$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9dc842a-d5cd-4c00-95d8-2542c58d42ee/b8815bee-53b6-34c1-94e0-b17b6a5d8057.roa File: b8815bee-53b6-34c1-94e0-b17b6a5d8057.roa (raw, json) Hash identifier: YcMCwDeGoT6kDv9K8b0OB4w+LnZyus1EHzpjYLFISmQ= Subject key identifier: 33:45:FA:5A:D8:F9:1A:27:A4:2B:9C:61:A7:5A:62:05:DB:E7:32:ED Certificate issuer: /CN=a9dc842a-d5cd-4c00-95d8-2542c58d42ee Certificate serial: 010D0C9F4328584F43DD5569540A441AD5701080 Authority key identifier: 8E:A6:FF:8C:F9:87:23:26:9D:5D:CD:BC:3E:35:A6:99:C2:1F:D9:83 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9dc842a-d5cd-4c00-95d8-2542c58d42ee.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9dc842a-d5cd-4c00-95d8-2542c58d42ee/b8815bee-53b6-34c1-94e0-b17b6a5d8057.roa Signing time: Wed 23 Sep 2026 01:00:12 +0000 ROA not before: Wed 23 Sep 2026 01:00:12 +0000 ROA not after: Tue 22 Dec 2026 02:00:12 +0000 asID: 394019 IP address blocks: 23.139.248.0/24 maxlen: 24 64.239.20.0/23 maxlen: 24 172.96.162.0/24 maxlen: 24 199.79.156.0/24 maxlen: 24 204.115.252.0/23 maxlen: 24 2631:7000::/28 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9dc842a-d5cd-4c00-95d8-2542c58d42ee/a9dc842a-d5cd-4c00-95d8-2542c58d42ee.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9dc842a-d5cd-4c00-95d8-2542c58d42ee/a9dc842a-d5cd-4c00-95d8-2542c58d42ee.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9dc842a-d5cd-4c00-95d8-2542c58d42ee.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:43:dd:55:69:54:0a:44:1a:d5:70:10:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a9dc842a-d5cd-4c00-95d8-2542c58d42ee Validity Not Before: Sep 23 01:00:12 2026 GMT Not After : Dec 22 02:00:12 2026 GMT Subject: CN=1920c112-dd60-4d0a-8b2f-3606911b9e31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:d7:fa:58:77:99:84:52:b3:f0:f4:1f:d4:2b: d5:7e:55:6d:5d:7d:0a:c8:b8:08:b6:cf:f9:ca:4e: 47:3a:28:8e:9a:72:d0:40:67:0a:59:90:82:e7:bc: 6c:c7:af:65:53:fa:7d:81:8e:65:54:ee:a4:55:ab: 81:3f:94:2f:33:c8:9a:fb:fc:91:e8:cb:81:53:a6: 5f:1d:f7:3a:ba:56:ca:92:49:bc:93:cb:cd:21:8a: 46:31:6c:df:f6:7e:95:e1:3a:83:ae:e8:48:52:d3: a5:a3:65:17:86:42:72:bf:5c:15:12:21:67:48:6e: 73:05:71:74:ef:82:fe:9a:88:24:e0:cd:74:77:30: fd:4f:d1:8c:8c:8e:00:da:ad:8e:ee:42:07:1c:f0: f9:57:90:6c:76:d1:8e:c3:01:bf:f1:1b:4d:ca:c1: 81:b0:06:f8:ed:2c:3f:fd:18:ec:f1:b6:c2:5d:5f: 44:e7:a0:d2:e4:8a:02:c1:db:5e:2c:f9:e3:46:72: ed:2a:96:37:e5:0f:21:87:2a:cd:c2:bf:76:4d:34: 7c:17:90:3d:66:6c:3e:65:f7:dc:a2:20:6f:cf:64: 1e:80:51:fd:89:19:b4:85:48:d5:ee:fe:73:cf:63: 20:d7:ea:06:61:96:25:07:6e:7e:56:74:53:77:af: 3e:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:45:FA:5A:D8:F9:1A:27:A4:2B:9C:61:A7:5A:62:05:DB:E7:32:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9dc842a-d5cd-4c00-95d8-2542c58d42ee/b8815bee-53b6-34c1-94e0-b17b6a5d8057.