$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/138368b0-1eac-4feb-81cd-f0e4e71fcdc0/707771ce-afb7-360a-9819-67b62be7adc9.roa File: 707771ce-afb7-360a-9819-67b62be7adc9.roa (raw, json) Hash identifier: HR/yI3+X1xg8DGnjuQfBdjDmhXcU+XcbMwkixFkOr4s= Subject key identifier: 5E:87:F7:37:D4:84:B1:0F:37:13:E4:93:E5:2C:6B:85:FB:79:82:5C Certificate issuer: /CN=138368b0-1eac-4feb-81cd-f0e4e71fcdc0 Certificate serial: 010D0C9F4328584F2D87DDD6033BB92B0547CE00 Authority key identifier: 65:AE:F3:DF:8E:27:31:37:B7:57:A2:0D:54:BD:52:BA:EE:72:80:F9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/138368b0-1eac-4feb-81cd-f0e4e71fcdc0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/138368b0-1eac-4feb-81cd-f0e4e71fcdc0/707771ce-afb7-360a-9819-67b62be7adc9.roa Signing time: Tue 15 Sep 2026 01:00:12 +0000 ROA not before: Tue 15 Sep 2026 01:00:12 +0000 ROA not after: Mon 14 Dec 2026 02:00:12 +0000 asID: 46161 IP address blocks: 23.135.28.0/24 maxlen: 29 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/138368b0-1eac-4feb-81cd-f0e4e71fcdc0/138368b0-1eac-4feb-81cd-f0e4e71fcdc0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/138368b0-1eac-4feb-81cd-f0e4e71fcdc0/138368b0-1eac-4feb-81cd-f0e4e71fcdc0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/138368b0-1eac-4feb-81cd-f0e4e71fcdc0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:2d:87:dd:d6:03:3b:b9:2b:05:47:ce:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=138368b0-1eac-4feb-81cd-f0e4e71fcdc0 Validity Not Before: Sep 15 01:00:12 2026 GMT Not After : Dec 14 02:00:12 2026 GMT Subject: CN=faea7857-7442-42c2-b8dd-451c851dfaa3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:07:43:00:35:3f:97:b4:6d:9e:8c:8e:00:41: 2f:61:66:28:2e:cb:4a:04:33:45:36:3f:7e:e2:67: af:df:39:7c:d7:a3:eb:4c:02:b0:a1:33:cf:cd:2a: f0:ad:18:75:f2:d6:14:1d:3e:66:54:2d:90:2d:6a: 0d:62:67:37:5d:c7:02:b7:03:79:ac:ff:f4:05:9d: 89:5c:e9:dd:61:01:90:01:2c:37:3f:9d:67:4e:3e: b6:9e:94:01:3c:81:32:ce:f9:39:c4:cb:18:aa:81: 11:7f:28:db:44:93:05:38:4f:07:39:e7:1c:de:2e: 34:1c:92:7d:79:7e:e1:46:02:14:26:dc:9a:8a:6a: 44:a5:1c:8f:8a:17:3a:56:6f:44:c9:52:c1:37:7c: 36:54:9a:2c:72:a6:65:f7:bf:ba:f3:c0:11:9a:2c: b0:63:37:57:a3:aa:fa:39:0f:76:cd:b5:af:7d:e2: c0:6c:7c:56:d3:c1:f8:0b:0d:06:70:d1:7b:cd:44: b0:e6:46:ad:1b:21:f7:28:08:24:36:f7:3d:e9:43: 0a:9c:71:17:50:80:72:b9:c6:c7:a5:b8:20:08:25: 5c:2e:90:16:1b:d4:91:b3:0f:5d:68:6f:4c:81:ce: d9:34:4b:de:16:fa:6e:10:23:b0:b7:46:69:a1:8f: ab:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:87:F7:37:D4:84:B1:0F:37:13:E4:93:E5:2C:6B:85:FB:79:82:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/138368b0-1eac-4feb-81cd-f0e4e71fcdc0/707771ce-afb7-360a-9819-67b62be7adc9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/138368b0-1eac-4feb-81cd-f0e4e71fcdc0/138368b0-1eac-4feb-81cd-f0e4e71fcdc0.crl X509v3 Authority Key Identifier: keyid:65:AE:F3:DF:8E:27:31:37:B7:57:A2:0D:54:BD:52:BA:EE:72:80:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/138368b0-1eac-4feb-81cd-f0e4e71fcdc0.cer sbgp-ipAddrBlock: critical IPv4: 23.135.28.