$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5a1c3b1a-d11e-46f2-b8ba-1974b44c84b2/db0d49c2-07c6-353f-b407-3be87c24ae90.roa File: db0d49c2-07c6-353f-b407-3be87c24ae90.roa (raw, json) Hash identifier: 97iax1jJLPwsQ348ofBNyK/BlCw0Gd/0BMgeC/UuekE= Subject key identifier: 26:28:94:05:90:48:CC:14:47:9E:D0:D7:C1:EE:73:7C:47:DF:9B:41 Certificate issuer: /CN=5a1c3b1a-d11e-46f2-b8ba-1974b44c84b2 Certificate serial: 010D0C9F4328584F4973CCD3F0BF0EFA6BB25C80 Authority key identifier: 39:D3:61:6C:A3:A6:88:D3:24:01:A4:C3:A6:95:84:4E:B3:2C:25:53 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5a1c3b1a-d11e-46f2-b8ba-1974b44c84b2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5a1c3b1a-d11e-46f2-b8ba-1974b44c84b2/db0d49c2-07c6-353f-b407-3be87c24ae90.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 400477 IP address blocks: 23.132.56.0/24 maxlen: 24 2602:fbc1::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5a1c3b1a-d11e-46f2-b8ba-1974b44c84b2/5a1c3b1a-d11e-46f2-b8ba-1974b44c84b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5a1c3b1a-d11e-46f2-b8ba-1974b44c84b2/5a1c3b1a-d11e-46f2-b8ba-1974b44c84b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5a1c3b1a-d11e-46f2-b8ba-1974b44c84b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:cc:d3:f0:bf:0e:fa:6b:b2:5c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5a1c3b1a-d11e-46f2-b8ba-1974b44c84b2 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=03b56a7a-ac63-4030-8f53-c2a361026ac6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:e2:a1:0a:7a:f1:6d:28:29:58:ba:0b:cf:c7: c9:15:71:bb:6d:89:68:e4:db:dd:f1:60:e0:01:bf: b4:9a:81:82:0a:db:3b:51:27:d8:d8:54:77:d5:61: c9:c4:8e:9f:90:85:37:2a:2a:63:77:7d:aa:cc:28: 22:e9:1b:cd:70:ee:d4:2e:28:81:8a:01:ea:41:48: e7:28:b0:c5:cf:a5:f7:c1:6c:ab:5c:6e:79:be:05: 8b:a1:9d:ec:3c:04:a5:d8:b1:87:09:0b:da:71:3d: b5:de:f1:43:34:f7:2c:78:ee:50:e8:37:1a:a9:16: ba:0f:c7:a9:48:8e:76:41:fd:62:b7:bd:3e:42:c2: f7:63:38:5b:57:46:fc:b0:1b:c7:69:a5:31:df:2d: 24:b8:bd:2f:0a:ea:d8:da:e8:47:c2:4f:dc:d3:35: ce:ba:e0:19:40:70:cb:ac:ef:ac:7d:c1:dd:7d:dd: 62:ef:08:6c:3a:3c:13:2f:ad:ad:7a:4a:78:56:cc: 41:de:cf:24:d3:55:9e:1d:7a:d2:99:07:d0:f4:d6: f6:ff:83:8f:7c:0e:4c:8e:14:8e:fc:1c:fa:c2:3d: 0e:ac:8e:05:17:f2:2f:c6:2a:7a:8a:b2:48:0d:a4: f8:12:7a:5b:36:ab:eb:e6:56:10:e3:38:86:22:c6: 3f:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:28:94:05:90:48:CC:14:47:9E:D0:D7:C1:EE:73:7C:47:DF:9B:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5a1c3b1a-d11e-46f2-b8ba-1974b44c84b2/db0d49c2-07c6-353f-b407-3be87c24ae90.