$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7a12a63a-9232-4346-a38f-de5bc5c7bbc8/ffb6295a-6e48-338c-8cff-918305705e3a.roa File: ffb6295a-6e48-338c-8cff-918305705e3a.roa (raw, json) Hash identifier: Pk5occ7a4EyNX+ijVZIqqp5CX4IUbXLjpe0unmvaeXI= Subject key identifier: 86:EE:A8:70:16:61:1B:42:DA:F9:0D:2C:3F:03:58:F6:23:74:B0:A4 Certificate issuer: /CN=7a12a63a-9232-4346-a38f-de5bc5c7bbc8 Certificate serial: 010D0C9F4328584F1E2CF51C0E54819E4015FB80 Authority key identifier: 80:AC:38:B5:C9:72:85:2F:C3:C3:2C:C5:DA:1A:C1:AC:01:C5:C2:D4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7a12a63a-9232-4346-a38f-de5bc5c7bbc8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7a12a63a-9232-4346-a38f-de5bc5c7bbc8/ffb6295a-6e48-338c-8cff-918305705e3a.roa Signing time: Wed 09 Sep 2026 13:00:11 +0000 ROA not before: Wed 09 Sep 2026 13:00:11 +0000 ROA not after: Tue 08 Dec 2026 14:00:11 +0000 asID: 152918 IP address blocks: 23.131.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7a12a63a-9232-4346-a38f-de5bc5c7bbc8/7a12a63a-9232-4346-a38f-de5bc5c7bbc8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7a12a63a-9232-4346-a38f-de5bc5c7bbc8/7a12a63a-9232-4346-a38f-de5bc5c7bbc8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7a12a63a-9232-4346-a38f-de5bc5c7bbc8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:1e:2c:f5:1c:0e:54:81:9e:40:15:fb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7a12a63a-9232-4346-a38f-de5bc5c7bbc8 Validity Not Before: Sep 9 13:00:11 2026 GMT Not After : Dec 8 14:00:11 2026 GMT Subject: CN=b11cc276-c430-45e0-9471-be6c9685da2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:04:bf:07:15:b6:74:68:9a:24:2c:33:4c:82: ab:ad:83:82:db:f6:2e:f8:ef:02:12:bd:c3:e4:f3: 12:b0:21:3c:ee:c4:c5:8a:9e:e2:77:86:5e:93:f3: 09:8b:f7:a3:ad:39:cd:7d:bf:96:7d:7e:23:cc:e6: 66:33:cd:69:6e:18:0e:6a:fa:f6:ee:09:ae:1f:17: 00:bf:bf:38:23:7d:40:a9:87:57:d5:e5:bb:be:d0: 15:58:7b:7c:82:1e:4e:2f:27:77:1a:30:1a:53:b8: ba:d6:77:d4:98:83:9e:bc:bb:8e:3c:44:0f:c9:63: 03:33:8d:1f:47:11:77:22:8f:cc:40:3e:10:85:b2: 6c:d6:07:f8:f7:9e:e7:2a:51:e4:db:e4:13:40:58: 3b:fc:ec:81:40:9d:28:91:00:91:9d:63:9e:8d:65: aa:95:65:cd:04:fd:53:ec:3e:32:a3:ae:ee:5b:c3: 97:04:be:53:72:30:84:75:02:dd:cc:d2:5c:90:11: cf:26:a4:a0:21:9b:bb:74:8a:05:fe:65:b1:26:10: 4f:cc:97:6b:dc:e5:ed:60:a6:c4:49:d6:07:e8:f3: 94:11:81:03:fe:37:dd:7a:33:4f:51:4c:01:e8:8b: d3:c6:f9:95:f4:a9:20:08:e9:3c:bd:f0:ac:28:58: 86:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:EE:A8:70:16:61:1B:42:DA:F9:0D:2C:3F:03:58:F6:23:74:B0:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7a12a63a-9232-4346-a38f-de5bc5c7bbc8/ffb6295a-6e48-338c-8cff-918305705e3a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7a12a63a-9232-4346-a38f-de5bc5c7bbc8/7a12a63a-9232-4346-a38f-de5bc5c7bbc8.crl X509v3 Authority Key Identifier: keyid:80:AC:38:B5:C9:72:85:2F:C3:C3:2C:C5:DA:1A:C1:AC:01:C5:C2:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7a12a63a-9232-4346-a38f-de5bc5c7bbc8.cer sbgp-ipAddrBlock: critical IPv4: 23.131.