$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/70379220-49c0-45f2-94d3-098a72b1db54/2dfe31c7-54ee-3017-8637-ce67fd53b424.roa File: 2dfe31c7-54ee-3017-8637-ce67fd53b424.roa (raw, json) Hash identifier: n0JnsdBV01xenyniMSojiJ/tkYwSvl2/0FwnXYuWC/g= Subject key identifier: C4:FC:B3:F2:74:26:0B:D8:EB:8C:70:14:A0:63:C3:85:73:42:76:EB Certificate issuer: /CN=70379220-49c0-45f2-94d3-098a72b1db54 Certificate serial: 010D0C9F4328584F498B4D8BDD417BA2A24B5F80 Authority key identifier: DE:AE:5B:59:16:A5:88:64:34:27:20:3B:E1:A0:9C:5E:69:FB:57:BD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/70379220-49c0-45f2-94d3-098a72b1db54.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/70379220-49c0-45f2-94d3-098a72b1db54/2dfe31c7-54ee-3017-8637-ce67fd53b424.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 400656 IP address blocks: 23.135.152.0/23 maxlen: 23 2606:cb40::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/70379220-49c0-45f2-94d3-098a72b1db54/70379220-49c0-45f2-94d3-098a72b1db54.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/70379220-49c0-45f2-94d3-098a72b1db54/70379220-49c0-45f2-94d3-098a72b1db54.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/70379220-49c0-45f2-94d3-098a72b1db54.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 16 Oct 2026 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:8b:4d:8b:dd:41:7b:a2:a2:4b:5f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70379220-49c0-45f2-94d3-098a72b1db54 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=46af51d5-22d2-4209-82f1-8adc5efb5fef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:df:e0:77:08:1f:80:f6:d2:3f:72:af:d0:32: 63:12:19:b6:41:17:7b:79:99:85:a2:bc:ab:1c:0f: bf:f8:94:9d:80:c1:58:80:8a:b4:87:07:25:cb:03: fc:c8:c4:20:72:dd:df:d1:b8:78:ff:3a:00:c4:ab: 7d:4c:e1:97:8e:30:fd:ae:5c:60:cd:2f:02:ac:d7: f0:cf:c8:3c:85:07:3a:a5:16:6c:ab:1c:e5:8c:19: a6:ed:7c:72:a0:3a:1a:2f:24:87:44:40:96:29:c5: c5:9f:72:67:f8:fc:21:58:32:5c:f6:e8:8c:08:79: 01:25:89:b7:ba:c1:02:39:25:1c:69:45:85:87:e3: ec:17:ea:d9:dc:ab:99:d9:bb:18:94:ef:20:53:c6: 88:9a:0d:27:7e:be:15:78:7a:e5:2d:b6:e3:30:af: c7:14:59:c8:49:bb:eb:40:ae:4f:70:a1:4e:97:dc: f4:a4:fb:94:cb:c5:5c:67:e8:25:56:aa:0f:ef:64: 2e:fc:d5:17:db:d3:b0:dc:bc:9f:8b:46:f5:a4:08: 1f:fc:ab:ed:bc:f9:21:b2:9e:82:49:04:d4:c2:90: 2f:ef:48:91:5d:40:6e:22:3b:ac:fd:b4:ce:93:71: 10:a9:dd:1b:41:da:38:98:21:d1:ba:d1:74:2d:9b: 63:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:FC:B3:F2:74:26:0B:D8:EB:8C:70:14:A0:63:C3:85:73:42:76:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/70379220-49c0-45f2-94d3-098a72b1db54/2dfe31c7-54ee-3017-8637-ce67fd53b424.