$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9facc155-6ad9-43f5-ad2c-2d8ddb0ca78a/847d4837-dad4-36ec-a86b-505d52bdaacb.roa File: 847d4837-dad4-36ec-a86b-505d52bdaacb.roa (raw, json) Hash identifier: Eti4dstMU4SXFhtwthBz1eyLDOtuQd8A6TIFe7VSxAM= Subject key identifier: 32:12:EA:DF:8E:D0:22:55:A9:65:A5:5C:EE:C5:F0:BB:7B:22:4F:DE Certificate issuer: /CN=9facc155-6ad9-43f5-ad2c-2d8ddb0ca78a Certificate serial: 010D0C9F4328584F4987830B2117DC5F6F643240 Authority key identifier: E1:C1:D3:7A:4C:9C:9C:5B:88:AA:59:1C:49:70:60:9B:47:48:6A:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9facc155-6ad9-43f5-ad2c-2d8ddb0ca78a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9facc155-6ad9-43f5-ad2c-2d8ddb0ca78a/847d4837-dad4-36ec-a86b-505d52bdaacb.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 33628 IP address blocks: 23.144.128.0/24 maxlen: 24 69.171.160.0/19 maxlen: 19 2604:840::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9facc155-6ad9-43f5-ad2c-2d8ddb0ca78a/9facc155-6ad9-43f5-ad2c-2d8ddb0ca78a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9facc155-6ad9-43f5-ad2c-2d8ddb0ca78a/9facc155-6ad9-43f5-ad2c-2d8ddb0ca78a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9facc155-6ad9-43f5-ad2c-2d8ddb0ca78a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:87:83:0b:21:17:dc:5f:6f:64:32:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9facc155-6ad9-43f5-ad2c-2d8ddb0ca78a Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=28f4c8d7-8e49-43a4-a51b-92ad8d8d2488 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:5e:00:78:3e:81:74:df:cc:2d:23:41:7f:59: 2a:13:80:79:a3:0e:44:41:cd:de:a7:c7:81:03:d3: dc:c9:c3:2a:c9:a1:04:b5:79:7d:ec:28:f1:e4:ee: 79:4e:fb:0b:12:45:ee:b5:aa:50:00:aa:14:66:41: be:2a:81:c5:f0:e6:37:1b:53:7a:8c:08:a0:5c:a3: be:46:59:df:15:af:d5:0e:38:c1:e5:d7:54:71:47: cb:11:95:43:f1:a6:71:d7:01:29:a1:60:3f:5e:33: 2e:f7:55:b3:55:55:b8:85:97:e8:58:01:e2:72:de: 25:cc:7c:0e:02:be:43:07:88:73:94:5d:25:b4:c8: 48:6b:79:e7:f9:cb:e1:36:2d:10:af:aa:bf:77:53: 05:ce:50:6c:f9:9b:4a:c5:7d:08:ac:50:11:ec:43: d1:f6:df:fa:bd:3e:a5:e9:b4:3e:e9:1e:72:9b:c1: ef:2b:a4:87:e0:45:2f:43:30:0f:04:57:24:bf:73: 9b:13:c4:a7:c9:cd:3b:0f:a2:d0:8c:38:0c:fe:dd: e8:88:e8:f8:79:14:3f:c8:4c:ed:e0:bf:5a:66:0b: 2b:0e:05:69:5a:6e:f2:35:fa:ff:72:64:7b:88:6e: fc:e7:15:e1:eb:78:ed:5e:ab:f5:70:31:8d:67:50: 86:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:12:EA:DF:8E:D0:22:55:A9:65:A5:5C:EE:C5:F0:BB:7B:22:4F:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9facc155-6ad9-43f5-ad2c-2d8ddb0ca78a/847d4837-dad4-36ec-a86b-505d52bdaacb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9facc155-6ad9-43f5-ad2c-2d8ddb0ca78a/9facc155-6ad9-43f5-ad2c-2d8ddb0ca78a.crl X509v3 Authority Key Identifier: