$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f6a80343-5648-4b19-a2ae-d61e9d8fd359/7eb4c798-440e-3ba5-9cba-9d8b7059e315.roa File: 7eb4c798-440e-3ba5-9cba-9d8b7059e315.roa (raw, json) Hash identifier: ibkuPVA8YIFI04OCxmjqKxrF0xvTFPAXgNVOr1zDr/0= Subject key identifier: 9A:52:07:84:C2:3F:E3:87:B7:7E:AD:70:77:6B:8B:69:9F:06:A6:9C Certificate issuer: /CN=f6a80343-5648-4b19-a2ae-d61e9d8fd359 Certificate serial: 010D0C9F4328584F024240624CDE71604416B580 Authority key identifier: 4B:4C:33:15:8C:7A:06:17:06:BC:29:29:2B:94:64:52:3B:BB:24:2F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f6a80343-5648-4b19-a2ae-d61e9d8fd359.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f6a80343-5648-4b19-a2ae-d61e9d8fd359/7eb4c798-440e-3ba5-9cba-9d8b7059e315.roa Signing time: Sun 30 Aug 2026 13:00:11 +0000 ROA not before: Sun 30 Aug 2026 13:00:11 +0000 ROA not after: Sat 28 Nov 2026 14:00:11 +0000 asID: 46743 IP address blocks: 23.139.156.0/24 maxlen: 24 2602:f62b::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f6a80343-5648-4b19-a2ae-d61e9d8fd359/f6a80343-5648-4b19-a2ae-d61e9d8fd359.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f6a80343-5648-4b19-a2ae-d61e9d8fd359/f6a80343-5648-4b19-a2ae-d61e9d8fd359.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f6a80343-5648-4b19-a2ae-d61e9d8fd359.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:02:42:40:62:4c:de:71:60:44:16:b5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f6a80343-5648-4b19-a2ae-d61e9d8fd359 Validity Not Before: Aug 30 13:00:11 2026 GMT Not After : Nov 28 14:00:11 2026 GMT Subject: CN=cb4e54f6-0c6b-45a0-8ff4-6f7130a152ef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:4c:36:6d:8d:0f:23:4b:eb:dc:2d:e2:a7:1a: e7:ef:87:df:60:51:cb:1c:c6:50:6d:46:a2:b8:e9: 8a:ad:ed:d6:71:22:b7:4e:4b:93:e4:3a:4f:d5:95: 22:8d:87:01:ae:77:1c:36:27:c6:59:a1:b8:c9:62: 2e:8d:26:a5:70:ba:55:e4:45:f5:c6:18:2d:b5:f9: b9:7d:45:ed:99:cc:22:46:42:9b:f8:16:34:f3:8c: 3e:73:9c:aa:4e:d8:ef:31:06:69:61:84:0f:f8:a7: 76:52:c4:b0:1f:53:91:e4:60:e8:40:0c:bd:82:e3: c8:1a:c7:67:f8:2d:8d:ea:4b:be:82:79:4d:71:49: 7f:05:38:59:80:c4:18:da:b7:01:23:ed:bf:30:16: 5f:5f:0c:bd:88:23:a1:31:6e:f8:49:b2:3c:07:46: 3a:71:7a:52:9b:82:64:43:19:1a:00:ed:6c:74:1a: 1e:14:e8:98:67:8b:5f:8d:f4:eb:55:04:09:8d:0f: 8f:b1:fe:99:27:f5:82:f2:7a:e8:44:11:7c:48:75: 0a:fd:65:20:6e:26:96:3f:7d:66:e9:5d:9a:8f:23: bb:77:35:12:9a:95:50:fc:1d:4a:33:bf:60:be:f3: e8:14:97:b2:80:56:93:c8:6d:e5:91:d3:cb:4a:65: 05:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:52:07:84:C2:3F:E3:87:B7:7E:AD:70:77:6B:8B:69:9F:06:A6:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f6a80343-5648-4b19-a2ae-d61e9d8fd359/7eb4c798-440e-3ba5-9cba-9d8b7059e315.