$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4997cc35-d26e-45fa-b0fc-e6489213999d/96811b58-4e3b-32b6-b608-80deb3b3db19.roa File: 96811b58-4e3b-32b6-b608-80deb3b3db19.roa (raw, json) Hash identifier: di2aSpwF3dfVmz/jcmTO+jZg5AuvBlcbfHWhl7ikSTA= Subject key identifier: E1:F8:7B:CE:44:AD:CA:37:2E:82:38:10:76:11:38:C2:C5:1A:3D:E9 Certificate issuer: /CN=4997cc35-d26e-45fa-b0fc-e6489213999d Certificate serial: 010D0C9F4328584F30527306EECDA64D9478C580 Authority key identifier: 0A:87:68:3E:C5:DB:7D:09:FF:58:D7:2C:5D:53:26:30:B5:F7:C4:18 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4997cc35-d26e-45fa-b0fc-e6489213999d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4997cc35-d26e-45fa-b0fc-e6489213999d/96811b58-4e3b-32b6-b608-80deb3b3db19.roa Signing time: Wed 16 Sep 2026 01:00:12 +0000 ROA not before: Wed 16 Sep 2026 01:00:12 +0000 ROA not after: Tue 15 Dec 2026 02:00:12 +0000 asID: 402465 IP address blocks: 23.157.244.0/24 maxlen: 24 2620:19:c000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4997cc35-d26e-45fa-b0fc-e6489213999d/4997cc35-d26e-45fa-b0fc-e6489213999d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4997cc35-d26e-45fa-b0fc-e6489213999d/4997cc35-d26e-45fa-b0fc-e6489213999d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4997cc35-d26e-45fa-b0fc-e6489213999d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:30:52:73:06:ee:cd:a6:4d:94:78:c5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4997cc35-d26e-45fa-b0fc-e6489213999d Validity Not Before: Sep 16 01:00:12 2026 GMT Not After : Dec 15 02:00:12 2026 GMT Subject: CN=17c15eb8-977e-4b95-8cb4-e89d163ce0b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:6e:54:80:01:40:25:d3:eb:d6:94:bf:00:e8: b2:28:20:3f:f0:7c:fe:3b:f1:45:47:c3:bd:d8:5c: 70:f3:f2:fb:e9:99:86:5f:0e:74:17:df:30:37:aa: 67:15:66:ba:29:47:6a:e6:a1:66:f8:9d:d3:f1:8d: bf:d3:58:ce:01:fc:c9:0b:8e:6d:ac:c6:25:cf:1e: 80:cc:4e:4b:4b:6d:ee:55:32:ed:85:be:a5:9f:ce: 76:a2:2a:ae:35:f0:f3:25:82:d1:a7:33:1b:33:aa: 9d:d7:a2:b2:af:60:1a:9a:9b:c7:c0:3e:d9:85:47: 6f:db:dd:8a:db:7e:20:f4:09:cd:42:50:ff:7b:27: b5:28:4c:00:17:9a:05:c4:a1:8b:5e:b8:b9:a1:a1: 8b:2b:2f:93:aa:f3:15:ac:5f:f7:3e:0d:51:b6:17: 90:c9:f3:71:c3:a6:7e:4f:28:fd:86:7e:4b:fe:73: bb:4e:e4:41:76:8c:52:c9:fd:77:eb:f6:cc:65:c3: 0d:cb:da:af:c9:44:cf:ed:d9:62:17:e9:92:1c:9c: 32:a3:80:b9:2d:76:4d:b0:7c:65:ee:3f:64:83:e2: 28:2e:37:42:8e:b9:97:cb:e4:87:01:34:7e:bb:70: 1f:f6:e8:db:ea:ab:9f:9e:37:02:9e:fe:86:45:3f: c7:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:F8:7B:CE:44:AD:CA:37:2E:82:38:10:76:11:38:C2:C5:1A:3D:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4997cc35-d26e-45fa-b0fc-e6489213999d/96811b58-4e3b-32b6-b608-80deb3b3db19.