$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4a40e9e6-357f-453d-b386-d71fd9d24cf8/fbca48c0-8da1-3871-a0ff-483b77e4c6f1.roa File: fbca48c0-8da1-3871-a0ff-483b77e4c6f1.roa (raw, json) Hash identifier: W7BiGztJCDg/I8idBsAkjlo5+RGyH6vjVmrFgMh4s90= Subject key identifier: 6A:9B:23:AD:3D:A9:14:B7:E9:21:6A:11:EB:AB:8F:D5:47:DF:45:99 Certificate issuer: /CN=4a40e9e6-357f-453d-b386-d71fd9d24cf8 Certificate serial: 010D0C9F4328584F90C579057FB458D9E4ADC900 Authority key identifier: B2:4F:02:F4:AC:5C:BD:40:82:49:CE:9C:30:D0:73:26:8C:94:7F:CA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4a40e9e6-357f-453d-b386-d71fd9d24cf8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4a40e9e6-357f-453d-b386-d71fd9d24cf8/fbca48c0-8da1-3871-a0ff-483b77e4c6f1.roa Signing time: Tue 20 Oct 2026 14:09:44 +0000 ROA not before: Tue 20 Oct 2026 14:09:44 +0000 ROA not after: Mon 18 Jan 2027 15:09:44 +0000 asID: 54004 IP address blocks: 23.149.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4a40e9e6-357f-453d-b386-d71fd9d24cf8/4a40e9e6-357f-453d-b386-d71fd9d24cf8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4a40e9e6-357f-453d-b386-d71fd9d24cf8/4a40e9e6-357f-453d-b386-d71fd9d24cf8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4a40e9e6-357f-453d-b386-d71fd9d24cf8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 28 Oct 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:90:c5:79:05:7f:b4:58:d9:e4:ad:c9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a40e9e6-357f-453d-b386-d71fd9d24cf8 Validity Not Before: Oct 20 14:09:44 2026 GMT Not After : Jan 18 15:09:44 2027 GMT Subject: CN=ed8552bf-458a-4044-bd47-c3affc4d9c9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:3a:9f:ea:c3:d1:cf:40:47:f7:47:cb:ea:d9: 94:7d:8f:b8:77:53:40:10:5e:12:3c:ea:bd:95:06: 14:73:e6:c6:0d:2a:9d:5a:59:74:9c:21:94:6d:a7: 7d:64:c2:3c:55:47:85:a5:9c:81:d6:38:19:3d:d6: 75:62:4f:59:89:b4:75:bc:29:e4:c1:8a:ed:ba:3d: 76:07:ca:1f:55:36:ca:3e:2b:42:7c:0f:ee:09:67: 13:c7:c3:c2:43:a1:f3:d7:4e:81:d7:4b:fa:30:f1: 41:d2:3a:43:93:a1:53:4a:29:0b:30:76:14:29:dd: a6:b7:e4:65:bc:49:d6:17:83:01:45:fa:0b:70:db: 81:a7:d2:be:d3:82:b4:4c:3e:5f:92:0b:de:f8:4d: a0:c4:65:24:31:9f:5c:84:79:d2:ed:a6:0b:85:b5: 5e:38:df:f7:d8:cc:0e:58:a9:fa:2f:7d:c0:23:82: 4a:3b:a0:19:e2:5a:c0:ca:0e:3f:dc:7e:08:37:90: f6:99:4d:d0:53:83:d5:6c:15:26:66:f5:c7:26:77: 76:f0:86:fa:ec:5a:e9:6d:64:60:4d:2d:4c:50:25: e9:3e:59:4e:84:3b:49:dd:e3:7a:a8:76:bc:be:24: 69:08:a0:4e:e0:e6:fe:2e:46:57:7a:73:f7:a0:2e: 64:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:9B:23:AD:3D:A9:14:B7:E9:21:6A:11:EB:AB:8F:D5:47:DF:45:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4a40e9e6-357f-453d-b386-d71fd9d24cf8/fbca48c0-8da1-3871-a0ff-483b77e4c6f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4a40e9e6-357f-453d-b386-d71fd9d24cf8/4a40e9e6-357f-453d-b386-d71fd9d24cf8.crl X509v3 Authority Key Identifier: keyid:B2:4F:02:F4:AC:5C:BD:40:82:49:CE:9C:30:D0:73:26:8C:94:7F:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4a40e9e6-357f-453d-b386-d71fd9d24cf8.cer sbgp-ipAddrBlock: critical IPv4: 23.149.