$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dd7b2d92-487c-472a-b6c0-a0d9cfc490ba/9e00c1ae-460d-3dcf-bccf-135f8beee00b.roa File: 9e00c1ae-460d-3dcf-bccf-135f8beee00b.roa (raw, json) Hash identifier: fU1dSJMljH9cE3+YvLtlOaoaaFH2zhjGAmc61AOb66c= Subject key identifier: 5D:96:7E:1A:9D:8E:86:09:C7:1B:67:DA:4D:A7:8D:76:59:16:4C:85 Certificate issuer: /CN=dd7b2d92-487c-472a-b6c0-a0d9cfc490ba Certificate serial: 010D0C9F4328584F6C5852F1506449BD88E61800 Authority key identifier: BF:C1:82:C5:D5:C0:98:39:07:1B:F1:6D:3F:F3:9C:AB:D9:A3:F0:6C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dd7b2d92-487c-472a-b6c0-a0d9cfc490ba.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dd7b2d92-487c-472a-b6c0-a0d9cfc490ba/9e00c1ae-460d-3dcf-bccf-135f8beee00b.roa Signing time: Wed 07 Oct 2026 13:00:13 +0000 ROA not before: Wed 07 Oct 2026 13:00:13 +0000 ROA not after: Tue 05 Jan 2027 14:00:13 +0000 asID: 402037 IP address blocks: 23.146.132.0/24 maxlen: 24 2602:f539::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dd7b2d92-487c-472a-b6c0-a0d9cfc490ba/dd7b2d92-487c-472a-b6c0-a0d9cfc490ba.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dd7b2d92-487c-472a-b6c0-a0d9cfc490ba/dd7b2d92-487c-472a-b6c0-a0d9cfc490ba.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dd7b2d92-487c-472a-b6c0-a0d9cfc490ba.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:6c:58:52:f1:50:64:49:bd:88:e6:18:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dd7b2d92-487c-472a-b6c0-a0d9cfc490ba Validity Not Before: Oct 7 13:00:13 2026 GMT Not After : Jan 5 14:00:13 2027 GMT Subject: CN=dc4bc570-9d83-4f96-ae2e-9bc14f97da0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:1f:30:f1:4b:a7:2a:a4:ec:68:b3:d5:3c:82: d2:30:65:86:b3:d9:69:25:cd:2f:b6:93:ab:e2:e8: 72:55:c5:df:8f:68:fa:1d:95:cc:ce:e6:08:1d:b1: 4c:68:96:9c:0a:0f:53:de:ef:a7:6b:cc:f7:b0:ed: 2f:72:0f:cc:64:b2:be:57:9b:1c:18:5c:d0:92:23: 2d:41:9b:de:20:99:27:eb:7f:c8:e3:4c:76:5b:16: fa:df:2b:db:a6:89:ff:9b:5b:22:59:ff:45:0a:c8: fd:ae:87:89:bd:03:36:88:0e:07:2b:a2:a8:33:29: ec:04:b2:9c:77:be:a0:40:40:fc:5c:c8:3d:03:39: c0:01:3d:0d:94:8f:c5:2c:68:18:77:13:db:ee:62: 94:5e:31:34:70:48:da:b3:4f:b8:77:f6:10:4d:fb: 06:e7:8b:68:7b:c1:99:53:31:7b:d6:4e:ca:ad:2b: 19:6f:7b:79:c4:9f:74:00:a8:e0:4c:d9:8d:32:71: a8:eb:50:55:d8:47:4c:66:34:23:0a:4b:26:76:3d: e1:60:47:8d:ec:99:8a:15:da:52:16:f5:35:e8:9e: 03:93:fc:b8:ce:7a:4d:b1:d8:22:4d:63:92:f5:be: 80:60:68:aa:39:73:9d:77:c9:d6:86:1f:16:b9:b6: 84:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:96:7E:1A:9D:8E:86:09:C7:1B:67:DA:4D:A7:8D:76:59:16:4C:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dd7b2d92-487c-472a-b6c0-a0d9cfc490ba/9e00c1ae-460d-3dcf-bccf-135f8beee00b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dd7b2d92-487c-472a-b6c0-a0d9cfc490ba/dd7b2d92-487c-472a-b6c0-a0d9cfc490ba.crl X509v3 Authority Key