$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c089ce8e-f176-4dd2-a57a-8a48cf6e42a9/a9d91080-59f3-3b8d-8a52-2f8cb4fb823f.roa File: a9d91080-59f3-3b8d-8a52-2f8cb4fb823f.roa (raw, json) Hash identifier: hZgyEhunLKa/jX7Hrdi4PDHUE9klLjJQIAUHE0Re+ag= Subject key identifier: 3B:F9:BF:7C:8A:01:FC:87:12:83:BD:F9:A8:38:39:00:C8:85:6E:77 Certificate issuer: /CN=c089ce8e-f176-4dd2-a57a-8a48cf6e42a9 Certificate serial: 010D0C9F4328584F050CC446C6C2C5FBABB5FB80 Authority key identifier: F7:79:F6:9C:64:D5:B8:F9:04:81:D9:47:AF:A8:DD:0C:A6:45:A0:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c089ce8e-f176-4dd2-a57a-8a48cf6e42a9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c089ce8e-f176-4dd2-a57a-8a48cf6e42a9/a9d91080-59f3-3b8d-8a52-2f8cb4fb823f.roa Signing time: Mon 31 Aug 2026 13:00:12 +0000 ROA not before: Mon 31 Aug 2026 13:00:12 +0000 ROA not after: Sun 29 Nov 2026 14:00:12 +0000 asID: 153391 IP address blocks: 23.129.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c089ce8e-f176-4dd2-a57a-8a48cf6e42a9/c089ce8e-f176-4dd2-a57a-8a48cf6e42a9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c089ce8e-f176-4dd2-a57a-8a48cf6e42a9/c089ce8e-f176-4dd2-a57a-8a48cf6e42a9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c089ce8e-f176-4dd2-a57a-8a48cf6e42a9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:05:0c:c4:46:c6:c2:c5:fb:ab:b5:fb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c089ce8e-f176-4dd2-a57a-8a48cf6e42a9 Validity Not Before: Aug 31 13:00:12 2026 GMT Not After : Nov 29 14:00:12 2026 GMT Subject: CN=a0c3e448-d4a2-4c83-9802-f92e66c1d86e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:04:8e:6b:66:eb:c3:0b:6e:b8:b1:30:ba:8f: e4:e6:3f:a0:a5:9d:bd:c4:fc:f4:3d:49:c9:bc:bb: f6:bd:72:cd:2f:f2:c0:28:e9:13:d4:34:a0:40:56: c1:08:f8:ec:91:cf:7a:c7:7b:4c:84:2e:02:cc:e8: f2:6e:75:ff:cb:b9:73:d8:15:ab:78:0e:23:de:59: 3d:e1:bd:9b:62:40:d7:3c:74:aa:96:49:29:15:89: f7:86:68:a9:f8:3f:a4:6d:eb:e9:60:95:a1:bb:c0: 72:cb:b1:d6:ca:9c:eb:d4:5e:49:56:ab:b9:a6:2f: c2:3f:bb:ab:a0:9f:82:6d:af:dd:14:23:31:35:ec: 1e:67:e5:52:cd:b0:79:4b:ea:84:fa:9e:d6:84:3d: 3c:b3:f8:e8:5c:b1:ba:40:24:60:f2:e3:d6:b6:4d: 18:7c:fc:26:00:98:95:f2:3a:55:91:d4:e8:7d:54: a1:f6:83:9d:18:c2:05:d9:d1:14:25:c7:9e:93:de: e2:56:fb:85:b1:3e:5c:96:c2:55:b6:3f:63:39:53: 26:2e:41:bd:4d:d4:33:ea:70:92:e4:70:c0:1e:38: 85:2f:5d:1e:2d:4b:4d:bd:43:ac:fb:34:68:04:13: cd:3c:43:8a:ad:2d:ec:d2:7a:54:b5:30:e2:5b:e6: d9:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:F9:BF:7C:8A:01:FC:87:12:83:BD:F9:A8:38:39:00:C8:85:6E:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c089ce8e-f176-4dd2-a57a-8a48cf6e42a9/a9d91080-59f3-3b8d-8a52-2f8cb4fb823f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c089ce8e-f176-4dd2-a57a-8a48cf6e42a9/c089ce8e-f176-4dd2-a57a-8a48cf6e42a9.crl X509v3 Authority Key Identifier: keyid:F7:79:F6:9C:64:D5:B8:F9:04:81:D9:47:AF:A8:DD:0C:A6:45:A0:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/c089ce8e-f176-4dd2-a57a-8a48cf6e42a9.cer sbgp-ipAddrBlock: critical IPv4: 23.129.172.