$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18489a14-d237-40bd-ae7a-25fe7c7561ef/1ff7a22c-c2b6-33c8-a22b-b1de73c41fe6.roa File: 1ff7a22c-c2b6-33c8-a22b-b1de73c41fe6.roa (raw, json) Hash identifier: emMhhE4PLnaXX+cce94lC4U3VtMIfE9QBg4gd9izeOI= Subject key identifier: 3C:A5:E5:2C:82:2A:D6:E3:6F:71:63:73:6C:BB:32:CE:0D:51:DC:EE Certificate issuer: /CN=18489a14-d237-40bd-ae7a-25fe7c7561ef Certificate serial: 010D0C9F4328584F331D23CB967FB8B422F69E80 Authority key identifier: BB:7B:55:BC:B8:3E:D2:78:FE:4F:27:20:25:0B:3F:8C:F1:BA:07:08 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18489a14-d237-40bd-ae7a-25fe7c7561ef.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18489a14-d237-40bd-ae7a-25fe7c7561ef/1ff7a22c-c2b6-33c8-a22b-b1de73c41fe6.roa Signing time: Thu 17 Sep 2026 01:00:11 +0000 ROA not before: Thu 17 Sep 2026 01:00:11 +0000 ROA not after: Wed 16 Dec 2026 02:00:11 +0000 asID: 54256 IP address blocks: 23.153.168.0/24 maxlen: 24 198.252.222.0/24 maxlen: 24 2602:2d9::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18489a14-d237-40bd-ae7a-25fe7c7561ef/18489a14-d237-40bd-ae7a-25fe7c7561ef.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18489a14-d237-40bd-ae7a-25fe7c7561ef/18489a14-d237-40bd-ae7a-25fe7c7561ef.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18489a14-d237-40bd-ae7a-25fe7c7561ef.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Sep 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:33:1d:23:cb:96:7f:b8:b4:22:f6:9e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18489a14-d237-40bd-ae7a-25fe7c7561ef Validity Not Before: Sep 17 01:00:11 2026 GMT Not After : Dec 16 02:00:11 2026 GMT Subject: CN=dfb7d588-3aac-423c-bf8e-45e0975fc4d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:63:6e:a1:24:1a:af:93:58:97:25:db:cf:7f: ec:4e:fc:b5:95:cc:a1:4b:06:14:0f:f8:17:ee:d9: 4d:04:eb:46:1c:fa:75:ec:0e:93:73:21:ed:e6:c5: 28:7d:a8:17:28:53:7d:ec:3e:64:f0:71:c1:6d:92: 87:28:15:4f:eb:b2:d1:cb:83:77:c3:da:1e:40:15: cb:a0:be:64:d4:44:90:65:4d:80:4a:32:0d:da:c8: 3c:6c:84:ae:c5:98:8f:dd:a7:0b:af:82:e9:40:99: 6f:95:96:95:39:91:56:96:1d:28:af:78:07:a5:ec: 8c:8a:4a:80:6c:38:6e:a6:b1:d4:02:69:fb:11:96: 22:dc:8b:37:05:84:a0:d3:ab:d7:e3:d5:1a:70:d1: 07:b1:b4:d8:10:6c:3b:db:50:48:f7:fb:ce:34:4a: 9e:80:b1:64:27:98:82:68:bc:96:20:2f:b1:12:af: c3:dd:bd:f8:01:02:53:15:80:4a:88:1a:a6:60:25: d8:24:d1:ec:5b:d6:a2:2e:75:d1:78:6f:6a:cc:8d: 5c:56:b6:48:46:fe:c2:33:cb:0d:60:96:74:bc:03: 67:7e:c9:97:1a:72:6d:85:5a:bd:f9:5d:5b:4a:2c: 6d:24:4a:69:8a:7b:fc:5b:2e:25:95:ca:e0:2a:1a: 95:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:A5:E5:2C:82:2A:D6:E3:6F:71:63:73:6C:BB:32:CE:0D:51:DC:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18489a14-d237-40bd-ae7a-25fe7c7561ef/1ff7a22c-c2b6-33c8-a22b-b1de73c41fe6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18489a14-d237-40bd-ae7a-25fe7c7561ef/18489a14-d237-40bd-ae7a-25fe7c7561ef.crl