$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/b522ade6-c127-4e34-b559-2f46dc2517fa/97c6c6c1-2ee1-33f8-a06c-1353af8b8f53.roa File: 97c6c6c1-2ee1-33f8-a06c-1353af8b8f53.roa (raw, json) Hash identifier: /FMiEpAig5RUCAxJRcfdzR9m8XN+4a8xTbg6p6DxbNs= Subject key identifier: C7:05:49:6B:81:63:BE:64:AA:43:36:C2:9B:C9:19:12:32:C3:E5:63 Certificate issuer: /CN=b522ade6-c127-4e34-b559-2f46dc2517fa Certificate serial: 010D0C9F4328584F498830AE5D05FAA70BC95580 Authority key identifier: 40:24:72:A6:24:22:AC:BA:4F:27:8D:6E:4D:2F:DB:B8:88:C5:13:FB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/b522ade6-c127-4e34-b559-2f46dc2517fa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/b522ade6-c127-4e34-b559-2f46dc2517fa/97c6c6c1-2ee1-33f8-a06c-1353af8b8f53.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 138997 IP address blocks: 23.150.8.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/b522ade6-c127-4e34-b559-2f46dc2517fa/b522ade6-c127-4e34-b559-2f46dc2517fa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/b522ade6-c127-4e34-b559-2f46dc2517fa/b522ade6-c127-4e34-b559-2f46dc2517fa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/b522ade6-c127-4e34-b559-2f46dc2517fa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:88:30:ae:5d:05:fa:a7:0b:c9:55:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b522ade6-c127-4e34-b559-2f46dc2517fa Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=5839bc3d-2fae-45ed-bfff-bd25201e8037 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:0e:12:4c:d7:08:0f:7c:c7:6a:b9:be:0a:d3: d5:3c:1c:b4:c3:c5:0b:87:4e:9c:71:ff:74:bd:51: dd:3f:3e:13:ac:ea:fc:3e:11:90:78:a9:32:b0:a8: 41:be:c0:09:a6:e5:0f:0e:3b:21:7a:de:62:24:bd: aa:18:4b:35:d3:83:00:ef:63:07:12:8b:9a:e2:72: e1:1f:5a:55:98:b9:7d:a6:0e:41:ae:66:b1:d0:55: 67:6b:ca:91:5d:5e:0f:b2:55:21:d6:b5:11:98:28: 35:f5:93:0f:e1:da:8e:92:15:54:0b:bd:4b:6a:d1: ba:da:7d:ed:02:ce:91:82:60:6b:7e:fb:ec:e5:65: 86:da:4f:54:25:5b:86:17:6c:21:23:e9:97:54:60: e2:26:9b:3a:44:b5:fb:37:88:de:31:bd:e7:66:4e: f2:e1:88:a8:f6:72:4f:47:31:e2:88:8f:82:2c:03: 0b:c2:2c:f3:62:2d:6a:ce:27:25:a1:24:a8:7e:f6: ea:fb:d7:05:3c:04:ba:62:e2:cb:89:f0:8c:8f:40: 16:27:32:b4:6d:0e:c8:74:14:89:58:60:8a:ad:53: f9:41:b7:2a:d8:f8:78:3d:7b:8f:c1:80:7b:10:74: ca:2b:da:35:f2:71:da:f3:8e:07:c4:3d:eb:62:1e: 89:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:05:49:6B:81:63:BE:64:AA:43:36:C2:9B:C9:19:12:32:C3:E5:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/b522ade6-c127-4e34-b559-2f46dc2517fa/97c6c6c1-2ee1-33f8-a06c-1353af8b8f53.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/b522ade6-c127-4e34-b559-2f46dc2517fa/b522ade6-c127-4e34-b559-2f46dc2517fa.crl X509v3 Authority Key Identifier: keyid:40:24:72:A6:24:22:AC:BA:4F:27:8D:6E:4D:2F:DB:B8:88:C5:13:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/b522ade6-c127-4e34-b559-2f46dc2517fa.cer sbgp-ipAddrBlock: critical IPv4: 23.150.8.