$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d7396eb8-1550-4d28-9285-c71c97fd087d/d4df3a08-c899-316f-abc6-b58548efce04.roa File: d4df3a08-c899-316f-abc6-b58548efce04.roa (raw, json) Hash identifier: ye7BDs5P5lAIDlBOWlgFx+80rjrOQZYuKeAe9gYHYHQ= Subject key identifier: A9:A1:9D:9F:6A:2E:E6:2B:5F:1A:8B:DA:5F:61:E4:07:1C:43:2C:8B Certificate issuer: /CN=d7396eb8-1550-4d28-9285-c71c97fd087d Certificate serial: 010D0C9F4328584EFF777F555D8C61EA0976BDA0 Authority key identifier: FD:F5:C4:CB:5B:AD:77:75:5C:91:C2:16:C6:68:BD:C5:E4:0F:16:40 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d7396eb8-1550-4d28-9285-c71c97fd087d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d7396eb8-1550-4d28-9285-c71c97fd087d/d4df3a08-c899-316f-abc6-b58548efce04.roa Signing time: Sat 29 Aug 2026 13:00:12 +0000 ROA not before: Sat 29 Aug 2026 13:00:12 +0000 ROA not after: Fri 27 Nov 2026 14:00:12 +0000 asID: 31959 IP address blocks: 23.130.252.0/24 maxlen: 24 2602:f76a::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d7396eb8-1550-4d28-9285-c71c97fd087d/d7396eb8-1550-4d28-9285-c71c97fd087d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d7396eb8-1550-4d28-9285-c71c97fd087d/d7396eb8-1550-4d28-9285-c71c97fd087d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d7396eb8-1550-4d28-9285-c71c97fd087d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ff:77:7f:55:5d:8c:61:ea:09:76:bd:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7396eb8-1550-4d28-9285-c71c97fd087d Validity Not Before: Aug 29 13:00:12 2026 GMT Not After : Nov 27 14:00:12 2026 GMT Subject: CN=358c0d8c-416b-4cfd-96c1-94aaaaad8f3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:55:21:9e:90:d4:68:a2:e3:22:2b:24:5c:66: ff:9d:4e:3e:ec:e7:22:14:b4:dc:c5:c8:f4:72:7f: 5e:f4:ba:17:a6:77:3c:db:b6:d9:17:a6:21:cd:ab: 97:3c:60:97:8e:38:78:5c:72:6f:e0:af:28:00:64: 0b:79:60:26:d3:38:40:44:cd:c5:7b:b8:c2:82:d3: 89:f8:15:73:35:66:7e:43:db:1e:30:59:23:e6:62: a0:82:42:ed:65:44:d3:4e:50:6a:27:f0:10:e7:08: 80:61:5d:d4:7d:34:1e:4b:6f:fa:79:60:47:e0:de: 84:49:c8:50:eb:02:ab:4f:3e:af:dc:f7:17:b7:50: b4:61:39:0e:5a:6c:d6:b3:1e:3a:8f:cb:bd:ed:fe: 52:59:67:2b:e9:23:14:79:a2:8d:e8:ae:62:ad:7f: bd:46:83:38:0d:d1:79:ae:ae:5a:2d:70:60:12:4b: 08:68:37:87:11:35:6e:40:ab:c6:cf:2f:d0:1a:8b: ad:9f:09:e0:df:54:2d:d0:3e:b5:37:13:ef:d1:84: 3a:4f:11:0c:4b:5c:b5:63:14:8f:39:70:d1:f9:fa: 07:d5:83:d4:5b:f9:e6:73:47:35:27:5e:99:76:a3: a9:2e:47:fd:1b:d0:6c:e4:1e:0e:71:db:96:c4:11: 8d:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:A1:9D:9F:6A:2E:E6:2B:5F:1A:8B:DA:5F:61:E4:07:1C:43:2C:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d7396eb8-1550-4d28-9285-c71c97fd087d/d4df3a08-c899-316f-abc6-b58548efce04.