$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4307d8eb-6c0f-40cf-b909-d61a3f0279c9/d8561bcc-e811-34b6-a195-8391a60c2ac9.roa File: d8561bcc-e811-34b6-a195-8391a60c2ac9.roa (raw, json) Hash identifier: 5lbFR+V7NbMGmhZBkWnIgkRogz+CWPemzdhDlY+mudA= Subject key identifier: 13:87:10:BF:D3:F5:B6:12:E1:96:31:4D:CF:C9:80:89:BD:5F:B6:52 Certificate issuer: /CN=4307d8eb-6c0f-40cf-b909-d61a3f0279c9 Certificate serial: 010D0C9F4328584F305281B06D25427596F05C00 Authority key identifier: 11:36:E2:A0:EE:F9:56:65:4B:69:C3:E3:4F:A3:30:12:F5:C0:0F:39 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4307d8eb-6c0f-40cf-b909-d61a3f0279c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4307d8eb-6c0f-40cf-b909-d61a3f0279c9/d8561bcc-e811-34b6-a195-8391a60c2ac9.roa Signing time: Wed 16 Sep 2026 01:00:12 +0000 ROA not before: Wed 16 Sep 2026 01:00:12 +0000 ROA not after: Tue 15 Dec 2026 02:00:12 +0000 asID: 63232 IP address blocks: 23.131.60.0/24 maxlen: 24 2602:f763::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4307d8eb-6c0f-40cf-b909-d61a3f0279c9/4307d8eb-6c0f-40cf-b909-d61a3f0279c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4307d8eb-6c0f-40cf-b909-d61a3f0279c9/4307d8eb-6c0f-40cf-b909-d61a3f0279c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4307d8eb-6c0f-40cf-b909-d61a3f0279c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:30:52:81:b0:6d:25:42:75:96:f0:5c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4307d8eb-6c0f-40cf-b909-d61a3f0279c9 Validity Not Before: Sep 16 01:00:12 2026 GMT Not After : Dec 15 02:00:12 2026 GMT Subject: CN=7f96f66a-ad1d-479e-a671-35e5d68de73c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:80:60:51:3c:45:8b:fb:32:d2:05:0e:0f:a4: f8:2e:6a:2b:f8:bd:d8:05:a6:6d:77:c2:88:6e:da: e5:28:b9:49:db:0c:a1:d1:ff:39:05:b7:5b:f1:35: c8:0f:b7:5b:b4:89:69:33:d0:7b:b5:5f:7c:61:87: 0b:76:d1:15:f7:39:7f:59:f1:25:80:bc:dd:c8:14: ec:d8:e3:58:88:6e:95:a2:47:0a:0b:f0:e4:17:38: aa:b0:6d:35:37:3b:de:ca:69:22:c9:90:db:32:7b: d8:1a:5f:c1:f9:70:b0:0c:af:eb:f3:78:59:03:49: 0c:56:7f:00:d4:b1:52:ba:b9:73:3b:30:0b:8e:8c: 5a:6e:94:9c:9c:2e:e8:12:46:59:90:7d:1d:d4:4f: 99:46:42:72:5f:ac:8d:92:38:8a:0a:ca:c2:31:2c: 2c:53:08:07:da:23:43:b7:9f:8a:a0:7d:b2:66:a5: e0:7e:3f:2c:1b:41:a9:61:ad:14:32:63:1e:0b:07: 1a:72:79:8d:1c:9b:d7:34:e3:42:7d:b6:1d:11:ac: 55:88:71:69:52:70:f8:c2:46:54:fa:8e:e8:b2:fb: 5e:23:f0:14:5f:01:19:76:fe:03:f3:81:7c:2c:fb: a4:f4:c1:3a:cb:d3:89:6f:9b:42:a4:95:11:c7:66: 3a:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:87:10:BF:D3:F5:B6:12:E1:96:31:4D:CF:C9:80:89:BD:5F:B6:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4307d8eb-6c0f-40cf-b909-d61a3f0279c9/d8561bcc-e811-34b6-a195-8391a60c2ac9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4307d8eb-6c0f-40cf-b909-d61a3f0279c9/4307d8eb-6c0f-40cf-b909-d61a3f0279c9.crl X509v3 Authority Key Identifier: