$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976/31f29860-b9a8-3368-b909-343d11150b76.roa File: 31f29860-b9a8-3368-b909-343d11150b76.roa (raw, json) Hash identifier: wxfthHBZ5erHLZCuwuk8snIzRswUbCwNhnaa4NFOzf4= Subject key identifier: A5:AF:58:05:C7:0F:C0:6B:DA:58:1A:B2:7D:33:1A:CA:79:D8:10:52 Certificate issuer: /CN=cb3ad003-aa7b-45b4-b273-e01ca5688976 Certificate serial: 010D0C9F4328584F4975E32DB57420DC8C7126C0 Authority key identifier: A5:7C:76:81:0C:C6:51:D7:2A:B8:6B:F7:9A:92:C5:2F:9C:9C:A4:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976/31f29860-b9a8-3368-b909-343d11150b76.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 401446 IP address blocks: 142.202.82.0/23 maxlen: 23 2602:fd9a::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976/cb3ad003-aa7b-45b4-b273-e01ca5688976.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976/cb3ad003-aa7b-45b4-b273-e01ca5688976.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:75:e3:2d:b5:74:20:dc:8c:71:26:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb3ad003-aa7b-45b4-b273-e01ca5688976 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=bd09e5af-79d7-4662-bcff-6c7b75cdb557 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:a3:2c:6d:5c:02:70:5e:25:41:6a:bf:3c:cf: d4:a8:cd:75:29:09:79:4b:83:94:be:4f:7f:ef:fb: 7f:db:06:4f:49:45:bc:15:50:d1:6d:62:7d:04:75: 4a:d9:da:12:9b:90:c5:1d:9e:a3:ae:2d:85:ff:b6: 53:4f:7e:3e:f2:1d:fb:33:37:4b:2c:fc:24:b6:d3: 9a:a0:31:e9:62:e6:f5:69:62:c9:6a:a0:5d:6a:33: 0e:97:1c:57:66:5b:ff:5b:d6:d2:f8:88:b6:18:00: 22:14:46:a5:a4:e3:cd:bf:12:6f:77:8b:0e:3e:c2: 09:7a:55:5c:5a:c6:68:6c:2a:05:88:4d:e4:25:b2: f7:e6:2f:bd:64:80:65:9f:4a:49:82:b9:27:9a:43: 7f:a0:87:c0:47:00:a0:3d:82:43:b2:6f:43:50:71: d5:d3:4d:5a:94:74:64:55:62:2c:f1:26:46:fd:f6: 76:2b:e4:86:ab:47:c2:a4:eb:60:af:14:4a:47:37: 61:5b:59:d3:ed:e9:6d:31:2a:bb:43:28:97:e0:65: 31:26:ba:f4:93:16:c0:97:6d:ea:1b:a8:62:88:23: 73:af:75:60:d9:41:5e:01:5d:6d:04:e6:ef:b5:3f: ba:a5:13:c7:51:f0:1a:56:6b:01:d6:97:ad:3a:29: 6a:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:AF:58:05:C7:0F:C0:6B:DA:58:1A:B2:7D:33:1A:CA:79:D8:10:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976/31f29860-b9a8-3368-b909-343d11150b76.