$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8fdb6fd9-d643-44d1-acb6-3624d356baf0/7602061e-6053-300f-a9d4-d9f7db98f2da.roa File: 7602061e-6053-300f-a9d4-d9f7db98f2da.roa (raw, json) Hash identifier: EzLoD5KPIm/iSk9S0EudBn0BqoT8okhgTP46FM/84DY= Subject key identifier: F5:29:94:CF:12:1E:DA:86:AB:76:4E:8A:99:78:64:F4:01:E1:B0:68 Certificate issuer: /CN=8fdb6fd9-d643-44d1-acb6-3624d356baf0 Certificate serial: 010D0C9F4328584F3FAD3B6729847C0DF9C64240 Authority key identifier: B5:85:79:67:67:50:1A:12:2C:8C:D2:2B:0E:2C:4C:13:3F:A5:D9:5B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8fdb6fd9-d643-44d1-acb6-3624d356baf0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8fdb6fd9-d643-44d1-acb6-3624d356baf0/7602061e-6053-300f-a9d4-d9f7db98f2da.roa Signing time: Mon 21 Sep 2026 13:00:12 +0000 ROA not before: Mon 21 Sep 2026 13:00:12 +0000 ROA not after: Sun 20 Dec 2026 14:00:12 +0000 asID: 7361 IP address blocks: 23.152.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8fdb6fd9-d643-44d1-acb6-3624d356baf0/8fdb6fd9-d643-44d1-acb6-3624d356baf0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8fdb6fd9-d643-44d1-acb6-3624d356baf0/8fdb6fd9-d643-44d1-acb6-3624d356baf0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8fdb6fd9-d643-44d1-acb6-3624d356baf0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3f:ad:3b:67:29:84:7c:0d:f9:c6:42:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8fdb6fd9-d643-44d1-acb6-3624d356baf0 Validity Not Before: Sep 21 13:00:12 2026 GMT Not After : Dec 20 14:00:12 2026 GMT Subject: CN=94dea6b5-3fce-44cf-9c91-ad6ed36e2509 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:8a:dc:00:43:df:a7:29:4f:f1:9d:d1:c0:f8: d8:a3:1d:a3:3e:ba:1a:51:70:a0:0a:35:3a:9f:48: f3:cb:85:a6:e1:20:fb:56:5c:c4:af:c8:d2:2d:53: 9d:6c:cf:76:71:1d:6c:05:9e:82:56:80:69:1e:e1: b9:64:16:89:e0:bf:74:d7:45:46:13:09:cf:56:78: 20:f9:8e:3f:e5:e5:de:2f:70:97:fb:29:6a:68:6e: 11:12:cb:52:f8:be:54:56:4e:cd:96:ef:cd:72:65: 0b:2d:ea:77:23:1f:79:6e:f5:b7:c1:33:67:e6:95: 07:4f:ed:94:5c:2b:a1:3f:d3:05:0c:03:89:bb:74: 35:d7:09:a5:2d:52:db:38:a8:ae:7c:9e:61:4c:2e: 36:43:c9:98:aa:75:35:c0:31:7a:c7:75:f1:95:a9: b3:48:4c:6f:05:10:ba:5c:62:a2:24:3a:a1:09:3c: 89:ef:73:75:ba:b5:f2:26:77:54:41:4a:8c:31:ce: 62:c7:aa:7a:26:72:a5:a2:89:eb:2e:08:5d:4e:12: d6:0e:e7:cf:86:1f:07:ad:df:33:23:3d:f3:0a:19: 9b:31:ee:72:ac:4c:7b:a2:58:63:b2:d5:4b:a6:80: 1c:6c:2e:b4:da:2c:5d:21:aa:0f:da:cd:4b:42:ee: 9e:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:29:94:CF:12:1E:DA:86:AB:76:4E:8A:99:78:64:F4:01:E1:B0:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8fdb6fd9-d643-44d1-acb6-3624d356baf0/7602061e-6053-300f-a9d4-d9f7db98f2da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8fdb6fd9-d643-44d1-acb6-3624d356baf0/8fdb6fd9-d643-44d1-acb6-3624d356baf0.crl X509v3 Authority Key Identifier: keyid:B5:85:79:67:67:50:1A:12:2C:8C:D2:2B:0E:2C:4C:13:3F:A5:D9:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/8fdb6fd9-d643-44d1-acb6-3624d356baf0.cer sbgp-ipAddrBlock: critical IPv4: 23.152.148.