$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/547bc71b-c4e4-4a73-8d12-8d76dde4f0c3/f49e45b5-d1a7-3d4c-93ef-a05d19349d9f.roa File: f49e45b5-d1a7-3d4c-93ef-a05d19349d9f.roa (raw, json) Hash identifier: +EBEWJYY2I169voY5EZW9tjLsbZyrQmVUlrP75zNwEs= Subject key identifier: BF:8C:38:46:6C:5E:A8:D3:7A:35:D3:06:5B:E6:05:45:B7:A5:1A:95 Certificate issuer: /CN=547bc71b-c4e4-4a73-8d12-8d76dde4f0c3 Certificate serial: 010D0C9F4328584F49738923A920B15772E66800 Authority key identifier: 41:C3:10:8E:BE:65:4A:04:1C:07:E7:96:CC:27:DE:20:FF:A7:E1:63 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/547bc71b-c4e4-4a73-8d12-8d76dde4f0c3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/547bc71b-c4e4-4a73-8d12-8d76dde4f0c3/f49e45b5-d1a7-3d4c-93ef-a05d19349d9f.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 21859 IP address blocks: 23.154.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/547bc71b-c4e4-4a73-8d12-8d76dde4f0c3/547bc71b-c4e4-4a73-8d12-8d76dde4f0c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/547bc71b-c4e4-4a73-8d12-8d76dde4f0c3/547bc71b-c4e4-4a73-8d12-8d76dde4f0c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/547bc71b-c4e4-4a73-8d12-8d76dde4f0c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 22 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:73:89:23:a9:20:b1:57:72:e6:68:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=547bc71b-c4e4-4a73-8d12-8d76dde4f0c3 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=ca94650c-7f7e-4b62-9e04-3983c2effd54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:da:41:ca:ca:27:5e:6f:3c:84:35:94:62:fd: 91:52:9e:ee:e6:5d:62:dc:94:d1:1c:19:ec:23:88: 1b:10:1b:ce:ad:cb:d6:00:72:ef:61:f7:da:f9:cb: 15:2c:3f:95:e4:ab:74:e4:5f:ad:1a:80:98:6b:ac: ed:c4:c7:05:6f:4a:f9:20:11:47:f5:29:38:d6:a8: c5:cb:e7:1f:8a:ba:21:5e:f9:79:88:f8:30:28:4c: 9b:19:ce:8c:2c:3a:4b:7d:51:f2:cc:2a:c9:04:6e: f9:a5:84:7d:53:37:41:41:54:60:54:0d:99:81:01: 11:41:af:d2:4d:cc:64:8b:7f:82:fd:39:70:06:fc: 5c:93:d1:f8:fa:ad:a9:2f:2b:65:43:33:c9:d7:6e: fd:4b:d8:59:d6:96:4f:a6:e6:a1:cc:70:71:7c:e4: ea:5b:d9:79:a6:71:29:48:5c:77:17:d6:37:49:93: b1:61:af:e1:9b:b9:03:5f:42:ab:07:a5:88:61:65: c7:d5:c7:a5:74:03:14:f8:66:df:04:26:2a:7c:d2: 43:cf:d9:d8:03:20:6a:97:51:2b:6d:c5:00:67:01: 55:cc:fa:97:07:e3:0e:6f:6d:53:4f:ee:c6:e1:4e: 5f:09:fe:14:8a:f8:27:b9:07:21:ed:75:a9:b6:1e: c4:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:8C:38:46:6C:5E:A8:D3:7A:35:D3:06:5B:E6:05:45:B7:A5:1A:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/547bc71b-c4e4-4a73-8d12-8d76dde4f0c3/f49e45b5-d1a7-3d4c-93ef-a05d19349d9f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/547bc71b-c4e4-4a73-8d12-8d76dde4f0c3/547bc71b-c4e4-4a73-8d12-8d76dde4f0c3.crl X509v3 Authority Key Identifier: keyid:41:C3:10:8E:BE:65:4A:04:1C:07:E7:96:CC:27:DE:20:FF:A7:E1:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/547bc71b-c4e4-4a73-8d12-8d76dde4f0c3.cer sbgp-ipAddrBlock: critical IPv4: 23.154.108.