$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fbdf9eae-6447-4d3b-9182-7a04ce6f2db9/00dde76e-d01e-31a4-a3b3-7b4024f40125.roa File: 00dde76e-d01e-31a4-a3b3-7b4024f40125.roa (raw, json) Hash identifier: gHCxrr34+O/QvTkXD34vU1BmB5O9FOtlQO575gsiQqE= Subject key identifier: F1:71:B5:77:A8:B7:92:B1:93:B9:F5:72:59:40:6F:D2:55:9B:14:D5 Certificate issuer: /CN=fbdf9eae-6447-4d3b-9182-7a04ce6f2db9 Certificate serial: 010D0C9F4328584F49892367101EA008DB504E40 Authority key identifier: 8D:A0:18:DD:26:B1:2A:09:B4:2C:C7:69:CF:06:B1:46:EF:83:CB:6C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fbdf9eae-6447-4d3b-9182-7a04ce6f2db9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fbdf9eae-6447-4d3b-9182-7a04ce6f2db9/00dde76e-d01e-31a4-a3b3-7b4024f40125.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 401595 IP address blocks: 23.132.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fbdf9eae-6447-4d3b-9182-7a04ce6f2db9/fbdf9eae-6447-4d3b-9182-7a04ce6f2db9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fbdf9eae-6447-4d3b-9182-7a04ce6f2db9/fbdf9eae-6447-4d3b-9182-7a04ce6f2db9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fbdf9eae-6447-4d3b-9182-7a04ce6f2db9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Oct 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:89:23:67:10:1e:a0:08:db:50:4e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fbdf9eae-6447-4d3b-9182-7a04ce6f2db9 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=4afd9aa6-f092-4fe2-aa0c-597b0fbd3bc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:78:dd:86:d7:1e:b5:e4:a8:0e:fe:9c:0a:c0: 2f:8a:48:2e:d1:03:7c:4b:63:9d:f9:2a:d9:9d:ed: a1:23:93:a6:a0:ef:3b:13:e2:99:6a:0d:3a:54:00: 24:19:f7:b8:24:b5:65:30:a2:7d:b2:21:85:af:c2: c0:33:dd:43:cf:0c:8c:a4:ee:c7:ec:97:45:83:97: dc:71:b4:8e:a8:62:8d:95:c1:4f:49:f9:79:45:9d: ef:a4:27:6d:e7:0f:b4:a0:55:b2:a5:29:16:18:c2: 6b:6e:c2:8b:bb:87:63:e1:4b:15:8a:bf:1f:df:87: 4c:73:e3:8f:46:1d:5f:7d:a9:52:4e:85:ce:7c:1a: 00:5b:2e:9f:ec:8d:a0:86:47:ea:3c:b9:19:fa:26: c3:12:52:77:57:c4:72:b9:8f:8d:4c:33:c5:5e:a5: 65:6b:87:dc:43:9d:bb:e1:67:61:76:49:35:75:18: 5f:91:5f:f7:4c:88:23:76:cd:c2:09:4f:67:27:dd: 5a:e4:51:4e:72:06:58:52:37:a9:0b:6b:3e:80:38: 17:1b:0b:f1:5a:3f:48:e5:98:d3:9c:9e:43:54:36: 23:de:d9:c5:37:4c:99:26:52:3b:33:84:aa:71:6f: e4:f8:57:2e:76:fa:47:7a:f9:9c:6c:7c:ba:ed:19: 22:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:71:B5:77:A8:B7:92:B1:93:B9:F5:72:59:40:6F:D2:55:9B:14:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fbdf9eae-6447-4d3b-9182-7a04ce6f2db9/00dde76e-d01e-31a4-a3b3-7b4024f40125.