keyid:11:36:E2:A0:EE:F9:56:65:4B:69:C3:E3:4F:A3:30:12:F5:C0:0F:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4307d8eb-6c0f-40cf-b909-d61a3f0279c9.cer sbgp-ipAddrBlock: critical IPv4: 23.131.60.0/24 IPv6: 2602:f763::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:8d:e4:13:dd:41:80:ef:cc:df:6a:bc:b2:6f:b4:c1:7e:f8: c6:05:98:5a:ef:0d:3c:da:0a:03:c4:13:8e:1b:96:7b:00:c5: af:2e:da:6d:72:f7:79:6c:50:7e:aa:13:c7:49:20:18:cb:8c: f5:1a:f4:d8:bd:8c:e8:d8:2a:31:4a:0d:e5:9e:b6:60:68:2b: ef:27:dc:ca:56:97:61:1c:2a:c8:8e:66:c2:d1:7a:a4:82:7b: 16:80:aa:1b:60:fb:b0:6e:3b:9b:4f:19:3e:23:4f:09:0b:3a: bb:16:c8:81:96:18:c6:0c:f6:06:eb:9b:c8:da:73:14:c8:72: 45:90:a8:e6:09:1b:30:47:62:ed:b0:cb:6a:6a:44:c4:a4:f3: 6e:2c:63:74:56:cd:ec:bc:1e:3b:50:f6:05:63:39:ef:7a:c3: fe:9e:a9:cf:df:db:06:56:5f:53:56:53:c8:b1:67:64:47:2d: aa:71:81:fd:9e:f0:0b:4c:0a:e0:83:74:79:57:82:95:71:b0: 73:b2:29:d1:38:c3:ee:53:bd:07:b2:3a:c2:25:fd:cd:63:a1: 67:4c:9e:cd:82:b9:74:a1:30:60:e9:8d:97:b7:5c:9b:5b:4a: 3e:45:70:81:85:ce:b9:82:a4:41:a8:18:0b:fa:6d:c8:ef:f7: bb:58:d4:c3 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE8wUoGwbSVCdZbwXAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDMwN2Q4ZWItNmMwZi00MGNmLWI5MDktZDYxYTNmMDI3 OWM5MB4XDTI2MDkxNjAxMDAxMloXDTI2MTIxNTAyMDAxMlowLzEtMCsGA1UEAxMk N2Y5NmY2NmEtYWQxZC00NzllLWE2NzEtMzVlNWQ2OGRlNzNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjYBgUTxFi/sy0gUOD6T4Lmor+L3YBaZtd8KI btrlKLlJ2wyh0f85Bbdb8TXID7dbtIlpM9B7tV98YYcLdtEV9zl/WfElgLzdyBTs 2ONYiG6VokcKC/DkFziqsG01NzveymkiyZDbMnvYGl/B+XCwDK/r83hZA0kMVn8A 1LFSurlzOzALjoxabpScnC7oEkZZkH0d1E+ZRkJyX6yNkjiKCsrCMSwsUwgH2iND t5+KoH2yZqXgfj8sG0GpYa0UMmMeCwcacnmNHJvXNONCfbYdEaxViHFpUnD4wkZU +o7osvteI/AUXwEZdv4D84F8LPuk9ME6y9OJb5tCpJURx2Y6QwIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFBOHEL/T9bYS4ZYxTc/JgIm9X7ZSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi80MzA3 ZDhlYi02YzBmLTQwY2YtYjkwOS1kNjFhM2YwMjc5YzkvZDg1NjFiY2MtZTgxMS0z NGI2LWExOTUtODM5MWE2MGMyYWM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNDMwN2Q4ZWItNmMwZi00MGNmLWI5 MDktZDYxYTNmMDI3OWM5LzQzMDdkOGViLTZjMGYtNDBjZi1iOTA5LWQ2MWEzZjAy NzljOS5jcmwwHwYDVR0jBBgwFoAUETbioO75VmVLacPjT6MwEvXADzkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi80MzA3ZDhlYi02YzBmLTQwY2YtYjkwOS1kNjFh M2YwMjc5YzkuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF4M8MA4E AgACMAgDBgAmAvdjADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQABjeQT3UGA78zfaryyb7TBfvjGBZha7w08 2goDxBOOG5Z7AMWvLtptcvd5bFB+qhPHSSAYy4z1GvTYvYzo2CoxSg3lnrZgaCvv J9zKVpdhHCrIjmbC0XqkgnsWgKobYPuwbjubTxk+I08JCzq7FsiBlhjGDPYG65vI 2nMUyHJFkKjmCRswR2LtsMtqakTEpPNuLGN0Vs3svB47UPYFYznvesP+nqnP39sG Vl9TVlPIsWdkRy2qcYH9nvALTArgg3R5V4KVcbBzsinROMPuU70HsjrCJf3NY6Fn TJ7Ngrl0oTBg6Y2Xt1ybW0o+RXCBhc65gqRBqBgL+m3I7/e7WNTD -----END CERTIFICATE-----Generated at Fri Sep 25 15:26:29 2026 by rpki-client