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4997cc35-d26e-45fa-b0fc-e6489213999d/4997cc35-d26e-45fa-b0fc-e6489213999d.crl X509v3 Authority Key Identifier: keyid:0A:87:68:3E:C5:DB:7D:09:FF:58:D7:2C:5D:53:26:30:B5:F7:C4:18 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4997cc35-d26e-45fa-b0fc-e6489213999d.cer sbgp-ipAddrBlock: critical IPv4: 23.157.244.0/24 IPv6: 2620:19:c000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:93:8a:4b:a2:fb:82:56:b3:7c:19:95:0b:2c:09:cb:f3:e0: bd:c7:60:c9:9b:07:23:19:56:4c:3b:d1:81:df:81:fc:17:e0: 94:3b:9f:e5:31:63:10:fe:97:ef:0b:a5:df:a7:08:59:49:a8: 9c:c9:0f:80:a9:d6:86:17:04:2b:43:6b:21:9e:af:d0:14:33: d3:8a:48:e7:0a:3d:e2:ab:5e:d5:99:60:9b:76:bb:54:de:ee: 12:f8:2b:62:42:39:65:2f:a9:13:0d:03:21:5f:db:80:a9:28: 9d:0d:a7:94:c2:e8:0a:44:73:c0:bc:6d:2f:46:bf:e4:11:f4: 34:e1:48:25:53:e0:6a:b0:0b:35:1e:96:e9:b1:87:89:36:19: cd:59:a8:86:a9:7b:02:8a:57:19:f0:b4:7b:80:e4:f7:63:ef: 7f:56:83:2d:24:f8:7a:33:be:1a:cf:d1:1e:4f:d9:79:3d:bd: e7:ec:cb:c2:6e:b3:da:c1:44:dc:30:a8:39:f7:3b:03:73:c7: 84:08:d9:f6:88:2c:e6:5b:62:b2:c1:70:45:80:6d:06:55:5f: 2b:28:19:2d:9f:03:1c:26:04:17:7d:64:16:0f:cf:bd:05:f9: 76:78:9b:97:36:7e:ec:cc:af:08:80:06:1b:c4:0f:ef:0f:4a: e4:ca:43:d2 -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWE8wUnMG7s2mTZR4xYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDk5N2NjMzUtZDI2ZS00NWZhLWIwZmMtZTY0ODkyMTM5 OTlkMB4XDTI2MDkxNjAxMDAxMloXDTI2MTIxNTAyMDAxMlowLzEtMCsGA1UEAxMk MTdjMTVlYjgtOTc3ZS00Yjk1LThjYjQtZTg5ZDE2M2NlMGI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7m5UgAFAJdPr1pS/AOiyKCA/8Hz+O/FFR8O9 2Fxw8/L76ZmGXw50F98wN6pnFWa6KUdq5qFm+J3T8Y2/01jOAfzJC45trMYlzx6A zE5LS23uVTLthb6ln852oiquNfDzJYLRpzMbM6qd16Kyr2AampvHwD7ZhUdv292K 234g9AnNQlD/eye1KEwAF5oFxKGLXri5oaGLKy+TqvMVrF/3Pg1RtheQyfNxw6Z+ Tyj9hn5L/nO7TuRBdoxSyf136/bMZcMNy9qvyUTP7dliF+mSHJwyo4C5LXZNsHxl 7j9kg+IoLjdCjrmXy+SHATR+u3Af9ujb6qufnjcCnv6GRT/HgwIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFOH4e85Erco3LoI4EHYROMLFGj3pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi80OTk3 Y2MzNS1kMjZlLTQ1ZmEtYjBmYy1lNjQ4OTIxMzk5OWQvOTY4MTFiNTgtNGUzYi0z MmI2LWI2MDgtODBkZWIzYjNkYjE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvNDk5N2NjMzUtZDI2ZS00NWZhLWIw ZmMtZTY0ODkyMTM5OTlkLzQ5OTdjYzM1LWQyNmUtNDVmYS1iMGZjLWU2NDg5MjEz OTk5ZC5jcmwwHwYDVR0jBBgwFoAUCodoPsXbfQn/WNcsXVMmMLX3xBgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi80OTk3Y2MzNS1kMjZlLTQ1ZmEtYjBmYy1lNjQ4 OTIxMzk5OWQuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAF530MA8E AgACMAkDBwAmIAAZwAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAdpOKS6L7glazfBmVCywJy/PgvcdgyZsH IxlWTDvRgd+B/BfglDuf5TFjEP6X7wul36cIWUmonMkPgKnWhhcEK0NrIZ6v0BQz 04pI5wo94qte1Zlgm3a7VN7uEvgrYkI5ZS+pEw0DIV/bgKkonQ2nlMLoCkRzwLxt L0a/5BH0NOFIJVPgarALNR6W6bGHiTYZzVmohql7AopXGfC0e4Dk92Pvf1aDLST4 ejO+Gs/RHk/ZeT295+zLwm6z2sFE3DCoOfc7A3PHhAjZ9ogs5ltissFwRYBtBlVf KygZLZ8DHCYEF31kFg/PvQX5dniblzZ+7MyvCIAGG8QP7w9K5MpD0g== -----END CERTIFICATE-----Generated at Sun Sep 20 17:19:53 2026 by rpki-client