$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9dfbf5d7-ddfe-4e2e-8a95-68ded6498913/8bc7533a-4c86-3c21-96e7-1039cdf81ece.roa File: 8bc7533a-4c86-3c21-96e7-1039cdf81ece.roa (raw, json) Hash identifier: xXa2cbVDURK8n6zugAkaZw1FVkJdrgHKzR3PwMhAyRY= Subject key identifier: 10:E1:6D:88:9E:75:CC:A7:C3:95:7D:18:CC:ED:7F:A3:65:B6:D5:FE Certificate issuer: /CN=9dfbf5d7-ddfe-4e2e-8a95-68ded6498913 Certificate serial: 010D0C9F4328584F497303AB8BBA1AEFCECD0730 Authority key identifier: 76:08:53:D4:B8:A9:B0:34:F2:33:1E:68:8B:DC:95:30:DA:0D:06:95 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9dfbf5d7-ddfe-4e2e-8a95-68ded6498913.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9dfbf5d7-ddfe-4e2e-8a95-68ded6498913/8bc7533a-4c86-3c21-96e7-1039cdf81ece.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 4766 IP address blocks: 23.133.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9dfbf5d7-ddfe-4e2e-8a95-68ded6498913/9dfbf5d7-ddfe-4e2e-8a95-68ded6498913.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9dfbf5d7-ddfe-4e2e-8a95-68ded6498913/9dfbf5d7-ddfe-4e2e-8a95-68ded6498913.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9dfbf5d7-ddfe-4e2e-8a95-68ded6498913.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:03:ab:8b:ba:1a:ef:ce:cd:07:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9dfbf5d7-ddfe-4e2e-8a95-68ded6498913 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=cbab9d05-31d2-4bfe-ba0b-561a8709d3cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:dd:44:69:b3:2d:8c:65:b2:2b:31:b8:ee:e8: b5:37:93:81:08:f9:7f:79:ec:8c:4a:43:be:46:84: 87:78:95:18:2e:c7:c5:f1:23:f0:4d:70:c6:da:e6: d9:98:d2:74:9e:cb:5c:9e:32:0b:87:98:19:8e:ce: 45:0a:4e:aa:30:83:be:fd:b1:6d:42:db:e9:74:c5: 92:19:41:90:2d:a2:6f:88:1b:ec:64:cd:e3:d5:6c: c7:5f:62:2e:76:36:f5:1b:2b:4c:32:22:e3:df:e7: ec:f1:f9:c5:2f:f6:4a:59:86:5e:15:8b:50:c9:46: 6a:4f:a7:3c:84:14:66:f6:57:0f:e3:1d:4b:e5:1d: 86:6b:a8:63:8e:99:27:46:e1:47:d4:5d:9b:cd:02: ca:8d:55:b0:45:f6:6d:09:4d:8f:b7:5d:8a:41:02: e9:2f:41:21:66:c5:3e:79:ce:20:73:e1:c9:ce:74: c0:7c:db:4d:60:d3:66:98:62:af:f7:37:ce:a7:93: 16:65:5b:3a:e3:54:c6:44:30:d8:05:08:27:10:4f: 70:43:e3:8b:3c:af:43:19:43:02:04:c2:61:72:b2: db:b6:6a:31:61:97:63:52:84:10:c4:41:cf:18:20: 69:f1:ca:cf:34:b4:27:b1:8f:3b:5b:f5:24:a2:61: 59:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:E1:6D:88:9E:75:CC:A7:C3:95:7D:18:CC:ED:7F:A3:65:B6:D5:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9dfbf5d7-ddfe-4e2e-8a95-68ded6498913/8bc7533a-4c86-3c21-96e7-1039cdf81ece.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9dfbf5d7-ddfe-4e2e-8a95-68ded6498913/9dfbf5d7-ddfe-4e2e-8a95-68ded6498913.crl X509v3 Authority Key Identifier: keyid:76:08:53:D4:B8:A9:B0:34:F2:33:1E:68:8B:DC:95:30:DA:0D:06:95 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9dfbf5d7-ddfe-4e2e-8a95-68ded6498913.cer sbgp-ipAddrBlock: critical IPv4: 23.133.148.