$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/4a84870b-2f96-3dc1-9fbd-3f22ea27c4b6.roa File: 4a84870b-2f96-3dc1-9fbd-3f22ea27c4b6.roa (raw, json) Hash identifier: FPxvTnvqHSbxBuOhdwIshcLn7Pd+w3AuWYEpEksEY20= Subject key identifier: 5A:75:53:24:A0:ED:10:D2:C6:33:AA:B8:49:F0:DB:B9:E9:8B:00:EE Certificate issuer: /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Certificate serial: 010D0C9F4328584F0A73DE7190BF63B909A2E70A Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/4a84870b-2f96-3dc1-9fbd-3f22ea27c4b6.roa Signing time: Wed 02 Sep 2026 11:27:00 +0000 ROA not before: Wed 02 Sep 2026 11:27:00 +0000 ROA not after: Tue 27 Oct 2026 13:00:12 +0000 asID: 20473 IP address blocks: 23.231.20.0/23 maxlen: 24 50.2.76.0/24 maxlen: 24 50.2.94.0/23 maxlen: 24 50.2.205.0/24 maxlen: 24 170.130.216.0/24 maxlen: 24 173.232.71.0/24 maxlen: 24 173.232.91.0/24 maxlen: 24 173.232.105.0/24 maxlen: 24 173.232.116.0/24 maxlen: 24 173.232.164.0/24 maxlen: 24 173.232.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0a:73:de:71:90:bf:63:b9:09:a2:e7:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Validity Not Before: Sep 2 11:27:00 2026 GMT Not After : Oct 27 13:00:12 2026 GMT Subject: CN=7a37fadb-012a-4d18-b29c-85cde6f75d6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:eb:6a:21:78:d2:5a:4d:06:26:d5:d8:9c:03: cb:d1:67:76:5e:94:00:78:63:a3:0f:94:34:5e:13: ab:fa:fc:75:26:05:99:97:14:58:15:31:ed:75:e3: 12:e5:9e:1c:bc:9c:c8:75:ea:76:a5:81:19:5d:cc: 15:c5:11:29:da:e7:27:cc:26:55:41:e2:1a:75:53: 09:d9:ad:67:62:10:4b:10:88:02:c3:be:ee:0d:1e: a9:e8:7a:ca:23:7f:8f:d6:57:2d:d2:5c:9c:89:31: 56:59:21:ed:b6:a1:de:ea:28:1a:d4:92:03:f1:8a: c5:0c:bf:c3:2c:4d:15:0f:da:af:81:25:09:5c:3a: 7e:81:3f:b8:42:20:af:3e:6e:f5:cb:22:9a:0f:39: cf:4a:20:80:2f:00:49:e0:b7:ca:22:1a:94:44:0c: 9d:06:92:b2:a3:19:dd:53:9f:1b:04:6e:71:cb:68: 43:d9:0b:01:a2:39:01:ce:64:90:83:6d:9f:b0:ee: 07:8a:f3:a7:7d:93:9b:39:c8:3b:82:09:08:92:cb: 1d:c6:2f:f1:7a:6f:de:ad:73:10:36:26:89:88:62: f1:ba:96:2a:74:08:73:d8:30:86:ad:bd:8c:7b:96: e3:e3:eb:ed:b1:31:36:1b:b0:86:12:c6:68:35:57: f6:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:75:53:24:A0:ED:10:D2:C6:33:AA:B8:49:F0:DB:B9:E9:8B:00:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/4a84870b-2f96-3dc1-9fbd-3f22ea27c4b6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl X509v3 Authority Key Identifier: keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer sbgp-ipAddrBlock: critical IPv4: 23.231.20.0/23 50.2.76.0/24 50.2.94.0/23 50.2.205.0/24 170.130.216.0/24 173.232.71.0/24 173.232.91.0/24 173.232.105.0/24 173.232.116.0/24 173.232.164.0/24 173.232.231.