$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2b0012f3-7f7d-46a7-80c4-e0836ff85f7d/7f43fe88-d0be-3a4c-95ea-e56c7bd3370b.roa File: 7f43fe88-d0be-3a4c-95ea-e56c7bd3370b.roa (raw, json) Hash identifier: dm11AYruJMoFIFvGltLSC6BEzs9zvIpNhH6MiAQr9WA= Subject key identifier: 15:DF:C6:41:55:A9:FA:40:CB:74:79:65:82:C3:DA:C7:3F:97:21:D2 Certificate issuer: /CN=2b0012f3-7f7d-46a7-80c4-e0836ff85f7d Certificate serial: 010D0C9F4328584F979DC1A02D835FD4DA6C7E00 Authority key identifier: 09:0D:93:FD:90:BB:C3:30:A7:31:00:6B:CD:D4:34:7C:9E:1E:98:16 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2b0012f3-7f7d-46a7-80c4-e0836ff85f7d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2b0012f3-7f7d-46a7-80c4-e0836ff85f7d/7f43fe88-d0be-3a4c-95ea-e56c7bd3370b.roa Signing time: Fri 23 Oct 2026 01:00:12 +0000 ROA not before: Fri 23 Oct 2026 01:00:12 +0000 ROA not after: Thu 21 Jan 2027 02:00:12 +0000 asID: 214483 IP address blocks: 23.150.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2b0012f3-7f7d-46a7-80c4-e0836ff85f7d/2b0012f3-7f7d-46a7-80c4-e0836ff85f7d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2b0012f3-7f7d-46a7-80c4-e0836ff85f7d/2b0012f3-7f7d-46a7-80c4-e0836ff85f7d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2b0012f3-7f7d-46a7-80c4-e0836ff85f7d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 28 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:97:9d:c1:a0:2d:83:5f:d4:da:6c:7e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b0012f3-7f7d-46a7-80c4-e0836ff85f7d Validity Not Before: Oct 23 01:00:12 2026 GMT Not After : Jan 21 02:00:12 2027 GMT Subject: CN=89d48418-01a0-4f97-a055-e485420c6d40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:92:b0:e4:2a:b9:13:06:09:e1:29:1f:f9:c7: 60:a4:4b:ad:67:98:7f:d3:60:dd:e5:35:d3:bb:2e: c7:13:94:50:af:1d:af:8a:84:8b:59:b2:b4:da:5c: 33:2d:99:f0:c6:af:5f:43:e1:44:81:5f:f6:15:15: 6a:7c:47:99:c8:a4:34:a4:c5:f9:32:8e:1f:2f:e1: 1d:1a:87:85:17:b5:e1:4f:51:3e:97:d0:ff:2c:55: 2f:6b:09:58:3b:7c:74:2b:e4:dd:5e:b8:aa:80:aa: 5d:1b:f8:2c:53:a4:9a:0e:67:64:d1:ba:1a:4e:74: 10:a8:c7:ce:1d:cb:56:96:e9:d2:43:7a:27:d1:73: 69:92:05:19:58:d7:1b:70:c9:39:86:0f:a0:91:e6: b3:d8:58:f6:bd:e3:e4:a0:c3:c8:9b:f5:a2:1f:39: 99:85:31:91:e9:9e:f5:4e:23:2a:93:01:3f:1d:03: f0:47:a5:26:77:76:67:06:00:00:aa:fd:4a:a0:bb: 94:66:cd:af:83:09:50:a5:d3:82:45:aa:7a:b7:15: e8:24:c0:1b:d3:6c:0d:c4:ee:10:e8:57:3e:65:26: 97:60:cc:aa:9d:99:9f:ea:5b:c1:8f:ac:73:cd:48: 97:f4:2f:d6:3f:03:52:6f:c8:87:72:9a:04:aa:b4: db:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:DF:C6:41:55:A9:FA:40:CB:74:79:65:82:C3:DA:C7:3F:97:21:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2b0012f3-7f7d-46a7-80c4-e0836ff85f7d/7f43fe88-d0be-3a4c-95ea-e56c7bd3370b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2b0012f3-7f7d-46a7-80c4-e0836ff85f7d/2b0012f3-7f7d-46a7-80c4-e0836ff85f7d.crl X509v3 Authority Key Identifier: keyid:09:0D:93:FD:90:BB:C3:30:A7:31:00:6B:CD:D4:34:7C:9E:1E:98:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2b0012f3-7f7d-46a7-80c4-e0836ff85f7d.cer sbgp-ipAddrBlock: critical IPv4: 23.150.28.