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:e8:c0:a3:ae:98:d8:1e:9e:f0:e9:6d:63:a3:2e:b4:fa:04: 9f:bf:23:b4:84:38:14:46:60:6a:24:e8:84:59:88:c2:39:bd: 21:a3:eb:69:03:29:ea:4f:eb:51:c9:5a:d0:70:57:05:48:09: 6a:25:59:c3:e7:9e:b5:a7:c7:e4:ae:cd:67:00:d1:21:a7:af: 18:fe:a6:af:d3:c0:38:41:9d:55:f3:cd:d2:62:35:30:d8:dd: 07:4e:1a:2c:17:e1:4e:ab:02:15:bc:2e:28:ce:f7:87:1d:52: 07:b9:ba:ec:37:1b:cc:ba:23:8d:e8:7a:20:f3:7e:5b:a7:79: ff:42:e9:a5:60:58:7c:66:ea:f5:70:8b:b2:7f:44:81:c7:9d: 01:88:c5:a1:ed:9e:d4:ad:f9:a3:a7:0b:fe:53:c5:38:53:b2: 1e:9d:dc:1e:7e:1e:28:14:cf:f2:a9:2d:71:37:c6:48:81:1d: 9a:8b:3c:1a:88:7e:1b:02:df:09:a4:b5:ee:97:bd:bd:a6:1e: 81:a8:f0:f5:f8:fe:7b:e3:f6:bd:e4:38:f1:ed:dd:98:d3:15: c6:12:9e:60:a6:6f:cf:8a:50:88:2e:28:5f:b9:6d:c2:0d:da: 58:a4:51:a2:58:6c:60:87:3b:bf:27:da:38:ad:51:d8:ea:47: 57:67:5f:f5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+QxXkFf7RY2eStyQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGE0MGU5ZTYtMzU3Zi00NTNkLWIzODYtZDcxZmQ5ZDI0 Y2Y4MB4XDTI2MTAyMDE0MDk0NFoXDTI3MDExODE1MDk0NFowLzEtMCsGA1UEAxMk ZWQ4NTUyYmYtNDU4YS00MDQ0LWJkNDctYzNhZmZjNGQ5YzliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjTqf6sPRz0BH90fL6tmUfY+4d1NAEF4SPOq9 lQYUc+bGDSqdWll0nCGUbad9ZMI8VUeFpZyB1jgZPdZ1Yk9ZibR1vCnkwYrtuj12 B8ofVTbKPitCfA/uCWcTx8PCQ6Hz106B10v6MPFB0jpDk6FTSikLMHYUKd2mt+Rl vEnWF4MBRfoLcNuBp9K+04K0TD5fkgve+E2gxGUkMZ9chHnS7aYLhbVeON/32MwO WKn6L33AI4JKO6AZ4lrAyg4/3H4IN5D2mU3QU4PVbBUmZvXHJnd28Ib67FrpbWRg TS1MUCXpPllOhDtJ3eN6qHa8viRpCKBO4Ob+LkZXenP3oC5kjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGqbI609qRS36SFqEeurj9VH30WZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YTQw ZTllNi0zNTdmLTQ1M2QtYjM4Ni1kNzFmZDlkMjRjZjgvZmJjYTQ4YzAtOGRhMS0z ODcxLWEwZmYtNDgzYjc3ZTRjNmYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNGE0MGU5ZTYtMzU3Zi00NTNkLWIz ODYtZDcxZmQ5ZDI0Y2Y4LzRhNDBlOWU2LTM1N2YtNDUzZC1iMzg2LWQ3MWZkOWQy NGNmOC5jcmwwHwYDVR0jBBgwFoAUsk8C9KxcvUCCSc6cMNBzJoyUf8owDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC80YTQwZTllNi0zNTdmLTQ1M2QtYjM4Ni1kNzFm ZDlkMjRjZjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5XkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEfowKOumNgenvDpbWOjLrT6BJ+/I7SEOBRGYGok6IRZiMI5vSGj62kD KepP61HJWtBwVwVICWolWcPnnrWnx+SuzWcA0SGnrxj+pq/TwDhBnVXzzdJiNTDY 3QdOGiwX4U6rAhW8LijO94cdUge5uuw3G8y6I43oeiDzflunef9C6aVgWHxm6vVw i7J/RIHHnQGIxaHtntSt+aOnC/5TxThTsh6d3B5+HigUz/KpLXE3xkiBHZqLPBqI fhsC3wmkte6Xvb2mHoGo8PX4/nvj9r3kOPHt3ZjTFcYSnmCmb8+KUIguKF+5bcIN 2likUaJYbGCHO78n2jitUdjqR1dnX/U= -----END CERTIFICATE-----Generated at Tue Oct 27 17:44:05 2026 by rpki-client