$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/b9396d2d-9694-49ee-99c2-276ed6a18d8a/cef09396-addd-3e60-9900-b9b5915fa8ac.roa File: cef09396-addd-3e60-9900-b9b5915fa8ac.roa (raw, json) Hash identifier: A7p5iZ2nQrKgzppOBZT3nc5/1IPu3QB5RtkwkCEWwBs= Subject key identifier: D4:C4:C0:2D:26:3B:8E:73:F6:18:69:E8:AF:0E:59:40:40:00:87:E7 Certificate issuer: /CN=b9396d2d-9694-49ee-99c2-276ed6a18d8a Certificate serial: 010D0C9F4328584F4988900FB0F23594E0F1F280 Authority key identifier: 0B:3F:C8:E3:07:23:BB:95:95:D1:35:8F:E7:FB:7F:1D:E0:68:EF:68 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/b9396d2d-9694-49ee-99c2-276ed6a18d8a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/b9396d2d-9694-49ee-99c2-276ed6a18d8a/cef09396-addd-3e60-9900-b9b5915fa8ac.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 393483 IP address blocks: 23.153.220.0/24 maxlen: 24 2620:bb:5000::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/b9396d2d-9694-49ee-99c2-276ed6a18d8a/b9396d2d-9694-49ee-99c2-276ed6a18d8a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/b9396d2d-9694-49ee-99c2-276ed6a18d8a/b9396d2d-9694-49ee-99c2-276ed6a18d8a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/b9396d2d-9694-49ee-99c2-276ed6a18d8a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:88:90:0f:b0:f2:35:94:e0:f1:f2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b9396d2d-9694-49ee-99c2-276ed6a18d8a Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=9b87e2c0-a0df-43c9-8f7d-261933c5ecb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:a9:fa:96:57:0c:c7:cd:4f:50:f7:ec:69:50: 67:5d:5b:2a:fa:ec:21:2d:8f:0e:23:64:2b:24:0d: 5c:1a:ef:27:df:70:98:97:74:8a:62:f4:79:cc:50: 20:b0:b5:38:bf:8e:df:8f:d0:0b:85:11:ab:e2:44: 29:b7:3a:f9:72:eb:f5:6c:05:4b:ca:aa:6f:0d:e1: fb:a9:5c:1e:59:7c:f8:d8:27:87:3b:26:28:50:99: 7d:49:e5:1f:c9:73:e2:ff:13:f5:58:04:62:08:c6: 88:04:d4:b8:08:bf:58:d8:f0:3f:f2:1e:db:4a:8e: 82:53:ba:e3:d8:e9:34:06:19:61:b4:b4:60:05:92: a3:a3:39:57:43:1d:cc:da:40:91:89:4d:0a:ab:51: 6b:af:ba:f4:63:e6:92:b3:e3:56:a6:b0:f5:ba:8f: 0d:7f:b1:9e:b3:6a:0e:ad:84:88:69:8d:ef:f0:3e: 66:1d:4a:df:9e:fe:40:3c:6b:c0:a0:60:08:59:b0: 2a:0f:78:7c:1c:d2:01:49:9b:fc:6e:19:d1:74:42: 03:58:d3:c9:c9:b8:af:72:e2:c0:9b:81:2c:a9:04: ad:6e:36:39:02:98:0d:10:fb:63:14:c1:7c:11:98: d3:bb:21:e0:3e:1e:2a:e6:6f:34:c4:a5:ce:4b:12: e6:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:C4:C0:2D:26:3B:8E:73:F6:18:69:E8:AF:0E:59:40:40:00:87:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/b9396d2d-9694-49ee-99c2-276ed6a18d8a/cef09396-addd-3e60-9900-b9b5915fa8ac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/b9396d2d-9694-49ee-99c2-276ed6a18d8a/b9396d2d-9694-49ee-99c2-276ed6a18d8a.crl X509v3 Authority Key Identifier: