$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ba82379b-9b5e-4eb4-9e4c-6aa36f236aa9/cea7df78-774e-31de-b5ec-e59ec115199e.roa File: cea7df78-774e-31de-b5ec-e59ec115199e.roa (raw, json) Hash identifier: AWexXOr86ybj3MOnrNtzEdEjJzCniJR9znRYZwE/TQk= Subject key identifier: 2F:CB:E3:46:E5:99:07:BC:B3:1E:E9:6F:18:A1:28:82:AA:2B:F1:66 Certificate issuer: /CN=ba82379b-9b5e-4eb4-9e4c-6aa36f236aa9 Certificate serial: 010D0C9F4328584F24026EE3CD6FDEBA8D91EC7E Authority key identifier: CE:FE:6F:B9:EE:3A:8B:69:64:2C:FC:39:4D:90:2C:96:BB:2F:C2:3E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ba82379b-9b5e-4eb4-9e4c-6aa36f236aa9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ba82379b-9b5e-4eb4-9e4c-6aa36f236aa9/cea7df78-774e-31de-b5ec-e59ec115199e.roa Signing time: Fri 11 Sep 2026 15:09:27 +0000 ROA not before: Fri 11 Sep 2026 15:09:27 +0000 ROA not after: Thu 10 Dec 2026 16:09:27 +0000 asID: 63066 IP address blocks: 23.134.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ba82379b-9b5e-4eb4-9e4c-6aa36f236aa9/ba82379b-9b5e-4eb4-9e4c-6aa36f236aa9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ba82379b-9b5e-4eb4-9e4c-6aa36f236aa9/ba82379b-9b5e-4eb4-9e4c-6aa36f236aa9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ba82379b-9b5e-4eb4-9e4c-6aa36f236aa9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:24:02:6e:e3:cd:6f:de:ba:8d:91:ec:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba82379b-9b5e-4eb4-9e4c-6aa36f236aa9 Validity Not Before: Sep 11 15:09:27 2026 GMT Not After : Dec 10 16:09:27 2026 GMT Subject: CN=e7bd9b15-b05a-4c72-86bc-fd29acd6e5ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:50:51:4b:1d:60:29:df:85:f2:36:29:f1:d2: 0d:34:0b:b4:76:6a:61:35:f7:0a:0f:38:42:50:f3: 0a:a2:9f:3b:5a:e2:db:1c:2a:90:23:0f:25:6c:a1: de:08:12:9a:41:b6:a9:42:a9:67:f8:bd:bf:f4:73: b5:8b:69:d2:6f:f9:94:9a:c5:f2:b5:4f:5d:b6:44: 4b:2a:aa:72:76:4e:f1:09:21:a5:70:24:e4:b9:bb: 72:26:33:86:b6:39:9d:80:ac:7a:af:5d:e9:51:98: aa:62:77:09:7e:7b:7f:59:b9:bf:2b:dd:c6:b2:cd: a5:1a:ee:fa:0a:de:c9:9a:2e:88:22:cd:87:5c:8f: 64:c5:70:a2:74:8e:d8:ee:b0:a2:fb:cb:97:bf:b9: 58:eb:09:ba:7b:b1:ff:41:fe:4c:c6:e9:14:fd:06: c0:dc:68:46:a0:c6:e5:7f:e8:2e:c8:ab:7f:9e:47: 7f:81:38:a4:b7:d7:9c:ad:d5:28:f9:ad:43:1d:c6: 6e:13:d9:d2:c4:21:2a:e2:70:e6:71:7d:bf:3a:20: d5:46:a3:fb:7f:6e:b0:12:a4:a3:77:ce:50:1f:4c: 25:dd:27:ad:3b:1f:31:d6:70:6a:da:fb:0a:34:6f: c2:b5:9e:ef:cc:10:cf:1a:86:94:1c:aa:be:44:7c: 09:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:CB:E3:46:E5:99:07:BC:B3:1E:E9:6F:18:A1:28:82:AA:2B:F1:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ba82379b-9b5e-4eb4-9e4c-6aa36f236aa9/cea7df78-774e-31de-b5ec-e59ec115199e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ba82379b-9b5e-4eb4-9e4c-6aa36f236aa9/ba82379b-9b5e-4eb4-9e4c-6aa36f236aa9.crl X509v3 Authority Key Identifier: keyid:CE:FE:6F:B9:EE:3A:8B:69:64:2C:FC:39:4D:90:2C:96:BB:2F:C2:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ba82379b-9b5e-4eb4-9e4c-6aa36f236aa9.cer sbgp-ipAddrBlock: critical IPv4: 23.134.108.