$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a4f9c6b8-3944-422b-8c9c-2ce45c9d038d/fca9bb57-fa99-3941-a147-25e2f6fc06ce.roa File: fca9bb57-fa99-3941-a147-25e2f6fc06ce.roa (raw, json) Hash identifier: 2caccQYa1ALT+rA/duGN9eDhj4w7TFcYbK89WCuQitA= Subject key identifier: E1:AC:31:FF:8C:69:2A:E0:72:E1:87:25:29:12:A2:DF:2B:8B:D2:73 Certificate issuer: /CN=a4f9c6b8-3944-422b-8c9c-2ce45c9d038d Certificate serial: 010D0C9F4328584F9BCDEDAA5AAD8A2C70D49380 Authority key identifier: 09:46:8A:85:47:EE:D0:06:33:D6:40:02:E9:9A:69:1D:BA:11:51:2D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a4f9c6b8-3944-422b-8c9c-2ce45c9d038d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a4f9c6b8-3944-422b-8c9c-2ce45c9d038d/fca9bb57-fa99-3941-a147-25e2f6fc06ce.roa Signing time: Sat 24 Oct 2026 13:00:12 +0000 ROA not before: Sat 24 Oct 2026 13:00:12 +0000 ROA not after: Fri 22 Jan 2027 14:00:12 +0000 asID: 30381 IP address blocks: 23.148.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a4f9c6b8-3944-422b-8c9c-2ce45c9d038d/a4f9c6b8-3944-422b-8c9c-2ce45c9d038d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a4f9c6b8-3944-422b-8c9c-2ce45c9d038d/a4f9c6b8-3944-422b-8c9c-2ce45c9d038d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a4f9c6b8-3944-422b-8c9c-2ce45c9d038d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Nov 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:9b:cd:ed:aa:5a:ad:8a:2c:70:d4:93:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4f9c6b8-3944-422b-8c9c-2ce45c9d038d Validity Not Before: Oct 24 13:00:12 2026 GMT Not After : Jan 22 14:00:12 2027 GMT Subject: CN=e2a5e691-2d35-444c-8cdb-5de506a0f30e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:ad:e1:48:21:4b:34:2d:a8:36:f0:02:66:2d: 94:c8:11:aa:f8:c4:ec:01:84:b8:cd:58:9e:8a:d9: cb:ea:26:38:f6:c9:0d:a3:3a:0b:0e:4c:ad:8d:5d: bb:4c:b5:1e:ef:b4:db:4a:3c:5b:96:f7:08:9d:17: 68:14:ad:6c:98:04:ca:fa:d0:07:4e:3d:65:6b:8e: 81:3d:0b:84:aa:5e:26:27:5c:7e:07:57:12:48:ee: 3b:19:9f:e0:7d:21:f5:47:79:47:3b:f4:f3:46:2e: 89:9b:a3:1c:6d:f4:ca:0f:b2:76:ec:85:af:fd:bc: e5:c7:f4:39:be:dd:fd:2b:77:38:16:fc:4f:5c:bf: b1:ef:aa:19:3d:7c:3c:8b:5c:e1:f3:53:6e:85:92: a9:f9:7d:97:6b:14:7b:1f:91:c0:90:67:84:bc:3b: 04:e7:2b:62:62:da:8c:85:8a:54:b0:5c:46:80:98: 1a:f8:e2:c5:ef:f8:14:63:3f:69:71:6a:c5:be:8c: ac:1e:26:9c:9c:50:47:aa:3c:60:71:e8:4f:6b:03: f9:81:6e:da:38:d6:ef:75:a0:12:de:4a:a0:5b:76: 60:8e:04:e1:b6:79:ee:82:64:18:47:87:99:45:c3: 69:b1:68:13:e0:b6:ea:c9:e1:e8:d5:f4:7f:f6:ff: 21:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:AC:31:FF:8C:69:2A:E0:72:E1:87:25:29:12:A2:DF:2B:8B:D2:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a4f9c6b8-3944-422b-8c9c-2ce45c9d038d/fca9bb57-fa99-3941-a147-25e2f6fc06ce.