$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b2a2cac0-9f4e-4e62-acf9-0302120174f8/123ec8f2-3786-3363-ba42-24ba0989b710.roa File: 123ec8f2-3786-3363-ba42-24ba0989b710.roa (raw, json) Hash identifier: XuYarFSmJ0hIrZ1EEkDWjK4QVEmvyzgL23Hq01o7C8w= Subject key identifier: 88:29:E2:0D:BA:9E:06:6D:A2:F2:B3:F2:4F:4C:86:39:7E:76:86:C1 Certificate issuer: /CN=b2a2cac0-9f4e-4e62-acf9-0302120174f8 Certificate serial: 010D0C9F4328584FADF3311C28F6149394440780 Authority key identifier: D9:8E:DA:EF:67:8F:4D:40:F9:54:87:84:6C:9A:60:B2:88:10:4A:37 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b2a2cac0-9f4e-4e62-acf9-0302120174f8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b2a2cac0-9f4e-4e62-acf9-0302120174f8/123ec8f2-3786-3363-ba42-24ba0989b710.roa Signing time: Sat 31 Oct 2026 01:00:13 +0000 ROA not before: Sat 31 Oct 2026 01:00:13 +0000 ROA not after: Fri 29 Jan 2027 02:00:13 +0000 asID: 18935 IP address blocks: 23.145.180.0/24 maxlen: 24 2602:f557::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b2a2cac0-9f4e-4e62-acf9-0302120174f8/b2a2cac0-9f4e-4e62-acf9-0302120174f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b2a2cac0-9f4e-4e62-acf9-0302120174f8/b2a2cac0-9f4e-4e62-acf9-0302120174f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b2a2cac0-9f4e-4e62-acf9-0302120174f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Nov 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:ad:f3:31:1c:28:f6:14:93:94:44:07:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2a2cac0-9f4e-4e62-acf9-0302120174f8 Validity Not Before: Oct 31 01:00:13 2026 GMT Not After : Jan 29 02:00:13 2027 GMT Subject: CN=ac35989c-471a-4a7a-a411-848940a3c7b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:27:7b:f9:41:ed:3c:8b:9c:ea:c7:55:c6:da: c0:3d:46:12:23:25:fd:a0:c1:9a:92:b9:8a:e5:65: 86:b2:56:d7:b5:77:cb:a8:c7:fb:ad:bc:ea:bf:b0: da:09:37:0c:60:ab:c5:33:4b:a8:bc:24:82:55:e3: f1:21:7a:49:e2:86:04:40:74:e5:af:97:bc:cf:56: 5d:a9:cb:05:ec:dc:fa:51:2c:bc:43:ea:45:03:e5: b4:00:f0:72:72:24:0c:07:9a:f0:96:43:4f:76:ef: cc:3d:74:7e:c5:69:87:bd:09:6e:67:2a:f1:ef:f2: 79:68:df:ef:f5:7d:d2:48:6a:3c:9f:39:d9:fb:6a: 29:43:ac:79:e9:0f:cc:aa:13:8d:97:7a:da:ee:f5: 93:98:3b:ff:dd:cf:87:c9:ec:5f:f6:a1:3e:34:1a: 67:58:06:f9:81:19:5e:5d:23:fd:ca:80:48:e3:37: 9e:ed:58:f2:78:a1:19:0f:d4:30:57:4a:04:14:0f: a0:be:99:97:96:e3:0f:fe:18:4c:64:ec:fc:dd:e4: bf:9a:f5:38:5a:03:3e:cf:9d:94:7c:49:c0:c6:4e: 3f:a1:5e:e1:7c:a9:d9:f8:27:bb:b8:7b:16:79:c6: 62:7a:19:7f:1a:2d:09:4e:8a:f0:29:4b:37:1e:7d: fc:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:29:E2:0D:BA:9E:06:6D:A2:F2:B3:F2:4F:4C:86:39:7E:76:86:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b2a2cac0-9f4e-4e62-acf9-0302120174f8/123ec8f2-3786-3363-ba42-24ba0989b710.