$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe/6a0785a5-6b8b-33f0-8764-0f2543de502f.roa File: 6a0785a5-6b8b-33f0-8764-0f2543de502f.roa (raw, json) Hash identifier: 0kKpVu4aN7Y5afASCdYxE1X/9qXdwAg6kN43YlJE7lo= Subject key identifier: A3:32:BB:B5:41:CA:35:3D:84:E6:DD:DA:1D:BC:8A:F4:94:C2:3F:3F Certificate issuer: /CN=d96ea6e4-95a3-4508-8c2f-046aed988ebe Certificate serial: 010D0C9F4328584EFE1217B139082C8383986980 Authority key identifier: E2:C3:95:94:85:FF:09:28:A1:8D:8A:F5:AB:7A:C9:0A:D6:AF:D3:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe/6a0785a5-6b8b-33f0-8764-0f2543de502f.roa Signing time: Sat 29 Aug 2026 01:00:12 +0000 ROA not before: Sat 29 Aug 2026 01:00:12 +0000 ROA not after: Fri 27 Nov 2026 02:00:12 +0000 asID: 47069 IP address blocks: 23.167.8.0/24 maxlen: 24 162.222.132.0/22 maxlen: 24 2602:f9df::/32 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe/d96ea6e4-95a3-4508-8c2f-046aed988ebe.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe/d96ea6e4-95a3-4508-8c2f-046aed988ebe.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Sep 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:fe:12:17:b1:39:08:2c:83:83:98:69:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d96ea6e4-95a3-4508-8c2f-046aed988ebe Validity Not Before: Aug 29 01:00:12 2026 GMT Not After : Nov 27 02:00:12 2026 GMT Subject: CN=87a4a53a-0053-4bea-b3e4-7fde543c7159 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:60:cc:2b:6c:9d:04:62:62:84:b3:06:eb:6a: 60:f5:8f:fc:0b:9f:ae:bc:68:56:01:d3:cd:64:12: 42:af:26:b7:7b:7d:07:72:1d:2a:ce:c6:d1:73:43: 99:09:53:b2:f3:6f:dd:cc:1e:9c:b2:8e:a1:49:48: 4c:ec:a1:71:87:c4:1a:96:c3:b5:ab:87:fc:a4:16: 65:d7:22:d2:b6:69:72:92:83:c1:1a:c5:10:b2:b5: f3:d8:04:ab:69:fc:68:3e:6b:79:c6:9c:cd:92:86: 2f:39:61:63:7a:4b:ad:b7:cb:4b:58:4e:64:c2:40: eb:9a:98:12:bc:08:d3:f7:bb:bc:6d:a7:a8:cb:f8: 5b:74:b4:ed:3c:bd:33:75:16:c4:b7:b1:08:c3:c1: 4f:ba:53:bf:a8:d2:c2:eb:84:bd:2d:34:c7:af:47: 9c:c1:38:e9:8d:2d:95:dc:ab:d0:7f:c2:f5:48:42: cf:40:ac:45:d6:78:b7:df:d9:b5:13:19:c7:5b:2b: aa:b8:c4:aa:3e:86:a4:c5:db:ef:fe:20:97:3f:cc: 52:4e:f7:63:16:27:8a:27:29:86:ef:d1:3b:c3:2b: ac:3a:98:84:c2:d0:ef:49:d1:cd:79:1a:f3:62:a5: 35:63:e9:fc:f9:67:a6:4f:24:da:cb:a9:cd:fe:62: ff:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:32:BB:B5:41:CA:35:3D:84:E6:DD:DA:1D:BC:8A:F4:94:C2:3F:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe/6a0785a5-6b8b-33f0-8764-0f2543de502f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe/d96ea6e4-95a3-4508-8c2f-046aed988ebe.crl X509v3 Authority Key Identifier: keyid:E2:C3:95:94:85:FF:09:28:A1:8D:8A:F5:AB:7A:C9:0A:D6:AF:D3:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d96ea6e4-95a3-4508-8c2f-046aed988ebe.cer sbgp-ipAddrBlock: