$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/817b315d-32a3-4ee9-ba5d-557007a627ae/1c876bf4-67a6-3f3c-80d6-55c1727ce5c1.roa File: 1c876bf4-67a6-3f3c-80d6-55c1727ce5c1.roa (raw, json) Hash identifier: 11D3G7tlvXSMMPtbsZPFQxq2Qy8XLfqHjVIk4uoLKT0= Subject key identifier: 99:64:1E:BF:0E:C7:7E:C7:1D:13:C2:38:EC:93:DD:9A:B5:4D:79:74 Certificate issuer: /CN=817b315d-32a3-4ee9-ba5d-557007a627ae Certificate serial: 010D0C9F4328584F2957D039D9BF35134AEDC980 Authority key identifier: FA:5F:55:2D:76:E3:48:FA:EB:A9:91:2A:04:14:AA:57:24:37:58:51 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/817b315d-32a3-4ee9-ba5d-557007a627ae.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/817b315d-32a3-4ee9-ba5d-557007a627ae/1c876bf4-67a6-3f3c-80d6-55c1727ce5c1.roa Signing time: Sun 13 Sep 2026 13:00:11 +0000 ROA not before: Sun 13 Sep 2026 13:00:11 +0000 ROA not after: Sat 12 Dec 2026 14:00:11 +0000 asID: 399861 IP address blocks: 23.129.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/817b315d-32a3-4ee9-ba5d-557007a627ae/817b315d-32a3-4ee9-ba5d-557007a627ae.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/817b315d-32a3-4ee9-ba5d-557007a627ae/817b315d-32a3-4ee9-ba5d-557007a627ae.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/817b315d-32a3-4ee9-ba5d-557007a627ae.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:29:57:d0:39:d9:bf:35:13:4a:ed:c9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=817b315d-32a3-4ee9-ba5d-557007a627ae Validity Not Before: Sep 13 13:00:11 2026 GMT Not After : Dec 12 14:00:11 2026 GMT Subject: CN=e28a6cc5-8a98-42fc-8749-b884328ff2f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fd:0a:36:90:7c:ae:19:5f:b0:c5:eb:23:1c:f4: 2c:2f:9a:d9:34:10:6f:82:76:a2:83:63:bf:10:fa: 49:47:8d:ec:70:7e:3d:05:4d:49:1b:a2:3e:25:81: 6f:0f:7a:e2:3c:42:7d:27:cd:80:9d:83:90:b5:d5: 79:c7:99:83:cc:3b:a1:cc:0b:4a:b5:c5:9b:8c:35: 2f:63:d7:61:e7:71:f2:66:11:07:6c:7c:56:18:bc: 11:b1:66:3f:78:0d:55:8c:0f:66:bf:dd:e1:85:24: 4c:fa:f7:8e:10:a2:d8:cb:ef:0f:c2:58:bb:ff:c9: 26:09:e3:b4:72:c5:3a:aa:b5:c7:fc:6f:2c:aa:49: 28:cb:2b:d3:93:f3:af:a2:87:44:7a:32:da:bf:5f: 16:11:35:a5:ed:bf:52:1e:c5:29:3f:a2:a8:bb:a3: 79:56:bf:63:c9:b6:e0:1e:5c:5e:47:34:82:c6:fb: c6:6f:57:f4:84:cb:c1:1f:8c:b8:9d:76:74:dc:b2: d2:bf:ea:a2:8f:c9:41:52:f0:98:53:e7:f1:64:f0: 93:2a:f0:cb:ba:12:8a:f1:3a:74:77:bd:f0:ad:92: 36:a6:08:12:4b:9c:0f:a8:18:11:b7:84:0a:c1:bb: 0c:10:51:a4:7f:97:7d:f0:95:11:34:6e:28:c3:12: 3f:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:64:1E:BF:0E:C7:7E:C7:1D:13:C2:38:EC:93:DD:9A:B5:4D:79:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/817b315d-32a3-4ee9-ba5d-557007a627ae/1c876bf4-67a6-3f3c-80d6-55c1727ce5c1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/817b315d-32a3-4ee9-ba5d-557007a627ae/817b315d-32a3-4ee9-ba5d-557007a627ae.crl X509v3 Authority Key Identifier: keyid:FA:5F:55:2D:76:E3:48:FA:EB:A9:91:2A:04:14:AA:57:24:37:58:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/817b315d-32a3-4ee9-ba5d-557007a627ae.cer sbgp-ipAddrBlock: critical IPv4: 23.129.124.