$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d68a2d1d-2c36-4a1d-88a7-0c30d257f386/14b38e37-b5fe-3d01-97db-3b7de1ceb6a2.roa File: 14b38e37-b5fe-3d01-97db-3b7de1ceb6a2.roa (raw, json) Hash identifier: yJSWstc630iKBb/JZ6JMpAhUzUJkb34ksW8cr+LWC+M= Subject key identifier: 73:7D:EF:01:F0:C5:12:2A:60:82:A2:F6:9C:FE:47:A7:C8:57:93:63 Certificate issuer: /CN=d68a2d1d-2c36-4a1d-88a7-0c30d257f386 Certificate serial: 010D0C9F4328584F3CE29CBC60128CB86EDDFB00 Authority key identifier: B5:0F:50:81:8D:38:07:E0:21:39:D1:F8:D1:9E:20:23:EE:60:BB:2A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d68a2d1d-2c36-4a1d-88a7-0c30d257f386.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d68a2d1d-2c36-4a1d-88a7-0c30d257f386/14b38e37-b5fe-3d01-97db-3b7de1ceb6a2.roa Signing time: Sun 20 Sep 2026 13:00:12 +0000 ROA not before: Sun 20 Sep 2026 13:00:12 +0000 ROA not after: Sat 19 Dec 2026 14:00:12 +0000 asID: 401328 IP address blocks: 23.131.20.0/24 maxlen: 32 2602:f769::/36 maxlen: 128 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d68a2d1d-2c36-4a1d-88a7-0c30d257f386/d68a2d1d-2c36-4a1d-88a7-0c30d257f386.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d68a2d1d-2c36-4a1d-88a7-0c30d257f386/d68a2d1d-2c36-4a1d-88a7-0c30d257f386.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d68a2d1d-2c36-4a1d-88a7-0c30d257f386.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3c:e2:9c:bc:60:12:8c:b8:6e:dd:fb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d68a2d1d-2c36-4a1d-88a7-0c30d257f386 Validity Not Before: Sep 20 13:00:12 2026 GMT Not After : Dec 19 14:00:12 2026 GMT Subject: CN=bea3124e-c0a1-4387-8ee9-cd559f601889 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:6b:60:74:be:d4:b9:71:1b:4f:34:53:1d:61: fd:3c:7b:91:4d:b9:62:c9:3c:3e:28:e5:4e:b2:90: 1c:e5:28:5a:bd:76:f9:8e:6b:d0:d8:80:3d:9a:c4: 4d:89:28:6a:3d:51:d3:b8:21:06:13:ea:20:24:c8: f3:4e:b2:e3:63:21:82:c3:e1:7b:a6:d7:cf:50:f1: 00:eb:61:67:18:12:05:a7:e3:8d:59:cd:c0:59:53: a2:b8:8b:56:66:95:97:b9:cf:25:a0:cc:98:fa:38: 5c:a1:d5:69:e9:c3:fd:41:12:2b:83:c3:b1:dc:58: 63:73:65:6f:08:f8:9f:2c:bc:ba:ca:bf:b5:81:27: f2:7d:6d:a8:04:24:50:e7:f2:a1:d2:67:79:85:ce: 0a:cd:f8:93:14:fa:78:64:8e:e2:37:46:7f:b6:92: d0:a8:8c:0e:eb:86:06:15:ff:c4:18:f0:fb:8a:00: ca:ba:9c:58:52:44:f2:20:20:2d:67:da:8a:75:59: d4:6e:a5:22:75:4b:b7:63:bd:e3:f1:80:58:9e:f9: 17:4e:07:54:67:b3:7c:63:ca:99:77:75:8a:a8:34: 2f:a4:23:37:cd:ad:79:3f:9e:25:bd:8a:d9:ed:0f: 61:8e:ca:bd:5e:69:a8:3f:5f:6f:7b:2f:47:58:64: 84:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:7D:EF:01:F0:C5:12:2A:60:82:A2:F6:9C:FE:47:A7:C8:57:93:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d68a2d1d-2c36-4a1d-88a7-0c30d257f386/14b38e37-b5fe-3d01-97db-3b7de1ceb6a2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d68a2d1d-2c36-4a1d-88a7-0c30d257f386/d68a2d1d-2c36-4a1d-88a7-0c30d257f386.crl X509v3 Authority