$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a4f9c6b8-3944-422b-8c9c-2ce45c9d038d/fca9bb57-fa99-3941-a147-25e2f6fc06ce.roa File: fca9bb57-fa99-3941-a147-25e2f6fc06ce.roa (raw, json) Hash identifier: yUuLhfGp8aMIhfNMuRTgd6cKSIsVXVPsKZsMAVE5r7s= Subject key identifier: BF:BE:12:DF:07:AF:72:B8:68:AF:09:13:12:54:A8:2F:FD:1B:0D:45 Certificate issuer: /CN=a4f9c6b8-3944-422b-8c9c-2ce45c9d038d Certificate serial: 010D0C9F4328584EF9E20BE6B07FC3635124DA20 Authority key identifier: 09:46:8A:85:47:EE:D0:06:33:D6:40:02:E9:9A:69:1D:BA:11:51:2D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a4f9c6b8-3944-422b-8c9c-2ce45c9d038d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a4f9c6b8-3944-422b-8c9c-2ce45c9d038d/fca9bb57-fa99-3941-a147-25e2f6fc06ce.roa Signing time: Thu 27 Aug 2026 13:00:12 +0000 ROA not before: Thu 27 Aug 2026 13:00:12 +0000 ROA not after: Wed 25 Nov 2026 14:00:12 +0000 asID: 30381 IP address blocks: 23.148.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a4f9c6b8-3944-422b-8c9c-2ce45c9d038d/a4f9c6b8-3944-422b-8c9c-2ce45c9d038d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a4f9c6b8-3944-422b-8c9c-2ce45c9d038d/a4f9c6b8-3944-422b-8c9c-2ce45c9d038d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a4f9c6b8-3944-422b-8c9c-2ce45c9d038d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Sep 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f9:e2:0b:e6:b0:7f:c3:63:51:24:da:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4f9c6b8-3944-422b-8c9c-2ce45c9d038d Validity Not Before: Aug 27 13:00:12 2026 GMT Not After : Nov 25 14:00:12 2026 GMT Subject: CN=f35d596d-c750-46b8-a410-c5202b70f17d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:82:8e:b3:0d:c5:d1:b9:7b:5e:a5:42:05:55: b7:55:6d:fa:71:8e:26:2b:ff:de:6c:ce:aa:d7:48: 0b:b4:47:e6:86:85:3a:d6:c2:bc:1a:d3:ad:84:33: ad:74:8a:9b:2f:67:a9:fb:bf:70:d2:11:f4:71:86: 64:2f:33:e0:5f:8e:93:1f:63:ed:92:f7:a6:ad:5b: df:62:c6:d3:ce:57:dd:7a:20:5b:9a:5f:59:6c:6e: 46:c0:f5:fa:57:d3:55:2b:c5:66:42:61:79:df:37: 7e:ea:aa:33:22:37:7d:93:83:65:a5:d3:a0:65:a4: b5:3d:c7:a7:1a:01:e2:ab:cb:f0:b7:ac:0b:66:4a: f8:2d:01:18:76:fd:69:90:73:73:11:70:c3:7b:20: 4a:d3:a3:d4:37:e3:e1:d5:de:28:4b:b9:d0:2e:1a: 79:6a:a4:45:a1:55:f7:e1:36:19:ef:10:1c:8f:40: 7d:67:c5:7f:1f:41:c3:c5:13:ce:08:ae:fd:b1:59: 5c:4c:72:b1:a1:c9:84:17:ea:a2:fa:40:d3:37:bf: 6f:ac:ae:9b:4b:d4:d8:f6:e5:ed:7b:f7:85:a6:43: 15:6c:d6:a1:49:ec:2f:52:bf:72:75:9c:18:b7:db: 9b:16:a2:f0:71:10:38:f5:c1:70:43:f7:63:cc:27: 53:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:BE:12:DF:07:AF:72:B8:68:AF:09:13:12:54:A8:2F:FD:1B:0D:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a4f9c6b8-3944-422b-8c9c-2ce45c9d038d/fca9bb57-fa99-3941-a147-25e2f6fc06ce.