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:e6:e3:85:94:87:d1:e2:ed:29:53:b2:8b:82:7f:9c:21:b2: 19:5f:ce:b2:e6:87:54:7b:50:08:ac:87:2b:0b:06:6d:8a:67: 6d:74:75:67:62:cf:42:42:89:c8:83:e2:b0:5e:30:44:a2:78: d6:24:3d:8a:8d:a8:b5:38:f1:91:20:77:1b:77:a3:82:ac:f5: 0a:6c:92:a4:d6:e5:64:39:64:97:96:33:63:ff:b1:94:b7:47: 9e:e5:8d:ca:df:72:04:e2:7a:3d:e5:4a:93:d6:4a:49:cc:98: a8:2e:05:2d:69:d5:8d:23:fd:a8:a4:c1:d4:74:e4:9c:29:3d: c4:08:36:0e:fa:72:41:97:83:96:ee:a5:ef:8e:38:0f:1f:79: 66:6d:90:68:fd:69:ea:72:1e:89:55:2d:76:0d:b0:bc:67:81: 0a:e9:8a:e2:eb:c3:4c:bb:fc:60:f6:63:a3:5c:f0:b3:9a:bf: ad:6c:15:94:23:0d:27:18:2c:bd:1e:31:8d:5e:bf:ab:65:62: ee:b3:dd:70:f4:c0:10:a8:22:aa:d8:7e:f2:20:bb:e4:81:a0: b7:8a:82:86:47:48:2c:66:c7:75:b3:8a:e2:8b:c8:9c:fc:70: 1a:23:0f:01:33:82:2e:66:20:a4:93:ca:5e:9e:98:f5:67:59: 21:a9:1b:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jc4kjqSCxV3LmaAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTQ3YmM3MWItYzRlNC00YTczLThkMTItOGQ3NmRkZTRm MGMzMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk Y2E5NDY1MGMtN2Y3ZS00YjYyLTllMDQtMzk4M2MyZWZmZDU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk9pBysonXm88hDWUYv2RUp7u5l1i3JTRHBns I4gbEBvOrcvWAHLvYffa+csVLD+V5Kt05F+tGoCYa6ztxMcFb0r5IBFH9Sk41qjF y+cfirohXvl5iPgwKEybGc6MLDpLfVHyzCrJBG75pYR9UzdBQVRgVA2ZgQERQa/S Tcxki3+C/TlwBvxck9H4+q2pLytlQzPJ1279S9hZ1pZPpuahzHBxfOTqW9l5pnEp SFx3F9Y3SZOxYa/hm7kDX0KrB6WIYWXH1celdAMU+GbfBCYqfNJDz9nYAyBql1Er bcUAZwFVzPqXB+MOb21TT+7G4U5fCf4UivgnuQch7XWpth7EgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL+MOEZsXqjTejXTBlvmBUW3pRqVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi81NDdi YzcxYi1jNGU0LTRhNzMtOGQxMi04ZDc2ZGRlNGYwYzMvZjQ5ZTQ1YjUtZDFhNy0z ZDRjLTkzZWYtYTA1ZDE5MzQ5ZDlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvNTQ3YmM3MWItYzRlNC00YTczLThk MTItOGQ3NmRkZTRmMGMzLzU0N2JjNzFiLWM0ZTQtNGE3My04ZDEyLThkNzZkZGU0 ZjBjMy5jcmwwHwYDVR0jBBgwFoAUQcMQjr5lSgQcB+eWzCfeIP+n4WMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi81NDdiYzcxYi1jNGU0LTRhNzMtOGQxMi04ZDc2 ZGRlNGYwYzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5psMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABzm44WUh9Hi7SlTsouCf5whshlfzrLmh1R7UAishysLBm2KZ210dWdi z0JCiciD4rBeMESieNYkPYqNqLU48ZEgdxt3o4Ks9QpskqTW5WQ5ZJeWM2P/sZS3 R57ljcrfcgTiej3lSpPWSknMmKguBS1p1Y0j/aikwdR05JwpPcQINg76ckGXg5bu pe+OOA8feWZtkGj9aepyHolVLXYNsLxngQrpiuLrw0y7/GD2Y6Nc8LOav61sFZQj DScYLL0eMY1ev6tlYu6z3XD0wBCoIqrYfvIgu+SBoLeKgoZHSCxmx3WziuKLyJz8 cBojDwEzgi5mIKSTyl6emPVnWSGpG/I= -----END CERTIFICATE-----Generated at Wed Oct 21 04:39:35 2026 by rpki-client