$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8d2f044f-e9ba-4827-afd6-8e01d323d3ec/40a2f6f1-6e98-3afc-b0b7-2dc9c6851b22.roa File: 40a2f6f1-6e98-3afc-b0b7-2dc9c6851b22.roa (raw, json) Hash identifier: wUWU4udn45mWrh/iux9I9snAer5YcZqRXY2YkPc9CcY= Subject key identifier: A7:C3:D7:AB:AE:41:B6:1C:FE:D3:C7:A4:64:4A:4A:06:3E:52:79:61 Certificate issuer: /CN=8d2f044f-e9ba-4827-afd6-8e01d323d3ec Certificate serial: 010D0C9F4328584F1B6254C72838C43D80374700 Authority key identifier: AF:3F:E4:D8:29:57:9D:AE:9B:52:E2:DF:D1:82:AB:8C:FA:84:53:DA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8d2f044f-e9ba-4827-afd6-8e01d323d3ec.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8d2f044f-e9ba-4827-afd6-8e01d323d3ec/40a2f6f1-6e98-3afc-b0b7-2dc9c6851b22.roa Signing time: Tue 08 Sep 2026 13:00:12 +0000 ROA not before: Tue 08 Sep 2026 13:00:12 +0000 ROA not after: Mon 07 Dec 2026 14:00:12 +0000 asID: 36744 IP address blocks: 23.134.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8d2f044f-e9ba-4827-afd6-8e01d323d3ec/8d2f044f-e9ba-4827-afd6-8e01d323d3ec.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8d2f044f-e9ba-4827-afd6-8e01d323d3ec/8d2f044f-e9ba-4827-afd6-8e01d323d3ec.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8d2f044f-e9ba-4827-afd6-8e01d323d3ec.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Sep 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:1b:62:54:c7:28:38:c4:3d:80:37:47:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d2f044f-e9ba-4827-afd6-8e01d323d3ec Validity Not Before: Sep 8 13:00:12 2026 GMT Not After : Dec 7 14:00:12 2026 GMT Subject: CN=027108cd-c538-4770-91ec-3a78ceb22848 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:c3:40:44:9a:fb:5c:86:fa:e1:86:70:94:2e: da:c9:86:94:a1:7d:07:3e:a5:a7:72:16:62:21:52: 10:81:2f:c9:c5:90:8a:02:dd:c5:d0:31:5d:bb:7a: 47:0e:c5:5d:be:53:c1:8a:f8:ae:e0:5a:5b:23:90: 8d:1e:74:52:5f:70:13:74:76:54:c0:f0:1e:73:c8: 82:1a:a5:72:e7:a8:c7:7a:07:d8:fb:23:fa:56:1d: 03:9f:06:97:f8:74:e6:14:21:93:eb:03:f7:e2:b4: 28:a5:3b:3c:27:74:f3:5f:87:8b:c6:83:98:bd:36: 7b:ec:c9:5a:e6:01:5f:5a:86:31:a8:24:37:49:59: 6d:02:6d:82:77:e5:cf:74:c3:79:d8:21:3e:f8:71: b4:75:13:1f:cf:c0:59:a9:54:a9:38:e2:40:71:34: 4f:ff:0e:9f:75:53:3d:04:aa:23:94:03:d5:03:1e: c9:90:33:bd:3a:4f:a7:6e:8c:16:9e:3e:8d:45:dc: 3a:90:39:3f:70:2e:a2:b4:f1:aa:84:b1:9d:cd:9b: 3b:2f:95:bb:66:96:97:25:f4:d3:81:cf:19:60:5f: a3:e8:f9:11:3a:23:0a:96:72:66:26:17:24:58:df: 07:2d:49:7d:c8:f4:39:12:cd:94:79:2b:a4:f1:58: cb:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:C3:D7:AB:AE:41:B6:1C:FE:D3:C7:A4:64:4A:4A:06:3E:52:79:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8d2f044f-e9ba-4827-afd6-8e01d323d3ec/40a2f6f1-6e98-3afc-b0b7-2dc9c6851b22.