$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fcd38c98-f51b-46ff-8d72-e170b174f3dc/8ca3fdbc-ca03-3d92-9762-2db8c69dc550.roa File: 8ca3fdbc-ca03-3d92-9762-2db8c69dc550.roa (raw, json) Hash identifier: KlaRarX18V14Y8yUTQzOWBhORD8qXC29JHNgWl+aoFw= Subject key identifier: FA:45:BF:9E:51:96:CB:0C:73:7D:4E:9E:19:E0:50:73:20:E6:97:F8 Certificate issuer: /CN=fcd38c98-f51b-46ff-8d72-e170b174f3dc Certificate serial: 010D0C9F4328584F9D331244AA0CA18624B9A520 Authority key identifier: 9B:0D:F6:56:33:4A:4B:06:E1:A2:DD:D5:25:EB:11:FC:E0:95:42:D5 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fcd38c98-f51b-46ff-8d72-e170b174f3dc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fcd38c98-f51b-46ff-8d72-e170b174f3dc/8ca3fdbc-ca03-3d92-9762-2db8c69dc550.roa Signing time: Sun 25 Oct 2026 01:00:13 +0000 ROA not before: Sun 25 Oct 2026 01:00:13 +0000 ROA not after: Sat 23 Jan 2027 02:00:13 +0000 asID: 400370 IP address blocks: 142.228.46.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fcd38c98-f51b-46ff-8d72-e170b174f3dc/fcd38c98-f51b-46ff-8d72-e170b174f3dc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fcd38c98-f51b-46ff-8d72-e170b174f3dc/fcd38c98-f51b-46ff-8d72-e170b174f3dc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fcd38c98-f51b-46ff-8d72-e170b174f3dc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:9d:33:12:44:aa:0c:a1:86:24:b9:a5:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fcd38c98-f51b-46ff-8d72-e170b174f3dc Validity Not Before: Oct 25 01:00:13 2026 GMT Not After : Jan 23 02:00:13 2027 GMT Subject: CN=c19009db-de37-444c-9b45-cce9367898fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:36:4d:e8:95:da:1e:c9:e2:bc:c0:57:59:64: ea:1a:4b:10:6b:41:6d:ea:ec:a7:cc:8a:5e:4c:c8: 8c:91:9f:41:43:2f:12:c0:e8:31:29:ac:58:74:7b: 32:8a:7a:96:92:ae:2c:77:6e:bb:6a:00:75:d6:3d: 0e:27:b7:08:e2:f8:16:8e:ae:e3:1b:30:df:39:cd: 78:1b:41:92:95:c2:85:82:2d:c0:e5:39:55:98:46: 44:bd:65:d4:32:6e:9c:5a:ab:0d:cd:1d:02:9f:1b: 51:18:db:4f:9a:7e:3a:6b:4c:46:75:c0:d9:68:45: 97:6f:4f:5c:b4:1e:dd:5e:ad:13:1b:51:cf:71:a3: cf:c8:25:60:49:0b:77:5e:05:f3:7a:b0:c4:4e:86: 8a:ec:de:a6:d2:6c:bc:e6:3b:3a:a2:2b:61:7d:f0: a0:c7:45:71:9d:2d:c8:74:e6:e1:7a:82:49:0e:90: 3d:f2:5a:a5:3d:1e:c3:e8:6f:a3:8f:75:c3:7d:de: d8:d9:25:1b:b0:64:54:d1:2d:2b:b2:23:88:50:20: 63:35:a4:7d:dc:34:e6:25:66:5c:44:9f:ed:a3:4d: ad:d4:f7:51:47:ee:d8:12:92:9b:ac:f8:12:6c:e1: 2b:c5:1e:4d:9f:a7:d1:bb:98:fa:7d:1e:51:21:c3: 0b:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:45:BF:9E:51:96:CB:0C:73:7D:4E:9E:19:E0:50:73:20:E6:97:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fcd38c98-f51b-46ff-8d72-e170b174f3dc/8ca3fdbc-ca03-3d92-9762-2db8c69dc550.