$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6d7a0a8c-2e1f-48a6-8960-7ce1abb1c53d/fa8b21e1-ee17-3ffb-9c35-b7c8a4a45f1a.roa File: fa8b21e1-ee17-3ffb-9c35-b7c8a4a45f1a.roa (raw, json) Hash identifier: Z1KCS2u7HvLiP39iZIiTVjaUmOgnLRg3dtvspG5GpsA= Subject key identifier: 34:93:0F:F0:DB:31:C1:42:15:2B:63:A9:C6:57:0E:17:91:6A:49:00 Certificate issuer: /CN=6d7a0a8c-2e1f-48a6-8960-7ce1abb1c53d Certificate serial: 010D0C9F4328584F46A7E1D67FAA758EA537A800 Authority key identifier: 9A:D4:E1:85:7A:C0:9C:F0:B5:60:82:97:F4:BA:8A:F1:AB:60:B6:C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6d7a0a8c-2e1f-48a6-8960-7ce1abb1c53d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6d7a0a8c-2e1f-48a6-8960-7ce1abb1c53d/fa8b21e1-ee17-3ffb-9c35-b7c8a4a45f1a.roa Signing time: Thu 24 Sep 2026 01:00:12 +0000 ROA not before: Thu 24 Sep 2026 01:00:12 +0000 ROA not after: Wed 23 Dec 2026 02:00:12 +0000 asID: 401510 IP address blocks: 23.130.116.0/24 maxlen: 24 2602:f80d::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6d7a0a8c-2e1f-48a6-8960-7ce1abb1c53d/6d7a0a8c-2e1f-48a6-8960-7ce1abb1c53d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6d7a0a8c-2e1f-48a6-8960-7ce1abb1c53d/6d7a0a8c-2e1f-48a6-8960-7ce1abb1c53d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6d7a0a8c-2e1f-48a6-8960-7ce1abb1c53d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 03 Oct 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:46:a7:e1:d6:7f:aa:75:8e:a5:37:a8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d7a0a8c-2e1f-48a6-8960-7ce1abb1c53d Validity Not Before: Sep 24 01:00:12 2026 GMT Not After : Dec 23 02:00:12 2026 GMT Subject: CN=659f0324-43ee-4d2e-a8ff-e2600d31b79f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:e6:f8:85:d3:7d:9f:8b:bf:a1:30:50:c9:5a: 83:1b:06:1b:7a:b9:0a:d8:7e:f2:80:81:0f:47:50: f9:d1:35:2d:86:8e:ef:bd:50:05:ac:26:02:a6:80: 05:5b:7d:52:71:f3:57:4d:ae:c0:c2:2a:03:38:90: 58:d8:cb:18:80:dd:51:e5:96:07:a7:99:00:f3:be: ed:b5:be:38:0c:66:6c:b0:3c:80:19:b9:87:1b:ae: bd:97:57:88:3c:9c:f0:72:e3:ad:2b:a5:35:66:2f: cf:ef:43:23:96:e5:54:c1:20:b5:be:b6:b8:d3:17: 68:6a:18:94:4d:58:8a:9a:35:1d:3e:4d:a1:2e:e0: 86:63:2c:12:1b:cf:35:95:61:32:ff:76:6c:79:4c: 12:c3:66:e6:7a:21:f9:0b:75:e3:5b:04:e0:b9:f1: 32:09:6e:1f:13:71:7d:35:12:55:f7:20:43:45:e7: 1c:1e:0e:cb:7c:a4:22:d3:76:94:76:5f:cd:d6:9b: ce:db:a1:7a:eb:3c:57:10:30:99:32:45:9d:5c:85: 59:11:ca:fb:e6:15:d8:ca:6c:4c:2b:79:05:45:41: 7d:73:4b:79:b8:d4:80:bc:da:2b:0a:94:3a:0f:e4: b5:67:74:32:a6:64:98:41:9f:a2:b1:4f:93:17:d9: e6:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:93:0F:F0:DB:31:C1:42:15:2B:63:A9:C6:57:0E:17:91:6A:49:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6d7a0a8c-2e1f-48a6-8960-7ce1abb1c53d/fa8b21e1-ee17-3ffb-9c35-b7c8a4a45f1a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6d7a0a8c-2e1f-48a6-8960-7ce1abb1c53d/6d7a0a8c-2e1f-48a6-8960-7ce1abb1c53d.crl