$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee/9fde2a69-c53f-33bf-b93e-6aeaad30d17e.roa File: 9fde2a69-c53f-33bf-b93e-6aeaad30d17e.roa (raw, json) Hash identifier: 0GZzgtTU/OsQYe1KhkN/zWS3j/2o07fGhHteqxAgyJA= Subject key identifier: EF:A5:C0:41:A5:A8:FD:36:19:29:17:5D:B6:8D:F0:40:11:97:0B:F4 Certificate issuer: /CN=52e7b96d-0aa5-402a-b2fe-337d7c207eee Certificate serial: 010D0C9F4328584F119CF1E3D8047565F6760E00 Authority key identifier: 9B:6A:6C:86:9C:34:20:C4:8F:63:A2:11:A4:03:41:1A:D2:5D:9F:31 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee/9fde2a69-c53f-33bf-b93e-6aeaad30d17e.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 13780 IP address blocks: 23.128.88.0/24 maxlen: 24 2602:fc09::/36 maxlen: 36 2602:fc09::/40 maxlen: 40 2602:fc09:800::/40 maxlen: 40 2602:fc09:805::/48 maxlen: 48 2602:fc09:818::/48 maxlen: 48 2602:fc09:a00::/40 maxlen: 40 2602:fc09:d2f::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee/52e7b96d-0aa5-402a-b2fe-337d7c207eee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee/52e7b96d-0aa5-402a-b2fe-337d7c207eee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:9c:f1:e3:d8:04:75:65:f6:76:0e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52e7b96d-0aa5-402a-b2fe-337d7c207eee Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=f0aa5c12-6261-4cc9-a061-99e65619053e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:be:37:17:f7:32:e6:f6:8a:b9:fe:34:5e:84: a8:d4:6e:91:8d:3d:ce:f0:58:f4:31:7e:ce:48:b4: ce:0f:1e:c6:3a:b3:55:7e:c6:ca:16:24:b7:86:ab: 64:8a:c5:e5:f7:82:f5:82:ea:97:31:72:43:5b:5f: a1:34:c7:69:68:55:75:72:dc:ac:3d:a0:85:ed:b6: 3f:8e:53:c2:fd:1a:f6:c6:16:c4:33:7d:50:e9:e7: 54:77:d0:f4:d3:f0:23:11:34:af:14:a4:6f:63:84: b1:f5:cc:48:a0:e8:bf:f7:e0:81:70:24:be:b3:ae: 81:4b:92:82:62:66:91:a5:90:67:ef:a8:af:49:9d: a7:bc:b8:7b:c5:17:27:41:9e:c2:ce:ca:19:ff:78: a7:4c:69:12:a3:16:0a:92:a7:1c:53:b1:3d:55:11: 3a:a3:91:34:cb:cd:ae:cf:99:cb:86:70:b6:69:10: 87:a6:c2:a4:4f:7c:28:6b:98:f2:9e:63:9a:62:e8: 4f:fd:93:c0:73:7f:c6:57:6b:82:c7:ca:bc:2b:7c: 61:17:82:8e:be:2c:53:79:60:7f:64:7f:df:71:92: 2a:03:94:f8:73:88:99:cc:a5:a9:c7:36:dc:43:cc: 6c:4c:66:15:69:11:9b:c5:b0:82:9f:eb:7f:b7:f5: 20:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:A5:C0:41:A5:A8:FD:36:19:29:17:5D:B6:8D:F0:40:11:97:0B:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee/9fde2a69-c53f-33bf-b93e-6aeaad30d17e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee/52e7b96d-0aa5-402a-b2fe-337d7c207eee.crl X509v3 Authority Key Identifier: keyid:9B:6A:6C:86:9C:34:20:C4:8F:63:A2:11:A4:03:41:1A:D2:5D:9F:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/52e7b96d-0aa5-402a-b2fe-337d7c207eee.cer