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:db:0c:a6:22:d9:4b:f8:97:dc:4c:0c:78:9a:22:97:0d:5f: a5:40:87:35:e7:87:15:78:f9:ed:1d:c0:fd:69:e3:e1:39:20: 33:62:32:f6:1f:dc:fb:65:60:94:ca:87:34:35:77:e1:68:c7: fa:53:90:a6:18:dc:9c:01:4b:a6:64:2f:04:a9:8d:35:47:8d: eb:96:3c:b3:dd:92:50:a3:0d:98:06:95:cd:a3:65:57:51:10: 10:47:88:c2:51:5a:58:d2:a4:9a:c8:17:6e:30:95:b5:c1:f5: b2:1f:3b:9d:e7:3d:77:1d:ef:46:8c:30:10:e7:88:a8:2d:61: 3d:3d:66:50:71:ee:fd:e4:0c:c4:c0:2b:42:12:e2:4f:f8:4d: a2:7b:2e:bd:f5:c8:29:bd:0a:0f:1a:51:92:90:7a:ee:5a:e4: 10:e5:55:9c:c3:a5:73:e4:2f:73:2a:33:41:f9:3f:43:b0:7a: f2:e1:42:9b:5d:9d:a5:79:62:bd:ab:87:50:14:26:49:16:da: c7:84:93:91:19:44:33:2b:f5:9f:ce:e0:a5:a9:6f:11:51:e8: 06:95:3c:3e:6b:e5:d2:05:e3:2f:a8:4b:6e:39:ea:30:32:90: 6d:8f:9a:88:d7:12:bd:a9:e4:50:60:ba:ae:0d:69:63:29:b7: b5:fa:e6:dc -----BEGIN CERTIFICATE----- MIIGfzCCBWegAwIBAgIUAQ0Mn0MoWE8Kc95xkL9juQmi5wowDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZWYxMmUtODk1My00MzgwLWIxNmQtMjhiYTJhYTE1 YzE3MB4XDTI2MDkwMjExMjcwMFoXDTI2MTAyNzEzMDAxMlowLzEtMCsGA1UEAxMk N2EzN2ZhZGItMDEyYS00ZDE4LWIyOWMtODVjZGU2Zjc1ZDZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApetqIXjSWk0GJtXYnAPL0Wd2XpQAeGOjD5Q0 XhOr+vx1JgWZlxRYFTHtdeMS5Z4cvJzIdep2pYEZXcwVxREp2ucnzCZVQeIadVMJ 2a1nYhBLEIgCw77uDR6p6HrKI3+P1lct0lyciTFWWSHttqHe6iga1JID8YrFDL/D LE0VD9qvgSUJXDp+gT+4QiCvPm71yyKaDznPSiCALwBJ4LfKIhqURAydBpKyoxnd U58bBG5xy2hD2QsBojkBzmSQg22fsO4HivOnfZObOcg7ggkIkssdxi/xem/erXMQ NiaJiGLxupYqdAhz2DCGrb2Me5bj4+vtsTE2G7CGEsZoNVf2DwIDAQABo4IDkTCC A40wHQYDVR0OBBYEFFp1UySg7RDSxjOquEnw27npiwDuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhl ZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJhMmFhMTVjMTcvNGE4NDg3MGItMmY5Ni0z ZGMxLTlmYmQtM2YyMmVhMjdjNGI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y4ZWYxMmUtODk1My00MzgwLWIx NmQtMjhiYTJhYTE1YzE3LzNmOGVmMTJlLTg5NTMtNDM4MC1iMTZkLTI4YmEyYWEx NWMxNy5jcmwwHwYDVR0jBBgwFoAURmDx/IALEkbguuKi0tarLtFQVHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhlZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJh MmFhMTVjMTcuY2VyMFsGCCsGAQUFBwEHAQH/BEwwSjBIBAIAATBCAwQBF+cUAwQA MgJMAwQBMgJeAwQAMgLNAwQAqoLYAwQArehHAwQArehbAwQArehpAwQAreh0AwQA reikAwQArejnMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBABXbDKYi2Uv4l9xMDHiaIpcNX6VAhzXnhxV4+e0d wP1p4+E5IDNiMvYf3PtlYJTKhzQ1d+Fox/pTkKYY3JwBS6ZkLwSpjTVHjeuWPLPd klCjDZgGlc2jZVdREBBHiMJRWljSpJrIF24wlbXB9bIfO53nPXcd70aMMBDniKgt YT09ZlBx7v3kDMTAK0IS4k/4TaJ7Lr31yCm9Cg8aUZKQeu5a5BDlVZzDpXPkL3Mq M0H5P0OwevLhQptdnaV5Yr2rh1AUJkkW2seEk5EZRDMr9Z/O4KWpbxFR6AaVPD5r 5dIF4y+oS2456jAykG2PmojXEr2p5FBguq4NaWMpt7X65tw= -----END CERTIFICATE-----Generated at Tue Sep 22 18:00:13 2026 by rpki-client