$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/23d4344d-e6b1-4a9e-8560-f54da402f39b/2c9499a6-75ea-3ff6-9241-321833caa089.roa File: 2c9499a6-75ea-3ff6-9241-321833caa089.roa (raw, json) Hash identifier: 9Bto9lflI9SgiGCifGLyvrUDKHmNqnQl/kDLOXeuBxU= Subject key identifier: 57:FE:3D:C4:87:47:B2:13:F8:41:2B:EC:DF:7E:D2:96:B0:AD:9F:10 Certificate issuer: /CN=23d4344d-e6b1-4a9e-8560-f54da402f39b Certificate serial: 010D0C9F4328584EDF5C90B44FE93FBE97E1C240 Authority key identifier: F5:67:2F:5B:C2:A6:F0:87:F1:01:1F:8F:83:B3:06:B9:06:06:63:72 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/23d4344d-e6b1-4a9e-8560-f54da402f39b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/23d4344d-e6b1-4a9e-8560-f54da402f39b/2c9499a6-75ea-3ff6-9241-321833caa089.roa Signing time: Tue 18 Aug 2026 01:00:12 +0000 ROA not before: Tue 18 Aug 2026 01:00:12 +0000 ROA not after: Mon 16 Nov 2026 02:00:12 +0000 asID: 152179 IP address blocks: 23.147.4.0/24 maxlen: 24 2602:f52e::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/23d4344d-e6b1-4a9e-8560-f54da402f39b/23d4344d-e6b1-4a9e-8560-f54da402f39b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/23d4344d-e6b1-4a9e-8560-f54da402f39b/23d4344d-e6b1-4a9e-8560-f54da402f39b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/23d4344d-e6b1-4a9e-8560-f54da402f39b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:df:5c:90:b4:4f:e9:3f:be:97:e1:c2:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23d4344d-e6b1-4a9e-8560-f54da402f39b Validity Not Before: Aug 18 01:00:12 2026 GMT Not After : Nov 16 02:00:12 2026 GMT Subject: CN=6b694037-18d2-48b4-8e36-dafc6d6a030f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:64:d4:cb:8e:e7:ec:b0:02:6b:79:4d:27:a2: f4:d9:01:45:f7:0c:5a:65:68:ec:cb:70:ac:e5:36: a3:87:34:35:21:ca:28:c3:1c:02:2d:6b:6a:51:32: 9b:bf:34:38:83:23:10:d8:d9:63:e3:a4:3b:10:19: 15:04:a9:15:62:8e:ee:c8:a8:7e:e3:89:5d:cb:8a: f6:bf:22:dc:af:e2:16:7b:77:9e:ea:56:48:18:7f: 5b:bf:bc:24:bd:94:3a:ce:3c:ef:e8:df:3b:ef:b0: a4:b2:55:dc:15:30:1a:5c:c3:00:d8:d6:08:41:02: 58:f3:b7:28:e9:7b:59:50:0a:ec:ab:c0:f0:f4:24: a9:0f:be:07:69:04:23:39:63:7a:14:05:c0:84:fe: a6:08:97:dd:16:e1:3b:88:8a:c6:5c:be:bd:e9:86: c6:19:41:4d:d0:bb:e5:45:22:82:92:65:23:95:53: c5:a6:d3:16:73:72:a2:5d:8e:37:15:64:26:42:16: 9a:d7:fd:7a:35:52:23:50:60:67:07:51:05:2b:c6: 82:98:84:ca:d6:36:fd:89:30:07:1a:14:cf:16:7b: 3c:39:d0:55:74:24:a0:8f:d1:74:a1:27:34:09:97: 02:07:c1:ac:26:f7:0d:9a:17:60:36:72:dd:42:db: 47:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:FE:3D:C4:87:47:B2:13:F8:41:2B:EC:DF:7E:D2:96:B0:AD:9F:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/23d4344d-e6b1-4a9e-8560-f54da402f39b/2c9499a6-75ea-3ff6-9241-321833caa089.