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9dc842a-d5cd-4c00-95d8-2542c58d42ee/a9dc842a-d5cd-4c00-95d8-2542c58d42ee.crl X509v3 Authority Key Identifier: keyid:8E:A6:FF:8C:F9:87:23:26:9D:5D:CD:BC:3E:35:A6:99:C2:1F:D9:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9dc842a-d5cd-4c00-95d8-2542c58d42ee.cer sbgp-ipAddrBlock: critical IPv4: 23.139.248.0/24 64.239.20.0/23 172.96.162.0/24 199.79.156.0/24 204.115.252.0/23 IPv6: 2631:7000::/28 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:b1:70:48:5b:5e:32:e4:10:cf:9a:36:b2:a5:ce:7d:72:91: d1:62:73:ce:4a:28:d1:df:20:33:bd:f0:6a:ad:b5:e5:04:0f: 6a:da:af:77:45:54:df:3c:bf:d7:4c:36:6d:17:75:a7:3c:ea: f8:06:75:7b:42:c1:0d:ed:30:24:d1:7b:3d:c0:a3:77:58:6c: e5:2b:61:d7:4f:3d:f0:d0:8d:7b:5e:3a:ed:52:ce:49:8c:cf: ef:e8:d9:fa:bc:db:1c:3b:e9:d1:c4:ef:34:76:dd:a5:01:b6: 19:ca:e6:b9:2f:2c:4e:a4:e1:34:5d:f7:72:74:17:cc:24:0f: a1:1d:6f:a0:5d:4d:5b:54:0b:6e:4a:ae:f2:8b:e1:cb:05:e5: 2f:83:a5:5c:08:4d:4f:6f:9a:31:2d:67:2a:46:5c:86:b0:d9: 40:f7:ed:82:ff:18:a8:b9:0e:08:a9:24:ec:08:cc:bb:26:5f: 7a:85:a3:8b:51:5b:54:f7:9e:65:bf:d4:f5:05:3c:54:e3:92: f9:16:65:a2:44:0c:98:a0:c9:9d:3e:15:17:a9:ff:4f:7e:34: 4d:d4:dd:d4:8f:a5:0e:2d:e3:9e:6b:0d:6d:69:99:6d:6a:97: 08:8a:e1:a9:c3:64:ef:73:42:6f:57:ff:95:db:9f:53:0f:ac: d7:cd:4b:c8 -----BEGIN CERTIFICATE----- MIIGajCCBVKgAwIBAgIUAQ0Mn0MoWE9D3VVpVApEGtVwEIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTlkYzg0MmEtZDVjZC00YzAwLTk1ZDgtMjU0MmM1OGQ0 MmVlMB4XDTI2MDkyMzAxMDAxMloXDTI2MTIyMjAyMDAxMlowLzEtMCsGA1UEAxMk MTkyMGMxMTItZGQ2MC00ZDBhLThiMmYtMzYwNjkxMWI5ZTMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsNf6WHeZhFKz8PQf1CvVflVtXX0KyLgIts/5 yk5HOiiOmnLQQGcKWZCC57xsx69lU/p9gY5lVO6kVauBP5QvM8ia+/yR6MuBU6Zf Hfc6ulbKkkm8k8vNIYpGMWzf9n6V4TqDruhIUtOlo2UXhkJyv1wVEiFnSG5zBXF0 74L+mogk4M10dzD9T9GMjI4A2q2O7kIHHPD5V5BsdtGOwwG/8RtNysGBsAb47Sw/ /Rjs8bbCXV9E56DS5IoCwdteLPnjRnLtKpY35Q8hhyrNwr92TTR8F5A9Zmw+Zffc oiBvz2QegFH9iRm0hUjV7v5zz2Mg1+oGYZYlB25+VnRTd68+/QIDAQABo4IDfDCC A3gwHQYDVR0OBBYEFDNF+lrY+RonpCucYadaYgXb5zLtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9hOWRj ODQyYS1kNWNkLTRjMDAtOTVkOC0yNTQyYzU4ZDQyZWUvYjg4MTViZWUtNTNiNi0z NGMxLTk0ZTAtYjE3YjZhNWQ4MDU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYTlkYzg0MmEtZDVjZC00YzAwLTk1 ZDgtMjU0MmM1OGQ0MmVlL2E5ZGM4NDJhLWQ1Y2QtNGMwMC05NWQ4LTI1NDJjNThk NDJlZS5jcmwwHwYDVR0jBBgwFoAUjqb/jPmHIyadXc28PjWmmcIf2YMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9hOWRjODQyYS1kNWNkLTRjMDAtOTVkOC0yNTQy YzU4ZDQyZWUuY2VyMEYGCCsGAQUFBwEHAQH/BDcwNTAkBAIAATAeAwQAF4v4AwQB QO8UAwQArGCiAwQAx0+cAwQBzHP8MA0EAgACMAcDBQQmMXAAMFQGA1UdIAEB/wRK MEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5u ZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBACex cEhbXjLkEM+aNrKlzn1ykdFic85KKNHfIDO98GqtteUED2rar3dFVN88v9dMNm0X dac86vgGdXtCwQ3tMCTRez3Ao3dYbOUrYddPPfDQjXteOu1SzkmMz+/o2fq82xw7 6dHE7zR23aUBthnK5rkvLE6k4TRd93J0F8wkD6Edb6BdTVtUC25KrvKL4csF5S+D pVwITU9vmjEtZypGXIaw2UD37YL/GKi5DgipJOwIzLsmX3qFo4tRW1T3nmW/1PUF PFTjkvkWZaJEDJigyZ0+FRep/09+NE3U3dSPpQ4t455rDW1pmW1qlwiK4anDZO9z Qm9X/5Xbn1MPrNfNS8g= -----END CERTIFICATE-----Generated at Tue Sep 29 04:43:28 2026 by rpki-client