$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1e63fa3c-b623-45ed-bc50-5c5f6ce1eee8/ffa6eba1-18c5-3edf-aa1a-c54cd4005f2e.roa File: ffa6eba1-18c5-3edf-aa1a-c54cd4005f2e.roa (raw, json) Hash identifier: NDi9ZSXh3RR/RhUQqsA4hHJne77DaN3v8HsUBzAaZ2w= Subject key identifier: 53:06:5C:3A:86:10:F5:86:03:DB:57:78:82:12:35:40:71:67:C2:41 Certificate issuer: /CN=1e63fa3c-b623-45ed-bc50-5c5f6ce1eee8 Certificate serial: 010D0C9F4328584F4973D831653605D1E3F03180 Authority key identifier: A3:09:D6:17:BA:B5:31:E5:FF:31:15:22:A3:4C:14:52:22:60:53:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1e63fa3c-b623-45ed-bc50-5c5f6ce1eee8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1e63fa3c-b623-45ed-bc50-5c5f6ce1eee8/ffa6eba1-18c5-3edf-aa1a-c54cd4005f2e.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 398292 IP address blocks: 23.158.48.0/24 maxlen: 24 169.197.156.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1e63fa3c-b623-45ed-bc50-5c5f6ce1eee8/1e63fa3c-b623-45ed-bc50-5c5f6ce1eee8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1e63fa3c-b623-45ed-bc50-5c5f6ce1eee8/1e63fa3c-b623-45ed-bc50-5c5f6ce1eee8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1e63fa3c-b623-45ed-bc50-5c5f6ce1eee8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:d8:31:65:36:05:d1:e3:f0:31:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1e63fa3c-b623-45ed-bc50-5c5f6ce1eee8 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=f96b62a5-026a-42b4-b660-e2a4a4c694c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:a1:f2:69:a3:9c:aa:83:8f:18:64:a1:51:5f: 8e:7e:bd:f3:ef:bc:d9:b0:e2:91:54:69:0d:54:a6: 1d:ea:fc:e1:cb:c9:7b:6f:92:ca:77:2f:b7:18:4e: 1c:33:f9:88:23:3c:c5:25:dc:24:5a:87:33:59:39: f6:cf:af:e7:bd:77:c1:93:45:5a:e5:54:a9:81:ab: e4:74:08:6f:29:8f:97:63:b8:7e:ff:7f:76:7b:37: 51:2b:8e:55:14:2f:83:2c:36:5c:71:aa:6c:da:ae: 42:a7:5c:67:8d:51:41:10:7b:a5:ca:ba:a8:4e:ad: 49:39:41:66:27:19:27:8e:6a:7e:63:22:76:4c:56: 65:cc:57:ed:28:79:33:b3:38:56:6c:c8:05:b1:3f: 05:37:66:92:7d:fc:cc:21:12:f3:a3:e4:b9:77:d3: 3b:32:3a:ad:72:f4:77:d5:ee:7e:b0:3d:b0:48:d2: 1a:4d:05:6a:99:bf:73:a4:11:3b:c2:48:07:d9:34: 75:bb:28:0d:32:d5:33:14:9e:13:a7:b4:21:95:a2: 82:a3:37:cf:98:19:88:66:11:4a:f0:c0:a3:5f:72: 87:40:03:71:b0:ba:e3:64:50:83:22:98:db:19:fb: 95:16:df:4b:17:f1:94:34:2e:c0:ee:b0:f2:18:6c: 66:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:06:5C:3A:86:10:F5:86:03:DB:57:78:82:12:35:40:71:67:C2:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1e63fa3c-b623-45ed-bc50-5c5f6ce1eee8/ffa6eba1-18c5-3edf-aa1a-c54cd4005f2e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1e63fa3c-b623-45ed-bc50-5c5f6ce1eee8/1e63fa3c-b623-45ed-bc50-5c5f6ce1eee8.crl X509v3 Authority Key Identifier: keyid:A3:09:D6:17:BA:B5:31:E5:FF:31:15:22:A3:4C:14:52:22:60:53:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1e63fa3c-b623-45ed-bc50-5c5f6ce1eee8.cer sbgp-ipAddrBlock: critical IPv4: 23.158.48.0/24 169.197.156.