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fcd38c98-f51b-46ff-8d72-e170b174f3dc/fcd38c98-f51b-46ff-8d72-e170b174f3dc.crl X509v3 Authority Key Identifier: keyid:9B:0D:F6:56:33:4A:4B:06:E1:A2:DD:D5:25:EB:11:FC:E0:95:42:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fcd38c98-f51b-46ff-8d72-e170b174f3dc.cer sbgp-ipAddrBlock: critical IPv4: 142.228.46.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ae:d7:4c:87:bf:b2:0e:1c:31:44:80:25:90:8c:b3:70:31:4f: de:f7:a1:19:cd:d9:4d:49:2d:b3:aa:49:bb:57:e7:96:58:d2: 67:df:00:92:ab:51:2d:48:e7:25:95:d9:ac:b9:e6:81:a0:2d: 3f:7c:c6:3e:1c:7b:c3:cb:c4:9b:e5:7b:f0:9a:e3:f5:fb:24: a7:9d:c1:ca:95:68:de:89:38:4b:9f:d0:50:37:ea:bf:23:3b: 27:9b:b0:1a:f2:2b:59:1c:7f:67:db:3d:4c:ba:9f:a2:e0:23: d5:69:3c:ca:fa:00:bd:3b:b6:65:8f:d5:fc:84:b5:6f:fe:1a: 32:ab:21:13:16:63:ba:29:d5:6d:9f:37:6d:bc:c3:13:32:ba: 4d:0b:91:9a:7e:69:a5:13:49:f6:87:c8:cf:3e:3b:aa:e2:88: 32:20:bc:e3:21:07:81:8a:2a:38:bd:b3:db:4b:23:5c:1c:87: 70:05:67:7d:68:47:c1:df:46:58:11:27:cf:48:c1:03:da:a0: d1:7a:c5:8f:f1:aa:01:75:73:7e:10:66:ea:eb:c7:d9:a6:fd: ee:51:a4:f8:a0:5e:10:7b:e0:d3:2e:f8:79:f7:7f:7d:c6:a7: b5:3a:3f:3c:f5:40:73:ba:0d:c2:64:95:32:e3:6e:23:0b:27: 30:52:28:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+dMxJEqgyhhiS5pSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmNkMzhjOTgtZjUxYi00NmZmLThkNzItZTE3MGIxNzRm M2RjMB4XDTI2MTAyNTAxMDAxM1oXDTI3MDEyMzAyMDAxM1owLzEtMCsGA1UEAxMk YzE5MDA5ZGItZGUzNy00NDRjLTliNDUtY2NlOTM2Nzg5OGZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjTZN6JXaHsnivMBXWWTqGksQa0Ft6uynzIpe TMiMkZ9BQy8SwOgxKaxYdHsyinqWkq4sd267agB11j0OJ7cI4vgWjq7jGzDfOc14 G0GSlcKFgi3A5TlVmEZEvWXUMm6cWqsNzR0CnxtRGNtPmn46a0xGdcDZaEWXb09c tB7dXq0TG1HPcaPPyCVgSQt3XgXzerDEToaK7N6m0my85js6oithffCgx0VxnS3I dObheoJJDpA98lqlPR7D6G+jj3XDfd7Y2SUbsGRU0S0rsiOIUCBjNaR93DTmJWZc RJ/to02t1PdRR+7YEpKbrPgSbOErxR5Nn6fRu5j6fR5RIcMLhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPpFv55RlssMc31OnhngUHMg5pf4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mY2Qz OGM5OC1mNTFiLTQ2ZmYtOGQ3Mi1lMTcwYjE3NGYzZGMvOGNhM2ZkYmMtY2EwMy0z ZDkyLTk3NjItMmRiOGM2OWRjNTUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZmNkMzhjOTgtZjUxYi00NmZmLThk NzItZTE3MGIxNzRmM2RjL2ZjZDM4Yzk4LWY1MWItNDZmZi04ZDcyLWUxNzBiMTc0 ZjNkYy5jcmwwHwYDVR0jBBgwFoAUmw32VjNKSwbhot3VJesR/OCVQtUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9mY2QzOGM5OC1mNTFiLTQ2ZmYtOGQ3Mi1lMTcw YjE3NGYzZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjuQuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK7XTIe/sg4cMUSAJZCMs3AxT973oRnN2U1JLbOqSbtX55ZY0mffAJKr US1I5yWV2ay55oGgLT98xj4ce8PLxJvle/Ca4/X7JKedwcqVaN6JOEuf0FA36r8j OyebsBryK1kcf2fbPUy6n6LgI9VpPMr6AL07tmWP1fyEtW/+GjKrIRMWY7op1W2f N228wxMyuk0LkZp+aaUTSfaHyM8+O6riiDIgvOMhB4GKKji9s9tLI1wch3AFZ31o R8HfRlgRJ89IwQPaoNF6xY/xqgF1c34QZurrx9mm/e5RpPigXhB74NMu+Hn3f33G p7U6Pzz1QHO6DcJklTLjbiMLJzBSKBQ= -----END CERTIFICATE-----Generated at Sun Nov 15 17:55:58 2026 by rpki-client