$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f431cbbf-441e-4d8d-b58f-4167d1386f6d/25e84704-60c2-30c2-9812-d48955828bb7.roa File: 25e84704-60c2-30c2-9812-d48955828bb7.roa (raw, json) Hash identifier: nUN+1FihfpsBUqG1MDdBo1tW2PIELYi27U3kZay40e0= Subject key identifier: 13:4F:3F:B7:84:EE:3C:48:8D:A2:66:3D:F0:ED:E6:0D:16:FA:A0:1F Certificate issuer: /CN=f431cbbf-441e-4d8d-b58f-4167d1386f6d Certificate serial: 010D0C9F4328584EEF726D87BCCF36109B7F5280 Authority key identifier: 34:A0:18:1D:E6:83:1E:0D:86:D3:8C:9C:36:E9:78:D7:F9:35:E1:39 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f431cbbf-441e-4d8d-b58f-4167d1386f6d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f431cbbf-441e-4d8d-b58f-4167d1386f6d/25e84704-60c2-30c2-9812-d48955828bb7.roa Signing time: Sun 23 Aug 2026 19:17:16 +0000 ROA not before: Sun 23 Aug 2026 19:17:16 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 21647 IP address blocks: 23.167.200.0/24 maxlen: 24 23.167.201.0/24 maxlen: 24 149.112.190.0/24 maxlen: 24 149.112.191.0/24 maxlen: 24 2602:f9c6::/36 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f431cbbf-441e-4d8d-b58f-4167d1386f6d/f431cbbf-441e-4d8d-b58f-4167d1386f6d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f431cbbf-441e-4d8d-b58f-4167d1386f6d/f431cbbf-441e-4d8d-b58f-4167d1386f6d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f431cbbf-441e-4d8d-b58f-4167d1386f6d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ef:72:6d:87:bc:cf:36:10:9b:7f:52:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f431cbbf-441e-4d8d-b58f-4167d1386f6d Validity Not Before: Aug 23 19:17:16 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=b0c7c7d4-9dd6-46bf-be5b-d42097fce083 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:48:d2:06:17:1b:6f:fb:b8:2c:92:18:12:11: c1:a6:ee:49:20:f0:12:8a:92:0f:63:96:a3:fe:53: 49:06:dc:eb:0a:5d:0f:3c:96:75:c6:67:af:ef:63: 66:9f:35:32:04:40:3a:55:11:eb:6d:b9:2a:5b:c0: fc:f2:1f:7c:ab:b1:f4:df:75:cb:70:d6:57:4e:4c: 26:e4:f3:5c:ed:2f:ca:c2:e5:51:6d:13:96:8a:4f: 64:7d:d7:06:cf:8b:c8:52:eb:d9:a9:70:ac:64:0e: 7c:9c:68:05:e5:05:cb:4f:6f:a5:12:63:64:8d:d1: 99:1e:17:db:83:dc:6f:5b:52:0f:a8:34:84:6f:fb: 47:2d:e9:5a:ab:b2:60:ab:49:ce:76:7d:ee:24:3c: 86:9e:7a:18:4b:89:3e:ba:e8:9a:89:95:d1:22:ac: 05:a5:f7:3e:13:b3:a7:12:fb:e2:f4:40:c3:76:b7: e1:b5:2a:77:46:3b:1f:23:e1:04:36:bd:1c:2c:fe: 7d:22:ae:a8:79:76:52:0c:14:cd:5c:c3:bd:57:e9: 11:39:db:10:d5:20:8f:c0:cf:a4:36:0f:69:0d:fd: 7e:62:e9:c4:f7:84:8c:66:13:c2:60:90:e1:2c:a4: 39:62:07:7f:5b:10:d6:d2:22:e0:2d:48:bc:ab:b7: ed:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:4F:3F:B7:84:EE:3C:48:8D:A2:66:3D:F0:ED:E6:0D:16:FA:A0:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f431cbbf-441e-4d8d-b58f-4167d1386f6d/25e84704-60c2-30c2-9812-d48955828bb7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f431cbbf-441e-4d8d-b58f-4167d1386f6d/f431cbbf-441e-4d8d-b58f-4167d1386f6d.crl