$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bc769cb3-6db0-473f-8d72-194e7017b9ce/30329946-a117-3cd6-b1d6-a6ab3b253619.roa File: 30329946-a117-3cd6-b1d6-a6ab3b253619.roa (raw, json) Hash identifier: sbtwZ24Ox3aiy49DAkiPmDYTkMOzok5vi/Y8JkBseYc= Subject key identifier: 0D:29:A7:FD:2E:A6:7B:77:E2:5A:0F:C5:70:E4:98:8F:8C:0B:9E:A4 Certificate issuer: /CN=bc769cb3-6db0-473f-8d72-194e7017b9ce Certificate serial: 010D0C9F4328584F3E4806ECAED51A1AD9115F40 Authority key identifier: 02:65:3A:B1:13:02:34:70:05:B4:E5:BC:F2:49:FD:65:84:67:34:1C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bc769cb3-6db0-473f-8d72-194e7017b9ce.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bc769cb3-6db0-473f-8d72-194e7017b9ce/30329946-a117-3cd6-b1d6-a6ab3b253619.roa Signing time: Mon 21 Sep 2026 01:00:11 +0000 ROA not before: Mon 21 Sep 2026 01:00:11 +0000 ROA not after: Sun 20 Dec 2026 02:00:11 +0000 asID: 36530 IP address blocks: 23.142.132.0/24 maxlen: 24 2602:f614::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bc769cb3-6db0-473f-8d72-194e7017b9ce/bc769cb3-6db0-473f-8d72-194e7017b9ce.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bc769cb3-6db0-473f-8d72-194e7017b9ce/bc769cb3-6db0-473f-8d72-194e7017b9ce.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bc769cb3-6db0-473f-8d72-194e7017b9ce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3e:48:06:ec:ae:d5:1a:1a:d9:11:5f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bc769cb3-6db0-473f-8d72-194e7017b9ce Validity Not Before: Sep 21 01:00:11 2026 GMT Not After : Dec 20 02:00:11 2026 GMT Subject: CN=217f8143-6b8d-40f5-834d-787342ff03a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:b6:f2:0e:9d:e5:4e:c1:92:a1:98:75:ec:70: 85:fa:ea:d5:58:c5:04:bb:d9:75:6a:bb:c6:23:10: 23:ba:15:c4:7a:68:67:fb:0e:77:e2:ef:33:37:d9: f6:79:8a:b9:c7:c0:6b:51:9f:8a:4f:a6:07:eb:57: e5:8c:cf:60:5c:ba:d9:53:13:96:94:88:4f:14:1b: 22:f0:12:6f:56:02:c8:63:09:fc:fa:42:10:a0:fc: dc:46:7c:44:d3:4f:09:58:3a:fd:5e:be:01:87:de: 3c:ae:d1:0b:55:90:d3:39:09:e0:e8:6f:a3:b1:4b: a8:f8:a7:e0:8d:77:30:7d:4a:d0:d0:43:e4:ab:6a: 4d:39:4a:b5:9b:5b:62:7b:cc:f3:0a:e7:c7:5d:ac: 9f:f3:d0:47:03:40:14:4a:21:df:96:c6:5e:3e:38: c8:07:10:de:8b:46:1e:0c:66:0e:db:d6:37:4f:b5: f2:80:9e:50:d3:87:e6:b5:7c:9c:44:42:65:fc:79: 48:bf:b0:a1:4c:32:46:4f:ca:2f:4d:cc:ba:86:7c: 8d:b1:64:b2:e1:67:fd:e2:23:a8:61:c4:6a:c9:d1: a9:6a:c0:31:5d:4c:33:14:7e:87:4d:5a:c8:50:97: d0:25:92:f5:c7:5a:83:f4:13:81:42:e0:b1:39:cf: 63:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:29:A7:FD:2E:A6:7B:77:E2:5A:0F:C5:70:E4:98:8F:8C:0B:9E:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bc769cb3-6db0-473f-8d72-194e7017b9ce/30329946-a117-3cd6-b1d6-a6ab3b253619.