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a4f9c6b8-3944-422b-8c9c-2ce45c9d038d/a4f9c6b8-3944-422b-8c9c-2ce45c9d038d.crl X509v3 Authority Key Identifier: keyid:09:46:8A:85:47:EE:D0:06:33:D6:40:02:E9:9A:69:1D:BA:11:51:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a4f9c6b8-3944-422b-8c9c-2ce45c9d038d.cer sbgp-ipAddrBlock: critical IPv4: 23.148.236.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:5d:2d:1f:47:91:ae:c3:7a:21:ee:fb:18:88:0f:10:57:1b: 49:6b:93:3a:99:36:69:0d:c4:ec:5d:9b:53:03:a5:13:6d:88: 1f:c9:8c:b2:49:41:87:fd:05:0c:30:22:a9:98:10:6c:66:2b: 93:e5:1d:f8:c9:e1:43:64:25:26:26:0a:4f:1c:e9:37:76:6e: 48:05:22:a1:40:c1:95:60:88:51:ac:0a:57:25:c2:ab:30:d6: 66:06:f3:f1:02:bb:ba:3e:2f:ef:c4:ec:f4:09:6e:78:ef:c9: 07:97:5d:0d:14:ab:b9:03:41:17:06:01:34:0b:ec:ae:25:f6: 0c:9c:f1:a8:34:7b:9a:6c:99:8a:c3:8a:eb:43:09:7f:a7:d6: fe:ef:3f:5b:db:10:92:dc:a3:cd:66:5e:93:83:62:af:09:4b: bb:f4:6e:2f:4b:9c:39:38:9c:8b:95:31:3a:dd:62:d9:17:f7: 33:4c:e9:51:5e:2a:08:09:0f:90:d2:17:e2:3e:23:c2:34:64: 31:c8:c8:20:6d:e8:b5:9b:41:19:8b:44:3c:9c:fe:22:1c:f7: f1:8f:7d:c0:2f:d1:35:c4:57:64:65:0c:a1:0b:d7:86:d4:a2: e6:9c:65:bc:4e:00:7f:b4:31:bd:e7:c3:12:05:4c:26:ef:af: 3f:bb:b1:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+bze2qWq2KLHDUk4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTRmOWM2YjgtMzk0NC00MjJiLThjOWMtMmNlNDVjOWQw MzhkMB4XDTI2MTAyNDEzMDAxMloXDTI3MDEyMjE0MDAxMlowLzEtMCsGA1UEAxMk ZTJhNWU2OTEtMmQzNS00NDRjLThjZGItNWRlNTA2YTBmMzBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5a3hSCFLNC2oNvACZi2UyBGq+MTsAYS4zVie itnL6iY49skNozoLDkytjV27TLUe77TbSjxblvcInRdoFK1smATK+tAHTj1la46B PQuEql4mJ1x+B1cSSO47GZ/gfSH1R3lHO/TzRi6Jm6McbfTKD7J27IWv/bzlx/Q5 vt39K3c4FvxPXL+x76oZPXw8i1zh81NuhZKp+X2XaxR7H5HAkGeEvDsE5ytiYtqM hYpUsFxGgJga+OLF7/gUYz9pcWrFvoysHiacnFBHqjxgcehPawP5gW7aONbvdaAS 3kqgW3ZgjgThtnnugmQYR4eZRcNpsWgT4LbqyeHo1fR/9v8hCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOGsMf+MaSrgcuGHJSkSot8ri9JzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9hNGY5 YzZiOC0zOTQ0LTQyMmItOGM5Yy0yY2U0NWM5ZDAzOGQvZmNhOWJiNTctZmE5OS0z OTQxLWExNDctMjVlMmY2ZmMwNmNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYTRmOWM2YjgtMzk0NC00MjJiLThj OWMtMmNlNDVjOWQwMzhkL2E0ZjljNmI4LTM5NDQtNDIyYi04YzljLTJjZTQ1Yzlk MDM4ZC5jcmwwHwYDVR0jBBgwFoAUCUaKhUfu0AYz1kAC6ZppHboRUS0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9hNGY5YzZiOC0zOTQ0LTQyMmItOGM5Yy0yY2U0 NWM5ZDAzOGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5TsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFxdLR9Hka7DeiHu+xiIDxBXG0lrkzqZNmkNxOxdm1MDpRNtiB/JjLJJ QYf9BQwwIqmYEGxmK5PlHfjJ4UNkJSYmCk8c6Td2bkgFIqFAwZVgiFGsClclwqsw 1mYG8/ECu7o+L+/E7PQJbnjvyQeXXQ0Uq7kDQRcGATQL7K4l9gyc8ag0e5psmYrD iutDCX+n1v7vP1vbEJLco81mXpODYq8JS7v0bi9LnDk4nIuVMTrdYtkX9zNM6VFe KggJD5DSF+I+I8I0ZDHIyCBt6LWbQRmLRDyc/iIc9/GPfcAv0TXEV2RlDKEL14bU ouacZbxOAH+0Mb3nwxIFTCbvrz+7sZE= -----END CERTIFICATE-----Generated at Sun Nov 15 21:52:22 2026 by rpki-client