keyid:0B:3F:C8:E3:07:23:BB:95:95:D1:35:8F:E7:FB:7F:1D:E0:68:EF:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/b9396d2d-9694-49ee-99c2-276ed6a18d8a.cer sbgp-ipAddrBlock: critical IPv4: 23.153.220.0/24 IPv6: 2620:bb:5000::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:4e:9b:36:5e:c1:b7:ab:2c:62:22:d1:ef:0a:36:bb:4b:b0: 6e:f7:a0:ba:75:c2:6a:c5:10:61:0c:ff:9d:4f:28:fb:4d:dc: 3e:a0:b7:0b:c2:4d:4f:48:b1:20:70:29:cc:a6:0c:12:25:4d: 21:1a:9c:d0:0f:43:4e:5a:9a:06:a9:f3:4d:a4:3c:24:16:64: 37:69:72:97:e6:19:82:17:15:8b:02:e9:a9:66:ff:b5:8f:df: 46:11:af:fe:56:67:3c:0f:42:92:fd:76:2f:57:9a:08:c8:ca: b2:92:3a:ea:09:45:36:3d:12:d4:0c:d1:4f:5c:95:71:ea:a1: c8:a0:21:97:e1:58:ef:28:c6:07:df:5f:24:b9:ab:ba:e3:f8: 8f:01:43:89:98:68:a4:75:5a:46:e3:e2:d5:57:cf:a6:66:26: dc:ae:01:72:3a:23:1f:5b:61:33:c1:da:c0:5b:1c:d0:b4:77: 2e:96:e6:ae:c4:bf:15:b5:08:1b:7e:2d:d4:c2:a6:c8:9e:60: c0:de:86:07:7d:ba:3b:c4:95:02:3e:b0:7e:08:d4:0b:47:7b: bc:0e:bb:07:8d:3f:e8:25:8b:41:5e:57:18:9d:23:43:96:2c: c4:63:b8:16:ad:6f:f3:a9:56:ec:24:30:2d:2b:05:fa:31:6a: 92:e1:7b:e5 -----BEGIN CERTIFICATE----- MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWE9JiJAPsPI1lODx8oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjkzOTZkMmQtOTY5NC00OWVlLTk5YzItMjc2ZWQ2YTE4 ZDhhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk OWI4N2UyYzAtYTBkZi00M2M5LThmN2QtMjYxOTMzYzVlY2IxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlan6llcMx81PUPfsaVBnXVsq+uwhLY8OI2Qr JA1cGu8n33CYl3SKYvR5zFAgsLU4v47fj9ALhRGr4kQptzr5cuv1bAVLyqpvDeH7 qVweWXz42CeHOyYoUJl9SeUfyXPi/xP1WARiCMaIBNS4CL9Y2PA/8h7bSo6CU7rj 2Ok0BhlhtLRgBZKjozlXQx3M2kCRiU0Kq1Frr7r0Y+aSs+NWprD1uo8Nf7Ges2oO rYSIaY3v8D5mHUrfnv5APGvAoGAIWbAqD3h8HNIBSZv8bhnRdEIDWNPJybivcuLA m4EsqQStbjY5ApgNEPtjFMF8EZjTuyHgPh4q5m80xKXOSxLmHwIDAQABo4IDZjCC A2IwHQYDVR0OBBYEFNTEwC0mO45z9hhp6K8OWUBAAIfnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9iOTM5 NmQyZC05Njk0LTQ5ZWUtOTljMi0yNzZlZDZhMThkOGEvY2VmMDkzOTYtYWRkZC0z ZTYwLTk5MDAtYjliNTkxNWZhOGFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvYjkzOTZkMmQtOTY5NC00OWVlLTk5 YzItMjc2ZWQ2YTE4ZDhhL2I5Mzk2ZDJkLTk2OTQtNDllZS05OWMyLTI3NmVkNmEx OGQ4YS5jcmwwHwYDVR0jBBgwFoAUCz/I4wcju5WV0TWP5/t/HeBo72gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS9iOTM5NmQyZC05Njk0LTQ5ZWUtOTljMi0yNzZl ZDZhMThkOGEuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAF5ncMA8E AgACMAkDBwAmIAC7UAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAKE6bNl7Bt6ssYiLR7wo2u0uwbvegunXC asUQYQz/nU8o+03cPqC3C8JNT0ixIHApzKYMEiVNIRqc0A9DTlqaBqnzTaQ8JBZk N2lyl+YZghcViwLpqWb/tY/fRhGv/lZnPA9Ckv12L1eaCMjKspI66glFNj0S1AzR T1yVceqhyKAhl+FY7yjGB99fJLmruuP4jwFDiZhopHVaRuPi1VfPpmYm3K4Bcjoj H1thM8HawFsc0LR3LpbmrsS/FbUIG34t1MKmyJ5gwN6GB326O8SVAj6wfgjUC0d7 vA67B40/6CWLQV5XGJ0jQ5YsxGO4Fq1v86lW7CQwLSsF+jFqkuF75Q== -----END CERTIFICATE-----Generated at Sat Sep 26 16:09:47 2026 by rpki-client