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8d2f044f-e9ba-4827-afd6-8e01d323d3ec/8d2f044f-e9ba-4827-afd6-8e01d323d3ec.crl X509v3 Authority Key Identifier: keyid:AF:3F:E4:D8:29:57:9D:AE:9B:52:E2:DF:D1:82:AB:8C:FA:84:53:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8d2f044f-e9ba-4827-afd6-8e01d323d3ec.cer sbgp-ipAddrBlock: critical IPv4: 23.134.124.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:a9:6c:b7:b5:ab:1d:2c:56:c9:9c:c5:e2:ae:8f:26:5c:69: df:c1:8f:7f:6f:c5:aa:78:51:44:ae:07:c9:0c:fe:fe:99:50: 98:a3:d0:03:d6:41:4e:33:28:26:32:04:e2:30:ca:68:4c:4f: 38:fa:06:ff:17:6f:63:a1:31:cd:8e:f2:0c:4c:bf:58:7e:1b: 33:9e:ae:52:f3:72:18:43:67:9e:bd:d8:3d:e0:c5:f2:b1:af: 13:c6:11:f8:41:a1:3e:33:cd:04:a7:3b:33:b5:c3:2f:c5:b2: 50:cb:7b:b7:e6:ad:cf:a7:05:90:fd:74:97:2f:04:53:8d:aa: 32:76:7b:b9:15:2b:6f:76:6f:fd:a9:ea:67:77:1b:13:97:a7: 7b:0e:50:dd:0e:26:b4:29:4d:70:a4:50:08:31:32:d6:4a:d4: 1b:57:27:a7:dc:c4:b4:9c:b8:fe:5a:88:61:24:b2:9e:f9:6c: ef:ea:14:9c:28:b8:93:ac:b0:1f:eb:e6:34:ff:f3:12:4a:3f: 42:e6:a9:0f:1e:05:5d:a6:1c:03:a2:5e:0a:b2:13:58:20:4d: c8:0a:35:02:e5:95:fc:b0:54:b4:23:eb:e3:8c:26:f8:4d:80: c9:d5:69:47:66:52:b0:f5:c0:ff:9a:6f:ad:99:97:c2:53:57: a5:82:3e:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8bYlTHKDjEPYA3RwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGQyZjA0NGYtZTliYS00ODI3LWFmZDYtOGUwMWQzMjNk M2VjMB4XDTI2MDkwODEzMDAxMloXDTI2MTIwNzE0MDAxMlowLzEtMCsGA1UEAxMk MDI3MTA4Y2QtYzUzOC00NzcwLTkxZWMtM2E3OGNlYjIyODQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4MNARJr7XIb64YZwlC7ayYaUoX0HPqWnchZi IVIQgS/JxZCKAt3F0DFdu3pHDsVdvlPBiviu4FpbI5CNHnRSX3ATdHZUwPAec8iC GqVy56jHegfY+yP6Vh0DnwaX+HTmFCGT6wP34rQopTs8J3TzX4eLxoOYvTZ77Mla 5gFfWoYxqCQ3SVltAm2Cd+XPdMN52CE++HG0dRMfz8BZqVSpOOJAcTRP/w6fdVM9 BKojlAPVAx7JkDO9Ok+nbowWnj6NRdw6kDk/cC6itPGqhLGdzZs7L5W7ZpaXJfTT gc8ZYF+j6PkROiMKlnJmJhckWN8HLUl9yPQ5Es2UeSuk8VjLeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKfD16uuQbYc/tPHpGRKSgY+UnlhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi84ZDJm MDQ0Zi1lOWJhLTQ4MjctYWZkNi04ZTAxZDMyM2QzZWMvNDBhMmY2ZjEtNmU5OC0z YWZjLWIwYjctMmRjOWM2ODUxYjIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvOGQyZjA0NGYtZTliYS00ODI3LWFm ZDYtOGUwMWQzMjNkM2VjLzhkMmYwNDRmLWU5YmEtNDgyNy1hZmQ2LThlMDFkMzIz ZDNlYy5jcmwwHwYDVR0jBBgwFoAUrz/k2ClXna6bUuLf0YKrjPqEU9owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi84ZDJmMDQ0Zi1lOWJhLTQ4MjctYWZkNi04ZTAx ZDMyM2QzZWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4Z8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ+pbLe1qx0sVsmcxeKujyZcad/Bj39vxap4UUSuB8kM/v6ZUJij0APW QU4zKCYyBOIwymhMTzj6Bv8Xb2OhMc2O8gxMv1h+GzOerlLzchhDZ5692D3gxfKx rxPGEfhBoT4zzQSnOzO1wy/FslDLe7fmrc+nBZD9dJcvBFONqjJ2e7kVK292b/2p 6md3GxOXp3sOUN0OJrQpTXCkUAgxMtZK1BtXJ6fcxLScuP5aiGEksp75bO/qFJwo uJOssB/r5jT/8xJKP0LmqQ8eBV2mHAOiXgqyE1ggTcgKNQLllfywVLQj6+OMJvhN gMnVaUdmUrD1wP+ab62Zl8JTV6WCPjg= -----END CERTIFICATE-----Generated at Sun Sep 20 10:59:45 2026 by rpki-client