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:a7:a3:7c:0e:82:7b:ae:cd:55:5e:52:22:c2:06:a0:1d:7a: 32:15:77:36:5c:80:53:5f:d9:99:96:69:d2:8c:7c:79:18:b5: 62:53:81:fe:ce:91:f4:fa:67:da:d1:55:9a:61:21:9b:24:56: 99:22:73:e7:1e:de:31:ab:08:e4:08:25:03:3d:7e:ce:e8:d9: ec:45:0b:f6:78:24:8f:dc:f7:b2:7d:65:57:36:fa:d5:52:e1: 8a:e0:2b:b6:a5:de:77:a8:0c:3e:6d:a6:a0:d2:52:cb:16:70: 7f:fc:f8:db:c0:30:8b:f3:95:cc:db:9f:1b:55:98:cf:a6:56: 44:6a:9b:f6:77:b7:19:75:cc:37:e1:19:2d:e6:f4:ff:06:c2: 4a:9f:27:b7:cf:7b:e2:e3:62:3b:45:46:d6:c4:b3:74:bf:16: c1:24:b1:55:15:ce:db:93:7c:84:8b:cc:5e:46:4c:75:df:d7: 29:f5:a6:32:24:43:fa:4b:10:fe:ae:30:4e:66:b5:d1:0c:b4: bc:b2:74:9a:3a:0a:f4:b5:31:30:1b:54:ac:06:18:44:de:75: b3:43:0e:04:86:9f:78:1f:da:ec:cf:43:36:0f:e0:84:56:b6: 18:ec:9b:ae:03:aa:91:c6:43:54:0e:99:be:7c:3b:8b:90:95: 76:dd:be:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8pV9A52b81E0rtyYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODE3YjMxNWQtMzJhMy00ZWU5LWJhNWQtNTU3MDA3YTYy N2FlMB4XDTI2MDkxMzEzMDAxMVoXDTI2MTIxMjE0MDAxMVowLzEtMCsGA1UEAxMk ZTI4YTZjYzUtOGE5OC00MmZjLTg3NDktYjg4NDMyOGZmMmYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/Qo2kHyuGV+wxesjHPQsL5rZNBBvgnaig2O/ EPpJR43scH49BU1JG6I+JYFvD3riPEJ9J82AnYOQtdV5x5mDzDuhzAtKtcWbjDUv Y9dh53HyZhEHbHxWGLwRsWY/eA1VjA9mv93hhSRM+veOEKLYy+8Pwli7/8kmCeO0 csU6qrXH/G8sqkkoyyvTk/OvoodEejLav18WETWl7b9SHsUpP6Kou6N5Vr9jybbg HlxeRzSCxvvGb1f0hMvBH4y4nXZ03LLSv+qij8lBUvCYU+fxZPCTKvDLuhKK8Tp0 d73wrZI2pggSS5wPqBgRt4QKwbsMEFGkf5d98JURNG4owxI/5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJlkHr8Ox37HHRPCOOyT3Zq1TXl0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi84MTdi MzE1ZC0zMmEzLTRlZTktYmE1ZC01NTcwMDdhNjI3YWUvMWM4NzZiZjQtNjdhNi0z ZjNjLTgwZDYtNTVjMTcyN2NlNWMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvODE3YjMxNWQtMzJhMy00ZWU5LWJh NWQtNTU3MDA3YTYyN2FlLzgxN2IzMTVkLTMyYTMtNGVlOS1iYTVkLTU1NzAwN2E2 MjdhZS5jcmwwHwYDVR0jBBgwFoAU+l9VLXbjSPrrqZEqBBSqVyQ3WFEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi84MTdiMzE1ZC0zMmEzLTRlZTktYmE1ZC01NTcw MDdhNjI3YWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4F8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGGno3wOgnuuzVVeUiLCBqAdejIVdzZcgFNf2ZmWadKMfHkYtWJTgf7O kfT6Z9rRVZphIZskVpkic+ce3jGrCOQIJQM9fs7o2exFC/Z4JI/c97J9ZVc2+tVS 4YrgK7al3neoDD5tpqDSUssWcH/8+NvAMIvzlczbnxtVmM+mVkRqm/Z3txl1zDfh GS3m9P8GwkqfJ7fPe+LjYjtFRtbEs3S/FsEksVUVztuTfISLzF5GTHXf1yn1pjIk Q/pLEP6uME5mtdEMtLyydJo6CvS1MTAbVKwGGETedbNDDgSGn3gf2uzPQzYP4IRW thjsm64DqpHGQ1QOmb58O4uQlXbdvl8= -----END CERTIFICATE-----Generated at Mon Sep 21 11:21:42 2026 by rpki-client