$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fff22b91-ff6b-40b0-b626-033566818ca6/a49b889f-76a4-3203-9129-fe4a745eeb7c.roa File: a49b889f-76a4-3203-9129-fe4a745eeb7c.roa (raw, json) Hash identifier: eiiT/yWO0Xfow7x6EpEHli5za2pNZRM/2HJIzL8RNj8= Subject key identifier: 5D:25:55:AE:91:C5:2A:E1:61:B9:2E:8C:4F:F9:39:31:A0:E6:48:2B Certificate issuer: /CN=fff22b91-ff6b-40b0-b626-033566818ca6 Certificate serial: 010D0C9F4328584F20F7BE2AA8FB80F5CD58C740 Authority key identifier: B3:6C:20:77:15:8F:D8:5A:0F:F2:17:8A:0B:43:91:2D:2E:12:A7:1F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fff22b91-ff6b-40b0-b626-033566818ca6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fff22b91-ff6b-40b0-b626-033566818ca6/a49b889f-76a4-3203-9129-fe4a745eeb7c.roa Signing time: Thu 10 Sep 2026 13:00:12 +0000 ROA not before: Thu 10 Sep 2026 13:00:12 +0000 ROA not after: Wed 09 Dec 2026 14:00:12 +0000 asID: 19905 IP address blocks: 23.252.240.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fff22b91-ff6b-40b0-b626-033566818ca6/fff22b91-ff6b-40b0-b626-033566818ca6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fff22b91-ff6b-40b0-b626-033566818ca6/fff22b91-ff6b-40b0-b626-033566818ca6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fff22b91-ff6b-40b0-b626-033566818ca6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:20:f7:be:2a:a8:fb:80:f5:cd:58:c7:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fff22b91-ff6b-40b0-b626-033566818ca6 Validity Not Before: Sep 10 13:00:12 2026 GMT Not After : Dec 9 14:00:12 2026 GMT Subject: CN=f6fde864-f72c-48ee-84b1-9258ccc729e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:53:9f:1f:a1:2d:7a:ff:df:a9:5c:2d:c2:86: 12:2c:52:d6:9e:86:a9:9b:5c:61:fb:cf:41:e6:91: d4:90:30:f9:12:29:08:5c:f8:af:60:2e:64:61:f7: fc:fa:7b:ae:02:3c:de:4f:bd:68:f4:d7:f1:3a:77: 86:63:a8:f0:38:15:a9:5a:2e:50:e8:f9:b2:3d:a0: d5:f2:22:55:8a:bc:d6:55:28:44:3d:be:94:26:c4: 8a:6e:c2:73:fc:b9:0c:26:ca:89:c1:39:c4:5a:7b: ee:e4:c9:9a:50:95:95:82:1e:99:37:5f:cb:12:4f: cf:61:31:ae:ea:ba:3e:6a:dd:e0:a6:97:ad:7f:04: 52:a1:97:6f:b0:26:75:d1:7f:91:49:72:01:55:8d: 98:8e:5d:77:55:5d:41:49:a3:56:d7:49:76:0f:fd: 7f:dc:48:c3:bf:60:bf:0f:17:f8:6f:ec:85:c5:15: e4:22:2a:23:d9:1e:97:de:d6:7b:1f:8d:ce:5c:fb: 6d:6e:ab:11:83:1b:a9:1e:08:c2:ca:2e:a8:4b:24: 9f:6e:5e:f3:35:43:9c:3e:ee:ad:0a:77:02:fa:c0: b7:0d:8d:bb:62:c9:ce:04:93:56:27:5b:7c:eb:31: ea:6c:80:95:86:70:98:20:9d:b2:d0:34:a8:05:f4: 5e:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:25:55:AE:91:C5:2A:E1:61:B9:2E:8C:4F:F9:39:31:A0:E6:48:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fff22b91-ff6b-40b0-b626-033566818ca6/a49b889f-76a4-3203-9129-fe4a745eeb7c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fff22b91-ff6b-40b0-b626-033566818ca6/fff22b91-ff6b-40b0-b626-033566818ca6.crl X509v3 Authority Key Identifier: keyid:B3:6C:20:77:15:8F:D8:5A:0F:F2:17:8A:0B:43:91:2D:2E:12:A7:1F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fff22b91-ff6b-40b0-b626-033566818ca6.cer sbgp-ipAddrBlock: critical IPv4: 23.252.