$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2b0012f3-7f7d-46a7-80c4-e0836ff85f7d/7f43fe88-d0be-3a4c-95ea-e56c7bd3370b.roa File: 7f43fe88-d0be-3a4c-95ea-e56c7bd3370b.roa (raw, json) Hash identifier: 8OxTCdsE7/Oj3OimSVd2Jcf9Gx+jU9dmZccWHPDhCAA= Subject key identifier: 4C:BA:03:70:81:BC:CD:89:66:0E:27:5C:DA:33:D4:EE:DE:5E:36:57 Certificate issuer: /CN=2b0012f3-7f7d-46a7-80c4-e0836ff85f7d Certificate serial: 010D0C9F4328584EF5B20BC027490A4F4DACC680 Authority key identifier: 09:0D:93:FD:90:BB:C3:30:A7:31:00:6B:CD:D4:34:7C:9E:1E:98:16 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2b0012f3-7f7d-46a7-80c4-e0836ff85f7d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2b0012f3-7f7d-46a7-80c4-e0836ff85f7d/7f43fe88-d0be-3a4c-95ea-e56c7bd3370b.roa Signing time: Wed 26 Aug 2026 01:00:12 +0000 ROA not before: Wed 26 Aug 2026 01:00:12 +0000 ROA not after: Tue 24 Nov 2026 02:00:12 +0000 asID: 214483 IP address blocks: 23.150.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2b0012f3-7f7d-46a7-80c4-e0836ff85f7d/2b0012f3-7f7d-46a7-80c4-e0836ff85f7d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2b0012f3-7f7d-46a7-80c4-e0836ff85f7d/2b0012f3-7f7d-46a7-80c4-e0836ff85f7d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2b0012f3-7f7d-46a7-80c4-e0836ff85f7d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f5:b2:0b:c0:27:49:0a:4f:4d:ac:c6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b0012f3-7f7d-46a7-80c4-e0836ff85f7d Validity Not Before: Aug 26 01:00:12 2026 GMT Not After : Nov 24 02:00:12 2026 GMT Subject: CN=ca474deb-0f2f-4014-9517-6a80c2a2cb14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:5c:64:ed:3d:4b:a1:a5:1f:d8:12:d7:8b:57: 33:3f:11:36:31:6e:22:2a:03:e4:b7:a1:7d:80:0e: 31:90:23:7c:8f:69:5e:c5:d5:65:c5:a4:39:67:93: 2d:85:6f:b5:73:6b:01:72:68:30:58:4c:84:7e:b8: 0c:fd:03:cf:36:00:7f:6c:5b:2b:a0:97:e1:cb:74: 51:4c:0d:49:ab:d8:db:74:67:4e:dd:49:cd:a1:6b: 81:1d:b7:82:5b:44:d8:dc:67:b1:d3:ab:03:b7:55: 45:1b:67:9f:b9:b5:65:1e:f7:5d:b3:be:63:ff:85: c4:94:ab:84:70:c7:bc:e8:70:34:96:1d:fd:fd:a2: e7:b3:4e:a0:98:ad:1e:f8:70:69:fe:18:4b:2e:5e: 82:52:c1:a1:9f:3c:14:e7:14:7e:19:aa:0b:d6:49: 1c:68:25:62:b7:24:f0:86:a0:ad:03:1b:b3:50:32: 0a:b0:da:ab:11:9b:59:2d:04:19:5f:10:90:e1:fe: 39:b9:77:80:b3:64:2b:4b:2d:a9:cf:94:63:e5:92: dd:5e:6d:86:5f:56:7a:6f:aa:23:de:90:c5:7e:d5: da:df:6f:13:2e:e3:0e:2f:a2:9b:16:2d:36:94:18: 3d:c7:90:91:e7:5f:f4:cf:fe:fd:e7:66:f6:a1:66: c6:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:BA:03:70:81:BC:CD:89:66:0E:27:5C:DA:33:D4:EE:DE:5E:36:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2b0012f3-7f7d-46a7-80c4-e0836ff85f7d/7f43fe88-d0be-3a4c-95ea-e56c7bd3370b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2b0012f3-7f7d-46a7-80c4-e0836ff85f7d/2b0012f3-7f7d-46a7-80c4-e0836ff85f7d.crl X509v3 Authority Key Identifier: keyid:09:0D:93:FD:90:BB:C3:30:A7:31:00:6B:CD:D4:34:7C:9E:1E:98:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2b0012f3-7f7d-46a7-80c4-e0836ff85f7d.cer sbgp-ipAddrBlock: critical IPv4: 23.150.28.