$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3a959aba-ef69-4a56-aa6b-1ca1fa5af3a0/c2a2cad0-ce13-34a4-8e45-12517bc8090f.roa File: c2a2cad0-ce13-34a4-8e45-12517bc8090f.roa (raw, json) Hash identifier: nxnsEEOis9uEuRGviloTevPlMKzfSQet75Rp1ahr0yQ= Subject key identifier: ED:DA:63:EF:09:45:FD:D1:D7:C6:28:72:76:E5:36:B9:CC:1B:BD:62 Certificate issuer: /CN=3a959aba-ef69-4a56-aa6b-1ca1fa5af3a0 Certificate serial: 010D0C9F4328584F1F924A2672B659E1108D0B80 Authority key identifier: 1A:1F:5A:6A:94:5D:B3:85:0A:41:53:82:34:5C:94:0A:54:F4:3A:2F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3a959aba-ef69-4a56-aa6b-1ca1fa5af3a0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3a959aba-ef69-4a56-aa6b-1ca1fa5af3a0/c2a2cad0-ce13-34a4-8e45-12517bc8090f.roa Signing time: Thu 10 Sep 2026 01:00:12 +0000 ROA not before: Thu 10 Sep 2026 01:00:12 +0000 ROA not after: Wed 09 Dec 2026 02:00:12 +0000 asID: 213622 IP address blocks: 23.130.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3a959aba-ef69-4a56-aa6b-1ca1fa5af3a0/3a959aba-ef69-4a56-aa6b-1ca1fa5af3a0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3a959aba-ef69-4a56-aa6b-1ca1fa5af3a0/3a959aba-ef69-4a56-aa6b-1ca1fa5af3a0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3a959aba-ef69-4a56-aa6b-1ca1fa5af3a0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:1f:92:4a:26:72:b6:59:e1:10:8d:0b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3a959aba-ef69-4a56-aa6b-1ca1fa5af3a0 Validity Not Before: Sep 10 01:00:12 2026 GMT Not After : Dec 9 02:00:12 2026 GMT Subject: CN=d751b803-b3f8-400e-ab86-6f7372ef3a34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:0f:a1:30:ee:0d:22:1a:51:d1:6d:b9:0e:43: 7d:b2:bc:2e:02:9d:a3:1a:b4:03:67:6c:9a:ab:bf: 78:c3:eb:5d:cf:fa:07:05:06:b1:f5:94:20:dd:44: fa:fb:d6:58:fa:c5:91:26:91:6e:1f:47:b0:21:41: 9b:7a:02:03:b4:88:10:40:75:61:94:81:2d:cc:01: 4d:fa:d3:f8:45:ca:9e:f4:fd:7a:3e:8e:f0:04:01: 0c:92:01:dc:b2:5b:e1:ff:5a:33:69:0b:47:2b:56: ec:aa:88:9b:e6:b7:16:19:71:96:c7:a1:1b:ed:2a: 8b:b1:ee:c6:3b:ad:ca:ad:53:3e:e5:b0:d1:7f:87: ae:9e:cc:81:bb:c1:77:55:99:8b:8a:1c:46:1e:79: 06:b5:cf:7d:9d:3e:27:cd:be:c6:ae:a8:e7:94:a5: bb:92:e1:d0:0a:0e:94:f3:c4:64:86:84:a4:3f:9a: bf:33:b5:e6:b6:33:09:7c:7c:01:b9:61:db:fa:de: 63:e5:6a:08:a3:f8:17:20:ec:a3:41:71:43:3b:dc: 16:74:a7:06:ae:78:48:f4:21:3e:7b:1a:fd:b1:91: 32:e8:ec:64:72:b7:77:2f:50:80:db:bd:2d:ec:1f: 71:53:7e:12:ba:c7:5d:33:df:37:ac:02:41:aa:67: 5b:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:DA:63:EF:09:45:FD:D1:D7:C6:28:72:76:E5:36:B9:CC:1B:BD:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3a959aba-ef69-4a56-aa6b-1ca1fa5af3a0/c2a2cad0-ce13-34a4-8e45-12517bc8090f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3a959aba-ef69-4a56-aa6b-1ca1fa5af3a0/3a959aba-ef69-4a56-aa6b-1ca1fa5af3a0.crl X509v3 Authority Key Identifier: keyid:1A:1F:5A:6A:94:5D:B3:85:0A:41:53:82:34:5C:94:0A:54:F4:3A:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3a959aba-ef69-4a56-aa6b-1ca1fa5af3a0.cer sbgp-ipAddrBlock: critical IPv4: 23.130.28.