sbgp-ipAddrBlock: critical IPv4: 23.128.88.0/24 IPv6: 2602:fc09::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:cc:b7:b2:32:ce:bc:eb:90:04:a3:f4:90:9b:a9:74:36:52: 21:4f:8f:9a:b1:51:17:1e:15:c0:ec:17:49:f9:50:c1:92:f4: 8e:34:18:1e:95:bf:df:82:82:d3:07:9f:2b:c2:0a:05:3e:e0: 8e:57:b8:af:13:d7:ac:53:ed:b5:1b:13:29:8c:6c:9f:95:f3: 62:ed:b0:f5:02:61:74:01:64:46:28:0c:5d:da:c1:95:41:68: 05:6a:0a:75:37:83:f0:14:49:66:19:ec:b5:2f:7d:30:34:60: 4f:e9:ed:f3:c2:ce:3b:30:42:62:6c:96:2c:98:dc:12:48:ea: 5e:b5:31:0d:66:3d:69:fe:02:dd:e5:e5:3b:88:2b:96:de:34: 98:5d:71:2e:e7:98:5f:6f:b9:12:77:c3:da:1d:bc:05:ca:49: b8:a2:41:27:7b:51:55:1b:93:a9:c2:de:fc:cc:6e:23:83:96: b6:30:fc:c7:80:69:12:84:5e:da:c3:8a:13:17:7c:5a:75:bd: 5e:f3:89:58:86:c0:8c:cb:97:ec:84:9d:12:63:89:1a:0a:02: 49:09:42:01:44:19:d3:9b:ba:09:a7:a0:b3:00:4f:af:3e:36: 7a:f5:20:30:37:06:32:3b:28:10:64:5e:5c:85:d2:9b:4c:1a: 86:5a:49:fd -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE8RnPHj2AR1ZfZ2DgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTJlN2I5NmQtMGFhNS00MDJhLWIyZmUtMzM3ZDdjMjA3 ZWVlMB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk ZjBhYTVjMTItNjI2MS00Y2M5LWEwNjEtOTllNjU2MTkwNTNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuL43F/cy5vaKuf40XoSo1G6RjT3O8Fj0MX7O SLTODx7GOrNVfsbKFiS3hqtkisXl94L1guqXMXJDW1+hNMdpaFV1ctysPaCF7bY/ jlPC/Rr2xhbEM31Q6edUd9D00/AjETSvFKRvY4Sx9cxIoOi/9+CBcCS+s66BS5KC YmaRpZBn76ivSZ2nvLh7xRcnQZ7CzsoZ/3inTGkSoxYKkqccU7E9VRE6o5E0y82u z5nLhnC2aRCHpsKkT3woa5jynmOaYuhP/ZPAc3/GV2uCx8q8K3xhF4KOvixTeWB/ ZH/fcZIqA5T4c4iZzKWpxzbcQ8xsTGYVaRGbxbCCn+t/t/UgKQIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFO+lwEGlqP02GSkXXbaN8EARlwv0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MmU3 Yjk2ZC0wYWE1LTQwMmEtYjJmZS0zMzdkN2MyMDdlZWUvOWZkZTJhNjktYzUzZi0z M2JmLWI5M2UtNmFlYWFkMzBkMTdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTJlN2I5NmQtMGFhNS00MDJhLWIy ZmUtMzM3ZDdjMjA3ZWVlLzUyZTdiOTZkLTBhYTUtNDAyYS1iMmZlLTMzN2Q3YzIw N2VlZS5jcmwwHwYDVR0jBBgwFoAUm2pshpw0IMSPY6IRpANBGtJdnzEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81MmU3Yjk2ZC0wYWE1LTQwMmEtYjJmZS0zMzdk N2MyMDdlZWUuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF4BYMA4E AgACMAgDBgQmAvwJADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB5zLeyMs6865AEo/SQm6l0NlIhT4+asVEX HhXA7BdJ+VDBkvSONBgelb/fgoLTB58rwgoFPuCOV7ivE9esU+21GxMpjGyflfNi 7bD1AmF0AWRGKAxd2sGVQWgFagp1N4PwFElmGey1L30wNGBP6e3zws47MEJibJYs mNwSSOpetTENZj1p/gLd5eU7iCuW3jSYXXEu55hfb7kSd8PaHbwFykm4okEne1FV G5Opwt78zG4jg5a2MPzHgGkShF7aw4oTF3xadb1e84lYhsCMy5fshJ0SY4kaCgJJ CUIBRBnTm7oJp6CzAE+vPjZ69SAwNwYyOygQZF5chdKbTBqGWkn9 -----END CERTIFICATE-----Generated at Wed Sep 23 02:31:10 2026 by rpki-client