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:1f:fe:fa:cb:8c:66:59:f5:99:c7:32:53:f8:c0:1c:4d:31: ae:7d:b0:5e:dc:e0:40:5f:71:c6:f9:ff:5c:02:ae:07:a3:a4: 96:7c:26:48:d3:ba:f0:30:26:bb:33:2f:6b:1f:fa:b4:9e:99: 04:fb:cc:15:88:e6:55:72:b4:32:e0:e7:e2:ab:56:99:78:c1: c4:07:35:4d:09:b6:85:ba:cd:07:47:a6:80:ac:79:c2:0b:9c: 7a:a7:a3:47:4d:b5:b2:21:06:1b:85:e3:c5:8b:98:a7:c9:5e: 6a:3e:d4:9f:b8:c9:70:b6:cf:03:0e:d9:e8:d6:62:71:62:2d: 5a:45:c0:cd:ec:d9:87:dc:28:40:17:5d:73:92:2f:c1:4c:16: 78:8b:53:c4:6c:e7:06:9c:ad:e7:b3:d4:cc:1c:ab:bf:a9:59: 3a:4f:ff:9b:57:9d:4a:f1:e2:81:ee:fb:b7:89:0d:12:9f:67: d7:36:38:67:2e:84:fe:c8:ca:50:11:54:e2:d5:f8:e9:80:c2: e5:cf:53:35:22:a7:c2:83:88:97:6f:8f:94:ab:73:6b:07:29: d2:91:41:5b:74:59:5d:2a:60:db:2d:a2:28:a4:a3:66:b4:97: f7:15:d8:1b:d4:34:57:82:69:04:5a:9c:79:19:9c:be:d0:7d: 2f:e8:cd:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8g974qqPuA9c1Yx0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmZmMjJiOTEtZmY2Yi00MGIwLWI2MjYtMDMzNTY2ODE4 Y2E2MB4XDTI2MDkxMDEzMDAxMloXDTI2MTIwOTE0MDAxMlowLzEtMCsGA1UEAxMk ZjZmZGU4NjQtZjcyYy00OGVlLTg0YjEtOTI1OGNjYzcyOWU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAklOfH6Etev/fqVwtwoYSLFLWnoapm1xh+89B 5pHUkDD5EikIXPivYC5kYff8+nuuAjzeT71o9NfxOneGY6jwOBWpWi5Q6PmyPaDV 8iJVirzWVShEPb6UJsSKbsJz/LkMJsqJwTnEWnvu5MmaUJWVgh6ZN1/LEk/PYTGu 6ro+at3gppetfwRSoZdvsCZ10X+RSXIBVY2Yjl13VV1BSaNW10l2D/1/3EjDv2C/ Dxf4b+yFxRXkIioj2R6X3tZ7H43OXPttbqsRgxupHgjCyi6oSySfbl7zNUOcPu6t CncC+sC3DY27YsnOBJNWJ1t86zHqbICVhnCYIJ2y0DSoBfReFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF0lVa6RxSrhYbkujE/5OTGg5kgrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mZmYy MmI5MS1mZjZiLTQwYjAtYjYyNi0wMzM1NjY4MThjYTYvYTQ5Yjg4OWYtNzZhNC0z MjAzLTkxMjktZmU0YTc0NWVlYjdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZmZmMjJiOTEtZmY2Yi00MGIwLWI2 MjYtMDMzNTY2ODE4Y2E2L2ZmZjIyYjkxLWZmNmItNDBiMC1iNjI2LTAzMzU2Njgx OGNhNi5jcmwwHwYDVR0jBBgwFoAUs2wgdxWP2FoP8heKC0ORLS4Spx8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mZmYyMmI5MS1mZjZiLTQwYjAtYjYyNi0wMzM1 NjY4MThjYTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEF/zwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEwf/vrLjGZZ9ZnHMlP4wBxNMa59sF7c4EBfccb5/1wCrgejpJZ8JkjT uvAwJrszL2sf+rSemQT7zBWI5lVytDLg5+KrVpl4wcQHNU0JtoW6zQdHpoCsecIL nHqno0dNtbIhBhuF48WLmKfJXmo+1J+4yXC2zwMO2ejWYnFiLVpFwM3s2YfcKEAX XXOSL8FMFniLU8Rs5wacreez1Mwcq7+pWTpP/5tXnUrx4oHu+7eJDRKfZ9c2OGcu hP7IylARVOLV+OmAwuXPUzUip8KDiJdvj5Src2sHKdKRQVt0WV0qYNstoiiko2a0 l/cV2BvUNFeCaQRanHkZnL7QfS/ozZQ= -----END CERTIFICATE-----Generated at Mon Sep 28 19:16:32 2026 by rpki-client