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976/cb3ad003-aa7b-45b4-b273-e01ca5688976.crl X509v3 Authority Key Identifier: keyid:A5:7C:76:81:0C:C6:51:D7:2A:B8:6B:F7:9A:92:C5:2F:9C:9C:A4:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cb3ad003-aa7b-45b4-b273-e01ca5688976.cer sbgp-ipAddrBlock: critical IPv4: 142.202.82.0/23 IPv6: 2602:fd9a::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 95:fa:d8:82:f0:96:74:06:f3:6d:2f:ee:3e:34:1c:d1:c7:46: 61:ef:33:e7:48:06:c1:f3:d7:84:7a:10:5c:30:3f:66:d8:4c: 3a:28:85:ef:4d:0e:08:fa:7a:ce:1d:11:f5:23:87:1f:6a:e4: f0:f8:f0:7a:e9:d9:65:6c:43:6c:0c:f5:02:70:ac:8f:44:58: 0c:00:4a:a9:60:85:06:ad:ac:9d:2b:0d:de:44:8f:a8:c7:09: 7a:f5:e4:de:ae:a1:97:e4:a8:88:76:1d:0e:0f:8d:40:50:db: 9a:b0:b4:b2:57:93:55:5a:f6:1f:30:27:24:1b:ea:d5:c9:88: 2b:7c:5d:91:65:6a:ea:b5:0d:5c:c0:de:5f:9b:83:54:8f:55: 5f:07:19:31:68:ec:ea:1d:28:d8:0d:7d:f3:e2:d6:fd:26:0e: 59:d7:bf:5a:a4:52:dc:ce:39:39:28:ca:07:51:39:57:0c:e8: e9:bc:63:9b:ad:a6:09:08:84:e2:ca:4d:b9:7e:c1:0c:fe:e6: b4:24:d1:0d:6b:9a:e2:a0:88:67:c0:25:b1:72:d5:42:95:d9: e6:d3:7d:4b:0e:35:8c:06:a1:e9:8b:75:5c:31:7b:e3:35:58: 6b:b3:f9:3a:a9:63:eb:6c:fd:09:5c:af:57:83:16:a4:26:5d: 1b:d6:4f:c2 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE9JdeMttXQg3IxxJsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2IzYWQwMDMtYWE3Yi00NWI0LWIyNzMtZTAxY2E1Njg4 OTc2MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YmQwOWU1YWYtNzlkNy00NjYyLWJjZmYtNmM3Yjc1Y2RiNTU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi6MsbVwCcF4lQWq/PM/UqM11KQl5S4OUvk9/ 7/t/2wZPSUW8FVDRbWJ9BHVK2doSm5DFHZ6jri2F/7ZTT34+8h37MzdLLPwkttOa oDHpYub1aWLJaqBdajMOlxxXZlv/W9bS+Ii2GAAiFEalpOPNvxJvd4sOPsIJelVc WsZobCoFiE3kJbL35i+9ZIBln0pJgrknmkN/oIfARwCgPYJDsm9DUHHV001alHRk VWIs8SZG/fZ2K+SGq0fCpOtgrxRKRzdhW1nT7eltMSq7QyiX4GUxJrr0kxbAl23q G6hiiCNzr3Vg2UFeAV1tBObvtT+6pRPHUfAaVmsB1petOilqawIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFKWvWAXHD8Br2lgasn0zGsp52BBSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jYjNh ZDAwMy1hYTdiLTQ1YjQtYjI3My1lMDFjYTU2ODg5NzYvMzFmMjk4NjAtYjlhOC0z MzY4LWI5MDktMzQzZDExMTUwYjc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvY2IzYWQwMDMtYWE3Yi00NWI0LWIy NzMtZTAxY2E1Njg4OTc2L2NiM2FkMDAzLWFhN2ItNDViNC1iMjczLWUwMWNhNTY4 ODk3Ni5jcmwwHwYDVR0jBBgwFoAUpXx2gQzGUdcquGv3mpLFL5ycpIkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9jYjNhZDAwMy1hYTdiLTQ1YjQtYjI3My1lMDFj YTU2ODg5NzYuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQBjspSMA4E AgACMAgDBgQmAv2aADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCV+tiC8JZ0BvNtL+4+NBzRx0Zh7zPnSAbB 89eEehBcMD9m2Ew6KIXvTQ4I+nrOHRH1I4cfauTw+PB66dllbENsDPUCcKyPRFgM AEqpYIUGraydKw3eRI+oxwl69eTerqGX5KiIdh0OD41AUNuasLSyV5NVWvYfMCck G+rVyYgrfF2RZWrqtQ1cwN5fm4NUj1VfBxkxaOzqHSjYDX3z4tb9Jg5Z179apFLc zjk5KMoHUTlXDOjpvGObraYJCITiyk25fsEM/ua0JNENa5rioIhnwCWxctVCldnm 031LDjWMBqHpi3VcMXvjNVhrs/k6qWPrbP0JXK9XgxakJl0b1k/C -----END CERTIFICATE-----Generated at Mon Sep 28 20:58:45 2026 by rpki-client