$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/950eb4ff-cb65-4e8f-90a9-11392dacfad2/752e54be-47fb-3b53-ab52-4e79fd88e83f.roa File: 752e54be-47fb-3b53-ab52-4e79fd88e83f.roa (raw, json) Hash identifier: tcYEaCWCxCruXjw60zd+f1Cg4cpcrQWnbI4aIjHE8hg= Subject key identifier: 2C:EA:B1:7A:FE:FB:CE:84:48:B8:B5:B8:9C:D5:69:B4:B1:10:68:B1 Certificate issuer: /CN=950eb4ff-cb65-4e8f-90a9-11392dacfad2 Certificate serial: 010D0C9F4328584F374D2AB9F6D38A22E7084980 Authority key identifier: E2:26:3D:77:1D:B9:BC:ED:3B:98:C9:25:A0:C3:9B:06:39:1E:F3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/950eb4ff-cb65-4e8f-90a9-11392dacfad2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/950eb4ff-cb65-4e8f-90a9-11392dacfad2/752e54be-47fb-3b53-ab52-4e79fd88e83f.roa Signing time: Fri 18 Sep 2026 13:00:12 +0000 ROA not before: Fri 18 Sep 2026 13:00:12 +0000 ROA not after: Thu 17 Dec 2026 14:00:12 +0000 asID: 400512 IP address blocks: 23.133.200.0/24 maxlen: 24 2602:fba6::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/950eb4ff-cb65-4e8f-90a9-11392dacfad2/950eb4ff-cb65-4e8f-90a9-11392dacfad2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/950eb4ff-cb65-4e8f-90a9-11392dacfad2/950eb4ff-cb65-4e8f-90a9-11392dacfad2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/950eb4ff-cb65-4e8f-90a9-11392dacfad2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:37:4d:2a:b9:f6:d3:8a:22:e7:08:49:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=950eb4ff-cb65-4e8f-90a9-11392dacfad2 Validity Not Before: Sep 18 13:00:12 2026 GMT Not After : Dec 17 14:00:12 2026 GMT Subject: CN=459937fa-5a70-45cb-9836-fedc8b4cb717 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:3d:83:55:f5:27:e3:9a:0d:03:bc:e7:9c:da: b4:5a:ce:73:1c:c1:3c:cb:54:3d:34:b6:01:e3:8f: c1:28:dd:75:6f:8c:e6:89:08:55:ea:d6:5d:d3:ae: d4:55:53:02:93:1e:60:4c:5e:9e:c3:f5:bf:97:5c: 6c:32:a6:57:92:f6:12:95:e3:dc:54:16:ef:0c:94: 83:c8:8c:e6:f6:56:b7:6a:53:ea:52:52:8c:e3:82: 0b:a5:4f:94:0c:20:be:b7:37:bf:9d:a2:88:9d:55: b1:5e:63:a3:43:4b:07:14:c5:a0:5d:99:35:91:bd: da:0d:3f:b5:0f:65:63:0f:a2:d0:0a:e2:54:a2:77: c0:24:7c:46:7e:20:c1:d6:7f:d1:08:85:8e:3f:16: d4:47:a2:52:5e:9a:f4:37:b4:7f:7b:65:4a:c6:45: 23:eb:90:5c:8b:20:b5:04:d0:65:c8:97:d8:34:fe: 7e:d4:db:27:0f:41:d1:6e:1d:09:b5:78:37:b5:52: 11:7b:7f:e7:58:4a:89:26:70:3e:b9:af:70:5e:dc: 26:b1:a7:16:79:59:24:1c:18:13:4f:a7:4b:8a:bc: 35:ba:af:4e:7f:cc:86:de:06:cf:ca:89:0a:c8:7c: df:ea:e9:e9:00:d4:c3:a3:1d:b7:6e:07:05:75:51: 9a:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:EA:B1:7A:FE:FB:CE:84:48:B8:B5:B8:9C:D5:69:B4:B1:10:68:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/950eb4ff-cb65-4e8f-90a9-11392dacfad2/752e54be-47fb-3b53-ab52-4e79fd88e83f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/950eb4ff-cb65-4e8f-90a9-11392dacfad2/950eb4ff-cb65-4e8f-90a9-11392dacfad2.crl X509v3 Authority Key