critical IPv4: 23.167.8.0/24 162.222.132.0/22 IPv6: 2602:f9df::/32 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:07:6a:a5:74:d0:f1:a5:35:b5:c9:61:a0:a6:65:59:0a:45: 9c:9c:53:8c:b5:11:06:46:78:36:6a:8c:50:15:07:cf:be:09: 72:5b:85:c3:c9:bc:ae:42:fa:e6:20:68:6d:af:1b:8b:7e:72: fb:e2:d7:f6:75:a2:60:f5:a8:81:7f:29:5a:fc:ad:e2:d8:df: 6d:5e:a9:19:b9:46:79:a0:1e:89:1e:e3:cd:4f:1e:7c:9d:71: a2:41:ad:54:da:41:1d:cd:b7:db:05:8d:b9:14:81:25:10:27: ce:06:be:f5:5d:61:a8:0a:35:b4:cb:46:5c:12:c6:b7:0e:c1: 3f:55:6c:4b:4b:08:15:c7:29:c1:d1:92:c3:3a:16:4a:ba:e2: d6:c7:d5:95:64:f9:34:6d:38:e2:be:e7:04:24:8f:f3:5c:3f: 28:28:dd:15:72:c5:d6:73:da:9f:47:3f:05:81:da:fe:08:fb: 17:53:34:6e:a4:6c:3f:8f:8e:e0:7a:2e:2f:0d:8b:4e:9a:7f: 9c:d5:c8:b6:3b:36:fb:38:a5:9f:cb:a7:84:81:a7:7d:10:42: 53:80:9e:dc:35:f6:aa:ca:fc:a0:b9:8f:b6:b3:ad:17:25:79: 21:e3:53:c4:77:8e:20:e8:68:43:59:cd:2e:d5:72:be:c4:e8: 32:b0:59:38 -----BEGIN CERTIFICATE----- MIIGWDCCBUCgAwIBAgIUAQ0Mn0MoWE7+EhexOQgsg4OYaYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDk2ZWE2ZTQtOTVhMy00NTA4LThjMmYtMDQ2YWVkOTg4 ZWJlMB4XDTI2MDgyOTAxMDAxMloXDTI2MTEyNzAyMDAxMlowLzEtMCsGA1UEAxMk ODdhNGE1M2EtMDA1My00YmVhLWIzZTQtN2ZkZTU0M2M3MTU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmWDMK2ydBGJihLMG62pg9Y/8C5+uvGhWAdPN ZBJCrya3e30Hch0qzsbRc0OZCVOy82/dzB6cso6hSUhM7KFxh8QalsO1q4f8pBZl 1yLStmlykoPBGsUQsrXz2ASrafxoPmt5xpzNkoYvOWFjekutt8tLWE5kwkDrmpgS vAjT97u8baeoy/hbdLTtPL0zdRbEt7EIw8FPulO/qNLC64S9LTTHr0ecwTjpjS2V 3KvQf8L1SELPQKxF1ni339m1ExnHWyuquMSqPoakxdvv/iCXP8xSTvdjFieKJymG 79E7wyusOpiEwtDvSdHNeRrzYqU1Y+n8+WemTyTay6nN/mL/mQIDAQABo4IDajCC A2YwHQYDVR0OBBYEFKMyu7VByjU9hObd2h28ivSUwj8/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9kOTZl YTZlNC05NWEzLTQ1MDgtOGMyZi0wNDZhZWQ5ODhlYmUvNmEwNzg1YTUtNmI4Yi0z M2YwLTg3NjQtMGYyNTQzZGU1MDJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZDk2ZWE2ZTQtOTVhMy00NTA4LThj MmYtMDQ2YWVkOTg4ZWJlL2Q5NmVhNmU0LTk1YTMtNDUwOC04YzJmLTA0NmFlZDk4 OGViZS5jcmwwHwYDVR0jBBgwFoAU4sOVlIX/CSihjYr1q3rJCtav0+YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9kOTZlYTZlNC05NWEzLTQ1MDgtOGMyZi0wNDZh ZWQ5ODhlYmUuY2VyMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQAF6cIAwQC ot6EMA0EAgACMAcDBQAmAvnfMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4 BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAJQHaqV00PGlNbXJYaCmZVkKRZyc U4y1EQZGeDZqjFAVB8++CXJbhcPJvK5C+uYgaG2vG4t+cvvi1/Z1omD1qIF/KVr8 reLY321eqRm5RnmgHoke481PHnydcaJBrVTaQR3Nt9sFjbkUgSUQJ84GvvVdYagK NbTLRlwSxrcOwT9VbEtLCBXHKcHRksM6Fkq64tbH1ZVk+TRtOOK+5wQkj/NcPygo 3RVyxdZz2p9HPwWB2v4I+xdTNG6kbD+PjuB6Li8Ni06af5zVyLY7Nvs4pZ/Lp4SB p30QQlOAntw19qrK/KC5j7azrRcleSHjU8R3jiDoaENZzS7Vcr7E6DKwWTg= -----END CERTIFICATE-----Generated at Sun Sep 20 10:17:22 2026 by rpki-client