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:fb:bb:97:9a:6c:51:53:12:79:22:5e:bb:52:0e:4b:f2:75: 61:d6:33:8a:d1:24:5c:8c:d0:6e:dc:36:db:3b:b8:0d:0a:82: 0c:5b:b6:bf:75:0d:99:4e:1f:76:bb:63:a1:38:b2:0b:82:e3: 50:ab:a3:18:e5:8e:11:73:1f:f1:35:c6:45:ad:99:0b:69:13: 91:82:9f:2c:6a:dc:25:82:b1:19:a5:df:b4:07:d3:ec:f7:94: 2f:2c:49:13:76:09:4d:48:7a:09:52:ab:f3:79:98:97:3f:71: 2e:e3:bd:ef:ca:7f:a9:49:9e:30:56:36:c8:5d:54:73:b1:97: 21:93:e5:9d:b7:97:48:c0:8e:cf:5f:21:ec:8d:1e:f0:98:b4: b1:93:8d:16:7f:dc:3c:48:ab:0b:e1:6d:21:05:53:aa:5e:14: 79:64:7c:ac:a8:1c:ff:0d:4c:03:83:77:1a:24:06:c8:50:4d: 18:ce:21:65:9b:9c:cc:5b:7d:22:77:8e:2e:c9:92:c5:d1:1d: d1:2c:ff:96:fc:1d:07:25:8f:48:f2:0b:43:ee:da:8d:4d:4f: 26:07:00:79:26:16:0b:4b:fd:fc:e5:c1:9d:9d:f6:db:cd:3d: c2:31:1e:8e:3e:71:a7:1c:0e:10:b8:c6:b0:b9:27:3e:46:7f: 5e:18:54:4d -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE9Jc9gxZTYF0ePwMYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWU2M2ZhM2MtYjYyMy00NWVkLWJjNTAtNWM1ZjZjZTFl ZWU4MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk Zjk2YjYyYTUtMDI2YS00MmI0LWI2NjAtZTJhNGE0YzY5NGM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5KHyaaOcqoOPGGShUV+Ofr3z77zZsOKRVGkN VKYd6vzhy8l7b5LKdy+3GE4cM/mIIzzFJdwkWoczWTn2z6/nvXfBk0Va5VSpgavk dAhvKY+XY7h+/392ezdRK45VFC+DLDZccaps2q5Cp1xnjVFBEHulyrqoTq1JOUFm Jxknjmp+YyJ2TFZlzFftKHkzszhWbMgFsT8FN2aSffzMIRLzo+S5d9M7MjqtcvR3 1e5+sD2wSNIaTQVqmb9zpBE7wkgH2TR1uygNMtUzFJ4Tp7QhlaKCozfPmBmIZhFK 8MCjX3KHQANxsLrjZFCDIpjbGfuVFt9LF/GUNC7A7rDyGGxmWwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFFMGXDqGEPWGA9tXeIISNUBxZ8JBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xZTYz ZmEzYy1iNjIzLTQ1ZWQtYmM1MC01YzVmNmNlMWVlZTgvZmZhNmViYTEtMThjNS0z ZWRmLWFhMWEtYzU0Y2Q0MDA1ZjJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMWU2M2ZhM2MtYjYyMy00NWVkLWJj NTAtNWM1ZjZjZTFlZWU4LzFlNjNmYTNjLWI2MjMtNDVlZC1iYzUwLTVjNWY2Y2Ux ZWVlOC5jcmwwHwYDVR0jBBgwFoAUownWF7q1MeX/MRUio0wUUiJgU40wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xZTYzZmEzYy1iNjIzLTQ1ZWQtYmM1MC01YzVm NmNlMWVlZTguY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAF54wAwQC qcWcMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAIX7u5eabFFTEnkiXrtSDkvydWHWM4rRJFyM0G7cNts7uA0K ggxbtr91DZlOH3a7Y6E4sguC41CroxjljhFzH/E1xkWtmQtpE5GCnyxq3CWCsRml 37QH0+z3lC8sSRN2CU1IeglSq/N5mJc/cS7jve/Kf6lJnjBWNshdVHOxlyGT5Z23 l0jAjs9fIeyNHvCYtLGTjRZ/3DxIqwvhbSEFU6peFHlkfKyoHP8NTAODdxokBshQ TRjOIWWbnMxbfSJ3ji7JksXRHdEs/5b8HQclj0jyC0Pu2o1NTyYHAHkmFgtL/fzl wZ2d9tvNPcIxHo4+caccDhC4xrC5Jz5Gf14YVE0= -----END CERTIFICATE-----Generated at Fri Sep 25 09:32:07 2026 by rpki-client