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:8e:46:e4:84:b6:32:b6:0f:20:2f:05:28:b9:9d:6c:12:64: de:ce:0e:28:df:25:07:27:1f:67:99:a8:33:04:67:39:05:07: c5:dc:5e:64:f1:0c:98:e3:82:6f:5c:21:74:f9:0f:af:b2:95: 0c:e0:ba:d2:90:39:76:21:6d:af:17:ef:96:fc:bc:ac:64:ff: b2:54:ee:37:f2:79:5f:41:aa:dc:ac:5b:7e:0f:4b:0c:42:58: 41:2f:95:82:ff:4e:f2:cf:d3:79:36:31:19:48:5d:1b:62:dd: 68:ba:69:3b:6f:12:23:00:6f:f9:62:32:a9:ff:3b:e2:a3:1d: d5:0e:3b:81:bb:7f:50:8b:86:ed:2b:09:04:79:d7:76:bc:9b: b2:31:7c:93:43:7c:8d:a7:94:69:78:f0:a6:b9:7c:5c:f9:99: b6:30:07:89:56:26:6f:7d:73:18:8e:11:a3:02:8e:5c:9b:41: 62:af:9a:74:b5:a4:0f:1c:8a:8d:fb:24:7c:b5:8e:57:8c:9f: 6c:6a:ad:2b:62:b9:6c:3c:0f:60:65:bc:66:2b:1d:ff:13:c8: 62:64:d7:4e:12:f2:1f:e0:e5:ea:be:05:97:6a:dd:91:a8:b7: 01:5e:f2:66:ec:56:4c:06:21:7b:4d:8e:d5:bf:b6:fc:35:d2: 37:cc:f0:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8eLPUcDlSBnkAV+4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2ExMmE2M2EtOTIzMi00MzQ2LWEzOGYtZGU1YmM1Yzdi YmM4MB4XDTI2MDkwOTEzMDAxMVoXDTI2MTIwODE0MDAxMVowLzEtMCsGA1UEAxMk YjExY2MyNzYtYzQzMC00NWUwLTk0NzEtYmU2Yzk2ODVkYTJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiwS/BxW2dGiaJCwzTIKrrYOC2/Yu+O8CEr3D 5PMSsCE87sTFip7id4Zek/MJi/ejrTnNfb+WfX4jzOZmM81pbhgOavr27gmuHxcA v784I31AqYdX1eW7vtAVWHt8gh5OLyd3GjAaU7i61nfUmIOevLuOPEQPyWMDM40f RxF3Io/MQD4QhbJs1gf4957nKlHk2+QTQFg7/OyBQJ0okQCRnWOejWWqlWXNBP1T 7D4yo67uW8OXBL5TcjCEdQLdzNJckBHPJqSgIZu7dIoF/mWxJhBPzJdr3OXtYKbE SdYH6POUEYED/jfdejNPUUwB6IvTxvmV9KkgCOk8vfCsKFiGLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIbuqHAWYRtC2vkNLD8DWPYjdLCkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC83YTEy YTYzYS05MjMyLTQzNDYtYTM4Zi1kZTViYzVjN2JiYzgvZmZiNjI5NWEtNmU0OC0z MzhjLThjZmYtOTE4MzA1NzA1ZTNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvN2ExMmE2M2EtOTIzMi00MzQ2LWEz OGYtZGU1YmM1YzdiYmM4LzdhMTJhNjNhLTkyMzItNDM0Ni1hMzhmLWRlNWJjNWM3 YmJjOC5jcmwwHwYDVR0jBBgwFoAUgKw4tclyhS/DwyzF2hrBrAHFwtQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC83YTEyYTYzYS05MjMyLTQzNDYtYTM4Zi1kZTVi YzVjN2JiYzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4PcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAeORuSEtjK2DyAvBSi5nWwSZN7ODijfJQcnH2eZqDMEZzkFB8XcXmTx DJjjgm9cIXT5D6+ylQzgutKQOXYhba8X75b8vKxk/7JU7jfyeV9BqtysW34PSwxC WEEvlYL/TvLP03k2MRlIXRti3Wi6aTtvEiMAb/liMqn/O+KjHdUOO4G7f1CLhu0r CQR513a8m7IxfJNDfI2nlGl48Ka5fFz5mbYwB4lWJm99cxiOEaMCjlybQWKvmnS1 pA8cio37JHy1jleMn2xqrStiuWw8D2BlvGYrHf8TyGJk104S8h/g5eq+BZdq3ZGo twFe8mbsVkwGIXtNjtW/tvw10jfM8Og= -----END CERTIFICATE-----Generated at Tue Sep 22 20:42:46 2026 by rpki-client