$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3b4a441f-5d0b-4813-836e-2aefd54b0ca1/5130bef9-5e24-3975-9914-0892f8dec7d1.roa File: 5130bef9-5e24-3975-9914-0892f8dec7d1.roa (raw, json) Hash identifier: C1V5WBsuNYPy7mLxtK9KpgWVJekdDuKhexK7dDgGecE= Subject key identifier: B4:25:19:A0:A6:15:45:D0:2D:CD:32:25:39:7D:F0:8E:86:E8:A5:A7 Certificate issuer: /CN=3b4a441f-5d0b-4813-836e-2aefd54b0ca1 Certificate serial: 010D0C9F4328584F3FAD430F634C55DB87C07640 Authority key identifier: 85:34:EB:7B:3B:7C:EB:37:2E:52:AB:90:8E:9F:CB:FD:3E:0A:16:9F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3b4a441f-5d0b-4813-836e-2aefd54b0ca1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3b4a441f-5d0b-4813-836e-2aefd54b0ca1/5130bef9-5e24-3975-9914-0892f8dec7d1.roa Signing time: Mon 21 Sep 2026 13:00:12 +0000 ROA not before: Mon 21 Sep 2026 13:00:12 +0000 ROA not after: Sun 20 Dec 2026 14:00:12 +0000 asID: 401560 IP address blocks: 23.131.252.0/24 maxlen: 24 2602:f744::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3b4a441f-5d0b-4813-836e-2aefd54b0ca1/3b4a441f-5d0b-4813-836e-2aefd54b0ca1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3b4a441f-5d0b-4813-836e-2aefd54b0ca1/3b4a441f-5d0b-4813-836e-2aefd54b0ca1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3b4a441f-5d0b-4813-836e-2aefd54b0ca1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3f:ad:43:0f:63:4c:55:db:87:c0:76:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b4a441f-5d0b-4813-836e-2aefd54b0ca1 Validity Not Before: Sep 21 13:00:12 2026 GMT Not After : Dec 20 14:00:12 2026 GMT Subject: CN=233ca5ba-255d-446b-98fe-f9aa35c14566 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:4a:f0:fb:0d:98:5b:dc:d5:a2:3f:6b:bd:71: e7:77:0d:7a:89:54:7b:6f:43:34:22:25:26:f3:ce: c1:38:fd:4f:79:e3:93:9f:ea:51:76:93:0f:55:a6: 0d:20:fc:0c:f9:8c:00:c0:6c:8a:e3:84:71:81:b8: 39:d6:6c:3a:18:1f:13:93:6e:b1:f3:74:c8:a2:43: 0d:19:e2:b4:b3:db:07:57:6b:b1:13:d6:32:2d:c9: 05:11:b2:8a:f6:f2:48:67:e5:80:a6:ba:11:22:ad: f6:1d:25:36:ea:3b:cd:92:18:03:54:63:19:50:be: ad:59:9a:7b:76:71:e8:88:33:5f:bc:c9:0c:61:47: 9b:e9:7d:24:6d:d1:76:b4:eb:98:48:ea:17:e9:da: 31:98:24:68:f6:ab:58:34:f2:79:a8:e0:fc:7c:7d: ab:32:17:2e:55:80:9f:7a:aa:f2:9b:4e:69:5d:19: 0d:87:d5:4d:35:29:cd:b4:ca:6e:4b:54:61:f0:4c: ec:30:48:ef:70:ca:cc:67:d5:68:01:49:a0:45:19: c2:67:25:0f:bd:b0:64:76:28:0d:63:a7:49:36:a9: ef:ca:c8:7d:0d:f0:d4:2e:c7:e5:3b:61:2a:39:26: a5:e7:4d:99:31:d1:46:2f:66:9b:bc:2f:19:aa:82: dc:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:25:19:A0:A6:15:45:D0:2D:CD:32:25:39:7D:F0:8E:86:E8:A5:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3b4a441f-5d0b-4813-836e-2aefd54b0ca1/5130bef9-5e24-3975-9914-0892f8dec7d1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3b4a441f-5d0b-4813-836e-2aefd54b0ca1/3b4a441f-5d0b-4813-836e-2aefd54b0ca1.crl X509v3 Authority Key