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b2a2cac0-9f4e-4e62-acf9-0302120174f8/b2a2cac0-9f4e-4e62-acf9-0302120174f8.crl X509v3 Authority Key Identifier: keyid:D9:8E:DA:EF:67:8F:4D:40:F9:54:87:84:6C:9A:60:B2:88:10:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/b2a2cac0-9f4e-4e62-acf9-0302120174f8.cer sbgp-ipAddrBlock: critical IPv4: 23.145.180.0/24 IPv6: 2602:f557::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:c8:5c:88:6c:6e:c9:19:1a:9d:84:f1:74:14:37:b5:96:e3: 8d:df:68:63:68:8e:f0:1a:9a:44:55:63:c4:e3:ae:8e:f1:f7: 72:b4:08:b8:76:1f:67:34:a8:61:9c:58:0e:3d:d5:3d:47:d6: 78:d9:e0:41:26:df:d6:f6:ba:68:c1:9c:79:29:41:86:7c:38: 97:89:f4:e3:98:12:57:fb:a3:7c:b9:0a:6a:5c:ce:28:64:dd: c9:bd:a5:91:2f:eb:da:cc:7d:a0:68:6e:d6:df:e5:55:76:e7: d6:3c:9a:2e:68:f4:b2:c3:71:ee:b0:c1:5e:bd:37:4b:11:02: e6:8e:cc:ce:dd:5c:f8:0c:db:b3:2b:6c:9b:4d:1a:c1:70:c2: b6:c4:42:d6:56:56:89:fd:36:62:eb:df:4c:56:79:c1:22:76: 16:03:42:21:d1:2b:6c:56:59:0c:6b:77:78:d1:c5:35:a0:d5: 20:8c:a0:9c:d6:3d:dd:26:2a:eb:a2:94:f2:10:80:7d:54:9e: 55:ed:c6:8d:b2:89:c8:d4:4b:64:85:30:51:19:d7:aa:b7:49: f1:d3:e0:c4:16:a0:00:24:00:4b:67:d0:31:69:b2:da:db:50: 8d:c2:0a:e7:ad:c6:be:e1:0c:61:22:be:da:67:24:17:b2:3f: 40:c9:30:c1 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE+t8zEcKPYUk5REB4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJhMmNhYzAtOWY0ZS00ZTYyLWFjZjktMDMwMjEyMDE3 NGY4MB4XDTI2MTAzMTAxMDAxM1oXDTI3MDEyOTAyMDAxM1owLzEtMCsGA1UEAxMk YWMzNTk4OWMtNDcxYS00YTdhLWE0MTEtODQ4OTQwYTNjN2I3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvyd7+UHtPIuc6sdVxtrAPUYSIyX9oMGakrmK 5WWGslbXtXfLqMf7rbzqv7DaCTcMYKvFM0uovCSCVePxIXpJ4oYEQHTlr5e8z1Zd qcsF7Nz6USy8Q+pFA+W0APByciQMB5rwlkNPdu/MPXR+xWmHvQluZyrx7/J5aN/v 9X3SSGo8nznZ+2opQ6x56Q/MqhONl3ra7vWTmDv/3c+Hyexf9qE+NBpnWAb5gRle XSP9yoBI4zee7VjyeKEZD9QwV0oEFA+gvpmXluMP/hhMZOz83eS/mvU4WgM+z52U fEnAxk4/oV7hfKnZ+Ce7uHsWecZiehl/Gi0JTorwKUs3Hn38hQIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFIgp4g26ngZtovKz8k9Mhjl+dobBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9iMmEy Y2FjMC05ZjRlLTRlNjItYWNmOS0wMzAyMTIwMTc0ZjgvMTIzZWM4ZjItMzc4Ni0z MzYzLWJhNDItMjRiYTA5ODliNzEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYjJhMmNhYzAtOWY0ZS00ZTYyLWFj ZjktMDMwMjEyMDE3NGY4L2IyYTJjYWMwLTlmNGUtNGU2Mi1hY2Y5LTAzMDIxMjAx NzRmOC5jcmwwHwYDVR0jBBgwFoAU2Y7a72ePTUD5VIeEbJpgsogQSjcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9iMmEyY2FjMC05ZjRlLTRlNjItYWNmOS0wMzAy MTIwMTc0ZjguY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF5G0MA4E AgACMAgDBgAmAvVXADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAcyFyIbG7JGRqdhPF0FDe1luON32hjaI7w GppEVWPE466O8fdytAi4dh9nNKhhnFgOPdU9R9Z42eBBJt/W9rpowZx5KUGGfDiX ifTjmBJX+6N8uQpqXM4oZN3JvaWRL+vazH2gaG7W3+VVdufWPJouaPSyw3HusMFe vTdLEQLmjszO3Vz4DNuzK2ybTRrBcMK2xELWVlaJ/TZi699MVnnBInYWA0Ih0Sts VlkMa3d40cU1oNUgjKCc1j3dJirropTyEIB9VJ5V7caNsonI1EtkhTBRGdeqt0nx 0+DEFqAAJABLZ9AxabLa21CNwgrnrca+4QxhIr7aZyQXsj9AyTDB -----END CERTIFICATE-----Generated at Sun Nov 15 12:18:01 2026 by rpki-client