keyid:E1:C1:D3:7A:4C:9C:9C:5B:88:AA:59:1C:49:70:60:9B:47:48:6A:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/9facc155-6ad9-43f5-ad2c-2d8ddb0ca78a.cer sbgp-ipAddrBlock: critical IPv4: 23.144.128.0/24 69.171.160.0/19 IPv6: 2604:840::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:c0:28:c2:0d:01:5a:f0:19:5e:88:b6:de:2d:a9:5d:83:3f: 9a:cd:a4:b6:40:3e:e7:04:35:19:8a:5d:b3:62:81:f1:c0:b0: 52:29:bf:b8:79:50:63:a5:59:b2:c2:58:ce:22:f2:aa:95:1e: 68:03:40:1c:62:d1:a2:2d:f7:2f:ef:cf:5a:d5:30:cc:47:51: 85:8b:14:7f:71:42:c6:d9:70:05:32:c6:c1:18:4f:47:b5:2e: b6:fc:b7:74:9b:31:98:86:44:7a:90:7f:3d:e5:1d:14:29:1f: b3:46:f4:fc:57:2b:59:d6:dd:99:55:55:69:14:3b:98:5f:f0: 3b:27:d0:87:b9:3b:fe:6c:0c:40:f6:c9:5b:61:1f:cb:7d:68: ad:2c:f8:44:9a:c3:47:1f:b7:30:60:69:ad:47:9d:5d:0a:16: 63:42:57:88:b2:b9:87:01:43:e7:8f:30:d5:39:1c:0b:8f:1e: da:46:99:ad:b3:89:16:a8:ee:17:16:ff:5a:44:6c:e7:05:30: 1e:57:fa:79:06:9e:54:34:a5:e1:99:26:7c:a8:8f:d6:aa:f6: ab:08:33:5e:82:3c:ba:84:78:01:57:0b:8b:48:c9:2d:3e:65: 2f:d7:ee:31:5e:6c:6a:5c:d7:23:f9:e7:e0:c9:4d:19:42:9c: e2:29:7b:cc -----BEGIN CERTIFICATE----- MIIGWDCCBUCgAwIBAgIUAQ0Mn0MoWE9Jh4MLIRfcX29kMkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWZhY2MxNTUtNmFkOS00M2Y1LWFkMmMtMmQ4ZGRiMGNh NzhhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MjhmNGM4ZDctOGU0OS00M2E0LWE1MWItOTJhZDhkOGQyNDg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsF4AeD6BdN/MLSNBf1kqE4B5ow5EQc3ep8eB A9PcycMqyaEEtXl97Cjx5O55TvsLEkXutapQAKoUZkG+KoHF8OY3G1N6jAigXKO+ RlnfFa/VDjjB5ddUcUfLEZVD8aZx1wEpoWA/XjMu91WzVVW4hZfoWAHict4lzHwO Ar5DB4hzlF0ltMhIa3nn+cvhNi0Qr6q/d1MFzlBs+ZtKxX0IrFAR7EPR9t/6vT6l 6bQ+6R5ym8HvK6SH4EUvQzAPBFckv3ObE8Snyc07D6LQjDgM/t3oiOj4eRQ/yEzt 4L9aZgsrDgVpWm7yNfr/cmR7iG785xXh63jtXqv1cDGNZ1CGOwIDAQABo4IDajCC A2YwHQYDVR0OBBYEFDIS6t+O0CJVqWWlXO7F8Lt7Ik/eMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ZmFj YzE1NS02YWQ5LTQzZjUtYWQyYy0yZDhkZGIwY2E3OGEvODQ3ZDQ4MzctZGFkNC0z NmVjLWE4NmItNTA1ZDUyYmRhYWNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOWZhY2MxNTUtNmFkOS00M2Y1LWFk MmMtMmQ4ZGRiMGNhNzhhLzlmYWNjMTU1LTZhZDktNDNmNS1hZDJjLTJkOGRkYjBj YTc4YS5jcmwwHwYDVR0jBBgwFoAU4cHTekycnFuIqlkcSXBgm0dIahIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ZmFjYzE1NS02YWQ5LTQzZjUtYWQyYy0yZDhk ZGIwY2E3OGEuY2VyMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQAF5CAAwQF RaugMA0EAgACMAcDBQAmBAhAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBABrAKMINAVrwGV6Itt4tqV2DP5rN pLZAPucENRmKXbNigfHAsFIpv7h5UGOlWbLCWM4i8qqVHmgDQBxi0aIt9y/vz1rV MMxHUYWLFH9xQsbZcAUyxsEYT0e1Lrb8t3SbMZiGRHqQfz3lHRQpH7NG9PxXK1nW 3ZlVVWkUO5hf8Dsn0Ie5O/5sDED2yVthH8t9aK0s+ESaw0cftzBgaa1HnV0KFmNC V4iyuYcBQ+ePMNU5HAuPHtpGma2ziRao7hcW/1pEbOcFMB5X+nkGnlQ0peGZJnyo j9aq9qsIM16CPLqEeAFXC4tIyS0+ZS/X7jFebGpc1yP55+DJTRlCnOIpe8w= -----END CERTIFICATE-----Generated at Fri Sep 25 08:45:37 2026 by rpki-client