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bc769cb3-6db0-473f-8d72-194e7017b9ce/bc769cb3-6db0-473f-8d72-194e7017b9ce.crl X509v3 Authority Key Identifier: keyid:02:65:3A:B1:13:02:34:70:05:B4:E5:BC:F2:49:FD:65:84:67:34:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bc769cb3-6db0-473f-8d72-194e7017b9ce.cer sbgp-ipAddrBlock: critical IPv4: 23.142.132.0/24 IPv6: 2602:f614::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:ef:f1:27:57:74:3f:49:1d:de:24:bd:69:21:c2:f4:77:b4: ab:62:1b:a5:fc:f7:9f:12:64:7f:53:75:03:06:5b:9d:4b:1c: cb:09:02:97:9e:ba:76:ba:c9:52:90:9c:66:50:5a:a8:69:55: b2:43:2b:89:ff:92:c6:9b:8d:28:90:af:40:f5:1c:09:51:9c: fc:59:46:a6:70:f1:68:cc:75:21:37:07:cc:94:24:5d:ac:5e: 82:ef:c1:99:44:12:ef:96:78:26:f9:67:c1:7f:27:9d:56:d5: 1e:fc:a5:8e:a6:74:f6:81:49:d2:7d:36:c7:59:20:b5:46:7d: 1d:02:58:73:87:20:05:17:8d:07:6b:b5:07:2b:a0:ce:14:c8: 3f:5a:a0:06:4e:be:fd:48:ad:7f:93:99:a0:f1:72:03:99:47: 9a:45:29:42:bd:e6:eb:3c:9d:d4:81:c4:59:6c:d9:57:0c:8c: 86:49:54:98:98:69:21:1e:fc:00:fa:54:75:cd:b3:7c:57:4b: 04:1e:bc:c5:59:44:98:57:bb:3b:1f:45:dc:c8:68:5d:8c:c3: f7:3a:c5:8b:46:2f:4d:c0:f4:05:2e:a0:1a:ff:21:d9:74:0d: 9f:dc:d6:c7:43:8c:c9:20:e2:2b:4c:00:56:11:0d:8a:d8:19: f1:6d:2d:5d -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE8+SAbsrtUaGtkRX0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmM3NjljYjMtNmRiMC00NzNmLThkNzItMTk0ZTcwMTdi OWNlMB4XDTI2MDkyMTAxMDAxMVoXDTI2MTIyMDAyMDAxMVowLzEtMCsGA1UEAxMk MjE3ZjgxNDMtNmI4ZC00MGY1LTgzNGQtNzg3MzQyZmYwM2EzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlrbyDp3lTsGSoZh17HCF+urVWMUEu9l1arvG IxAjuhXEemhn+w534u8zN9n2eYq5x8BrUZ+KT6YH61fljM9gXLrZUxOWlIhPFBsi 8BJvVgLIYwn8+kIQoPzcRnxE008JWDr9Xr4Bh948rtELVZDTOQng6G+jsUuo+Kfg jXcwfUrQ0EPkq2pNOUq1m1tie8zzCufHXayf89BHA0AUSiHflsZePjjIBxDei0Ye DGYO29Y3T7XygJ5Q04fmtXycREJl/HlIv7ChTDJGT8ovTcy6hnyNsWSy4Wf94iOo YcRqydGpasAxXUwzFH6HTVrIUJfQJZL1x1qD9BOBQuCxOc9j+wIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFA0pp/0upnt34loPxXDkmI+MC56kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iYzc2 OWNiMy02ZGIwLTQ3M2YtOGQ3Mi0xOTRlNzAxN2I5Y2UvMzAzMjk5NDYtYTExNy0z Y2Q2LWIxZDYtYTZhYjNiMjUzNjE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYmM3NjljYjMtNmRiMC00NzNmLThk NzItMTk0ZTcwMTdiOWNlL2JjNzY5Y2IzLTZkYjAtNDczZi04ZDcyLTE5NGU3MDE3 YjljZS5jcmwwHwYDVR0jBBgwFoAUAmU6sRMCNHAFtOW88kn9ZYRnNBwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9iYzc2OWNiMy02ZGIwLTQ3M2YtOGQ3Mi0xOTRl NzAxN2I5Y2UuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF46EMA4E AgACMAgDBgAmAvYUADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCK7/EnV3Q/SR3eJL1pIcL0d7SrYhul/Pef EmR/U3UDBludSxzLCQKXnrp2uslSkJxmUFqoaVWyQyuJ/5LGm40okK9A9RwJUZz8 WUamcPFozHUhNwfMlCRdrF6C78GZRBLvlngm+WfBfyedVtUe/KWOpnT2gUnSfTbH WSC1Rn0dAlhzhyAFF40Ha7UHK6DOFMg/WqAGTr79SK1/k5mg8XIDmUeaRSlCvebr PJ3UgcRZbNlXDIyGSVSYmGkhHvwA+lR1zbN8V0sEHrzFWUSYV7s7H0XcyGhdjMP3 OsWLRi9NwPQFLqAa/yHZdA2f3NbHQ4zJIOIrTABWEQ2K2BnxbS1d -----END CERTIFICATE-----Generated at Tue Sep 22 00:38:15 2026 by rpki-client