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b1:e8:c1:db:6d:71:da:9e:bf:b2:63:a4:6f:d7:cf:75:99:e6: 6a:6c:ce:44:d9:99:c3:e2:a1:fe:e4:cd:e8:58:44:e9:ad:c1: 11:0e:9c:20:54:a4:68:20:a9:7f:80:d9:1c:e6:be:2c:77:15: 65:d2:59:15:d9:3f:56:75:5e:3c:8b:ce:17:ad:df:50:e6:9d: f3:7b:b5:17:b7:eb:a8:02:b4:33:4e:cc:ca:b5:55:98:fc:80: 07:fa:eb:b8:82:a2:a4:16:72:c8:c3:83:ad:fe:43:81:b9:77: 19:e6:2b:0b:4c:11:17:89:72:73:d6:35:57:d5:d9:60:28:81: 0a:50:c7:43:85:3a:c8:6d:e8:70:89:9e:18:04:ce:84:e6:b2: 7e:9f:40:8b:56:f8:4b:17:42:6f:94:eb:c0:92:41:a2:45:7b: 90:09:23:ba:e6:39:49:6b:be:6b:5d:78:78:38:18:05:21:49: c4:c3:92:25:82:e5:c1:b3:d1:17:ce:28:c3:ab:f6:30:1e:75: 89:78:e1:12:6c:c2:6b:08:fb:a9:d6:2c:77:fe:22:37:72:ee: f9:ee:58:46:b4:37:29:80:cf:7b:91:f9:d8:4c:f5:8c:2b:88: ce:a3:ec:9e:7e:df:20:33:bc:e9:eb:89:b5:27:08:13:78:de: c3:0d:71:83 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8kAm7jzW/euo2R7H4wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmE4MjM3OWItOWI1ZS00ZWI0LTllNGMtNmFhMzZmMjM2 YWE5MB4XDTI2MDkxMTE1MDkyN1oXDTI2MTIxMDE2MDkyN1owLzEtMCsGA1UEAxMk ZTdiZDliMTUtYjA1YS00YzcyLTg2YmMtZmQyOWFjZDZlNWNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAllBRSx1gKd+F8jYp8dINNAu0dmphNfcKDzhC UPMKop87WuLbHCqQIw8lbKHeCBKaQbapQqln+L2/9HO1i2nSb/mUmsXytU9dtkRL Kqpydk7xCSGlcCTkubtyJjOGtjmdgKx6r13pUZiqYncJfnt/Wbm/K93Gss2lGu76 Ct7Jmi6IIs2HXI9kxXCidI7Y7rCi+8uXv7lY6wm6e7H/Qf5MxukU/QbA3GhGoMbl f+guyKt/nkd/gTikt9ecrdUo+a1DHcZuE9nSxCEq4nDmcX2/OiDVRqP7f26wEqSj d85QH0wl3SetOx8x1nBq2vsKNG/CtZ7vzBDPGoaUHKq+RHwJlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC/L40blmQe8sx7pbxihKIKqK/FmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9iYTgy Mzc5Yi05YjVlLTRlYjQtOWU0Yy02YWEzNmYyMzZhYTkvY2VhN2RmNzgtNzc0ZS0z MWRlLWI1ZWMtZTU5ZWMxMTUxOTllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYmE4MjM3OWItOWI1ZS00ZWI0LTll NGMtNmFhMzZmMjM2YWE5L2JhODIzNzliLTliNWUtNGViNC05ZTRjLTZhYTM2ZjIz NmFhOS5jcmwwHwYDVR0jBBgwFoAUzv5vue46i2lkLPw5TZAslrsvwj4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9iYTgyMzc5Yi05YjVlLTRlYjQtOWU0Yy02YWEz NmYyMzZhYTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4ZsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALHowdttcdqev7JjpG/Xz3WZ5mpszkTZmcPiof7kzehYROmtwREOnCBU pGggqX+A2Rzmvix3FWXSWRXZP1Z1XjyLzhet31DmnfN7tRe366gCtDNOzMq1VZj8 gAf667iCoqQWcsjDg63+Q4G5dxnmKwtMEReJcnPWNVfV2WAogQpQx0OFOsht6HCJ nhgEzoTmsn6fQItW+EsXQm+U68CSQaJFe5AJI7rmOUlrvmtdeHg4GAUhScTDkiWC 5cGz0RfOKMOr9jAedYl44RJswmsI+6nWLHf+Ijdy7vnuWEa0NymAz3uR+dhM9Ywr iM6j7J5+3yAzvOnribUnCBN43sMNcYM= -----END CERTIFICATE-----Generated at Mon Sep 21 13:59:39 2026 by rpki-client