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:d0:45:0d:75:f0:25:bf:04:38:6a:dd:2c:f9:c2:cc:b9:19: 6a:ff:4b:31:59:3f:ce:ec:ef:50:f0:95:7d:0b:22:21:35:c5: 08:7d:0b:09:10:34:e8:75:cc:23:5d:b9:0f:d9:3c:af:0c:0e: d7:f5:65:f6:b1:41:97:5f:00:6b:c5:31:68:4b:7f:ef:c1:65: 40:7d:d2:44:4f:39:64:74:a8:f2:d4:33:10:69:f9:76:2b:84: ae:ac:43:f8:6e:74:7b:f4:30:98:75:36:ec:bb:e3:b4:ba:34: d0:70:cd:34:2d:73:37:6a:7e:1a:b6:b3:f5:5e:fd:b2:23:a9: 5a:ea:dc:62:56:3f:1a:10:0f:18:c8:00:12:f7:24:bd:31:90: 35:da:bb:a0:3f:e9:0d:46:ef:c3:65:69:21:10:46:23:f7:9c: 24:a8:8f:c0:c1:2c:dc:2f:13:2d:78:e3:99:fb:20:4d:ee:58: c7:94:84:76:5b:9b:f7:73:0d:bc:cc:81:fc:b4:7c:e0:e5:36: 1e:8f:76:5a:e8:47:60:b1:14:7d:f7:8d:ba:aa:6d:40:31:d6: ec:11:9b:ad:1c:b7:70:1c:85:dc:ad:7e:30:c6:b2:51:8c:59: 81:6f:16:89:50:2d:1f:21:82:20:64:2d:dd:93:01:bd:57:e6: 8f:df:5e:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+XncGgLYNf1NpsfgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmIwMDEyZjMtN2Y3ZC00NmE3LTgwYzQtZTA4MzZmZjg1 ZjdkMB4XDTI2MTAyMzAxMDAxMloXDTI3MDEyMTAyMDAxMlowLzEtMCsGA1UEAxMk ODlkNDg0MTgtMDFhMC00Zjk3LWEwNTUtZTQ4NTQyMGM2ZDQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh5Kw5Cq5EwYJ4Skf+cdgpEutZ5h/02Dd5TXT uy7HE5RQrx2vioSLWbK02lwzLZnwxq9fQ+FEgV/2FRVqfEeZyKQ0pMX5Mo4fL+Ed GoeFF7XhT1E+l9D/LFUvawlYO3x0K+TdXriqgKpdG/gsU6SaDmdk0boaTnQQqMfO HctWlunSQ3on0XNpkgUZWNcbcMk5hg+gkeaz2Fj2vePkoMPIm/WiHzmZhTGR6Z71 TiMqkwE/HQPwR6Umd3ZnBgAAqv1KoLuUZs2vgwlQpdOCRap6txXoJMAb02wNxO4Q 6Fc+ZSaXYMyqnZmf6lvBj6xzzUiX9C/WPwNSb8iHcpoEqrTbnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBXfxkFVqfpAy3R5ZYLD2sc/lyHSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8yYjAw MTJmMy03ZjdkLTQ2YTctODBjNC1lMDgzNmZmODVmN2QvN2Y0M2ZlODgtZDBiZS0z YTRjLTk1ZWEtZTU2YzdiZDMzNzBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvMmIwMDEyZjMtN2Y3ZC00NmE3LTgw YzQtZTA4MzZmZjg1ZjdkLzJiMDAxMmYzLTdmN2QtNDZhNy04MGM0LWUwODM2ZmY4 NWY3ZC5jcmwwHwYDVR0jBBgwFoAUCQ2T/ZC7wzCnMQBrzdQ0fJ4emBYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi8yYjAwMTJmMy03ZjdkLTQ2YTctODBjNC1lMDgz NmZmODVmN2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5YcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFHQRQ118CW/BDhq3Sz5wsy5GWr/SzFZP87s71DwlX0LIiE1xQh9CwkQ NOh1zCNduQ/ZPK8MDtf1ZfaxQZdfAGvFMWhLf+/BZUB90kRPOWR0qPLUMxBp+XYr hK6sQ/hudHv0MJh1Nuy747S6NNBwzTQtczdqfhq2s/Ve/bIjqVrq3GJWPxoQDxjI ABL3JL0xkDXau6A/6Q1G78NlaSEQRiP3nCSoj8DBLNwvEy1445n7IE3uWMeUhHZb m/dzDbzMgfy0fODlNh6PdlroR2CxFH33jbqqbUAx1uwRm60ct3AchdytfjDGslGM WYFvFolQLR8hgiBkLd2TAb1X5o/fXvk= -----END CERTIFICATE-----Generated at Mon Oct 26 13:16:18 2026 by rpki-client