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f6a80343-5648-4b19-a2ae-d61e9d8fd359/f6a80343-5648-4b19-a2ae-d61e9d8fd359.crl X509v3 Authority Key Identifier: keyid:4B:4C:33:15:8C:7A:06:17:06:BC:29:29:2B:94:64:52:3B:BB:24:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/f6a80343-5648-4b19-a2ae-d61e9d8fd359.cer sbgp-ipAddrBlock: critical IPv4: 23.139.156.0/24 IPv6: 2602:f62b::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bf:b4:3e:ce:b5:e9:91:84:9e:39:fa:f9:85:13:72:67:2a:8e: 2f:d6:2f:39:f4:06:d4:7e:0b:8c:9f:da:9d:67:28:d1:5c:8e: ca:1c:4b:36:18:93:34:4b:7e:39:e9:7b:65:f5:4c:69:e8:ac: 1a:06:bb:46:d9:c2:e9:af:9d:5a:ee:1b:39:45:dc:c5:6a:20: 90:16:16:52:26:14:1a:86:b5:9b:4f:15:51:39:ec:71:0c:07: 00:da:b9:34:c6:12:bf:df:45:13:c6:4e:52:a4:ee:80:29:19: 4c:ab:c2:74:a8:0b:9e:80:31:65:c2:b7:fc:a2:f3:29:58:e5: 92:2d:c1:54:79:ac:28:69:17:fc:52:c3:4a:1a:dc:73:e4:d8: 5a:8f:12:00:2e:8e:bc:57:90:e3:79:9e:c2:72:00:16:78:59: d0:de:00:7e:45:e2:84:a8:86:20:a8:cb:71:3d:89:64:a8:d4: 59:f9:70:93:63:85:d9:2e:e2:f2:44:ab:65:16:d0:ad:65:38: f6:84:12:c4:77:cc:30:55:f0:31:e9:8c:a4:98:c3:be:39:6c: ee:99:28:63:14:24:59:2a:57:1f:e0:4f:b6:e9:a8:d0:d2:7d: 27:f7:32:b4:bd:d3:7a:88:a7:da:f3:48:79:e4:01:0b:09:73: f9:37:b6:91 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE8CQkBiTN5xYEQWtYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjZhODAzNDMtNTY0OC00YjE5LWEyYWUtZDYxZTlkOGZk MzU5MB4XDTI2MDgzMDEzMDAxMVoXDTI2MTEyODE0MDAxMVowLzEtMCsGA1UEAxMk Y2I0ZTU0ZjYtMGM2Yi00NWEwLThmZjQtNmY3MTMwYTE1MmVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqEw2bY0PI0vr3C3ipxrn74ffYFHLHMZQbUai uOmKre3WcSK3TkuT5DpP1ZUijYcBrnccNifGWaG4yWIujSalcLpV5EX1xhgttfm5 fUXtmcwiRkKb+BY084w+c5yqTtjvMQZpYYQP+Kd2UsSwH1OR5GDoQAy9guPIGsdn +C2N6ku+gnlNcUl/BThZgMQY2rcBI+2/MBZfXwy9iCOhMW74SbI8B0Y6cXpSm4Jk QxkaAO1sdBoeFOiYZ4tfjfTrVQQJjQ+Psf6ZJ/WC8nroRBF8SHUK/WUgbiaWP31m 6V2ajyO7dzUSmpVQ/B1KM79gvvPoFJeygFaTyG3lkdPLSmUFlQIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFJpSB4TCP+OHt36tcHdri2mfBqacMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9mNmE4 MDM0My01NjQ4LTRiMTktYTJhZS1kNjFlOWQ4ZmQzNTkvN2ViNGM3OTgtNDQwZS0z YmE1LTljYmEtOWQ4YjcwNTllMzE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvZjZhODAzNDMtNTY0OC00YjE5LWEy YWUtZDYxZTlkOGZkMzU5L2Y2YTgwMzQzLTU2NDgtNGIxOS1hMmFlLWQ2MWU5ZDhm ZDM1OS5jcmwwHwYDVR0jBBgwFoAUS0wzFYx6BhcGvCkpK5RkUju7JC8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9mNmE4MDM0My01NjQ4LTRiMTktYTJhZS1kNjFl OWQ4ZmQzNTkuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF4ucMA4E AgACMAgDBgAmAvYrADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQC/tD7OtemRhJ45+vmFE3JnKo4v1i859AbU fguMn9qdZyjRXI7KHEs2GJM0S3456Xtl9Uxp6KwaBrtG2cLpr51a7hs5RdzFaiCQ FhZSJhQahrWbTxVROexxDAcA2rk0xhK/30UTxk5SpO6AKRlMq8J0qAuegDFlwrf8 ovMpWOWSLcFUeawoaRf8UsNKGtxz5NhajxIALo68V5DjeZ7CcgAWeFnQ3gB+ReKE qIYgqMtxPYlkqNRZ+XCTY4XZLuLyRKtlFtCtZTj2hBLEd8wwVfAx6YykmMO+OWzu mShjFCRZKlcf4E+26ajQ0n0n9zK0vdN6iKfa80h55AELCXP5N7aR -----END CERTIFICATE-----Generated at Sun Sep 20 17:32:58 2026 by rpki-client