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:17:2c:e7:2d:60:04:f9:a1:04:07:48:74:76:90:ef:e7:ee: 57:2c:f3:c3:2f:bf:53:0f:2a:61:0c:65:3a:9a:2f:e6:7d:41: 98:05:3a:94:cb:df:4d:e5:51:c3:c6:de:14:13:48:06:86:b0: 56:a5:56:38:23:c2:59:ab:92:e6:a6:bb:c9:85:7c:e9:17:61: 26:33:b2:b3:54:4f:8e:30:87:28:4d:5d:38:97:a6:cd:48:f6: b9:09:ec:be:0c:8d:04:26:79:bc:d0:21:10:85:12:15:38:e1: 32:37:de:a6:88:6e:b1:95:c9:68:49:6a:b9:79:4c:cd:e3:41: 36:8e:93:e5:37:1f:d2:55:15:c6:0a:ef:02:c8:53:e6:88:b4: e6:55:dd:83:64:3c:f6:4c:d5:88:4a:98:bc:c1:23:95:50:d9: 7f:a0:d3:ab:33:54:50:21:fa:ab:17:9a:0f:26:0b:67:8d:e6: 8f:8f:fc:4b:5e:23:e2:18:ee:65:da:50:96:1c:46:6c:69:61: 7d:7b:e2:77:c2:29:83:57:dc:63:62:2d:4e:75:d6:61:ac:51: 01:a2:0f:81:03:d0:00:50:e4:b9:6f:2d:cd:0a:5b:5e:54:e1: 70:14:89:c3:77:89:c6:e1:92:3d:36:f4:cd:50:d2:a5:64:02: 06:f8:ca:76 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8/rTtnKYR8DfnGQkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGZkYjZmZDktZDY0My00NGQxLWFjYjYtMzYyNGQzNTZi YWYwMB4XDTI2MDkyMTEzMDAxMloXDTI2MTIyMDE0MDAxMlowLzEtMCsGA1UEAxMk OTRkZWE2YjUtM2ZjZS00NGNmLTljOTEtYWQ2ZWQzNmUyNTA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhIrcAEPfpylP8Z3RwPjYox2jProaUXCgCjU6 n0jzy4Wm4SD7VlzEr8jSLVOdbM92cR1sBZ6CVoBpHuG5ZBaJ4L9010VGEwnPVngg +Y4/5eXeL3CX+ylqaG4REstS+L5UVk7Nlu/NcmULLep3Ix95bvW3wTNn5pUHT+2U XCuhP9MFDAOJu3Q11wmlLVLbOKiufJ5hTC42Q8mYqnU1wDF6x3XxlamzSExvBRC6 XGKiJDqhCTyJ73N1urXyJndUQUqMMc5ix6p6JnKloonrLghdThLWDufPhh8Hrd8z Iz3zChmbMe5yrEx7olhjstVLpoAcbC602ixdIaoP2s1LQu6eHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPUplM8SHtqGq3ZOipl4ZPQB4bBoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi84ZmRi NmZkOS1kNjQzLTQ0ZDEtYWNiNi0zNjI0ZDM1NmJhZjAvNzYwMjA2MWUtNjA1My0z MDBmLWE5ZDQtZDlmN2RiOThmMmRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvOGZkYjZmZDktZDY0My00NGQxLWFj YjYtMzYyNGQzNTZiYWYwLzhmZGI2ZmQ5LWQ2NDMtNDRkMS1hY2I2LTM2MjRkMzU2 YmFmMC5jcmwwHwYDVR0jBBgwFoAUtYV5Z2dQGhIsjNIrDixMEz+l2VswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi84ZmRiNmZkOS1kNjQzLTQ0ZDEtYWNiNi0zNjI0 ZDM1NmJhZjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5iUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIkXLOctYAT5oQQHSHR2kO/n7lcs88Mvv1MPKmEMZTqaL+Z9QZgFOpTL 303lUcPG3hQTSAaGsFalVjgjwlmrkuamu8mFfOkXYSYzsrNUT44whyhNXTiXps1I 9rkJ7L4MjQQmebzQIRCFEhU44TI33qaIbrGVyWhJarl5TM3jQTaOk+U3H9JVFcYK 7wLIU+aItOZV3YNkPPZM1YhKmLzBI5VQ2X+g06szVFAh+qsXmg8mC2eN5o+P/Ete I+IY7mXaUJYcRmxpYX174nfCKYNX3GNiLU511mGsUQGiD4ED0ABQ5LlvLc0KW15U 4XAUicN3icbhkj029M1Q0qVkAgb4ynY= -----END CERTIFICATE-----Generated at Sat Sep 26 03:41:29 2026 by rpki-client