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:07:84:66:fd:a7:9b:2e:0f:02:68:3d:42:66:d2:2a:f6:ff: b1:b5:d4:d0:69:e9:81:6c:70:a2:b5:6b:6f:22:20:88:a5:bb: 83:aa:d2:33:ea:1c:ab:eb:ee:3f:6f:b0:c1:c6:eb:e6:5a:54: 51:3a:55:a1:b5:47:7d:e5:9d:a0:1d:c7:08:74:57:08:4f:78: 73:1c:b9:15:bc:80:d6:37:b4:08:a3:58:ca:89:06:02:b7:6c: 7e:e9:79:c7:ae:97:3e:30:74:16:63:3f:d3:34:48:c0:a7:e2: c4:df:84:68:c5:82:e5:ab:d2:b8:b4:de:b2:88:ae:e4:f7:b4: b6:7b:c0:6e:d3:79:e1:72:60:c6:35:6b:56:7e:cd:1a:75:83: 0f:12:8c:7c:8a:d1:3c:e3:26:74:91:a2:a8:f7:cc:fe:a2:ff: 24:08:5a:8a:be:86:b0:17:a8:69:9f:fa:17:85:46:7d:0d:8d: 39:4e:a7:d1:54:59:e2:8a:6f:90:21:4e:8f:5c:6f:d7:a1:60: 64:d5:a8:15:68:c6:e6:4f:fc:e6:6b:8d:eb:1f:9b:26:49:c0: af:6f:65:13:8e:40:4a:2a:12:ad:33:30:72:ed:1d:b0:c2:86: 29:e2:fa:33:75:b2:fe:a0:78:a5:05:ad:f1:25:07:93:36:a8: 2f:22:be:7a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE71sgvAJ0kKT02sxoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmIwMDEyZjMtN2Y3ZC00NmE3LTgwYzQtZTA4MzZmZjg1 ZjdkMB4XDTI2MDgyNjAxMDAxMloXDTI2MTEyNDAyMDAxMlowLzEtMCsGA1UEAxMk Y2E0NzRkZWItMGYyZi00MDE0LTk1MTctNmE4MGMyYTJjYjE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiFxk7T1LoaUf2BLXi1czPxE2MW4iKgPkt6F9 gA4xkCN8j2lexdVlxaQ5Z5MthW+1c2sBcmgwWEyEfrgM/QPPNgB/bFsroJfhy3RR TA1Jq9jbdGdO3UnNoWuBHbeCW0TY3Gex06sDt1VFG2efubVlHvdds75j/4XElKuE cMe86HA0lh39/aLns06gmK0e+HBp/hhLLl6CUsGhnzwU5xR+GaoL1kkcaCVityTw hqCtAxuzUDIKsNqrEZtZLQQZXxCQ4f45uXeAs2QrSy2pz5Rj5ZLdXm2GX1Z6b6oj 3pDFftXa328TLuMOL6KbFi02lBg9x5CR51/0z/7952b2oWbG3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEy6A3CBvM2JZg4nXNoz1O7eXjZXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8yYjAw MTJmMy03ZjdkLTQ2YTctODBjNC1lMDgzNmZmODVmN2QvN2Y0M2ZlODgtZDBiZS0z YTRjLTk1ZWEtZTU2YzdiZDMzNzBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvMmIwMDEyZjMtN2Y3ZC00NmE3LTgw YzQtZTA4MzZmZjg1ZjdkLzJiMDAxMmYzLTdmN2QtNDZhNy04MGM0LWUwODM2ZmY4 NWY3ZC5jcmwwHwYDVR0jBBgwFoAUCQ2T/ZC7wzCnMQBrzdQ0fJ4emBYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi8yYjAwMTJmMy03ZjdkLTQ2YTctODBjNC1lMDgz NmZmODVmN2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5YcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADsHhGb9p5suDwJoPUJm0ir2/7G11NBp6YFscKK1a28iIIilu4Oq0jPq HKvr7j9vsMHG6+ZaVFE6VaG1R33lnaAdxwh0VwhPeHMcuRW8gNY3tAijWMqJBgK3 bH7peceulz4wdBZjP9M0SMCn4sTfhGjFguWr0ri03rKIruT3tLZ7wG7TeeFyYMY1 a1Z+zRp1gw8SjHyK0TzjJnSRoqj3zP6i/yQIWoq+hrAXqGmf+heFRn0NjTlOp9FU WeKKb5AhTo9cb9ehYGTVqBVoxuZP/OZrjesfmyZJwK9vZROOQEoqEq0zMHLtHbDC hini+jN1sv6geKUFrfElB5M2qC8ivno= -----END CERTIFICATE-----Generated at Fri Sep 11 04:14:38 2026 by rpki-client