$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d3196482-9a63-48b1-828c-a6de96f0caff/a1b553f2-b966-342f-9fe1-18bbe7d4ecf3.roa File: a1b553f2-b966-342f-9fe1-18bbe7d4ecf3.roa (raw, json) Hash identifier: neBh/cytRYoXv4eqIfxfbWaeCVXEgK29OZJtzK7B9F0= Subject key identifier: 12:70:7A:5D:04:53:8D:44:06:D5:02:86:A5:57:B3:3E:96:D9:0F:F8 Certificate issuer: /CN=d3196482-9a63-48b1-828c-a6de96f0caff Certificate serial: 010D0C9F4328584F427819BC419691169FDD2A00 Authority key identifier: 71:AC:DB:CF:DA:22:A4:C9:36:F2:84:28:DD:3B:FD:69:E5:3E:61:F8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d3196482-9a63-48b1-828c-a6de96f0caff.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d3196482-9a63-48b1-828c-a6de96f0caff/a1b553f2-b966-342f-9fe1-18bbe7d4ecf3.roa Signing time: Tue 22 Sep 2026 13:00:12 +0000 ROA not before: Tue 22 Sep 2026 13:00:12 +0000 ROA not after: Mon 21 Dec 2026 14:00:12 +0000 asID: 27180 IP address blocks: 23.140.44.0/24 maxlen: 24 2602:f712::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d3196482-9a63-48b1-828c-a6de96f0caff/d3196482-9a63-48b1-828c-a6de96f0caff.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d3196482-9a63-48b1-828c-a6de96f0caff/d3196482-9a63-48b1-828c-a6de96f0caff.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d3196482-9a63-48b1-828c-a6de96f0caff.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:42:78:19:bc:41:96:91:16:9f:dd:2a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3196482-9a63-48b1-828c-a6de96f0caff Validity Not Before: Sep 22 13:00:12 2026 GMT Not After : Dec 21 14:00:12 2026 GMT Subject: CN=1f5a8897-24b6-47bd-817e-427a9fd891b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:d9:2a:ea:1e:9b:0f:dd:9d:6c:26:b6:e3:2e: 28:e7:ab:1d:84:4b:80:00:28:c0:63:49:ac:05:64: 2a:42:b0:8f:9d:5e:4e:5c:62:e3:fd:6e:c8:99:91: cf:1b:ba:30:b4:98:ca:4e:51:09:cc:b7:0c:63:15: 9b:df:89:8c:27:4c:89:7a:e5:22:98:4d:81:d0:7e: 52:92:a9:9c:d1:10:4d:86:c1:73:20:fc:2c:8c:f8: ad:48:1d:8b:b7:0c:24:25:5d:15:64:3d:49:86:47: 81:95:08:16:dd:e5:6e:c1:e2:60:69:f5:30:b7:46: dd:93:6b:de:53:fb:b4:5b:2f:ff:e7:a9:46:dc:ca: ec:05:da:df:db:53:30:70:fa:e4:2c:26:79:49:25: 87:ad:98:bb:ca:e4:3a:12:9f:b0:64:da:99:39:a7: 14:de:6d:a9:0b:a6:de:8b:73:15:19:b5:d4:97:3b: d1:52:e1:b5:bc:ff:09:0d:c0:bf:53:3b:4d:a4:fc: fe:6c:f3:4e:f8:28:d4:b8:86:0b:e4:88:00:61:23: 61:16:73:5a:b8:02:cd:c9:2f:80:6d:40:57:7c:04: c9:2a:50:a4:17:d7:77:cc:a2:17:3c:89:87:c9:71: 95:d4:20:0d:04:08:c3:65:5a:8d:af:02:ad:6a:b6: 87:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:70:7A:5D:04:53:8D:44:06:D5:02:86:A5:57:B3:3E:96:D9:0F:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d3196482-9a63-48b1-828c-a6de96f0caff/a1b553f2-b966-342f-9fe1-18bbe7d4ecf3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d3196482-9a63-48b1-828c-a6de96f0caff/d3196482-9a63-48b1-828c-a6de96f0caff.crl X509v3 Authority Key