X509v3 Authority Key Identifier: keyid:34:A0:18:1D:E6:83:1E:0D:86:D3:8C:9C:36:E9:78:D7:F9:35:E1:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f431cbbf-441e-4d8d-b58f-4167d1386f6d.cer sbgp-ipAddrBlock: critical IPv4: 23.167.200.0/23 149.112.190.0/23 IPv6: 2602:f9c6::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:91:5f:e9:c7:75:38:49:ce:f0:47:bc:b6:3a:9e:7a:36:01: fb:8a:fe:d6:51:f9:75:4f:8a:ab:c7:04:55:c6:15:c3:a8:6a: d1:48:09:06:6e:6f:a8:62:d4:19:18:1b:05:84:ca:12:13:63: 2a:ce:54:91:b5:98:df:d0:21:0e:d5:a2:32:0c:a8:b8:76:ef: 35:3e:63:52:0a:d0:e4:8c:7f:f0:dc:5b:a1:76:3e:3f:72:e2: 06:ab:c5:0b:9f:83:37:f3:5f:35:89:c4:75:5b:a8:43:83:55: 64:d4:c1:2f:c1:ea:cd:56:c2:4a:94:e7:59:06:62:c2:02:3d: 64:6e:45:c7:6c:68:6b:7e:77:99:a2:2c:ef:a2:ca:ff:35:47: 9b:ac:3d:76:64:6d:d0:73:00:df:1d:60:86:79:3a:be:90:fc: 22:bf:3a:72:18:65:16:dc:5f:04:94:37:18:2d:b2:b4:78:5b: 0f:a8:bb:8e:ce:d7:f6:37:ac:1c:05:94:a1:a5:2c:5f:2c:e8: 1d:a0:7e:31:33:21:9b:f4:7a:3e:99:af:93:fe:66:fc:82:9b: 5f:49:da:45:aa:49:c0:89:b9:65:50:84:e7:5b:4f:60:60:6b: 75:27:94:10:eb:54:5f:32:d8:b2:54:5a:04:09:46:dc:42:0c: 18:f0:0c:c2 -----BEGIN CERTIFICATE----- MIIGWTCCBUGgAwIBAgIUAQ0Mn0MoWE7vcm2HvM82EJt/UoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQzMWNiYmYtNDQxZS00ZDhkLWI1OGYtNDE2N2QxMzg2 ZjZkMB4XDTI2MDgyMzE5MTcxNloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk YjBjN2M3ZDQtOWRkNi00NmJmLWJlNWItZDQyMDk3ZmNlMDgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmEjSBhcbb/u4LJIYEhHBpu5JIPASipIPY5aj /lNJBtzrCl0PPJZ1xmev72NmnzUyBEA6VRHrbbkqW8D88h98q7H033XLcNZXTkwm 5PNc7S/KwuVRbROWik9kfdcGz4vIUuvZqXCsZA58nGgF5QXLT2+lEmNkjdGZHhfb g9xvW1IPqDSEb/tHLelaq7Jgq0nOdn3uJDyGnnoYS4k+uuiaiZXRIqwFpfc+E7On Evvi9EDDdrfhtSp3RjsfI+EENr0cLP59Iq6oeXZSDBTNXMO9V+kROdsQ1SCPwM+k Ng9pDf1+YunE94SMZhPCYJDhLKQ5Ygd/WxDW0iLgLUi8q7ftgwIDAQABo4IDazCC A2cwHQYDVR0OBBYEFBNPP7eE7jxIjaJmPfDt5g0W+qAfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9mNDMx Y2JiZi00NDFlLTRkOGQtYjU4Zi00MTY3ZDEzODZmNmQvMjVlODQ3MDQtNjBjMi0z MGMyLTk4MTItZDQ4OTU1ODI4YmI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZjQzMWNiYmYtNDQxZS00ZDhkLWI1 OGYtNDE2N2QxMzg2ZjZkL2Y0MzFjYmJmLTQ0MWUtNGQ4ZC1iNThmLTQxNjdkMTM4 NmY2ZC5jcmwwHwYDVR0jBBgwFoAUNKAYHeaDHg2G04ycNul41/k14TkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9mNDMxY2JiZi00NDFlLTRkOGQtYjU4Zi00MTY3 ZDEzODZmNmQuY2VyMDUGCCsGAQUFBwEHAQH/BCYwJDASBAIAATAMAwQBF6fIAwQB lXC+MA4EAgACMAgDBgQmAvnGADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB2kV/px3U4Sc7wR7y2Op56NgH7 iv7WUfl1T4qrxwRVxhXDqGrRSAkGbm+oYtQZGBsFhMoSE2MqzlSRtZjf0CEO1aIy DKi4du81PmNSCtDkjH/w3Fuhdj4/cuIGq8ULn4M38181icR1W6hDg1Vk1MEvwerN VsJKlOdZBmLCAj1kbkXHbGhrfneZoizvosr/NUebrD12ZG3QcwDfHWCGeTq+kPwi vzpyGGUW3F8ElDcYLbK0eFsPqLuOztf2N6wcBZShpSxfLOgdoH4xMyGb9Ho+ma+T /mb8gptfSdpFqknAibllUITnW09gYGt1J5QQ61RfMtiyVFoECUbcQgwY8AzC -----END CERTIFICATE-----Generated at Sun Sep 20 15:03:35 2026 by rpki-client