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a4f9c6b8-3944-422b-8c9c-2ce45c9d038d/a4f9c6b8-3944-422b-8c9c-2ce45c9d038d.crl X509v3 Authority Key Identifier: keyid:09:46:8A:85:47:EE:D0:06:33:D6:40:02:E9:9A:69:1D:BA:11:51:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a4f9c6b8-3944-422b-8c9c-2ce45c9d038d.cer sbgp-ipAddrBlock: critical IPv4: 23.148.236.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:71:1e:93:3e:5e:74:1d:99:37:e8:c8:af:47:9e:19:b7:cd: 0e:a8:61:b1:ef:35:af:0a:08:0c:b8:b9:01:84:45:b2:cf:da: 19:56:45:d8:be:32:3e:30:ba:c5:f4:08:2a:e9:ea:90:18:38: db:28:83:85:19:18:88:80:ae:89:0b:d0:86:e1:8b:e8:be:11: 49:13:ce:c6:00:13:85:d8:41:91:a5:f7:1e:ae:44:a3:f6:d6: 97:78:2f:86:02:8f:19:2c:20:d4:e8:7a:5d:bf:80:59:68:a6: c8:dc:53:dc:ef:91:3c:ab:10:ad:6c:e5:ad:9e:4b:f5:7e:d1: 9e:18:a0:69:e8:3d:31:9a:1c:f7:e6:0a:fb:71:10:a0:69:5b: 6b:d2:17:59:da:96:e9:59:71:53:24:d5:be:dc:d4:dc:6d:57: 31:5c:19:48:c7:e6:7d:3b:2e:bb:10:24:fc:c4:e9:a3:a6:b7: 18:8d:eb:24:dc:eb:5e:32:9f:50:b7:d2:33:99:46:0b:d8:66: 1f:68:d7:25:ac:7c:fd:74:9f:0b:a2:06:ed:7f:68:c7:77:7d: 1e:26:0d:ec:98:98:ed:87:4b:05:54:91:95:62:df:0b:f2:69: af:eb:f6:58:87:ce:4c:ca:65:7a:0f:23:c9:c9:78:ec:c6:fd: 14:01:49:62 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE754gvmsH/DY1Ek2iAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTRmOWM2YjgtMzk0NC00MjJiLThjOWMtMmNlNDVjOWQw MzhkMB4XDTI2MDgyNzEzMDAxMloXDTI2MTEyNTE0MDAxMlowLzEtMCsGA1UEAxMk ZjM1ZDU5NmQtYzc1MC00NmI4LWE0MTAtYzUyMDJiNzBmMTdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlIKOsw3F0bl7XqVCBVW3VW36cY4mK//ebM6q 10gLtEfmhoU61sK8GtOthDOtdIqbL2ep+79w0hH0cYZkLzPgX46TH2PtkvemrVvf YsbTzlfdeiBbml9ZbG5GwPX6V9NVK8VmQmF53zd+6qozIjd9k4NlpdOgZaS1Pcen GgHiq8vwt6wLZkr4LQEYdv1pkHNzEXDDeyBK06PUN+Ph1d4oS7nQLhp5aqRFoVX3 4TYZ7xAcj0B9Z8V/H0HDxRPOCK79sVlcTHKxocmEF+qi+kDTN79vrK6bS9TY9uXt e/eFpkMVbNahSewvUr9ydZwYt9ubFqLwcRA49cFwQ/djzCdT9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL++Et8Hr3K4aK8JExJUqC/9Gw1FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9hNGY5 YzZiOC0zOTQ0LTQyMmItOGM5Yy0yY2U0NWM5ZDAzOGQvZmNhOWJiNTctZmE5OS0z OTQxLWExNDctMjVlMmY2ZmMwNmNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYTRmOWM2YjgtMzk0NC00MjJiLThj OWMtMmNlNDVjOWQwMzhkL2E0ZjljNmI4LTM5NDQtNDIyYi04YzljLTJjZTQ1Yzlk MDM4ZC5jcmwwHwYDVR0jBBgwFoAUCUaKhUfu0AYz1kAC6ZppHboRUS0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9hNGY5YzZiOC0zOTQ0LTQyMmItOGM5Yy0yY2U0 NWM5ZDAzOGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5TsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAExxHpM+XnQdmTfoyK9Hnhm3zQ6oYbHvNa8KCAy4uQGERbLP2hlWRdi+ Mj4wusX0CCrp6pAYONsog4UZGIiArokL0Ibhi+i+EUkTzsYAE4XYQZGl9x6uRKP2 1pd4L4YCjxksINToel2/gFlopsjcU9zvkTyrEK1s5a2eS/V+0Z4YoGnoPTGaHPfm CvtxEKBpW2vSF1nalulZcVMk1b7c1NxtVzFcGUjH5n07LrsQJPzE6aOmtxiN6yTc 614yn1C30jOZRgvYZh9o1yWsfP10nwuiBu1/aMd3fR4mDeyYmO2HSwVUkZVi3wvy aa/r9liHzkzKZXoPI8nJeOzG/RQBSWI= -----END CERTIFICATE-----Generated at Mon Aug 31 12:28:58 2026 by rpki-client