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:e3:8c:54:d1:ed:42:3d:a0:9b:bc:7d:69:3b:72:16:3f:77: ab:84:8e:9f:67:d0:65:3a:c6:e9:7b:94:26:d6:70:16:f5:0e: 58:ba:9e:a3:de:0a:77:71:bd:e2:29:1b:1f:14:e0:c2:e4:2f: 9c:b1:1a:58:98:6b:02:d2:74:37:8b:dd:78:5e:94:97:02:ab: 92:21:5d:74:98:6c:35:7e:9b:93:17:d6:32:0e:2b:44:50:ed: eb:2d:d0:37:2b:44:92:76:fa:89:1e:7f:01:7e:d2:b5:08:50: fe:c3:b5:26:aa:68:12:75:df:6e:0a:8c:6f:d1:ad:43:ce:95: ce:dd:48:c7:57:43:2a:09:e9:d1:af:d5:60:ae:81:75:45:ec: 88:0a:f5:5f:9d:fc:70:c4:01:0f:93:57:fc:06:c2:86:6e:4d: 17:69:1f:6e:c6:fe:99:16:7f:37:18:38:a6:ad:30:23:82:9a: 2b:77:aa:c6:d8:02:0f:94:a8:48:5d:03:f8:16:a2:5e:59:fb: 7e:96:ce:03:16:7c:d2:62:ba:c4:7d:89:12:1f:a5:b7:40:3a: 64:a8:fd:8c:a9:6e:5f:50:a2:cb:09:7d:79:a6:ca:c3:97:c1: ca:15:7f:2a:9e:0b:b4:29:11:89:a3:78:05:8d:53:48:89:46: 82:1e:fe:65 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JcwOri7oa787NBzAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWRmYmY1ZDctZGRmZS00ZTJlLThhOTUtNjhkZWQ2NDk4 OTEzMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk Y2JhYjlkMDUtMzFkMi00YmZlLWJhMGItNTYxYTg3MDlkM2NiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmd1EabMtjGWyKzG47ui1N5OBCPl/eeyMSkO+ RoSHeJUYLsfF8SPwTXDG2ubZmNJ0nstcnjILh5gZjs5FCk6qMIO+/bFtQtvpdMWS GUGQLaJviBvsZM3j1WzHX2Iudjb1GytMMiLj3+fs8fnFL/ZKWYZeFYtQyUZqT6c8 hBRm9lcP4x1L5R2Ga6hjjpknRuFH1F2bzQLKjVWwRfZtCU2Pt12KQQLpL0EhZsU+ ec4gc+HJznTAfNtNYNNmmGKv9zfOp5MWZVs641TGRDDYBQgnEE9wQ+OLPK9DGUMC BMJhcrLbtmoxYZdjUoQQxEHPGCBp8crPNLQnsY87W/UkomFZYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBDhbYiedcynw5V9GMztf6NlttX+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy85ZGZi ZjVkNy1kZGZlLTRlMmUtOGE5NS02OGRlZDY0OTg5MTMvOGJjNzUzM2EtNGM4Ni0z YzIxLTk2ZTctMTAzOWNkZjgxZWNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvOWRmYmY1ZDctZGRmZS00ZTJlLThh OTUtNjhkZWQ2NDk4OTEzLzlkZmJmNWQ3LWRkZmUtNGUyZS04YTk1LTY4ZGVkNjQ5 ODkxMy5jcmwwHwYDVR0jBBgwFoAUdghT1LipsDTyMx5oi9yVMNoNBpUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy85ZGZiZjVkNy1kZGZlLTRlMmUtOGE5NS02OGRl ZDY0OTg5MTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4WUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHHjjFTR7UI9oJu8fWk7chY/d6uEjp9n0GU6xul7lCbWcBb1Dli6nqPe CndxveIpGx8U4MLkL5yxGliYawLSdDeL3XhelJcCq5IhXXSYbDV+m5MX1jIOK0RQ 7est0DcrRJJ2+okefwF+0rUIUP7DtSaqaBJ1324KjG/RrUPOlc7dSMdXQyoJ6dGv 1WCugXVF7IgK9V+d/HDEAQ+TV/wGwoZuTRdpH27G/pkWfzcYOKatMCOCmit3qsbY Ag+UqEhdA/gWol5Z+36WzgMWfNJiusR9iRIfpbdAOmSo/Yypbl9QossJfXmmysOX wcoVfyqeC7QpEYmjeAWNU0iJRoIe/mU= -----END CERTIFICATE-----Generated at Sat Sep 26 11:08:35 2026 by rpki-client