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:ef:a0:c6:0a:0f:04:54:61:bf:bc:25:20:e9:ed:ff:14:b4: 06:f5:02:3d:26:0f:5e:d2:56:ec:9d:97:90:e4:35:a3:82:16: 0e:14:3d:11:a2:47:37:e8:d1:0e:b9:5f:e5:17:f0:50:c2:b2: 36:ec:32:ac:06:23:ce:c4:8e:9c:32:c7:5b:03:29:27:8e:dd: d3:45:e4:8f:96:56:d3:4f:15:5d:6c:a8:af:c3:87:44:3a:75: 35:b6:fa:3e:69:0e:ed:02:37:1f:68:c2:e3:3d:f1:d7:3e:27: fb:8f:33:02:fa:ad:f8:5e:63:35:b2:3e:ee:53:09:56:8d:84: 46:21:55:81:27:69:de:c5:48:c4:b3:fc:c1:3e:4e:2e:a7:16: a0:78:a4:fb:00:df:92:7e:27:f0:17:2d:f0:f6:3d:5f:9f:da: d4:01:51:ec:aa:45:3f:d5:2c:e8:f4:42:e9:85:4b:2d:65:2f: a2:de:00:46:7a:d6:12:20:d3:96:30:e6:12:b9:81:34:d7:22: f3:75:0c:65:fb:5b:2c:11:cb:ab:66:39:0d:c9:bd:8f:a5:a0: 98:6f:6f:2e:a9:38:9a:9d:58:f3:f7:ac:aa:15:7b:91:db:7e: e0:05:0e:90:0f:50:d7:a2:f3:ba:fc:11:9c:91:36:8c:08:f4: 90:e5:bd:cf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8th93WAzu5KwVHzgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTM4MzY4YjAtMWVhYy00ZmViLTgxY2QtZjBlNGU3MWZj ZGMwMB4XDTI2MDkxNTAxMDAxMloXDTI2MTIxNDAyMDAxMlowLzEtMCsGA1UEAxMk ZmFlYTc4NTctNzQ0Mi00MmMyLWI4ZGQtNDUxYzg1MWRmYWEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnAdDADU/l7RtnoyOAEEvYWYoLstKBDNFNj9+ 4mev3zl816PrTAKwoTPPzSrwrRh18tYUHT5mVC2QLWoNYmc3XccCtwN5rP/0BZ2J XOndYQGQASw3P51nTj62npQBPIEyzvk5xMsYqoERfyjbRJMFOE8HOecc3i40HJJ9 eX7hRgIUJtyaimpEpRyPihc6Vm9EyVLBN3w2VJoscqZl97+688ARmiywYzdXo6r6 OQ92zbWvfeLAbHxW08H4Cw0GcNF7zUSw5katGyH3KAgkNvc96UMKnHEXUIByucbH pbggCCVcLpAWG9SRsw9daG9Mgc7ZNEveFvpuECOwt0ZpoY+r9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF6H9zfUhLEPNxPkk+Usa4X7eYJcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8xMzgz NjhiMC0xZWFjLTRmZWItODFjZC1mMGU0ZTcxZmNkYzAvNzA3NzcxY2UtYWZiNy0z NjBhLTk4MTktNjdiNjJiZTdhZGM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMTM4MzY4YjAtMWVhYy00ZmViLTgx Y2QtZjBlNGU3MWZjZGMwLzEzODM2OGIwLTFlYWMtNGZlYi04MWNkLWYwZTRlNzFm Y2RjMC5jcmwwHwYDVR0jBBgwFoAUZa7z344nMTe3V6INVL1Suu5ygPkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8xMzgzNjhiMC0xZWFjLTRmZWItODFjZC1mMGU0 ZTcxZmNkYzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4ccMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACrvoMYKDwRUYb+8JSDp7f8UtAb1Aj0mD17SVuydl5DkNaOCFg4UPRGi Rzfo0Q65X+UX8FDCsjbsMqwGI87Ejpwyx1sDKSeO3dNF5I+WVtNPFV1sqK/Dh0Q6 dTW2+j5pDu0CNx9owuM98dc+J/uPMwL6rfheYzWyPu5TCVaNhEYhVYEnad7FSMSz /ME+Ti6nFqB4pPsA35J+J/AXLfD2PV+f2tQBUeyqRT/VLOj0QumFSy1lL6LeAEZ6 1hIg05Yw5hK5gTTXIvN1DGX7WywRy6tmOQ3JvY+loJhvby6pOJqdWPP3rKoVe5Hb fuAFDpAPUNei87r8EZyRNowI9JDlvc8= -----END CERTIFICATE-----Generated at Tue Sep 22 18:15:45 2026 by rpki-client