$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a4f2f1a7-07e5-42f8-b1aa-1e2e95a65ff8/c5f99082-735a-3bc4-848d-adbcd08fa635.roa File: c5f99082-735a-3bc4-848d-adbcd08fa635.roa (raw, json) Hash identifier: OQN++INcvjkve8PAbtmV0RP0cKSvhU9JhdDV9MhdH2M= Subject key identifier: 6F:FF:25:C2:B7:9B:2C:0B:01:79:A6:DB:71:1E:E5:C7:50:35:13:E3 Certificate issuer: /CN=a4f2f1a7-07e5-42f8-b1aa-1e2e95a65ff8 Certificate serial: 010D0C9F4328584F1E2CF2685D9974CF70B43F80 Authority key identifier: D6:A5:82:E1:39:FA:2D:75:07:DB:6D:CC:91:A9:96:92:0C:71:3B:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a4f2f1a7-07e5-42f8-b1aa-1e2e95a65ff8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a4f2f1a7-07e5-42f8-b1aa-1e2e95a65ff8/c5f99082-735a-3bc4-848d-adbcd08fa635.roa Signing time: Wed 09 Sep 2026 13:00:11 +0000 ROA not before: Wed 09 Sep 2026 13:00:11 +0000 ROA not after: Tue 08 Dec 2026 14:00:11 +0000 asID: 21859 IP address blocks: 23.139.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a4f2f1a7-07e5-42f8-b1aa-1e2e95a65ff8/a4f2f1a7-07e5-42f8-b1aa-1e2e95a65ff8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a4f2f1a7-07e5-42f8-b1aa-1e2e95a65ff8/a4f2f1a7-07e5-42f8-b1aa-1e2e95a65ff8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a4f2f1a7-07e5-42f8-b1aa-1e2e95a65ff8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:1e:2c:f2:68:5d:99:74:cf:70:b4:3f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4f2f1a7-07e5-42f8-b1aa-1e2e95a65ff8 Validity Not Before: Sep 9 13:00:11 2026 GMT Not After : Dec 8 14:00:11 2026 GMT Subject: CN=d95a7958-d3ef-4144-bdcc-5a540b4241f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:9c:56:c8:56:be:df:1a:a1:aa:b6:b1:20:4e: 45:ab:67:8d:5c:7f:e7:8d:8f:1b:d3:7f:59:b0:9d: 03:39:f7:6f:45:3d:76:08:fb:da:6e:01:2e:18:3b: 1d:c6:3f:4a:20:e2:ea:84:eb:39:e6:0d:aa:2e:59: bf:ad:f7:3c:2c:82:9f:44:7c:8c:66:c1:d8:58:a3: 93:7c:b2:e9:f8:44:0c:9b:fd:29:c3:e5:56:89:08: 8c:55:48:df:5b:e6:ec:e2:a3:e0:b4:90:c0:c1:be: a0:6a:2c:60:30:a6:64:8c:76:24:a9:6f:67:56:4b: 74:0e:71:a6:39:f8:ba:45:3d:7b:8b:10:98:cd:12: 38:9d:f3:ca:db:14:5a:30:6c:ef:84:b6:58:90:da: 1a:f9:2c:b0:95:2e:d5:85:1c:50:5c:24:6f:dc:95: fd:26:94:31:ee:b2:87:58:45:80:84:08:e4:6e:c1: 48:be:10:49:73:47:34:75:81:74:5b:6d:67:02:ed: 2e:12:29:3d:3c:e4:0c:d7:73:e0:73:7b:22:40:a7: 65:33:c8:33:c4:0c:5f:05:22:ae:10:71:8a:68:63: 72:40:0f:99:53:56:6d:ce:80:88:c0:08:ef:b8:1b: a8:97:a0:9a:9a:98:13:52:b6:21:4b:ee:9b:3e:a2: 18:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:FF:25:C2:B7:9B:2C:0B:01:79:A6:DB:71:1E:E5:C7:50:35:13:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a4f2f1a7-07e5-42f8-b1aa-1e2e95a65ff8/c5f99082-735a-3bc4-848d-adbcd08fa635.