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d7396eb8-1550-4d28-9285-c71c97fd087d/d7396eb8-1550-4d28-9285-c71c97fd087d.crl X509v3 Authority Key Identifier: keyid:FD:F5:C4:CB:5B:AD:77:75:5C:91:C2:16:C6:68:BD:C5:E4:0F:16:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d7396eb8-1550-4d28-9285-c71c97fd087d.cer sbgp-ipAddrBlock: critical IPv4: 23.130.252.0/24 IPv6: 2602:f76a::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:b4:ca:15:5c:30:7b:23:7c:70:ad:d4:bc:44:87:5d:da:53: 17:38:52:fe:08:ce:52:94:7e:2d:4a:a5:5d:94:0a:d8:da:f5: ce:27:5e:1d:74:d3:ef:b6:b5:4f:74:6e:30:dc:79:b2:8c:88: a8:cf:d5:a1:91:9c:48:c9:5c:0f:fe:af:34:de:e6:13:d6:64: 6f:7f:8f:68:a6:ff:1a:f8:8e:05:e9:b6:83:0c:44:72:2a:51: 02:6c:78:b6:06:2d:d6:03:f1:a7:df:40:d8:0d:e1:3c:71:eb: 27:27:8b:c4:0b:31:25:42:af:91:46:1f:fd:5e:9c:99:97:1b: 4d:3a:a3:ca:7a:4e:bc:d7:d2:07:20:57:20:bc:4a:dc:5d:0f: 93:80:84:5e:57:29:51:ab:82:28:71:f4:59:7f:f6:e4:dc:89: 96:2c:a1:df:b4:15:8a:58:e6:8f:57:88:21:18:1a:88:a7:29: 74:c5:de:67:68:be:58:0a:f6:bd:a9:29:18:b8:94:e7:99:c1: a3:76:db:6e:14:52:fe:5a:dc:3c:52:1e:37:ac:5f:ab:25:95: 6b:f7:95:12:d7:d0:1e:b5:1a:a7:95:ed:5f:47:a8:75:b9:cf: 48:eb:c4:5c:00:02:c8:13:b2:2c:37:4c:e7:3b:a3:03:75:7a: 07:96:80:e4 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE7/d39VXYxh6gl2vaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDczOTZlYjgtMTU1MC00ZDI4LTkyODUtYzcxYzk3ZmQw ODdkMB4XDTI2MDgyOTEzMDAxMloXDTI2MTEyNzE0MDAxMlowLzEtMCsGA1UEAxMk MzU4YzBkOGMtNDE2Yi00Y2ZkLTk2YzEtOTRhYWFhYWQ4ZjNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqlUhnpDUaKLjIiskXGb/nU4+7OciFLTcxcj0 cn9e9LoXpnc827bZF6YhzauXPGCXjjh4XHJv4K8oAGQLeWAm0zhARM3Fe7jCgtOJ +BVzNWZ+Q9seMFkj5mKggkLtZUTTTlBqJ/AQ5wiAYV3UfTQeS2/6eWBH4N6ESchQ 6wKrTz6v3PcXt1C0YTkOWmzWsx46j8u97f5SWWcr6SMUeaKN6K5irX+9RoM4DdF5 rq5aLXBgEksIaDeHETVuQKvGzy/QGoutnwng31Qt0D61NxPv0YQ6TxEMS1y1YxSP OXDR+foH1YPUW/nmc0c1J16ZdqOpLkf9G9Bs5B4OcduWxBGN7QIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFKmhnZ9qLuYrXxqL2l9h5AccQyyLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kNzM5 NmViOC0xNTUwLTRkMjgtOTI4NS1jNzFjOTdmZDA4N2QvZDRkZjNhMDgtYzg5OS0z MTZmLWFiYzYtYjU4NTQ4ZWZjZTA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZDczOTZlYjgtMTU1MC00ZDI4LTky ODUtYzcxYzk3ZmQwODdkL2Q3Mzk2ZWI4LTE1NTAtNGQyOC05Mjg1LWM3MWM5N2Zk MDg3ZC5jcmwwHwYDVR0jBBgwFoAU/fXEy1utd3VckcIWxmi9xeQPFkAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9kNzM5NmViOC0xNTUwLTRkMjgtOTI4NS1jNzFj OTdmZDA4N2QuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF4L8MA4E AgACMAgDBgQmAvdqADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQButMoVXDB7I3xwrdS8RIdd2lMXOFL+CM5S lH4tSqVdlArY2vXOJ14ddNPvtrVPdG4w3HmyjIioz9WhkZxIyVwP/q803uYT1mRv f49opv8a+I4F6baDDERyKlECbHi2Bi3WA/Gn30DYDeE8cesnJ4vECzElQq+RRh/9 XpyZlxtNOqPKek6819IHIFcgvErcXQ+TgIReVylRq4IocfRZf/bk3ImWLKHftBWK WOaPV4ghGBqIpyl0xd5naL5YCva9qSkYuJTnmcGjdttuFFL+Wtw8Uh43rF+rJZVr 95US19AetRqnle1fR6h1uc9I68RcAALIE7IsN0znO6MDdXoHloDk -----END CERTIFICATE-----Generated at Tue Sep 22 23:13:01 2026 by rpki-client