$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a74ec1f-6f26-4309-8e27-41175428f94b/9f862b5b-8cc2-33f8-a1ee-a80b01d5643c.roa File: 9f862b5b-8cc2-33f8-a1ee-a80b01d5643c.roa (raw, json) Hash identifier: 32LEs/NWum+C9m2QLYx/QfiNlShdWAfSs26whUYk+3c= Subject key identifier: 98:72:F5:38:C2:EE:4A:C7:9E:95:79:B0:E4:A8:85:C1:08:21:E9:0C Certificate issuer: /CN=8a74ec1f-6f26-4309-8e27-41175428f94b Certificate serial: 010D0C9F4328584F498C004397CFF9D273110D00 Authority key identifier: B5:57:A5:CA:5F:1A:66:5B:15:B1:DC:A3:0C:95:22:39:DD:49:CA:72 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a74ec1f-6f26-4309-8e27-41175428f94b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a74ec1f-6f26-4309-8e27-41175428f94b/9f862b5b-8cc2-33f8-a1ee-a80b01d5643c.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 152918 IP address blocks: 23.147.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a74ec1f-6f26-4309-8e27-41175428f94b/8a74ec1f-6f26-4309-8e27-41175428f94b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a74ec1f-6f26-4309-8e27-41175428f94b/8a74ec1f-6f26-4309-8e27-41175428f94b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a74ec1f-6f26-4309-8e27-41175428f94b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 05:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:8c:00:43:97:cf:f9:d2:73:11:0d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a74ec1f-6f26-4309-8e27-41175428f94b Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=a9a43d38-099c-408c-afa9-23f242d83d41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:d8:3b:b2:d7:e3:dc:9e:9e:f2:f1:3b:45:04: 72:77:37:6d:44:09:d3:52:19:b3:fe:6f:1d:29:1b: f7:be:fd:fa:4c:63:f4:1e:e3:4f:53:81:cc:45:4a: 89:d1:7e:fd:d4:2c:60:e2:1d:c9:9b:80:7e:08:34: 5c:4c:e9:f6:dc:2e:98:6d:54:09:2f:6e:ad:72:63: 8d:ab:91:64:d4:e8:ce:b4:bd:4f:2f:8b:52:4f:87: 87:4b:a0:69:fa:90:71:55:b3:a4:69:e7:eb:7b:66: 94:3b:d9:92:55:a0:7a:c2:73:fd:cd:3f:ee:2c:9f: 6b:c4:22:aa:b7:fd:fc:51:80:c7:85:06:7f:35:bb: 89:42:b7:c5:bb:57:07:c6:57:ab:59:fd:3e:aa:a1: ce:16:09:a3:96:b5:59:3b:07:be:9a:43:4d:04:87: 82:43:d3:13:16:2f:e6:c5:38:e7:26:5c:76:87:8f: b8:4b:6e:a9:af:34:16:07:9c:da:9f:df:f3:81:08: 4b:25:5b:4b:47:4c:2b:cb:db:f3:6d:e3:f6:93:ff: 4f:b8:56:5a:f4:5c:21:37:a2:3d:2f:b4:20:6a:f8: c8:1e:3f:9e:e2:3e:92:fb:a6:3a:f5:e3:08:11:d8: 67:96:eb:61:01:3e:f0:3a:b3:95:ca:11:fa:41:89: e6:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:72:F5:38:C2:EE:4A:C7:9E:95:79:B0:E4:A8:85:C1:08:21:E9:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a74ec1f-6f26-4309-8e27-41175428f94b/9f862b5b-8cc2-33f8-a1ee-a80b01d5643c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a74ec1f-6f26-4309-8e27-41175428f94b/8a74ec1f-6f26-4309-8e27-41175428f94b.crl X509v3 Authority Key Identifier: keyid:B5:57:A5:CA:5F:1A:66:5B:15:B1:DC:A3:0C:95:22:39:DD:49:CA:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a74ec1f-6f26-4309-8e27-41175428f94b.cer sbgp-ipAddrBlock: critical IPv4: 23.147.68.