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:87:60:4c:a5:f6:6f:34:bc:67:93:11:bc:bc:6d:55:07:e0: ef:fa:1b:1b:49:fb:3f:22:9e:ec:2f:d1:55:ea:af:85:b4:e8: 7f:4f:62:c2:61:18:ba:cb:55:c3:53:44:52:56:31:b8:45:d3: c7:86:7f:39:eb:be:48:a5:80:29:10:2a:f9:55:8e:27:8d:e8: fe:b2:e3:86:7e:bd:ef:09:03:1b:92:c4:26:ea:14:45:72:3b: 9c:d6:0d:f4:ac:54:be:6c:3d:c6:e3:69:74:d6:ff:d6:4b:10: 5d:89:57:42:7d:55:d9:24:3b:ec:a3:9b:27:ff:37:91:83:03: f5:48:e4:80:4e:0d:40:5d:a9:d4:34:0d:df:c8:2b:81:2b:4d: 85:a8:08:7d:92:73:8b:c9:7a:16:73:71:c7:3d:f1:35:69:cf: ac:58:92:da:9d:62:53:36:6b:1b:0f:6c:38:da:72:f0:e6:d0: af:39:8a:91:ba:cb:ec:22:25:a8:e4:02:b5:50:97:c9:f6:19: 83:76:00:59:b5:27:da:21:25:34:86:65:db:d8:87:8f:3a:b0: 9e:a2:56:6b:03:c4:a2:f3:4b:9c:05:62:33:af:56:b2:b8:72: 93:32:9d:46:85:03:61:0d:fb:51:74:90:3e:4f:c3:09:bb:d1: 63:fe:7c:a1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JiDCuXQX6pwvJVYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjUyMmFkZTYtYzEyNy00ZTM0LWI1NTktMmY0NmRjMjUx N2ZhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NTgzOWJjM2QtMmZhZS00NWVkLWJmZmYtYmQyNTIwMWU4MDM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjA4STNcID3zHarm+CtPVPBy0w8ULh06ccf90 vVHdPz4TrOr8PhGQeKkysKhBvsAJpuUPDjshet5iJL2qGEs104MA72MHEoua4nLh H1pVmLl9pg5Brmax0FVna8qRXV4PslUh1rURmCg19ZMP4dqOkhVUC71LatG62n3t As6RgmBrfvvs5WWG2k9UJVuGF2whI+mXVGDiJps6RLX7N4jeMb3nZk7y4Yio9nJP RzHiiI+CLAMLwizzYi1qzicloSSofvbq+9cFPAS6YuLLifCMj0AWJzK0bQ7IdBSJ WGCKrVP5Qbcq2Ph4PXuPwYB7EHTKK9o18nHa844HxD3rYh6JFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMcFSWuBY75kqkM2wpvJGRIyw+VjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS9iNTIy YWRlNi1jMTI3LTRlMzQtYjU1OS0yZjQ2ZGMyNTE3ZmEvOTdjNmM2YzEtMmVlMS0z M2Y4LWEwNmMtMTM1M2FmOGI4ZjUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvYjUyMmFkZTYtYzEyNy00ZTM0LWI1 NTktMmY0NmRjMjUxN2ZhL2I1MjJhZGU2LWMxMjctNGUzNC1iNTU5LTJmNDZkYzI1 MTdmYS5jcmwwHwYDVR0jBBgwFoAUQCRypiQirLpPJ41uTS/buIjFE/swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS9iNTIyYWRlNi1jMTI3LTRlMzQtYjU1OS0yZjQ2 ZGMyNTE3ZmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5YIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKaHYEyl9m80vGeTEby8bVUH4O/6GxtJ+z8inuwv0VXqr4W06H9PYsJh GLrLVcNTRFJWMbhF08eGfznrvkilgCkQKvlVjieN6P6y44Z+ve8JAxuSxCbqFEVy O5zWDfSsVL5sPcbjaXTW/9ZLEF2JV0J9VdkkO+yjmyf/N5GDA/VI5IBODUBdqdQ0 Dd/IK4ErTYWoCH2Sc4vJehZzccc98TVpz6xYktqdYlM2axsPbDjacvDm0K85ipG6 y+wiJajkArVQl8n2GYN2AFm1J9ohJTSGZdvYh486sJ6iVmsDxKLzS5wFYjOvVrK4 cpMynUaFA2EN+1F0kD5Pwwm70WP+fKE= -----END CERTIFICATE-----Generated at Sat Sep 26 15:07:27 2026 by rpki-client