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/23d4344d-e6b1-4a9e-8560-f54da402f39b/23d4344d-e6b1-4a9e-8560-f54da402f39b.crl X509v3 Authority Key Identifier: keyid:F5:67:2F:5B:C2:A6:F0:87:F1:01:1F:8F:83:B3:06:B9:06:06:63:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/23d4344d-e6b1-4a9e-8560-f54da402f39b.cer sbgp-ipAddrBlock: critical IPv4: 23.147.4.0/24 IPv6: 2602:f52e::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:e6:89:94:56:4c:e8:bd:a7:bf:12:7a:3c:3a:1f:95:5f:6d: 82:36:65:de:e7:de:bc:4e:75:d1:b0:09:5e:98:f3:8c:29:35: db:28:27:76:a3:5d:70:cb:af:b1:f7:be:90:b9:a8:81:b4:0f: c8:e0:2a:ff:f5:d8:81:c8:f7:ac:d6:f5:4b:cb:61:9f:6f:6a: d3:ce:49:04:29:55:ab:a7:5b:8e:07:35:b6:f5:99:d5:ae:16: 3d:0d:00:78:4c:74:e1:78:48:b1:04:b3:5e:63:07:9b:16:bb: 8f:c7:ae:7f:cc:db:e7:5f:c4:7a:5e:56:e8:e3:5f:46:e7:f7: 90:b1:3e:7d:c0:4d:3c:2a:ca:36:81:6b:fe:ce:e9:38:bf:be: 71:8e:25:82:4a:c5:9a:7b:f2:ef:4b:32:92:57:b1:be:a6:36: b0:ee:83:f3:ee:9b:fb:7e:a0:51:1c:7c:6a:8c:a1:e9:c0:5d: e3:e9:24:2d:f1:96:f6:60:ac:3a:d3:3f:52:1f:bd:24:21:fa: 7b:29:c1:06:5d:d0:b9:b9:a0:b0:08:fa:85:0c:d8:17:b7:b5: 7b:36:b7:89:70:54:c5:d6:41:e9:d1:b5:77:ff:53:5b:74:3f: 35:9d:44:2e:46:7d:97:a5:cd:5d:61:f8:33:56:c9:1f:19:25: 03:18:49:ba -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE7fXJC0T+k/vpfhwkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjNkNDM0NGQtZTZiMS00YTllLTg1NjAtZjU0ZGE0MDJm MzliMB4XDTI2MDgxODAxMDAxMloXDTI2MTExNjAyMDAxMlowLzEtMCsGA1UEAxMk NmI2OTQwMzctMThkMi00OGI0LThlMzYtZGFmYzZkNmEwMzBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA02TUy47n7LACa3lNJ6L02QFF9wxaZWjsy3Cs 5TajhzQ1IcoowxwCLWtqUTKbvzQ4gyMQ2Nlj46Q7EBkVBKkVYo7uyKh+44ldy4r2 vyLcr+IWe3ee6lZIGH9bv7wkvZQ6zjzv6N8777CkslXcFTAaXMMA2NYIQQJY87co 6XtZUArsq8Dw9CSpD74HaQQjOWN6FAXAhP6mCJfdFuE7iIrGXL696YbGGUFN0Lvl RSKCkmUjlVPFptMWc3KiXY43FWQmQhaa1/16NVIjUGBnB1EFK8aCmITK1jb9iTAH GhTPFns8OdBVdCSgj9F0oSc0CZcCB8GsJvcNmhdgNnLdQttHfQIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFFf+PcSHR7IT+EEr7N9+0pawrZ8QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8yM2Q0 MzQ0ZC1lNmIxLTRhOWUtODU2MC1mNTRkYTQwMmYzOWIvMmM5NDk5YTYtNzVlYS0z ZmY2LTkyNDEtMzIxODMzY2FhMDg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvMjNkNDM0NGQtZTZiMS00YTllLTg1 NjAtZjU0ZGE0MDJmMzliLzIzZDQzNDRkLWU2YjEtNGE5ZS04NTYwLWY1NGRhNDAy ZjM5Yi5jcmwwHwYDVR0jBBgwFoAU9WcvW8Km8IfxAR+Pg7MGuQYGY3IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi8yM2Q0MzQ0ZC1lNmIxLTRhOWUtODU2MC1mNTRk YTQwMmYzOWIuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF5MEMA4E AgACMAgDBgAmAvUuADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCA5omUVkzovae/Eno8Oh+VX22CNmXe5968 TnXRsAlemPOMKTXbKCd2o11wy6+x976QuaiBtA/I4Cr/9diByPes1vVLy2Gfb2rT zkkEKVWrp1uOBzW29ZnVrhY9DQB4THTheEixBLNeYwebFruPx65/zNvnX8R6Xlbo 419G5/eQsT59wE08Kso2gWv+zuk4v75xjiWCSsWae/LvSzKSV7G+pjaw7oPz7pv7 fqBRHHxqjKHpwF3j6SQt8Zb2YKw60z9SH70kIfp7KcEGXdC5uaCwCPqFDNgXt7V7 NreJcFTF1kHp0bV3/1NbdD81nUQuRn2Xpc1dYfgzVskfGSUDGEm6 -----END CERTIFICATE-----Generated at Tue Sep 22 18:09:09 2026 by rpki-client