Identifier: keyid:71:AC:DB:CF:DA:22:A4:C9:36:F2:84:28:DD:3B:FD:69:E5:3E:61:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d3196482-9a63-48b1-828c-a6de96f0caff.cer sbgp-ipAddrBlock: critical IPv4: 23.140.44.0/24 IPv6: 2602:f712::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:59:67:2b:a1:a3:ec:7f:76:f3:2f:df:74:f4:6f:59:28:3c: fc:72:4c:75:86:e0:48:32:68:e0:80:2b:28:e9:57:55:b9:38: 56:24:31:38:85:6a:97:fc:77:76:95:db:91:48:94:c0:47:78: ce:37:bf:e5:b7:14:88:bf:8b:32:aa:1d:38:11:1c:a2:d3:c1: bc:a7:cf:97:52:6f:94:9e:1a:21:3d:c4:ca:03:e1:29:bf:11: a5:03:fd:d6:51:f6:83:b2:43:cf:c4:7d:b0:6e:71:69:dd:23: dd:00:53:dc:93:e5:6a:5a:0c:37:56:c3:f2:14:24:14:c2:f2: 99:e5:f2:df:9d:26:ac:52:3f:f8:0b:4b:c3:98:40:9f:21:26: 64:1a:1e:17:d4:aa:c1:c3:3e:07:2f:94:5d:13:5d:0f:31:ed: bc:53:96:23:ed:38:30:72:de:d0:c5:92:3f:85:ad:04:2e:d4: 66:12:e4:30:55:61:4b:28:dc:82:6b:38:3a:5f:c7:8c:29:39: 9e:df:21:88:c6:8d:06:b1:20:54:a9:6c:4e:21:41:0d:ca:56: 7d:76:a5:cd:8f:7e:81:2c:99:e2:96:42:0d:3c:ac:f6:ba:76: e5:7e:8c:6c:c7:ba:96:07:08:a9:18:a2:1b:ef:3c:fd:e0:b7: 8b:76:2c:c1 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE9CeBm8QZaRFp/dKgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDMxOTY0ODItOWE2My00OGIxLTgyOGMtYTZkZTk2ZjBj YWZmMB4XDTI2MDkyMjEzMDAxMloXDTI2MTIyMTE0MDAxMlowLzEtMCsGA1UEAxMk MWY1YTg4OTctMjRiNi00N2JkLTgxN2UtNDI3YTlmZDg5MWI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg9kq6h6bD92dbCa24y4o56sdhEuAACjAY0ms BWQqQrCPnV5OXGLj/W7ImZHPG7owtJjKTlEJzLcMYxWb34mMJ0yJeuUimE2B0H5S kqmc0RBNhsFzIPwsjPitSB2LtwwkJV0VZD1JhkeBlQgW3eVuweJgafUwt0bdk2ve U/u0Wy//56lG3MrsBdrf21MwcPrkLCZ5SSWHrZi7yuQ6Ep+wZNqZOacU3m2pC6be i3MVGbXUlzvRUuG1vP8JDcC/UztNpPz+bPNO+CjUuIYL5IgAYSNhFnNauALNyS+A bUBXfATJKlCkF9d3zKIXPImHyXGV1CANBAjDZVqNrwKtaraHWwIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFBJwel0EU41EBtUChqVXsz6W2Q/4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9kMzE5 NjQ4Mi05YTYzLTQ4YjEtODI4Yy1hNmRlOTZmMGNhZmYvYTFiNTUzZjItYjk2Ni0z NDJmLTlmZTEtMThiYmU3ZDRlY2YzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZDMxOTY0ODItOWE2My00OGIxLTgy OGMtYTZkZTk2ZjBjYWZmL2QzMTk2NDgyLTlhNjMtNDhiMS04MjhjLWE2ZGU5NmYw Y2FmZi5jcmwwHwYDVR0jBBgwFoAUcazbz9oipMk28oQo3Tv9aeU+YfgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS9kMzE5NjQ4Mi05YTYzLTQ4YjEtODI4Yy1hNmRl OTZmMGNhZmYuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF4wsMA4E AgACMAgDBgAmAvcSADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBHWWcroaPsf3bzL9909G9ZKDz8ckx1huBI MmjggCso6VdVuThWJDE4hWqX/Hd2lduRSJTAR3jON7/ltxSIv4syqh04ERyi08G8 p8+XUm+UnhohPcTKA+EpvxGlA/3WUfaDskPPxH2wbnFp3SPdAFPck+VqWgw3VsPy FCQUwvKZ5fLfnSasUj/4C0vDmECfISZkGh4X1KrBwz4HL5RdE10PMe28U5Yj7Tgw ct7QxZI/ha0ELtRmEuQwVWFLKNyCazg6X8eMKTme3yGIxo0GsSBUqWxOIUENylZ9 dqXNj36BLJnilkINPKz2unblfoxsx7qWBwipGKIb7zz94LeLdizB -----END CERTIFICATE-----Generated at Tue Sep 22 21:04:09 2026 by rpki-client