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/70379220-49c0-45f2-94d3-098a72b1db54/70379220-49c0-45f2-94d3-098a72b1db54.crl X509v3 Authority Key Identifier: keyid:DE:AE:5B:59:16:A5:88:64:34:27:20:3B:E1:A0:9C:5E:69:FB:57:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/70379220-49c0-45f2-94d3-098a72b1db54.cer sbgp-ipAddrBlock: critical IPv4: 23.135.152.0/23 IPv6: 2606:cb40::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ab:6d:a3:41:0a:2d:54:cb:0f:d3:fd:79:31:e8:0c:cd:53:56: 77:af:4d:1a:3e:fc:fd:42:a5:51:5d:dc:f5:cd:5a:64:81:9d: f2:be:2c:79:ae:3a:2b:2b:0b:36:ff:36:42:08:e5:4f:77:af: 0a:fa:98:2e:16:5f:17:f0:55:73:22:21:e7:c2:9b:be:af:70: e6:b8:b7:c7:58:f9:6a:07:ce:91:bb:00:7b:21:b6:e7:be:09: 4c:4b:0e:17:04:7c:f5:9d:20:6c:ca:54:91:38:ae:cc:28:16: ff:f9:9f:5e:d4:40:a9:cb:ab:8b:d9:f6:a0:47:6a:cf:ab:18: b4:cd:e0:c5:b8:38:cd:be:96:af:0a:24:18:8e:26:67:66:74: bd:1a:80:f3:b7:2b:7f:f2:47:6c:7d:e9:cd:8f:4d:5f:18:40: 93:1e:96:a1:5f:96:3b:fb:35:21:bb:69:e8:25:e0:23:6a:cd: f1:4c:94:e7:c7:be:2f:b7:ae:f3:19:d1:4a:4f:c2:0f:b6:73: d8:4d:df:e1:71:6b:b8:1e:d9:e1:9a:87:05:42:20:c6:bd:c6: 57:ba:95:1b:ec:d0:9a:10:56:e0:16:cd:a6:17:4c:9b:1b:a1: c6:e7:23:94:1e:c6:c1:b4:3b:27:ab:81:27:b2:7b:3e:12:5a: 79:53:6a:3d -----BEGIN CERTIFICATE----- MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWE9Ji02L3UF7oqJLX4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzAzNzkyMjAtNDljMC00NWYyLTk0ZDMtMDk4YTcyYjFk YjU0MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NDZhZjUxZDUtMjJkMi00MjA5LTgyZjEtOGFkYzVlZmI1ZmVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzt/gdwgfgPbSP3Kv0DJjEhm2QRd7eZmForyr HA+/+JSdgMFYgIq0hwclywP8yMQgct3f0bh4/zoAxKt9TOGXjjD9rlxgzS8CrNfw z8g8hQc6pRZsqxzljBmm7XxyoDoaLySHRECWKcXFn3Jn+PwhWDJc9uiMCHkBJYm3 usECOSUcaUWFh+PsF+rZ3KuZ2bsYlO8gU8aImg0nfr4VeHrlLbbjMK/HFFnISbvr QK5PcKFOl9z0pPuUy8VcZ+glVqoP72Qu/NUX29Ow3Lyfi0b1pAgf/KvtvPkhsp6C SQTUwpAv70iRXUBuIjus/bTOk3EQqd0bQdo4mCHRutF0LZtj9QIDAQABo4IDZDCC A2AwHQYDVR0OBBYEFMT8s/J0JgvY64xwFKBjw4VzQnbrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83MDM3 OTIyMC00OWMwLTQ1ZjItOTRkMy0wOThhNzJiMWRiNTQvMmRmZTMxYzctNTRlZS0z MDE3LTg2MzctY2U2N2ZkNTNiNDI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNzAzNzkyMjAtNDljMC00NWYyLTk0 ZDMtMDk4YTcyYjFkYjU0LzcwMzc5MjIwLTQ5YzAtNDVmMi05NGQzLTA5OGE3MmIx ZGI1NC5jcmwwHwYDVR0jBBgwFoAU3q5bWRaliGQ0JyA74aCcXmn7V70wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy83MDM3OTIyMC00OWMwLTQ1ZjItOTRkMy0wOThh NzJiMWRiNTQuY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQBF4eYMA0E AgACMAcDBQAmBstAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0 bWwwDQYJKoZIhvcNAQELBQADggEBAKtto0EKLVTLD9P9eTHoDM1TVnevTRo+/P1C pVFd3PXNWmSBnfK+LHmuOisrCzb/NkII5U93rwr6mC4WXxfwVXMiIefCm76vcOa4 t8dY+WoHzpG7AHshtue+CUxLDhcEfPWdIGzKVJE4rswoFv/5n17UQKnLq4vZ9qBH as+rGLTN4MW4OM2+lq8KJBiOJmdmdL0agPO3K3/yR2x96c2PTV8YQJMelqFfljv7 NSG7aegl4CNqzfFMlOfHvi+3rvMZ0UpPwg+2c9hN3+Fxa7ge2eGahwVCIMa9xle6 lRvs0JoQVuAWzaYXTJsbocbnI5QexsG0OyergSeyez4SWnlTaj0= -----END CERTIFICATE-----Generated at Tue Oct 13 21:06:19 2026 by rpki-client