X509v3 Authority Key Identifier: keyid:BB:7B:55:BC:B8:3E:D2:78:FE:4F:27:20:25:0B:3F:8C:F1:BA:07:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/18489a14-d237-40bd-ae7a-25fe7c7561ef.cer sbgp-ipAddrBlock: critical IPv4: 23.153.168.0/24 198.252.222.0/24 IPv6: 2602:2d9::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:a3:50:9d:86:b3:fc:3d:5e:60:a0:5a:9b:59:67:5c:a0:1b: ce:f9:b4:88:ac:e8:d3:4c:a2:ee:a4:a8:29:28:b6:33:89:49: 36:8b:b7:37:2a:3b:30:d8:4f:ea:6b:f2:52:45:81:1a:fb:4d: 89:25:8a:11:72:02:92:57:b1:eb:5e:43:5e:42:3e:aa:33:25: c3:36:91:03:ba:66:c4:9c:9e:14:86:03:d6:ad:99:13:7e:a2: 14:81:80:68:09:03:be:71:2a:d2:55:d0:a1:66:3d:2a:ab:3e: a1:87:18:71:4c:75:e4:1a:69:04:58:36:42:b4:43:3f:b0:2c: 00:16:a9:e4:28:e7:7c:8b:93:11:41:49:4c:83:39:78:0f:36: 94:df:cb:41:55:d3:5c:35:96:69:b5:5f:0b:ef:12:b0:fb:70: 6f:3e:be:dc:5e:35:53:57:f9:2a:ca:1e:df:7f:fb:a6:3c:df: 09:2e:aa:01:65:83:e3:17:e5:c2:51:50:d2:9c:fc:e6:44:9a: ef:c1:1c:23:7c:7c:88:53:48:ad:03:bc:b3:2e:41:65:a5:39: 6b:53:1f:42:dd:ba:ed:8f:3c:01:a1:8e:b6:99:5e:b0:e0:25: 1b:01:82:54:5a:ec:3d:9e:f7:c8:ce:60:32:5f:74:ab:b6:33: 38:f0:2f:ee -----BEGIN CERTIFICATE----- MIIGWDCCBUCgAwIBAgIUAQ0Mn0MoWE8zHSPLln+4tCL2noAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTg0ODlhMTQtZDIzNy00MGJkLWFlN2EtMjVmZTdjNzU2 MWVmMB4XDTI2MDkxNzAxMDAxMVoXDTI2MTIxNjAyMDAxMVowLzEtMCsGA1UEAxMk ZGZiN2Q1ODgtM2FhYy00MjNjLWJmOGUtNDVlMDk3NWZjNGQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgWNuoSQar5NYlyXbz3/sTvy1lcyhSwYUD/gX 7tlNBOtGHPp17A6TcyHt5sUofagXKFN97D5k8HHBbZKHKBVP67LRy4N3w9oeQBXL oL5k1ESQZU2ASjIN2sg8bISuxZiP3acLr4LpQJlvlZaVOZFWlh0or3gHpeyMikqA bDhuprHUAmn7EZYi3Is3BYSg06vX49UacNEHsbTYEGw721BI9/vONEqegLFkJ5iC aLyWIC+xEq/D3b34AQJTFYBKiBqmYCXYJNHsW9aiLnXReG9qzI1cVrZIRv7CM8sN YJZ0vANnfsmXGnJthVq9+V1bSixtJEppinv8Wy4llcrgKhqVHQIDAQABo4IDajCC A2YwHQYDVR0OBBYEFDyl5SyCKtbjb3Fjc2y7Ms4NUdzuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xODQ4 OWExNC1kMjM3LTQwYmQtYWU3YS0yNWZlN2M3NTYxZWYvMWZmN2EyMmMtYzJiNi0z M2M4LWEyMmItYjFkZTczYzQxZmU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMTg0ODlhMTQtZDIzNy00MGJkLWFl N2EtMjVmZTdjNzU2MWVmLzE4NDg5YTE0LWQyMzctNDBiZC1hZTdhLTI1ZmU3Yzc1 NjFlZi5jcmwwHwYDVR0jBBgwFoAUu3tVvLg+0nj+TycgJQs/jPG6BwgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8xODQ4OWExNC1kMjM3LTQwYmQtYWU3YS0yNWZl N2M3NTYxZWYuY2VyMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQAF5moAwQA xvzeMA0EAgACMAcDBQAmAgLZMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAHajUJ2Gs/w9XmCgWptZZ1ygG875 tIis6NNMou6kqCkotjOJSTaLtzcqOzDYT+pr8lJFgRr7TYklihFyApJXseteQ15C PqozJcM2kQO6ZsScnhSGA9atmRN+ohSBgGgJA75xKtJV0KFmPSqrPqGHGHFMdeQa aQRYNkK0Qz+wLAAWqeQo53yLkxFBSUyDOXgPNpTfy0FV01w1lmm1XwvvErD7cG8+ vtxeNVNX+SrKHt9/+6Y83wkuqgFlg+MX5cJRUNKc/OZEmu/BHCN8fIhTSK0DvLMu QWWlOWtTH0Lduu2PPAGhjraZXrDgJRsBglRa7D2e98jOYDJfdKu2MzjwL+4= -----END CERTIFICATE-----Generated at Sun Sep 20 10:58:28 2026 by rpki-client