Identifier: keyid:85:34:EB:7B:3B:7C:EB:37:2E:52:AB:90:8E:9F:CB:FD:3E:0A:16:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3b4a441f-5d0b-4813-836e-2aefd54b0ca1.cer sbgp-ipAddrBlock: critical IPv4: 23.131.252.0/24 IPv6: 2602:f744::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:0b:4e:d8:85:43:64:d3:f9:4f:62:19:f9:6c:f8:af:41:5c: d9:4f:50:d3:db:c9:3b:c1:ef:62:78:7a:93:57:13:85:cb:27: c4:96:53:dc:59:0d:9c:ea:f2:76:9c:29:b9:79:6b:2e:80:81: ea:af:12:a8:b2:1b:b0:df:9b:fd:f5:f8:3c:ed:5d:7c:a5:34: 8d:6b:9d:c5:0c:86:1d:1f:fb:83:86:cf:c4:a5:03:d1:cc:81: 16:6f:dd:ed:75:75:63:81:0a:39:16:a6:aa:9d:12:57:ca:81: d0:aa:61:27:7a:32:d2:45:20:60:75:c6:44:a7:68:86:e5:49: e2:81:81:05:da:9b:23:76:71:d7:bf:b7:1b:16:38:58:f4:72: a9:8b:63:5a:c2:b5:8b:4c:dd:e4:e0:87:40:4b:d3:61:68:f8: cb:01:ce:05:99:96:46:5a:ba:92:85:a0:87:3c:90:73:f2:a7: 27:2c:c8:7b:aa:27:95:07:51:c3:90:78:13:2c:90:25:07:15: 33:2d:c6:98:27:f7:e4:f5:0b:53:d5:1d:f1:cb:b0:ee:b4:ac: 7d:d5:ec:d6:06:c2:af:cf:33:5c:e4:34:91:8b:dc:c0:49:42: 58:de:95:db:9f:53:ea:d4:18:30:89:ae:fd:5d:7d:33:ca:0a: b8:17:6f:1b -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE8/rUMPY0xV24fAdkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2I0YTQ0MWYtNWQwYi00ODEzLTgzNmUtMmFlZmQ1NGIw Y2ExMB4XDTI2MDkyMTEzMDAxMloXDTI2MTIyMDE0MDAxMlowLzEtMCsGA1UEAxMk MjMzY2E1YmEtMjU1ZC00NDZiLTk4ZmUtZjlhYTM1YzE0NTY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtkrw+w2YW9zVoj9rvXHndw16iVR7b0M0IiUm 887BOP1PeeOTn+pRdpMPVaYNIPwM+YwAwGyK44Rxgbg51mw6GB8Tk26x83TIokMN GeK0s9sHV2uxE9YyLckFEbKK9vJIZ+WAproRIq32HSU26jvNkhgDVGMZUL6tWZp7 dnHoiDNfvMkMYUeb6X0kbdF2tOuYSOoX6doxmCRo9qtYNPJ5qOD8fH2rMhcuVYCf eqrym05pXRkNh9VNNSnNtMpuS1Rh8EzsMEjvcMrMZ9VoAUmgRRnCZyUPvbBkdigN Y6dJNqnvysh9DfDULsflO2EqOSal502ZMdFGL2abvC8ZqoLc6QIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFLQlGaCmFUXQLc0yJTl98I6G6KWnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8zYjRh NDQxZi01ZDBiLTQ4MTMtODM2ZS0yYWVmZDU0YjBjYTEvNTEzMGJlZjktNWUyNC0z OTc1LTk5MTQtMDg5MmY4ZGVjN2QxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvM2I0YTQ0MWYtNWQwYi00ODEzLTgz NmUtMmFlZmQ1NGIwY2ExLzNiNGE0NDFmLTVkMGItNDgxMy04MzZlLTJhZWZkNTRi MGNhMS5jcmwwHwYDVR0jBBgwFoAUhTTrezt86zcuUquQjp/L/T4KFp8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8zYjRhNDQxZi01ZDBiLTQ4MTMtODM2ZS0yYWVm ZDU0YjBjYTEuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF4P8MA4E AgACMAgDBgAmAvdEADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBFC07YhUNk0/lPYhn5bPivQVzZT1DT28k7 we9ieHqTVxOFyyfEllPcWQ2c6vJ2nCm5eWsugIHqrxKoshuw35v99fg87V18pTSN a53FDIYdH/uDhs/EpQPRzIEWb93tdXVjgQo5FqaqnRJXyoHQqmEnejLSRSBgdcZE p2iG5UnigYEF2psjdnHXv7cbFjhY9HKpi2NawrWLTN3k4IdAS9NhaPjLAc4FmZZG WrqShaCHPJBz8qcnLMh7qieVB1HDkHgTLJAlBxUzLcaYJ/fk9QtT1R3xy7DutKx9 1ezWBsKvzzNc5DSRi9zASUJY3pXbn1Pq1Bgwia79XX0zygq4F28b -----END CERTIFICATE-----Generated at Sat Sep 26 10:10:17 2026 by rpki-client