Identifier: keyid:BF:C1:82:C5:D5:C0:98:39:07:1B:F1:6D:3F:F3:9C:AB:D9:A3:F0:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dd7b2d92-487c-472a-b6c0-a0d9cfc490ba.cer sbgp-ipAddrBlock: critical IPv4: 23.146.132.0/24 IPv6: 2602:f539::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:73:31:fe:92:fd:b8:34:1d:c8:4f:88:32:a7:86:ad:62:c3: 0f:85:33:38:6b:04:30:f3:c1:85:85:34:99:88:2e:ae:32:8a: 19:e6:fe:03:a3:dd:b5:45:f9:2b:85:dd:eb:f8:59:28:86:eb: 1c:fd:6f:26:89:25:a8:8a:41:ce:a0:41:8d:84:eb:93:ee:4f: 40:33:c7:13:d4:cc:fe:fd:9a:6b:a7:a4:d9:ef:24:bc:89:9d: 24:f1:da:0e:ff:5e:91:02:95:cf:d8:16:72:43:7a:0a:61:28: 90:ec:86:31:21:1c:96:88:a0:31:72:1f:91:12:26:9e:f3:90: 9a:11:dd:06:e8:ab:97:24:8d:c1:e5:93:94:d1:6f:4f:23:5d: 8c:a5:b9:bf:57:c5:b8:d3:ce:2f:6a:9f:45:86:1a:16:4d:3d: 54:1d:c1:cb:82:1d:1b:40:9c:61:90:ac:3a:92:6d:5f:ef:6c: 4d:62:38:6b:0a:24:15:cf:68:7f:79:b7:2d:8b:7a:26:66:dc: be:e7:01:89:bb:c6:f9:cf:17:d2:d6:22:76:7c:21:d3:85:d9: a4:72:0c:f9:66:db:a5:d2:fa:8f:32:20:23:7c:7f:1b:8a:0c: 16:c8:ca:ec:6b:ff:4f:f3:c1:6f:f9:95:ed:0b:20:91:08:d0: 40:ff:e3:cb -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE9sWFLxUGRJvYjmGAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGQ3YjJkOTItNDg3Yy00NzJhLWI2YzAtYTBkOWNmYzQ5 MGJhMB4XDTI2MTAwNzEzMDAxM1oXDTI3MDEwNTE0MDAxM1owLzEtMCsGA1UEAxMk ZGM0YmM1NzAtOWQ4My00Zjk2LWFlMmUtOWJjMTRmOTdkYTBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAix8w8UunKqTsaLPVPILSMGWGs9lpJc0vtpOr 4uhyVcXfj2j6HZXMzuYIHbFMaJacCg9T3u+na8z3sO0vcg/MZLK+V5scGFzQkiMt QZveIJkn63/I40x2Wxb63yvbpon/m1siWf9FCsj9roeJvQM2iA4HK6KoMynsBLKc d76gQED8XMg9AznAAT0NlI/FLGgYdxPb7mKUXjE0cEjas0+4d/YQTfsG54toe8GZ UzF71k7KrSsZb3t5xJ90AKjgTNmNMnGo61BV2EdMZjQjCksmdj3hYEeN7JmKFdpS FvU16J4Dk/y4znpNsdgiTWOS9b6AYGiqOXOdd8nWhh8WubaEFwIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFF2WfhqdjoYJxxtn2k2njXZZFkyFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9kZDdi MmQ5Mi00ODdjLTQ3MmEtYjZjMC1hMGQ5Y2ZjNDkwYmEvOWUwMGMxYWUtNDYwZC0z ZGNmLWJjY2YtMTM1ZjhiZWVlMDBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvZGQ3YjJkOTItNDg3Yy00NzJhLWI2 YzAtYTBkOWNmYzQ5MGJhL2RkN2IyZDkyLTQ4N2MtNDcyYS1iNmMwLWEwZDljZmM0 OTBiYS5jcmwwHwYDVR0jBBgwFoAUv8GCxdXAmDkHG/FtP/Ocq9mj8GwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9kZDdiMmQ5Mi00ODdjLTQ3MmEtYjZjMC1hMGQ5 Y2ZjNDkwYmEuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF5KEMA4E AgACMAgDBgAmAvU5ADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQByczH+kv24NB3IT4gyp4atYsMPhTM4awQw 88GFhTSZiC6uMooZ5v4Do921Rfkrhd3r+Fkohusc/W8miSWoikHOoEGNhOuT7k9A M8cT1Mz+/Zprp6TZ7yS8iZ0k8doO/16RApXP2BZyQ3oKYSiQ7IYxIRyWiKAxch+R Eiae85CaEd0G6KuXJI3B5ZOU0W9PI12Mpbm/V8W4084vap9FhhoWTT1UHcHLgh0b QJxhkKw6km1f72xNYjhrCiQVz2h/ebcti3omZty+5wGJu8b5zxfS1iJ2fCHThdmk cgz5Ztul0vqPMiAjfH8bigwWyMrsa/9P88Fv+ZXtCyCRCNBA/+PL -----END CERTIFICATE-----Generated at Tue Oct 13 08:11:23 2026 by rpki-client