$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/273599ef-5b0b-4798-9f47-811d4c120cb0/ce64ca20-b012-3206-8040-dbfd9b9e2557.roa File: ce64ca20-b012-3206-8040-dbfd9b9e2557.roa (raw, json) Hash identifier: N7RX+oAxo8RT234Yh5UE8fSDrb2Ei5mXHtGLVZkdxdg= Subject key identifier: 90:60:EB:8C:3D:7B:C3:B5:D7:E0:CD:D4:71:02:F6:EC:C2:D4:CA:86 Certificate issuer: /CN=273599ef-5b0b-4798-9f47-811d4c120cb0 Certificate serial: 010D0C9F4328584EFF777A7B6E1D252C757A6380 Authority key identifier: AC:D7:D5:A8:D2:F0:62:75:D0:35:A8:92:AC:41:92:DF:13:34:61:83 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/273599ef-5b0b-4798-9f47-811d4c120cb0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/273599ef-5b0b-4798-9f47-811d4c120cb0/ce64ca20-b012-3206-8040-dbfd9b9e2557.roa Signing time: Sat 29 Aug 2026 13:00:12 +0000 ROA not before: Sat 29 Aug 2026 13:00:12 +0000 ROA not after: Fri 27 Nov 2026 14:00:12 +0000 asID: 30463 IP address blocks: 23.130.228.0/24 maxlen: 24 2602:f76c::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/273599ef-5b0b-4798-9f47-811d4c120cb0/273599ef-5b0b-4798-9f47-811d4c120cb0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/273599ef-5b0b-4798-9f47-811d4c120cb0/273599ef-5b0b-4798-9f47-811d4c120cb0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/273599ef-5b0b-4798-9f47-811d4c120cb0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ff:77:7a:7b:6e:1d:25:2c:75:7a:63:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=273599ef-5b0b-4798-9f47-811d4c120cb0 Validity Not Before: Aug 29 13:00:12 2026 GMT Not After : Nov 27 14:00:12 2026 GMT Subject: CN=6f4eda50-ae0f-41b0-9455-680a47df619c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:78:1f:28:4a:81:63:a6:2f:c2:18:6d:6e:5a: fa:a6:b8:30:eb:45:ad:77:8a:97:4e:c7:89:ee:a0: 3f:20:02:74:6d:79:9a:52:f6:58:e4:61:f4:80:e5: f9:8c:b0:3e:91:57:e0:3f:35:a2:73:ce:11:37:36: 40:ba:b5:c8:7a:19:92:6d:af:95:a2:8a:21:ff:7e: 30:dc:2e:2f:80:fd:b7:10:9c:cd:7a:72:c3:76:98: 4e:c4:11:5f:56:36:13:7e:61:93:70:36:91:40:37: bc:84:12:32:ab:5e:6a:a6:08:48:b7:a1:7a:ad:85: 99:52:c7:46:16:44:1a:c3:ea:34:83:8e:90:5d:d5: 4c:d8:f4:e5:3d:52:23:5e:79:57:ba:c3:f4:cc:1b: a3:76:2f:01:5d:74:8e:60:51:9e:1d:20:42:3a:e6: c5:0f:42:bf:30:06:79:1f:dc:59:87:45:71:46:aa: 59:6e:b6:36:f1:20:1e:d6:e4:fe:ea:9e:1b:77:50: e0:fe:2d:68:d1:fb:d2:c0:e2:7f:72:f2:57:67:f0: ce:d7:b9:db:d7:cd:5a:bc:c6:21:2e:9c:1c:e1:71: 1a:7f:25:e8:40:23:6c:4f:6e:5e:7b:83:cb:4b:0f: a2:cd:5c:c8:5e:cf:91:29:d1:a1:43:1c:e4:54:a2: 1a:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:60:EB:8C:3D:7B:C3:B5:D7:E0:CD:D4:71:02:F6:EC:C2:D4:CA:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/273599ef-5b0b-4798-9f47-811d4c120cb0/ce64ca20-b012-3206-8040-dbfd9b9e2557.