpxN0EgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS80YWNkMWQ0Yy1kMGMyLTQ1MjAtOWRkYi1mNDY2 ZTMzMzljZTMuY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAF6xoMA0E AgACMAcDBQAmB3pAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0 bWwwDQYJKoZIhvcNAQELBQADggEBAJcae2Ka4HvDBBHWh2T2paWeZVGPS1hOzk7x Etp5p4eoqQqD1t0R1aqn6XDn6DpslAkaFQMDouR3gx+zKz9v1WdKl4gr1j5NYdxP jr9bQn42kGTUGjwmf+1cdWPsTqL7hJxpBxH0bShxTB8oqYJlQM4WeNqxWvZpx1AZ xdcut+fSlkBifONLlhRNHdPrSg/5SwtFJY6yQ0vX7DHWY/rRkZazVwqQ+RRldpV3 3RspMEFryhfn3/BkJPNBcaSHNVradf1HAskQDbGe7e+SH0RO8S3OLhDW6slqt638 Vezp1MqfLNT/ZakN1rjOfH9RfAxZw6Cm8bWtXAd1YUSOGo62TrE= -----END CERTIFICATE-----Generated at Sat Sep 26 13:42:48 2026 by rpki-client