$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fe38e0f9-f100-419a-915a-3e2451a50c5a/19a3d378-08f4-3987-94a8-a0680096b19f.roa File: 19a3d378-08f4-3987-94a8-a0680096b19f.roa (raw, json) Hash identifier: a4WsSnRSb4iJPC4gLpQZRkVUU6l9gp95gtcgl2H54Y8= Subject key identifier: 8B:48:87:0C:74:D5:58:2A:9E:42:41:B6:9B:94:CD:38:8C:ED:3F:7E Certificate issuer: /CN=fe38e0f9-f100-419a-915a-3e2451a50c5a Certificate serial: 010D0C9F4328584F2D87B6EAC06709A675390B00 Authority key identifier: 2B:B7:9F:5F:1E:21:45:E5:DF:E7:98:93:53:3E:A2:62:42:2D:16:A6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fe38e0f9-f100-419a-915a-3e2451a50c5a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fe38e0f9-f100-419a-915a-3e2451a50c5a/19a3d378-08f4-3987-94a8-a0680096b19f.roa Signing time: Tue 15 Sep 2026 01:00:12 +0000 ROA not before: Tue 15 Sep 2026 01:00:12 +0000 ROA not after: Mon 14 Dec 2026 02:00:12 +0000 asID: 16635 IP address blocks: 23.149.16.0/24 maxlen: 24 104.250.232.0/22 maxlen: 24 2602:803:4000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fe38e0f9-f100-419a-915a-3e2451a50c5a/fe38e0f9-f100-419a-915a-3e2451a50c5a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fe38e0f9-f100-419a-915a-3e2451a50c5a/fe38e0f9-f100-419a-915a-3e2451a50c5a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fe38e0f9-f100-419a-915a-3e2451a50c5a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:2d:87:b6:ea:c0:67:09:a6:75:39:0b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fe38e0f9-f100-419a-915a-3e2451a50c5a Validity Not Before: Sep 15 01:00:12 2026 GMT Not After : Dec 14 02:00:12 2026 GMT Subject: CN=35e9751f-0b20-41b3-b1eb-d0adaf6c957d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:35:e4:47:84:27:dc:6c:d4:aa:2d:c7:62:6d: fc:0a:d7:26:4c:5d:fd:c4:02:a9:43:bd:de:e3:1d: 7a:77:60:73:d1:53:c5:ba:a1:a4:87:50:b1:0d:51: 10:2b:07:f5:41:0b:d9:3a:94:df:bf:55:cb:46:07: 24:ff:47:03:a0:96:16:60:d7:64:d9:df:b4:8c:c1: 26:4a:09:16:8b:75:e4:6c:ce:67:31:cb:25:43:21: ac:b8:f3:31:6f:95:ee:6a:fe:f4:ac:b2:c9:4e:97: 60:63:4b:42:11:54:aa:64:e1:f7:42:16:d0:27:ac: 46:44:07:d8:98:38:d7:44:6e:fb:71:47:4c:e0:82: 68:7e:7c:32:de:88:a7:6c:7f:9a:b0:15:c7:c7:09: 4c:6c:27:44:df:2e:4a:2f:a7:f6:6f:fd:10:1b:7e: cc:38:a9:b1:ae:a0:13:3a:a8:b4:c9:db:23:02:0a: 4b:c9:9f:ab:c3:62:33:5b:29:6e:1b:66:c3:da:04: ce:49:a1:91:9e:25:d6:87:ec:e1:1c:86:51:b3:df: 90:e3:de:20:cd:10:2e:79:04:32:e7:69:e7:27:9f: ae:58:cd:56:0c:0d:bf:56:44:34:6b:3c:44:59:18: bc:cd:fc:d3:cf:2b:14:5a:e2:99:05:22:01:8f:9d: 2e:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:48:87:0C:74:D5:58:2A:9E:42:41:B6:9B:94:CD:38:8C:ED:3F:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fe38e0f9-f100-419a-915a-3e2451a50c5a/19a3d378-08f4-3987-94a8-a0680096b19f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fe38e0f9-f100-419a-915a-3e2451a50c5a/fe38e0f9-f100-419a-915a-3e2451a50c5a.crl X509v3 