Key Identifier: keyid:B5:0F:50:81:8D:38:07:E0:21:39:D1:F8:D1:9E:20:23:EE:60:BB:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d68a2d1d-2c36-4a1d-88a7-0c30d257f386.cer sbgp-ipAddrBlock: critical IPv4: 23.131.20.0/24 IPv6: 2602:f769::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:8a:96:6b:3f:a6:74:8d:06:86:4f:8e:fb:78:2b:54:ce:c7: f8:8a:8b:dc:31:1a:47:9c:a1:a8:72:49:48:c0:ca:66:e7:e7: e4:02:70:1b:81:8c:4f:63:d3:22:1d:99:83:9a:90:85:8e:04: 5b:6d:7b:81:92:de:13:00:19:97:97:9a:86:b4:59:84:bc:2d: bc:c9:5f:e2:f3:16:65:2e:0b:ef:33:65:73:38:61:b2:11:f0: 75:61:6e:4e:50:52:e2:ab:38:b2:d4:1d:79:e1:16:93:2d:7e: eb:04:74:d5:d4:95:f7:18:61:8b:eb:d5:ab:e6:ef:32:f6:02: 93:b9:af:64:7a:55:3f:15:15:bc:39:36:73:29:05:38:4a:0a: ce:5c:c0:6d:45:93:36:16:a4:3f:73:22:d9:81:b9:4f:a6:c3: 96:3c:b5:8f:37:97:94:3b:3b:01:47:40:f3:22:81:63:5e:f1: 4f:96:ad:59:07:d0:cb:6d:c9:bf:77:25:96:cb:2d:78:e6:b7: 64:f4:5d:e0:7c:bc:8b:29:4d:4f:b7:45:9f:cc:61:2b:40:9f: 41:36:4a:57:dc:b6:8c:61:69:33:94:be:dc:cd:e2:cd:c8:cc: 28:7f:3f:89:d5:6a:5b:7f:b0:33:ca:14:6e:73:20:6b:5c:7f: 9c:0b:49:30 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE884py8YBKMuG7d+wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDY4YTJkMWQtMmMzNi00YTFkLTg4YTctMGMzMGQyNTdm Mzg2MB4XDTI2MDkyMDEzMDAxMloXDTI2MTIxOTE0MDAxMlowLzEtMCsGA1UEAxMk YmVhMzEyNGUtYzBhMS00Mzg3LThlZTktY2Q1NTlmNjAxODg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4GtgdL7UuXEbTzRTHWH9PHuRTbliyTw+KOVO spAc5ShavXb5jmvQ2IA9msRNiShqPVHTuCEGE+ogJMjzTrLjYyGCw+F7ptfPUPEA 62FnGBIFp+ONWc3AWVOiuItWZpWXuc8loMyY+jhcodVp6cP9QRIrg8Ox3Fhjc2Vv CPifLLy6yr+1gSfyfW2oBCRQ5/Kh0md5hc4KzfiTFPp4ZI7iN0Z/tpLQqIwO64YG Ff/EGPD7igDKupxYUkTyICAtZ9qKdVnUbqUidUu3Y73j8YBYnvkXTgdUZ7N8Y8qZ d3WKqDQvpCM3za15P54lvYrZ7Q9hjsq9XmmoP19vey9HWGSE+wIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFHN97wHwxRIqYIKi9pz+R6fIV5NjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kNjhh MmQxZC0yYzM2LTRhMWQtODhhNy0wYzMwZDI1N2YzODYvMTRiMzhlMzctYjVmZS0z ZDAxLTk3ZGItM2I3ZGUxY2ViNmEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZDY4YTJkMWQtMmMzNi00YTFkLTg4 YTctMGMzMGQyNTdmMzg2L2Q2OGEyZDFkLTJjMzYtNGExZC04OGE3LTBjMzBkMjU3 ZjM4Ni5jcmwwHwYDVR0jBBgwFoAUtQ9QgY04B+AhOdH40Z4gI+5guyowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9kNjhhMmQxZC0yYzM2LTRhMWQtODhhNy0wYzMw ZDI1N2YzODYuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF4MUMA4E AgACMAgDBgQmAvdpADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB8ipZrP6Z0jQaGT477eCtUzsf4iovcMRpH nKGocklIwMpm5+fkAnAbgYxPY9MiHZmDmpCFjgRbbXuBkt4TABmXl5qGtFmEvC28 yV/i8xZlLgvvM2VzOGGyEfB1YW5OUFLiqziy1B154RaTLX7rBHTV1JX3GGGL69Wr 5u8y9gKTua9kelU/FRW8OTZzKQU4SgrOXMBtRZM2FqQ/cyLZgblPpsOWPLWPN5eU OzsBR0DzIoFjXvFPlq1ZB9DLbcm/dyWWyy145rdk9F3gfLyLKU1Pt0WfzGErQJ9B NkpX3LaMYWkzlL7czeLNyMwofz+J1Wpbf7AzyhRucyBrXH+cC0kw -----END CERTIFICATE-----Generated at Thu Sep 24 18:58:48 2026 by rpki-client