$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/a216340c-9104-42d7-90a5-fe4806f786f2/df3bdb22-ad5a-34c6-8f5b-e96a010985cb.roa File: df3bdb22-ad5a-34c6-8f5b-e96a010985cb.roa (raw, json) Hash identifier: eopuEpEq4rr1XhScHVqj9vwgRmX+JP6cmsSTEezwQjU= Subject key identifier: 2D:1A:D4:21:E8:B4:7D:6C:8F:1D:6F:96:14:F1:F6:3B:2F:EA:DD:DF Certificate issuer: /CN=a216340c-9104-42d7-90a5-fe4806f786f2 Certificate serial: 010D0C9F4328584F75A82265FAE5F55D8E647D80 Authority key identifier: 6E:89:D5:48:6E:73:D0:07:3A:9F:51:24:30:53:E2:C9:69:C9:B6:5C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/a216340c-9104-42d7-90a5-fe4806f786f2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/a216340c-9104-42d7-90a5-fe4806f786f2/df3bdb22-ad5a-34c6-8f5b-e96a010985cb.roa Signing time: Sat 10 Oct 2026 21:03:48 +0000 ROA not before: Sat 10 Oct 2026 21:03:48 +0000 ROA not after: Sun 06 Dec 2026 02:00:11 +0000 asID: 25988 IP address blocks: 23.133.112.0/24 maxlen: 24 2602:fdee::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/a216340c-9104-42d7-90a5-fe4806f786f2/a216340c-9104-42d7-90a5-fe4806f786f2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/a216340c-9104-42d7-90a5-fe4806f786f2/a216340c-9104-42d7-90a5-fe4806f786f2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/a216340c-9104-42d7-90a5-fe4806f786f2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:75:a8:22:65:fa:e5:f5:5d:8e:64:7d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a216340c-9104-42d7-90a5-fe4806f786f2 Validity Not Before: Oct 10 21:03:48 2026 GMT Not After : Dec 6 02:00:11 2026 GMT Subject: CN=42835e11-0052-474b-9847-e1b289f80510 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:8c:c6:17:1e:24:ac:53:75:65:b5:6c:8c:32: 77:3f:2a:d7:6f:c5:ed:9e:c3:93:1b:93:bc:08:db: 73:a7:70:ec:5b:b2:10:f6:da:59:97:75:bd:31:1b: a9:cf:89:14:ca:bc:33:48:54:6e:05:cd:dd:ec:0b: 17:26:b8:61:6c:ee:44:cd:e5:8a:6c:d7:c7:ba:80: a8:d0:9b:7a:46:f4:24:2c:53:c9:d1:16:40:52:04: ec:29:2b:fc:cf:37:f8:fb:8a:ec:c9:d4:30:3d:2d: bd:b5:7f:9b:8f:3c:20:b6:47:79:78:25:45:04:94: 0f:ed:58:cf:dd:2d:94:9a:3d:66:69:39:54:32:81: ab:a7:bb:91:02:21:eb:04:74:6c:c3:c0:9b:4e:df: a9:fe:10:34:aa:37:d0:aa:71:9b:5e:0f:29:d1:e0: 0c:36:d5:0c:79:a1:7f:21:5a:a1:ce:f9:55:3c:ed: 82:5d:19:64:71:a2:99:d4:bf:af:15:66:60:89:d8: f9:f7:84:2f:21:22:51:f6:d1:06:44:72:a7:41:f2: a0:eb:c2:5f:01:09:42:5b:8f:95:d1:a3:1e:e9:1c: 25:2d:60:f8:e1:8e:bd:fa:96:74:10:4d:8d:29:2e: cf:a9:b2:e7:22:e3:8c:f9:45:95:a0:ca:b0:10:91: 4a:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:1A:D4:21:E8:B4:7D:6C:8F:1D:6F:96:14:F1:F6:3B:2F:EA:DD:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/a216340c-9104-42d7-90a5-fe4806f786f2/df3bdb22-ad5a-34c6-8f5b-e96a010985cb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/a216340c-9104-42d7-90a5-fe4806f786f2/a216340c-9104-42d7-90a5-fe4806f786f2.crl X509v3 Authority Key Identifier: