$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/641151f1-d06a-4ed9-a06e-7d9e0e897b94/e27f25a6-63b3-32fc-885f-c2d304ca8510.roa File: e27f25a6-63b3-32fc-885f-c2d304ca8510.roa (raw, json) Hash identifier: ZcPN4C9LN+5MwxOVSUslQfm8h+sFuzUBOAWiFmnUs/w= Subject key identifier: FC:9F:C5:D4:9B:F6:47:B3:00:70:54:49:B2:5E:7A:78:32:E8:43:B4 Certificate issuer: /CN=641151f1-d06a-4ed9-a06e-7d9e0e897b94 Certificate serial: 010D0C9F4328584EDC91FA79CCA467C5F356CD00 Authority key identifier: 06:E3:48:BA:2A:F3:B5:7C:49:E5:FD:24:D1:13:88:99:1A:05:5A:B9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/641151f1-d06a-4ed9-a06e-7d9e0e897b94.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/641151f1-d06a-4ed9-a06e-7d9e0e897b94/e27f25a6-63b3-32fc-885f-c2d304ca8510.roa Signing time: Mon 17 Aug 2026 01:00:12 +0000 ROA not before: Mon 17 Aug 2026 01:00:12 +0000 ROA not after: Sun 15 Nov 2026 02:00:12 +0000 asID: 3356 IP address blocks: 23.132.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/641151f1-d06a-4ed9-a06e-7d9e0e897b94/641151f1-d06a-4ed9-a06e-7d9e0e897b94.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/641151f1-d06a-4ed9-a06e-7d9e0e897b94/641151f1-d06a-4ed9-a06e-7d9e0e897b94.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/641151f1-d06a-4ed9-a06e-7d9e0e897b94.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:dc:91:fa:79:cc:a4:67:c5:f3:56:cd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=641151f1-d06a-4ed9-a06e-7d9e0e897b94 Validity Not Before: Aug 17 01:00:12 2026 GMT Not After : Nov 15 02:00:12 2026 GMT Subject: CN=e94b5939-11f0-421c-9916-7adaa8c40a6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:6a:de:7f:98:35:9c:07:f5:6c:fc:f6:96:f4: 78:69:78:37:93:f4:bb:0f:fa:15:14:84:10:ef:6c: 1c:ab:f7:04:a4:1b:f1:d0:bd:3d:79:62:50:c7:db: e8:7c:3e:86:0b:b6:d3:8d:57:76:6d:51:6f:56:93: 59:0d:f7:a8:e5:2b:84:b0:17:48:8e:8a:6a:64:d3: ea:f8:7e:58:48:af:6f:db:05:b0:30:cf:8d:6b:ed: be:cb:f0:d2:8c:72:2e:b4:27:3d:b7:72:1f:fc:7c: ba:08:19:f5:b5:75:26:1d:87:5d:78:64:c0:24:36: 97:4e:ac:ad:f6:c5:fe:8e:d7:65:5c:43:0f:35:84: 35:5e:5d:84:70:b5:4a:8f:a8:32:a1:52:9f:5c:6e: 8b:f7:ae:be:a1:27:f4:6a:ee:d6:95:f0:84:95:e1: a3:64:dd:67:9d:ba:5d:ac:63:b8:8c:f2:78:9e:db: cb:14:86:6a:87:ca:66:00:10:2c:5a:61:55:29:36: 49:21:5e:39:18:80:13:bb:cf:af:08:3e:41:b1:59: 08:ce:1b:82:86:0b:d0:b2:94:34:b9:82:84:2e:1f: 63:c8:fe:dd:a9:ae:b2:5d:e6:0d:ce:bb:07:9d:17: 81:97:7d:98:ab:87:be:f4:b2:6f:b1:94:11:ba:0b: a7:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:9F:C5:D4:9B:F6:47:B3:00:70:54:49:B2:5E:7A:78:32:E8:43:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/641151f1-d06a-4ed9-a06e-7d9e0e897b94/e27f25a6-63b3-32fc-885f-c2d304ca8510.