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:e9:cf:42:2b:ba:c7:04:35:ce:27:ab:cf:28:1c:ab:37:a6: 9d:fb:3f:04:b6:a0:bb:19:c4:8c:f0:01:4c:f3:fe:65:4d:70: 3d:9b:f1:c5:f2:d6:30:17:0f:cd:fe:22:71:7b:53:0b:d2:d5: 86:32:4f:f0:14:96:74:21:b7:03:01:47:f3:72:27:d1:05:e0: ab:3c:06:66:c4:81:1b:5e:eb:4d:a1:e6:cf:88:43:13:d7:8a: 52:05:07:d3:ea:47:45:95:7b:64:28:83:6c:a1:4a:fa:53:97: fb:0d:3a:0a:60:49:7b:c0:ef:92:37:72:18:5b:4d:b9:88:75: 7a:b7:5d:db:eb:31:70:ac:f1:ac:b9:c4:1d:14:a5:66:3c:84: 6b:1d:79:1e:90:52:2b:77:82:7c:47:62:f9:98:dc:23:1b:c8: 0f:b0:c9:21:de:c3:27:93:77:c4:2e:05:56:e9:af:e5:76:2c: b6:f8:2e:42:82:b8:a3:02:f5:85:4a:8a:32:d2:4f:ca:a3:7a: f8:c1:83:d2:12:a3:68:17:ff:6d:3a:16:19:da:1a:be:85:c2: 12:ee:15:ed:16:07:cc:a0:7a:53:f3:d6:20:08:22:c1:6a:f8: 16:6d:78:c1:c7:2d:a9:c2:cc:4b:b3:62:c9:5e:65:87:2b:88: e4:45:39:35 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JjABDl8/50nMRDQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGE3NGVjMWYtNmYyNi00MzA5LThlMjctNDExNzU0Mjhm OTRiMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YTlhNDNkMzgtMDk5Yy00MDhjLWFmYTktMjNmMjQyZDgzZDQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh9g7stfj3J6e8vE7RQRydzdtRAnTUhmz/m8d KRv3vv36TGP0HuNPU4HMRUqJ0X791Cxg4h3Jm4B+CDRcTOn23C6YbVQJL26tcmON q5Fk1OjOtL1PL4tST4eHS6Bp+pBxVbOkaefre2aUO9mSVaB6wnP9zT/uLJ9rxCKq t/38UYDHhQZ/NbuJQrfFu1cHxlerWf0+qqHOFgmjlrVZOwe+mkNNBIeCQ9MTFi/m xTjnJlx2h4+4S26przQWB5zan9/zgQhLJVtLR0wry9vzbeP2k/9PuFZa9FwhN6I9 L7QgavjIHj+e4j6S+6Y69eMIEdhnluthAT7wOrOVyhH6QYnmIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJhy9TjC7krHnpV5sOSohcEIIekMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84YTc0 ZWMxZi02ZjI2LTQzMDktOGUyNy00MTE3NTQyOGY5NGIvOWY4NjJiNWItOGNjMi0z M2Y4LWExZWUtYTgwYjAxZDU2NDNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvOGE3NGVjMWYtNmYyNi00MzA5LThl MjctNDExNzU0MjhmOTRiLzhhNzRlYzFmLTZmMjYtNDMwOS04ZTI3LTQxMTc1NDI4 Zjk0Yi5jcmwwHwYDVR0jBBgwFoAUtVelyl8aZlsVsdyjDJUiOd1JynIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi84YTc0ZWMxZi02ZjI2LTQzMDktOGUyNy00MTE3 NTQyOGY5NGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5NEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAzpz0IruscENc4nq88oHKs3pp37PwS2oLsZxIzwAUzz/mVNcD2b8cXy 1jAXD83+InF7UwvS1YYyT/AUlnQhtwMBR/NyJ9EF4Ks8BmbEgRte602h5s+IQxPX ilIFB9PqR0WVe2Qog2yhSvpTl/sNOgpgSXvA75I3chhbTbmIdXq3XdvrMXCs8ay5 xB0UpWY8hGsdeR6QUit3gnxHYvmY3CMbyA+wySHewyeTd8QuBVbpr+V2LLb4LkKC uKMC9YVKijLST8qjevjBg9ISo2gX/206FhnaGr6FwhLuFe0WB8ygelPz1iAIIsFq +BZteMHHLanCzEuzYsleZYcriORFOTU= -----END CERTIFICATE-----Generated at Mon Oct 12 16:32:43 2026 by rpki-client