$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f8bd5146-a29d-4a93-883e-fc63eb0b4533/40bd3dcf-2cbb-397a-b0d3-3b27f58c8215.roa File: 40bd3dcf-2cbb-397a-b0d3-3b27f58c8215.roa (raw, json) Hash identifier: zpx66UdX42a+IfnZoMRYduZ++3xjFpnazjweTYkBHEk= Subject key identifier: A4:B4:0F:39:51:C5:DA:F9:89:10:F5:C7:23:E4:03:AB:57:9F:92:36 Certificate issuer: /CN=f8bd5146-a29d-4a93-883e-fc63eb0b4533 Certificate serial: 010D0C9F4328584F49730E99E39649C88AAECD40 Authority key identifier: FB:81:BA:54:5C:A7:44:EE:AD:0D:73:17:9F:B9:F2:DF:58:03:19:F6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f8bd5146-a29d-4a93-883e-fc63eb0b4533.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f8bd5146-a29d-4a93-883e-fc63eb0b4533/40bd3dcf-2cbb-397a-b0d3-3b27f58c8215.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 21859 IP address blocks: 23.154.44.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f8bd5146-a29d-4a93-883e-fc63eb0b4533/f8bd5146-a29d-4a93-883e-fc63eb0b4533.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f8bd5146-a29d-4a93-883e-fc63eb0b4533/f8bd5146-a29d-4a93-883e-fc63eb0b4533.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f8bd5146-a29d-4a93-883e-fc63eb0b4533.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:0e:99:e3:96:49:c8:8a:ae:cd:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8bd5146-a29d-4a93-883e-fc63eb0b4533 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=9b66fa50-41d6-4e18-8d92-444d61ebcbcd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:be:77:ee:16:06:a3:4e:eb:f2:52:8f:43:54: 09:05:f5:ef:da:a6:0d:11:f6:15:1d:fc:d9:c5:29: 51:78:58:99:59:6e:8c:52:92:56:c0:bf:67:58:03: bc:da:f6:f6:47:96:7a:19:c0:98:eb:ed:a2:9e:bb: 7a:d3:4c:45:bd:a4:d7:2d:0a:87:f9:82:48:b5:8a: 3a:c6:3d:e4:d8:5c:1d:ad:7f:34:c0:04:5d:05:f5: cf:9d:7b:76:13:42:7b:9a:e3:8e:99:56:48:b1:40: ba:a6:a0:3f:85:b3:29:65:77:ee:61:09:ed:ea:a9: 97:82:11:f6:f9:d3:fb:2e:9c:f9:23:31:2a:c3:88: c3:75:2b:8e:6d:2f:34:8b:ca:d2:52:b0:13:80:75: 5a:91:0f:96:3a:d3:56:06:16:6e:bc:b5:e3:5d:c5: 02:25:72:79:2c:b2:1d:85:a9:bb:4e:2a:18:d4:c8: 6f:83:39:64:70:30:d4:1d:5b:9a:26:53:f3:23:38: b7:26:73:45:f5:48:5d:8b:ea:3e:e8:32:bf:21:f6: e7:5c:e0:b7:71:7d:73:12:7b:10:39:84:06:cf:2e: 4d:77:1b:36:66:60:65:fd:7c:9d:e3:fd:7e:8a:1c: 57:97:c6:76:3b:aa:b2:c9:10:fc:40:c3:00:c9:c3: c3:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:B4:0F:39:51:C5:DA:F9:89:10:F5:C7:23:E4:03:AB:57:9F:92:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f8bd5146-a29d-4a93-883e-fc63eb0b4533/40bd3dcf-2cbb-397a-b0d3-3b27f58c8215.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f8bd5146-a29d-4a93-883e-fc63eb0b4533/f8bd5146-a29d-4a93-883e-fc63eb0b4533.crl X509v3 Authority Key Identifier: keyid:FB:81:BA:54:5C:A7:44:EE:AD:0D:73:17:9F:B9:F2:DF:58:03:19:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/f8bd5146-a29d-4a93-883e-fc63eb0b4533.cer sbgp-ipAddrBlock: critical IPv4: 23.154.44.