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a4f2f1a7-07e5-42f8-b1aa-1e2e95a65ff8/a4f2f1a7-07e5-42f8-b1aa-1e2e95a65ff8.crl X509v3 Authority Key Identifier: keyid:D6:A5:82:E1:39:FA:2D:75:07:DB:6D:CC:91:A9:96:92:0C:71:3B:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a4f2f1a7-07e5-42f8-b1aa-1e2e95a65ff8.cer sbgp-ipAddrBlock: critical IPv4: 23.139.252.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:fc:ca:1f:d7:14:2f:bf:d0:63:23:f9:47:a6:65:23:c9:0e: fe:98:ce:3a:c8:54:4a:eb:e3:30:24:77:6e:76:4d:3a:79:8d: 0f:97:ad:3c:db:e2:9e:f4:14:b5:18:a1:95:a2:fa:c4:ff:1e: c7:32:43:ff:62:77:72:7a:61:58:79:20:80:7a:26:10:8b:47: 67:c8:19:8f:51:d2:5d:a2:c7:7c:84:39:34:a0:12:2f:20:41: 1c:7f:a1:f8:b8:69:0b:cb:2b:aa:a5:09:72:23:03:b5:fd:95: ec:ad:60:b7:8b:a1:62:57:7e:c4:02:2e:f7:dd:a5:a9:2d:90: 11:56:c8:d5:e2:d3:ee:33:8b:48:29:f3:ac:80:77:d4:48:d0: 91:2f:92:bc:db:b8:92:17:7a:56:4c:9d:67:83:68:ed:25:40: dd:f0:af:f3:e7:e6:f5:e1:d6:a6:b5:83:6b:77:8a:25:65:24: 3e:ee:f7:6a:19:6a:10:8b:73:0a:69:59:fa:f3:e8:5e:b2:32: 38:70:de:a2:83:c6:39:90:78:12:d5:38:8f:73:96:4d:69:c6: aa:63:7a:10:1a:0e:7a:ad:95:38:8d:68:74:97:32:80:54:5e: 93:d5:cb:b9:6a:9e:8d:74:c5:69:c5:c7:a1:a1:7f:b0:81:7f: 5b:d8:63:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8eLPJoXZl0z3C0P4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTRmMmYxYTctMDdlNS00MmY4LWIxYWEtMWUyZTk1YTY1 ZmY4MB4XDTI2MDkwOTEzMDAxMVoXDTI2MTIwODE0MDAxMVowLzEtMCsGA1UEAxMk ZDk1YTc5NTgtZDNlZi00MTQ0LWJkY2MtNWE1NDBiNDI0MWYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwpxWyFa+3xqhqraxIE5Fq2eNXH/njY8b039Z sJ0DOfdvRT12CPvabgEuGDsdxj9KIOLqhOs55g2qLlm/rfc8LIKfRHyMZsHYWKOT fLLp+EQMm/0pw+VWiQiMVUjfW+bs4qPgtJDAwb6gaixgMKZkjHYkqW9nVkt0DnGm Ofi6RT17ixCYzRI4nfPK2xRaMGzvhLZYkNoa+SywlS7VhRxQXCRv3JX9JpQx7rKH WEWAhAjkbsFIvhBJc0c0dYF0W21nAu0uEik9POQM13Pgc3siQKdlM8gzxAxfBSKu EHGKaGNyQA+ZU1ZtzoCIwAjvuBuol6CampgTUrYhS+6bPqIY+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG//JcK3mywLAXmm23Ee5cdQNRPjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9hNGYy ZjFhNy0wN2U1LTQyZjgtYjFhYS0xZTJlOTVhNjVmZjgvYzVmOTkwODItNzM1YS0z YmM0LTg0OGQtYWRiY2QwOGZhNjM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYTRmMmYxYTctMDdlNS00MmY4LWIx YWEtMWUyZTk1YTY1ZmY4L2E0ZjJmMWE3LTA3ZTUtNDJmOC1iMWFhLTFlMmU5NWE2 NWZmOC5jcmwwHwYDVR0jBBgwFoAU1qWC4Tn6LXUH223MkamWkgxxO64wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9hNGYyZjFhNy0wN2U1LTQyZjgtYjFhYS0xZTJl OTVhNjVmZjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4v8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG/8yh/XFC+/0GMj+UemZSPJDv6YzjrIVErr4zAkd252TTp5jQ+XrTzb 4p70FLUYoZWi+sT/HscyQ/9id3J6YVh5IIB6JhCLR2fIGY9R0l2ix3yEOTSgEi8g QRx/ofi4aQvLK6qlCXIjA7X9leytYLeLoWJXfsQCLvfdpaktkBFWyNXi0+4zi0gp 86yAd9RI0JEvkrzbuJIXelZMnWeDaO0lQN3wr/Pn5vXh1qa1g2t3iiVlJD7u92oZ ahCLcwppWfrz6F6yMjhw3qKDxjmQeBLVOI9zlk1pxqpjehAaDnqtlTiNaHSXMoBU XpPVy7lqno10xWnFx6Ghf7CBf1vYY6k= -----END CERTIFICATE-----Generated at Sun Sep 20 18:29:18 2026 by rpki-client