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/273599ef-5b0b-4798-9f47-811d4c120cb0/273599ef-5b0b-4798-9f47-811d4c120cb0.crl X509v3 Authority Key Identifier: keyid:AC:D7:D5:A8:D2:F0:62:75:D0:35:A8:92:AC:41:92:DF:13:34:61:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/273599ef-5b0b-4798-9f47-811d4c120cb0.cer sbgp-ipAddrBlock: critical IPv4: 23.130.228.0/24 IPv6: 2602:f76c::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:06:dc:e8:a6:f0:81:b1:78:50:8f:c3:4e:27:3c:81:b7:35: b2:81:62:45:82:a0:1e:08:ff:1e:cc:d6:98:85:3c:06:a6:05: 62:96:5e:4e:d0:a3:8d:fb:3a:0b:d6:3b:f0:dc:d0:2a:04:58: 2f:b3:44:f7:1b:a1:05:1a:08:58:0a:3c:ad:67:e0:1b:20:f5: aa:93:8d:0d:74:4a:d1:5b:25:5b:c0:87:fd:89:90:d2:60:75: 91:1c:51:54:63:f0:bb:c7:e5:39:36:89:e2:90:d8:a4:c3:1e: c5:5a:3c:02:a5:e7:5a:80:93:82:ed:f5:57:26:97:09:fd:fb: d8:e4:38:14:be:b3:cb:29:a4:9d:e4:e4:a3:e9:d9:a7:48:21: 10:22:ce:86:3b:a8:91:b1:0a:6e:78:7e:19:ba:9b:e0:98:fe: 51:89:63:ff:b8:37:a5:f3:0e:c0:33:cc:9f:19:af:00:94:9d: 0d:b1:66:67:c3:c0:bd:94:de:ac:38:a8:b3:00:4d:32:51:3d: fa:3a:49:1e:44:9c:ed:69:20:cb:7d:19:c3:1f:f7:e0:42:5a: 16:27:c7:2f:ae:fe:38:42:55:75:6f:37:54:69:36:ed:b9:c7: bf:d3:6c:61:08:d3:20:2d:42:45:2f:d6:70:f0:75:46:e6:0e: 02:43:96:a5 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE7/d3p7bh0lLHV6Y4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjczNTk5ZWYtNWIwYi00Nzk4LTlmNDctODExZDRjMTIw Y2IwMB4XDTI2MDgyOTEzMDAxMloXDTI2MTEyNzE0MDAxMlowLzEtMCsGA1UEAxMk NmY0ZWRhNTAtYWUwZi00MWIwLTk0NTUtNjgwYTQ3ZGY2MTljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvngfKEqBY6Yvwhhtblr6prgw60Wtd4qXTseJ 7qA/IAJ0bXmaUvZY5GH0gOX5jLA+kVfgPzWic84RNzZAurXIehmSba+Voooh/34w 3C4vgP23EJzNenLDdphOxBFfVjYTfmGTcDaRQDe8hBIyq15qpghIt6F6rYWZUsdG FkQaw+o0g46QXdVM2PTlPVIjXnlXusP0zBujdi8BXXSOYFGeHSBCOubFD0K/MAZ5 H9xZh0VxRqpZbrY28SAe1uT+6p4bd1Dg/i1o0fvSwOJ/cvJXZ/DO17nb181avMYh Lpwc4XEafyXoQCNsT25ee4PLSw+izVzIXs+RKdGhQxzkVKIaSwIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFJBg64w9e8O11+DN1HEC9uzC1MqGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8yNzM1 OTllZi01YjBiLTQ3OTgtOWY0Ny04MTFkNGMxMjBjYjAvY2U2NGNhMjAtYjAxMi0z MjA2LTgwNDAtZGJmZDliOWUyNTU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMjczNTk5ZWYtNWIwYi00Nzk4LTlm NDctODExZDRjMTIwY2IwLzI3MzU5OWVmLTViMGItNDc5OC05ZjQ3LTgxMWQ0YzEy MGNiMC5jcmwwHwYDVR0jBBgwFoAUrNfVqNLwYnXQNaiSrEGS3xM0YYMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8yNzM1OTllZi01YjBiLTQ3OTgtOWY0Ny04MTFk NGMxMjBjYjAuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF4LkMA4E AgACMAgDBgQmAvdsADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAHBtzopvCBsXhQj8NOJzyBtzWygWJFgqAe CP8ezNaYhTwGpgVill5O0KON+zoL1jvw3NAqBFgvs0T3G6EFGghYCjytZ+AbIPWq k40NdErRWyVbwIf9iZDSYHWRHFFUY/C7x+U5NonikNikwx7FWjwCpedagJOC7fVX JpcJ/fvY5DgUvrPLKaSd5OSj6dmnSCEQIs6GO6iRsQpueH4ZupvgmP5RiWP/uDel 8w7AM8yfGa8AlJ0NsWZnw8C9lN6sOKizAE0yUT36OkkeRJztaSDLfRnDH/fgQloW J8cvrv44QlV1bzdUaTbtuce/02xhCNMgLUJFL9Zw8HVG5g4CQ5al -----END CERTIFICATE-----Generated at Tue Sep 22 19:18:02 2026 by rpki-client