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:ce:e4:40:bb:a9:8f:01:f2:e0:ef:91:ef:a8:73:0f:ba:a5: 1e:25:b0:6b:3c:7a:e1:f9:e1:3d:a7:85:cb:70:76:01:ac:06: 3a:b8:86:a0:54:c8:78:5b:62:8c:d9:fc:8c:4f:b3:c3:52:dc: fe:75:a2:4d:f2:c0:5e:06:91:d7:d0:a3:45:8e:53:53:46:70: e5:68:73:b5:60:44:af:55:03:6f:11:12:7c:89:e5:1f:b0:75: fc:38:f1:4b:e9:ce:b9:25:57:c5:5b:36:fb:9c:ce:da:70:48: fe:76:04:0c:77:69:ec:7e:b9:04:3e:cc:a6:58:dc:1e:df:91: 4c:08:c9:e1:28:b7:7b:2c:fd:a3:87:17:b3:58:43:db:ad:5d: 67:85:3c:22:a3:6b:ca:44:64:0f:9b:3d:73:16:fc:9f:d8:a5: 11:e1:8b:de:36:84:0f:5c:69:49:11:67:d5:96:eb:91:13:69: ca:b8:c9:97:55:00:18:9b:ca:bb:0d:04:c9:73:03:df:74:9c: f3:4b:b4:a2:a5:45:d1:9d:71:3a:dc:aa:6c:80:70:45:3b:83: d0:fe:ef:9a:7a:d8:2c:20:cd:91:82:69:57:59:cd:3c:b9:70: 51:c1:c9:d8:3d:83:f9:e5:cb:03:2d:7c:93:5b:50:29:0f:e6: 03:25:36:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8fkkomcrZZ4RCNC4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2E5NTlhYmEtZWY2OS00YTU2LWFhNmItMWNhMWZhNWFm M2EwMB4XDTI2MDkxMDAxMDAxMloXDTI2MTIwOTAyMDAxMlowLzEtMCsGA1UEAxMk ZDc1MWI4MDMtYjNmOC00MDBlLWFiODYtNmY3MzcyZWYzYTM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmA+hMO4NIhpR0W25DkN9srwuAp2jGrQDZ2ya q794w+tdz/oHBQax9ZQg3UT6+9ZY+sWRJpFuH0ewIUGbegIDtIgQQHVhlIEtzAFN +tP4Rcqe9P16Po7wBAEMkgHcslvh/1ozaQtHK1bsqoib5rcWGXGWx6Eb7SqLse7G O63KrVM+5bDRf4eunsyBu8F3VZmLihxGHnkGtc99nT4nzb7GrqjnlKW7kuHQCg6U 88RkhoSkP5q/M7XmtjMJfHwBuWHb+t5j5WoIo/gXIOyjQXFDO9wWdKcGrnhI9CE+ exr9sZEy6Oxkcrd3L1CA270t7B9xU34SusddM983rAJBqmdbFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO3aY+8JRf3R18YocnblNrnMG71iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8zYTk1 OWFiYS1lZjY5LTRhNTYtYWE2Yi0xY2ExZmE1YWYzYTAvYzJhMmNhZDAtY2UxMy0z NGE0LThlNDUtMTI1MTdiYzgwOTBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvM2E5NTlhYmEtZWY2OS00YTU2LWFh NmItMWNhMWZhNWFmM2EwLzNhOTU5YWJhLWVmNjktNGE1Ni1hYTZiLTFjYTFmYTVh ZjNhMC5jcmwwHwYDVR0jBBgwFoAUGh9aapRds4UKQVOCNFyUClT0Oi8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8zYTk1OWFiYS1lZjY5LTRhNTYtYWE2Yi0xY2Ex ZmE1YWYzYTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4IcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH7O5EC7qY8B8uDvke+ocw+6pR4lsGs8euH54T2nhctwdgGsBjq4hqBU yHhbYozZ/IxPs8NS3P51ok3ywF4GkdfQo0WOU1NGcOVoc7VgRK9VA28REnyJ5R+w dfw48UvpzrklV8VbNvucztpwSP52BAx3aex+uQQ+zKZY3B7fkUwIyeEot3ss/aOH F7NYQ9utXWeFPCKja8pEZA+bPXMW/J/YpRHhi942hA9caUkRZ9WW65ETacq4yZdV ABibyrsNBMlzA990nPNLtKKlRdGdcTrcqmyAcEU7g9D+75p62CwgzZGCaVdZzTy5 cFHBydg9g/nlywMtfJNbUCkP5gMlNmo= -----END CERTIFICATE-----Generated at Mon Sep 21 09:12:16 2026 by rpki-client