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:f8:e8:ed:6f:13:cb:72:e1:3c:9e:f4:ad:24:2f:29:70:65: c2:02:ad:b6:0e:f9:bd:da:46:30:ec:60:35:5d:ca:04:e5:08: a0:50:e8:e2:85:eb:8e:59:82:90:61:69:43:60:03:80:33:37: 02:17:96:12:3a:b4:9f:2e:8c:db:25:02:87:8c:62:91:69:b8: 3f:90:30:0c:bd:98:e5:98:ea:5c:bd:be:be:38:96:c5:39:11: 23:4e:f8:76:25:81:0e:24:11:81:08:aa:1d:90:97:b2:6d:98: d2:a0:f2:da:e4:30:79:1a:c0:ff:a7:d9:c1:a1:a3:4c:82:c4: 99:d1:af:78:60:4e:5f:77:af:0e:f4:f3:32:77:9a:41:4a:b0: 6e:6d:51:43:39:fa:ac:a3:e5:3f:d1:52:64:e4:34:ec:7e:79: 35:74:17:5b:b2:47:85:e0:87:11:d7:07:6e:7b:d8:d0:c6:9b: f8:1a:83:90:91:b1:b8:31:2c:c6:fe:18:5c:d1:66:70:8b:11: e7:00:47:05:3b:b3:e3:ac:85:7e:2a:15:3a:e0:1a:ae:71:e5: ad:69:67:ca:38:39:66:37:8b:a4:78:9e:b1:f5:67:92:7c:18: 56:fe:46:4f:8b:28:68:8f:6d:7e:fe:a5:63:0b:28:b7:1f:bb: 42:fe:33:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jcw6Z45ZJyIquzUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjhiZDUxNDYtYTI5ZC00YTkzLTg4M2UtZmM2M2ViMGI0 NTMzMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk OWI2NmZhNTAtNDFkNi00ZTE4LThkOTItNDQ0ZDYxZWJjYmNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkL537hYGo07r8lKPQ1QJBfXv2qYNEfYVHfzZ xSlReFiZWW6MUpJWwL9nWAO82vb2R5Z6GcCY6+2inrt600xFvaTXLQqH+YJItYo6 xj3k2FwdrX80wARdBfXPnXt2E0J7muOOmVZIsUC6pqA/hbMpZXfuYQnt6qmXghH2 +dP7Lpz5IzEqw4jDdSuObS80i8rSUrATgHVakQ+WOtNWBhZuvLXjXcUCJXJ5LLId ham7TioY1MhvgzlkcDDUHVuaJlPzIzi3JnNF9Uhdi+o+6DK/IfbnXOC3cX1zEnsQ OYQGzy5Ndxs2ZmBl/Xyd4/1+ihxXl8Z2O6qyyRD8QMMAycPDiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKS0DzlRxdr5iRD1xyPkA6tXn5I2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9mOGJk NTE0Ni1hMjlkLTRhOTMtODgzZS1mYzYzZWIwYjQ1MzMvNDBiZDNkY2YtMmNiYi0z OTdhLWIwZDMtM2IyN2Y1OGM4MjE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvZjhiZDUxNDYtYTI5ZC00YTkzLTg4 M2UtZmM2M2ViMGI0NTMzL2Y4YmQ1MTQ2LWEyOWQtNGE5My04ODNlLWZjNjNlYjBi NDUzMy5jcmwwHwYDVR0jBBgwFoAU+4G6VFynRO6tDXMXn7ny31gDGfYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi9mOGJkNTE0Ni1hMjlkLTRhOTMtODgzZS1mYzYz ZWIwYjQ1MzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5osMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAD46O1vE8ty4Tye9K0kLylwZcICrbYO+b3aRjDsYDVdygTlCKBQ6OKF 645ZgpBhaUNgA4AzNwIXlhI6tJ8ujNslAoeMYpFpuD+QMAy9mOWY6ly9vr44lsU5 ESNO+HYlgQ4kEYEIqh2Ql7JtmNKg8trkMHkawP+n2cGho0yCxJnRr3hgTl93rw70 8zJ3mkFKsG5tUUM5+qyj5T/RUmTkNOx+eTV0F1uyR4XghxHXB2572NDGm/gag5CR sbgxLMb+GFzRZnCLEecARwU7s+OshX4qFTrgGq5x5a1pZ8o4OWY3i6R4nrH1Z5J8 GFb+Rk+LKGiPbX7+pWMLKLcfu0L+M1M= -----END CERTIFICATE-----Generated at Sun Sep 27 01:34:59 2026 by rpki-client