Identifier: keyid:E2:26:3D:77:1D:B9:BC:ED:3B:98:C9:25:A0:C3:9B:06:39:1E:F3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/950eb4ff-cb65-4e8f-90a9-11392dacfad2.cer sbgp-ipAddrBlock: critical IPv4: 23.133.200.0/24 IPv6: 2602:fba6::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:1e:eb:84:7d:fd:5c:2a:1e:72:a2:34:84:1e:3b:19:a3:3e: 28:ae:f6:2d:82:4c:9a:56:0d:f8:46:e9:9d:27:61:8b:15:89: 3a:bf:d6:cc:6f:37:cd:b8:c2:b3:3e:b0:1c:8b:90:b2:b2:83: 2f:9c:85:27:a9:64:39:17:8e:af:be:d2:93:fb:04:f4:95:6d: ac:f0:f1:8e:98:42:ca:8c:78:00:41:b3:f3:32:29:2c:06:b3: 77:4d:cc:b8:81:d8:ac:d6:04:33:3b:15:9c:28:a7:ec:ac:9b: c2:da:5f:34:96:16:1f:a6:84:12:f9:52:d0:fe:06:4a:c0:b0: 57:76:86:4b:84:8d:cf:26:36:28:23:a8:3b:81:44:c5:fb:df: 65:a8:fb:23:de:27:c7:36:66:f6:ef:df:1e:80:a5:60:83:53: 37:31:3c:03:15:ad:78:3c:b2:b5:19:ec:76:ec:f1:e6:59:40: d7:8e:d9:1c:b1:f9:8e:ca:18:18:e1:50:f8:66:2d:96:f7:8e: 96:98:73:ad:12:7d:a6:2e:60:41:fa:4f:68:d2:ef:44:9c:2e: c9:35:c6:4b:f1:91:23:56:3f:94:b4:a1:21:10:bf:ed:6d:53: ff:e4:c8:f0:d4:3d:15:9e:a9:ee:84:0a:31:77:69:60:ae:92: 77:4f:e0:90 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE83TSq59tOKIucISYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTUwZWI0ZmYtY2I2NS00ZThmLTkwYTktMTEzOTJkYWNm YWQyMB4XDTI2MDkxODEzMDAxMloXDTI2MTIxNzE0MDAxMlowLzEtMCsGA1UEAxMk NDU5OTM3ZmEtNWE3MC00NWNiLTk4MzYtZmVkYzhiNGNiNzE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiz2DVfUn45oNA7znnNq0Ws5zHME8y1Q9NLYB 44/BKN11b4zmiQhV6tZd067UVVMCkx5gTF6ew/W/l1xsMqZXkvYSlePcVBbvDJSD yIzm9la3alPqUlKM44ILpU+UDCC+tze/naKInVWxXmOjQ0sHFMWgXZk1kb3aDT+1 D2VjD6LQCuJUonfAJHxGfiDB1n/RCIWOPxbUR6JSXpr0N7R/e2VKxkUj65BciyC1 BNBlyJfYNP5+1NsnD0HRbh0JtXg3tVIRe3/nWEqJJnA+ua9wXtwmsacWeVkkHBgT T6dLirw1uq9Of8yG3gbPyokKyHzf6unpANTDox23bgcFdVGaUQIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFCzqsXr++86ESLi1uJzVabSxEGixMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85NTBl YjRmZi1jYjY1LTRlOGYtOTBhOS0xMTM5MmRhY2ZhZDIvNzUyZTU0YmUtNDdmYi0z YjUzLWFiNTItNGU3OWZkODhlODNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOTUwZWI0ZmYtY2I2NS00ZThmLTkw YTktMTEzOTJkYWNmYWQyLzk1MGViNGZmLWNiNjUtNGU4Zi05MGE5LTExMzkyZGFj ZmFkMi5jcmwwHwYDVR0jBBgwFoAU4iY9dx25vO07mMkloMObBjke85YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi85NTBlYjRmZi1jYjY1LTRlOGYtOTBhOS0xMTM5 MmRhY2ZhZDIuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF4XIMA4E AgACMAgDBgQmAvumADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAvHuuEff1cKh5yojSEHjsZoz4orvYtgkya Vg34RumdJ2GLFYk6v9bMbzfNuMKzPrAci5CysoMvnIUnqWQ5F46vvtKT+wT0lW2s 8PGOmELKjHgAQbPzMiksBrN3Tcy4gdis1gQzOxWcKKfsrJvC2l80lhYfpoQS+VLQ /gZKwLBXdoZLhI3PJjYoI6g7gUTF+99lqPsj3ifHNmb2798egKVgg1M3MTwDFa14 PLK1Gex27PHmWUDXjtkcsfmOyhgY4VD4Zi2W946WmHOtEn2mLmBB+k9o0u9EnC7J NcZL8ZEjVj+UtKEhEL/tbVP/5Mjw1D0VnqnuhAoxd2lgrpJ3T+CQ -----END CERTIFICATE-----Generated at Mon Sep 21 15:37:02 2026 by rpki-client