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:97:ba:55:2a:9a:e1:90:6d:6f:16:ef:cf:63:f4:8e:6d:07: f4:71:4e:00:eb:c5:da:54:2b:a4:af:39:56:0f:2e:ac:83:b7: 47:ef:a3:ac:aa:ed:62:27:97:bd:f5:bf:3e:48:43:a2:40:c7: 56:66:75:6d:0a:f1:f3:7e:94:dd:b2:02:44:75:c2:d6:04:11: 3d:bd:34:be:8f:d8:f0:3c:82:9c:d2:ed:23:d5:1c:2d:c3:73: 87:9a:c4:0c:a6:54:eb:bf:27:b9:c8:54:20:20:4c:56:46:6d: e8:f0:d2:5f:8d:05:04:29:39:38:e3:a3:7b:66:bd:36:80:42: d6:08:78:9e:08:ed:11:54:37:d7:f0:eb:32:d3:27:42:1b:f5: 89:e6:d8:38:d3:39:be:1e:33:c2:b7:3e:a3:38:09:91:bd:7c: fc:26:e0:e5:5d:4c:e2:37:cf:27:ad:27:c0:d1:92:98:c0:8a: a7:2c:78:30:9a:7a:cb:be:f5:73:16:fd:f7:99:81:7d:64:11: c2:d2:55:51:5a:cc:f1:3b:de:6b:b7:17:ec:be:8b:71:c9:7b: b8:37:ee:15:25:fc:09:f5:bb:ab:52:bd:82:4d:a8:cf:8c:59: 98:c1:64:12:c0:7c:d4:fd:30:4e:b1:cf:90:ca:8b:1b:7d:05: d8:3f:5e:a7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8FDMRGxsLF+6u1+4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzA4OWNlOGUtZjE3Ni00ZGQyLWE1N2EtOGE0OGNmNmU0 MmE5MB4XDTI2MDgzMTEzMDAxMloXDTI2MTEyOTE0MDAxMlowLzEtMCsGA1UEAxMk YTBjM2U0NDgtZDRhMi00YzgzLTk4MDItZjkyZTY2YzFkODZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArASOa2brwwtuuLEwuo/k5j+gpZ29xPz0PUnJ vLv2vXLNL/LAKOkT1DSgQFbBCPjskc96x3tMhC4CzOjybnX/y7lz2BWreA4j3lk9 4b2bYkDXPHSqlkkpFYn3hmip+D+kbevpYJWhu8Byy7HWypzr1F5JVqu5pi/CP7ur oJ+Cba/dFCMxNeweZ+VSzbB5S+qE+p7WhD08s/joXLG6QCRg8uPWtk0YfPwmAJiV 8jpVkdTofVSh9oOdGMIF2dEUJceek97iVvuFsT5clsJVtj9jOVMmLkG9TdQz6nCS 5HDAHjiFL10eLUtNvUOs+zRoBBPNPEOKrS3s0npUtTDiW+bZMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDv5v3yKAfyHEoO9+ag4OQDIhW53MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9jMDg5 Y2U4ZS1mMTc2LTRkZDItYTU3YS04YTQ4Y2Y2ZTQyYTkvYTlkOTEwODAtNTlmMy0z YjhkLThhNTItMmY4Y2I0ZmI4MjNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYzA4OWNlOGUtZjE3Ni00ZGQyLWE1 N2EtOGE0OGNmNmU0MmE5L2MwODljZThlLWYxNzYtNGRkMi1hNTdhLThhNDhjZjZl NDJhOS5jcmwwHwYDVR0jBBgwFoAU93n2nGTVuPkEgdlHr6jdDKZFoHgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9jMDg5Y2U4ZS1mMTc2LTRkZDItYTU3YS04YTQ4 Y2Y2ZTQyYTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4GsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIeXulUqmuGQbW8W789j9I5tB/RxTgDrxdpUK6SvOVYPLqyDt0fvo6yq 7WInl731vz5IQ6JAx1ZmdW0K8fN+lN2yAkR1wtYEET29NL6P2PA8gpzS7SPVHC3D c4eaxAymVOu/J7nIVCAgTFZGbejw0l+NBQQpOTjjo3tmvTaAQtYIeJ4I7RFUN9fw 6zLTJ0Ib9Ynm2DjTOb4eM8K3PqM4CZG9fPwm4OVdTOI3zyetJ8DRkpjAiqcseDCa esu+9XMW/feZgX1kEcLSVVFazPE73mu3F+y+i3HJe7g37hUl/An1u6tSvYJNqM+M WZjBZBLAfNT9ME6xz5DKixt9Bdg/Xqc= -----END CERTIFICATE-----Generated at Tue Sep 22 10:08:27 2026 by rpki-client