Authority Key Identifier: keyid:2B:B7:9F:5F:1E:21:45:E5:DF:E7:98:93:53:3E:A2:62:42:2D:16:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fe38e0f9-f100-419a-915a-3e2451a50c5a.cer sbgp-ipAddrBlock: critical IPv4: 23.149.16.0/24 104.250.232.0/22 IPv6: 2602:803:4000::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:8d:f8:84:e4:7c:02:5f:4b:96:40:e4:65:e0:19:85:8d:f0: ea:b9:84:7d:6a:b9:8f:56:7c:e0:8a:ae:f8:4d:3c:18:17:bf: 08:31:8e:ec:38:79:d2:21:a5:e4:20:d1:d4:35:09:d5:de:fe: b0:85:36:5c:11:46:ef:7c:6e:30:f3:b9:05:51:47:49:14:6a: 21:73:f3:70:4c:23:42:07:af:bb:62:cc:ed:be:45:8a:64:d7: 99:7e:a3:8e:df:cd:4a:1e:6d:43:de:2f:86:81:4f:df:61:0e: 45:5b:4e:31:8c:79:77:cf:b4:d3:3b:80:01:89:2f:5f:70:06: 03:1c:36:28:69:0c:d1:46:12:be:55:c3:24:f6:03:be:ea:7a: b4:e6:dc:34:4e:48:1c:3e:24:59:a1:c6:44:33:3e:f3:5a:c9: 0e:ed:c1:17:8b:d0:58:f0:8d:af:85:69:f2:31:82:a1:e1:ee: a0:59:bb:b4:91:0c:e4:5f:71:6b:c9:ca:d0:0a:9a:59:f9:c1: 4e:4a:21:ea:59:f8:5c:45:4d:dd:f6:9a:76:44:7f:21:ef:37: 37:ff:a7:5a:32:bf:25:c6:b3:d4:3c:2b:36:0b:5c:33:f8:9b: 5d:a3:2a:49:3b:d9:e9:c2:bd:94:56:d0:a7:93:ef:62:35:1c: 78:52:60:3b -----BEGIN CERTIFICATE----- MIIGWTCCBUGgAwIBAgIUAQ0Mn0MoWE8th7bqwGcJpnU5CwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmUzOGUwZjktZjEwMC00MTlhLTkxNWEtM2UyNDUxYTUw YzVhMB4XDTI2MDkxNTAxMDAxMloXDTI2MTIxNDAyMDAxMlowLzEtMCsGA1UEAxMk MzVlOTc1MWYtMGIyMC00MWIzLWIxZWItZDBhZGFmNmM5NTdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4TXkR4Qn3GzUqi3HYm38CtcmTF39xAKpQ73e 4x16d2Bz0VPFuqGkh1CxDVEQKwf1QQvZOpTfv1XLRgck/0cDoJYWYNdk2d+0jMEm SgkWi3XkbM5nMcslQyGsuPMxb5Xuav70rLLJTpdgY0tCEVSqZOH3QhbQJ6xGRAfY mDjXRG77cUdM4IJofnwy3oinbH+asBXHxwlMbCdE3y5KL6f2b/0QG37MOKmxrqAT Oqi0ydsjAgpLyZ+rw2IzWyluG2bD2gTOSaGRniXWh+zhHIZRs9+Q494gzRAueQQy 52nnJ5+uWM1WDA2/VkQ0azxEWRi8zfzTzysUWuKZBSIBj50uaQIDAQABo4IDazCC A2cwHQYDVR0OBBYEFItIhwx01VgqnkJBtpuUzTiM7T9+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mZTM4 ZTBmOS1mMTAwLTQxOWEtOTE1YS0zZTI0NTFhNTBjNWEvMTlhM2QzNzgtMDhmNC0z OTg3LTk0YTgtYTA2ODAwOTZiMTlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZmUzOGUwZjktZjEwMC00MTlhLTkx NWEtM2UyNDUxYTUwYzVhL2ZlMzhlMGY5LWYxMDAtNDE5YS05MTVhLTNlMjQ1MWE1 MGM1YS5jcmwwHwYDVR0jBBgwFoAUK7efXx4hReXf55iTUz6iYkItFqYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9mZTM4ZTBmOS1mMTAwLTQxOWEtOTE1YS0zZTI0 NTFhNTBjNWEuY2VyMDUGCCsGAQUFBwEHAQH/BCYwJDASBAIAATAMAwQAF5UQAwQC aProMA4EAgACMAgDBgAmAggDQDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB2jfiE5HwCX0uWQORl4BmFjfDq uYR9armPVnzgiq74TTwYF78IMY7sOHnSIaXkINHUNQnV3v6whTZcEUbvfG4w87kF UUdJFGohc/NwTCNCB6+7YsztvkWKZNeZfqOO381KHm1D3i+GgU/fYQ5FW04xjHl3 z7TTO4ABiS9fcAYDHDYoaQzRRhK+VcMk9gO+6nq05tw0TkgcPiRZocZEMz7zWskO 7cEXi9BY8I2vhWnyMYKh4e6gWbu0kQzkX3FrycrQCppZ+cFOSiHqWfhcRU3d9pp2 RH8h7zc3/6daMr8lxrPUPCs2C1wz+JtdoypJO9npwr2UVtCnk+9iNRx4UmA7 -----END CERTIFICATE-----Generated at Wed Oct 14 17:18:29 2026 by rpki-client