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/641151f1-d06a-4ed9-a06e-7d9e0e897b94/641151f1-d06a-4ed9-a06e-7d9e0e897b94.crl X509v3 Authority Key Identifier: keyid:06:E3:48:BA:2A:F3:B5:7C:49:E5:FD:24:D1:13:88:99:1A:05:5A:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/641151f1-d06a-4ed9-a06e-7d9e0e897b94.cer sbgp-ipAddrBlock: critical IPv4: 23.132.196.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b3:42:a6:00:04:a1:a2:74:bd:52:5d:5c:e9:7e:1f:61:c4:c4: 85:b7:f1:76:37:9f:52:1e:5d:64:66:a2:ee:c6:28:31:55:c7: c7:f7:7b:f0:b2:4b:fd:bd:02:67:a3:c3:9d:2d:d2:b0:55:70: e3:1b:f6:5d:d3:a2:f1:ab:19:f6:d2:cb:71:68:d6:1e:4e:c3: 22:f9:64:d6:a9:92:1a:b1:de:01:5d:01:1f:aa:5c:7b:d7:f7: 9a:a2:ce:89:ca:f3:b9:f7:9c:f3:9f:f1:c1:0e:4b:8f:95:93: 19:0a:93:74:ce:5b:a2:cb:e2:6a:25:07:2e:8b:c4:b6:74:4b: 5d:15:de:25:10:3f:9b:62:f1:6d:92:68:4a:c1:16:d2:42:a9: d8:8f:87:a3:9d:a1:56:32:a9:cd:58:58:54:fa:f0:b3:62:bb: 15:6e:8e:8f:62:3d:f0:ad:70:d0:e5:72:84:6e:8b:7d:15:57: bb:c6:c6:04:69:cb:d2:27:e8:fa:57:d8:ea:ad:07:80:26:1a: 59:94:06:87:09:89:98:58:5e:2b:f5:42:e9:a3:b9:c3:ae:e5: 11:6b:0b:7f:5f:59:cd:7e:d7:42:2b:cb:f2:61:c1:a2:98:78: a8:6f:ea:ea:7c:02:d9:e5:9d:eb:5d:6d:52:59:8c:dd:fe:06: 14:67:59:2a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7ckfp5zKRnxfNWzQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjQxMTUxZjEtZDA2YS00ZWQ5LWEwNmUtN2Q5ZTBlODk3 Yjk0MB4XDTI2MDgxNzAxMDAxMloXDTI2MTExNTAyMDAxMlowLzEtMCsGA1UEAxMk ZTk0YjU5MzktMTFmMC00MjFjLTk5MTYtN2FkYWE4YzQwYTZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAymref5g1nAf1bPz2lvR4aXg3k/S7D/oVFIQQ 72wcq/cEpBvx0L09eWJQx9vofD6GC7bTjVd2bVFvVpNZDfeo5SuEsBdIjopqZNPq +H5YSK9v2wWwMM+Na+2+y/DSjHIutCc9t3If/Hy6CBn1tXUmHYddeGTAJDaXTqyt 9sX+jtdlXEMPNYQ1Xl2EcLVKj6gyoVKfXG6L966+oSf0au7WlfCEleGjZN1nnbpd rGO4jPJ4ntvLFIZqh8pmABAsWmFVKTZJIV45GIATu8+vCD5BsVkIzhuChgvQspQ0 uYKELh9jyP7dqa6yXeYNzrsHnReBl32Yq4e+9LJvsZQRuguneQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPyfxdSb9kezAHBUSbJeengy6EO0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi82NDEx NTFmMS1kMDZhLTRlZDktYTA2ZS03ZDllMGU4OTdiOTQvZTI3ZjI1YTYtNjNiMy0z MmZjLTg4NWYtYzJkMzA0Y2E4NTEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNjQxMTUxZjEtZDA2YS00ZWQ5LWEw NmUtN2Q5ZTBlODk3Yjk0LzY0MTE1MWYxLWQwNmEtNGVkOS1hMDZlLTdkOWUwZTg5 N2I5NC5jcmwwHwYDVR0jBBgwFoAUBuNIuirztXxJ5f0k0ROImRoFWrkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi82NDExNTFmMS1kMDZhLTRlZDktYTA2ZS03ZDll MGU4OTdiOTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4TEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALNCpgAEoaJ0vVJdXOl+H2HExIW38XY3n1IeXWRmou7GKDFVx8f3e/Cy S/29Amejw50t0rBVcOMb9l3TovGrGfbSy3Fo1h5OwyL5ZNapkhqx3gFdAR+qXHvX 95qizonK87n3nPOf8cEOS4+VkxkKk3TOW6LL4molBy6LxLZ0S10V3iUQP5ti8W2S aErBFtJCqdiPh6OdoVYyqc1YWFT68LNiuxVujo9iPfCtcNDlcoRui30VV7vGxgRp y9In6PpX2OqtB4AmGlmUBocJiZhYXiv1QumjucOu5RFrC39fWc1+10Iry/JhwaKY eKhv6up8AtnlnetdbVJZjN3+BhRnWSo= -----END CERTIFICATE-----Generated at Mon Sep 21 14:35:08 2026 by rpki-client