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5a1c3b1a-d11e-46f2-b8ba-1974b44c84b2/5a1c3b1a-d11e-46f2-b8ba-1974b44c84b2.crl X509v3 Authority Key Identifier: keyid:39:D3:61:6C:A3:A6:88:D3:24:01:A4:C3:A6:95:84:4E:B3:2C:25:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5a1c3b1a-d11e-46f2-b8ba-1974b44c84b2.cer sbgp-ipAddrBlock: critical IPv4: 23.132.56.0/24 IPv6: 2602:fbc1::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:e1:d8:a6:c8:69:97:48:fe:43:7f:dc:49:ad:90:4d:af:65: 8b:44:c2:80:f8:6e:bd:ff:f4:e3:7d:e9:ed:d9:4d:93:ec:05: 74:59:63:08:93:cd:19:d1:f7:28:61:0e:e2:aa:5d:3e:1b:ea: 07:0b:8a:66:44:7e:fe:06:89:2b:71:0e:79:e5:1b:13:e2:8b: d3:68:eb:2f:4a:c4:4b:55:7b:24:a8:b8:6b:c4:f1:82:01:b2: 91:3b:98:4d:aa:14:22:ca:05:fa:4f:3b:2f:98:a1:2a:0f:b7: 3a:6f:9d:d9:08:67:14:96:7c:90:0a:37:60:7c:50:90:42:5f: 9d:85:b2:04:36:f6:95:fa:4d:9c:6c:45:4a:c8:b9:5f:09:00: 01:bf:0f:ca:37:73:5e:d2:3f:5c:83:4f:d0:ba:99:cd:c9:ea: 42:fc:16:a6:77:af:94:af:79:28:86:19:b4:21:81:89:b2:90: 2a:49:29:79:82:6e:8c:f8:15:44:cc:7e:fa:b6:b0:e5:06:74: ba:86:ac:12:03:92:08:ba:cf:d1:c3:bb:24:2a:16:eb:e2:47: 2a:9f:84:4a:b0:b6:19:e6:90:96:16:a4:a0:5c:9e:ce:df:b7: e1:1e:24:83:8c:50:3c:7e:91:36:57:cc:e3:d0:da:34:0a:c2: 26:51:02:45 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE9Jc8zT8L8O+muyXIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWExYzNiMWEtZDExZS00NmYyLWI4YmEtMTk3NGI0NGM4 NGIyMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MDNiNTZhN2EtYWM2My00MDMwLThmNTMtYzJhMzYxMDI2YWM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAneKhCnrxbSgpWLoLz8fJFXG7bYlo5Nvd8WDg Ab+0moGCCts7USfY2FR31WHJxI6fkIU3Kipjd32qzCgi6RvNcO7ULiiBigHqQUjn KLDFz6X3wWyrXG55vgWLoZ3sPASl2LGHCQvacT213vFDNPcseO5Q6DcaqRa6D8ep SI52Qf1it70+QsL3YzhbV0b8sBvHaaUx3y0kuL0vCurY2uhHwk/c0zXOuuAZQHDL rO+sfcHdfd1i7whsOjwTL62tekp4VsxB3s8k01WeHXrSmQfQ9Nb2/4OPfA5MjhSO /Bz6wj0OrI4FF/Ivxip6irJIDaT4EnpbNqvr5lYQ4ziGIsY/zwIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFCYolAWQSMwUR57Q18Huc3xH35tBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS81YTFj M2IxYS1kMTFlLTQ2ZjItYjhiYS0xOTc0YjQ0Yzg0YjIvZGIwZDQ5YzItMDdjNi0z NTNmLWI0MDctM2JlODdjMjRhZTkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNWExYzNiMWEtZDExZS00NmYyLWI4 YmEtMTk3NGI0NGM4NGIyLzVhMWMzYjFhLWQxMWUtNDZmMi1iOGJhLTE5NzRiNDRj ODRiMi5jcmwwHwYDVR0jBBgwFoAUOdNhbKOmiNMkAaTDppWETrMsJVMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS81YTFjM2IxYS1kMTFlLTQ2ZjItYjhiYS0xOTc0 YjQ0Yzg0YjIuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF4Q4MA4E AgACMAgDBgQmAvvBADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBh4dimyGmXSP5Df9xJrZBNr2WLRMKA+G69 //Tjfent2U2T7AV0WWMIk80Z0fcoYQ7iql0+G+oHC4pmRH7+BokrcQ555RsT4ovT aOsvSsRLVXskqLhrxPGCAbKRO5hNqhQiygX6TzsvmKEqD7c6b53ZCGcUlnyQCjdg fFCQQl+dhbIENvaV+k2cbEVKyLlfCQABvw/KN3Ne0j9cg0/QupnNyepC/Bamd6+U r3kohhm0IYGJspAqSSl5gm6M+BVEzH76trDlBnS6hqwSA5IIus/Rw7skKhbr4kcq n4RKsLYZ5pCWFqSgXJ7O37fhHiSDjFA8fpE2V8zj0No0CsImUQJF -----END CERTIFICATE-----Generated at Sat Sep 26 04:52:32 2026 by rpki-client