keyid:6E:89:D5:48:6E:73:D0:07:3A:9F:51:24:30:53:E2:C9:69:C9:B6:5C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/a216340c-9104-42d7-90a5-fe4806f786f2.cer sbgp-ipAddrBlock: critical IPv4: 23.133.112.0/24 IPv6: 2602:fdee::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:48:1e:d1:85:8c:7b:6b:2b:62:43:03:fa:45:72:4d:3f:7c: 8d:46:8f:61:54:53:f3:1b:1a:c8:eb:0b:f1:92:db:ef:c1:a9: cd:6f:76:28:9b:f1:78:e3:1b:32:66:b3:18:65:7b:d7:d0:a1: 16:c7:db:b0:50:09:3e:4f:ef:ad:08:f6:43:f2:6f:e1:fb:58: c9:75:47:72:30:b9:e9:21:b7:f4:3d:ed:e5:69:f7:ab:d3:bd: 51:1d:fb:aa:27:f4:ba:7f:40:7e:d2:2c:31:7d:e8:4b:df:7d: 9a:37:54:1e:5a:8c:a5:f7:75:d0:57:96:fd:84:4d:2d:05:9f: 76:dc:8e:6e:27:0e:29:23:40:1d:ff:fa:9b:35:69:22:e2:16: ba:55:62:b1:6b:a4:35:94:9d:f6:2e:51:7b:a7:be:6c:3d:b5: c4:be:5b:9e:d0:3e:f3:a5:30:8d:1a:8a:ff:62:72:41:ce:f2: a2:a0:41:40:65:f3:95:13:2b:1f:00:f2:ba:71:36:31:5a:91: 9e:ea:c6:54:e7:a8:f4:5a:cb:10:c6:c2:82:2d:c1:81:8d:e3: 33:ef:31:eb:7f:6e:67:b8:6e:74:d5:33:d4:ee:af:cb:bf:76: bb:e6:a2:8a:15:11:9f:46:f0:42:d5:4f:91:ef:39:d3:d5:84: f3:0c:11:44 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE91qCJl+uX1XY5kfYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTIxNjM0MGMtOTEwNC00MmQ3LTkwYTUtZmU0ODA2Zjc4 NmYyMB4XDTI2MTAxMDIxMDM0OFoXDTI2MTIwNjAyMDAxMVowLzEtMCsGA1UEAxMk NDI4MzVlMTEtMDA1Mi00NzRiLTk4NDctZTFiMjg5ZjgwNTEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm4zGFx4krFN1ZbVsjDJ3PyrXb8XtnsOTG5O8 CNtzp3DsW7IQ9tpZl3W9MRupz4kUyrwzSFRuBc3d7AsXJrhhbO5EzeWKbNfHuoCo 0Jt6RvQkLFPJ0RZAUgTsKSv8zzf4+4rsydQwPS29tX+bjzwgtkd5eCVFBJQP7VjP 3S2Umj1maTlUMoGrp7uRAiHrBHRsw8CbTt+p/hA0qjfQqnGbXg8p0eAMNtUMeaF/ IVqhzvlVPO2CXRlkcaKZ1L+vFWZgidj594QvISJR9tEGRHKnQfKg68JfAQlCW4+V 0aMe6RwlLWD44Y69+pZ0EE2NKS7PqbLnIuOM+UWVoMqwEJFKgwIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFC0a1CHotH1sjx1vlhTx9jsv6t3fMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi9hMjE2 MzQwYy05MTA0LTQyZDctOTBhNS1mZTQ4MDZmNzg2ZjIvZGYzYmRiMjItYWQ1YS0z NGM2LThmNWItZTk2YTAxMDk4NWNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82MTVmZTFkZC1k ODI5LTRjODctYjJjYy01Njg5MzgxYTNjNDIvYTIxNjM0MGMtOTEwNC00MmQ3LTkw YTUtZmU0ODA2Zjc4NmYyL2EyMTYzNDBjLTkxMDQtNDJkNy05MGE1LWZlNDgwNmY3 ODZmMi5jcmwwHwYDVR0jBBgwFoAUbonVSG5z0Ac6n1EkMFPiyWnJtlwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4 Ny1iMmNjLTU2ODkzODFhM2M0Mi9hMjE2MzQwYy05MTA0LTQyZDctOTBhNS1mZTQ4 MDZmNzg2ZjIuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF4VwMA4E AgACMAgDBgQmAv3uADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAoSB7RhYx7aytiQwP6RXJNP3yNRo9hVFPz GxrI6wvxktvvwanNb3Yom/F44xsyZrMYZXvX0KEWx9uwUAk+T++tCPZD8m/h+1jJ dUdyMLnpIbf0Pe3lafer071RHfuqJ/S6f0B+0iwxfehL332aN1QeWoyl93XQV5b9 hE0tBZ923I5uJw4pI0Ad//qbNWki4ha6VWKxa6Q1lJ32LlF7p75sPbXEvlue0D7z pTCNGor/YnJBzvKioEFAZfOVEysfAPK6cTYxWpGe6sZU56j0WssQxsKCLcGBjeMz 7zHrf25nuG501TPU7q/Lv3a75qKKFRGfRvBC1U+R7znT1YTzDBFE -----END CERTIFICATE-----Generated at Tue Oct 13 16:38:11 2026 by rpki-client