X509v3 Authority Key Identifier: keyid:9A:D4:E1:85:7A:C0:9C:F0:B5:60:82:97:F4:BA:8A:F1:AB:60:B6:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6d7a0a8c-2e1f-48a6-8960-7ce1abb1c53d.cer sbgp-ipAddrBlock: critical IPv4: 23.130.116.0/24 IPv6: 2602:f80d::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:86:81:ec:85:45:94:b6:ab:ec:be:6c:82:68:29:d1:6e:5c: a1:26:ad:c8:0f:66:5e:d7:8b:c0:64:ca:85:db:60:60:4e:78: 07:89:f3:c3:66:2e:e8:4a:ee:58:a9:13:66:4c:1d:25:89:27: cb:84:01:41:5c:8e:55:7b:fd:75:02:24:3d:d7:b9:e5:03:86: fc:7d:2d:3a:6b:0c:f5:bf:73:94:58:d3:6e:ed:43:4b:93:d7: 83:5e:a8:89:f0:a4:34:a0:bf:7b:3f:d5:6d:62:70:55:91:34: 84:e5:e5:6c:0e:e9:3c:72:07:14:1d:92:7d:de:15:39:4b:90: 84:18:43:9c:ee:00:08:d1:a8:1c:38:2d:a9:80:5a:d2:ab:67: a6:f4:45:fc:2f:b5:b4:c6:92:d0:3b:b9:e2:ef:8c:c8:95:0f: 57:8e:20:82:8c:75:39:d4:1b:60:4c:d4:3c:20:61:a0:d4:e2: 36:23:64:31:f4:05:8a:8f:5d:0f:25:ec:d0:8e:50:80:0b:a4: db:fe:4e:5e:d0:bd:43:f1:d3:07:21:d8:45:ac:a4:3d:26:17: f8:c6:bc:5a:65:5b:30:22:ed:6c:45:3d:34:6d:91:88:2e:e8: d9:ed:45:2f:c4:61:d0:44:0c:4a:1f:cb:1b:29:fc:16:7c:e9: 22:43:86:2c -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE9Gp+HWf6p1jqU3qAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmQ3YTBhOGMtMmUxZi00OGE2LTg5NjAtN2NlMWFiYjFj NTNkMB4XDTI2MDkyNDAxMDAxMloXDTI2MTIyMzAyMDAxMlowLzEtMCsGA1UEAxMk NjU5ZjAzMjQtNDNlZS00ZDJlLWE4ZmYtZTI2MDBkMzFiNzlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuOb4hdN9n4u/oTBQyVqDGwYberkK2H7ygIEP R1D50TUtho7vvVAFrCYCpoAFW31ScfNXTa7AwioDOJBY2MsYgN1R5ZYHp5kA877t tb44DGZssDyAGbmHG669l1eIPJzwcuOtK6U1Zi/P70MjluVUwSC1vra40xdoahiU TViKmjUdPk2hLuCGYywSG881lWEy/3ZseUwSw2bmeiH5C3XjWwTgufEyCW4fE3F9 NRJV9yBDReccHg7LfKQi03aUdl/N1pvO26F66zxXEDCZMkWdXIVZEcr75hXYymxM K3kFRUF9c0t5uNSAvNorCpQ6D+S1Z3QypmSYQZ+isU+TF9nmCQIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFDSTD/DbMcFCFStjqcZXDheRakkAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy82ZDdh MGE4Yy0yZTFmLTQ4YTYtODk2MC03Y2UxYWJiMWM1M2QvZmE4YjIxZTEtZWUxNy0z ZmZiLTljMzUtYjdjOGE0YTQ1ZjFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvNmQ3YTBhOGMtMmUxZi00OGE2LTg5 NjAtN2NlMWFiYjFjNTNkLzZkN2EwYThjLTJlMWYtNDhhNi04OTYwLTdjZTFhYmIx YzUzZC5jcmwwHwYDVR0jBBgwFoAUmtThhXrAnPC1YIKX9LqK8atgtsAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy82ZDdhMGE4Yy0yZTFmLTQ4YTYtODk2MC03Y2Ux YWJiMWM1M2QuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF4J0MA4E AgACMAgDBgAmAvgNADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQArhoHshUWUtqvsvmyCaCnRblyhJq3ID2Ze 14vAZMqF22BgTngHifPDZi7oSu5YqRNmTB0liSfLhAFBXI5Ve/11AiQ917nlA4b8 fS06awz1v3OUWNNu7UNLk9eDXqiJ8KQ0oL97P9VtYnBVkTSE5eVsDuk8cgcUHZJ9 3hU5S5CEGEOc7gAI0agcOC2pgFrSq2em9EX8L7W0xpLQO7ni74zIlQ9XjiCCjHU5 1BtgTNQ8IGGg1OI2I2Qx9AWKj10PJezQjlCAC6Tb/k5e0L1D8dMHIdhFrKQ9Jhf4 xrxaZVswIu1sRT00bZGILujZ7UUvxGHQRAxKH8sbKfwWfOkiQ4Ys -----END CERTIFICATE-----Generated at Fri Oct 2 19:52:09 2026 by rpki-client