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fbdf9eae-6447-4d3b-9182-7a04ce6f2db9/fbdf9eae-6447-4d3b-9182-7a04ce6f2db9.crl X509v3 Authority Key Identifier: keyid:8D:A0:18:DD:26:B1:2A:09:B4:2C:C7:69:CF:06:B1:46:EF:83:CB:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/fbdf9eae-6447-4d3b-9182-7a04ce6f2db9.cer sbgp-ipAddrBlock: critical IPv4: 23.132.148.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:ab:e8:fd:69:34:3e:52:92:15:74:fc:c1:74:0b:11:c7:3a: bd:00:e1:c2:5e:31:4d:5c:73:cb:f4:be:09:26:a8:2f:2f:60: f0:32:e3:30:d5:94:88:ba:db:c6:59:cc:ca:24:29:d3:96:fe: f6:3c:b1:06:b1:64:0a:83:89:a1:6a:ba:4c:ea:60:9a:f0:10: dd:1f:2c:28:d2:71:f8:41:ef:2a:c6:97:ad:18:63:cd:28:af: d4:96:ca:a8:cd:77:29:97:d2:58:a2:4e:ef:96:ee:cd:d6:60: fa:97:7a:1f:80:1c:b4:f6:f4:e2:2c:f6:39:47:7c:46:ae:cb: 2b:01:ae:bb:82:3b:a9:c1:30:e2:af:90:18:b4:a5:cc:5c:93: 87:30:3e:7a:f2:03:fd:5c:8c:1b:3b:ef:a9:3d:8f:0a:4a:2e: 93:7c:55:89:7b:7c:e8:30:e0:8b:5f:93:c1:6d:41:df:a0:c6: 65:b8:3b:c3:1b:e4:ec:41:64:e7:ab:44:77:02:63:1b:9f:04: b6:57:e7:2b:9e:68:76:4a:5b:66:06:1e:d0:5b:a8:82:58:b7: 42:0a:9d:2f:36:d9:f5:5e:40:bb:fe:cf:ef:ee:c4:8c:b8:81: a2:04:fc:4f:58:3f:3b:4e:e5:4e:ca:e7:0e:f3:1f:a3:2a:9f: 22:86:6b:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JiSNnEB6gCNtQTkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmJkZjllYWUtNjQ0Ny00ZDNiLTkxODItN2EwNGNlNmYy ZGI5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NGFmZDlhYTYtZjA5Mi00ZmUyLWFhMGMtNTk3YjBmYmQzYmMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmnjdhtceteSoDv6cCsAvikgu0QN8S2Od+SrZ ne2hI5OmoO87E+KZag06VAAkGfe4JLVlMKJ9siGFr8LAM91DzwyMpO7H7JdFg5fc cbSOqGKNlcFPSfl5RZ3vpCdt5w+0oFWypSkWGMJrbsKLu4dj4UsVir8f34dMc+OP Rh1ffalSToXOfBoAWy6f7I2ghkfqPLkZ+ibDElJ3V8RyuY+NTDPFXqVla4fcQ527 4Wdhdkk1dRhfkV/3TIgjds3CCU9nJ91a5FFOcgZYUjepC2s+gDgXGwvxWj9I5ZjT nJ5DVDYj3tnFN0yZJlI7M4SqcW/k+FcudvpHevmcbHy67RkirQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPFxtXeot5Kxk7n1cllAb9JVmxTVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mYmRm OWVhZS02NDQ3LTRkM2ItOTE4Mi03YTA0Y2U2ZjJkYjkvMDBkZGU3NmUtZDAxZS0z MWE0LWEzYjMtN2I0MDI0ZjQwMTI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZmJkZjllYWUtNjQ0Ny00ZDNiLTkx ODItN2EwNGNlNmYyZGI5L2ZiZGY5ZWFlLTY0NDctNGQzYi05MTgyLTdhMDRjZTZm MmRiOS5jcmwwHwYDVR0jBBgwFoAUjaAY3SaxKgm0LMdpzwaxRu+Dy2wwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mYmRmOWVhZS02NDQ3LTRkM2ItOTE4Mi03YTA0 Y2U2ZjJkYjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4SUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB+r6P1pND5SkhV0/MF0CxHHOr0A4cJeMU1cc8v0vgkmqC8vYPAy4zDV lIi628ZZzMokKdOW/vY8sQaxZAqDiaFqukzqYJrwEN0fLCjScfhB7yrGl60YY80o r9SWyqjNdymX0liiTu+W7s3WYPqXeh+AHLT29OIs9jlHfEauyysBrruCO6nBMOKv kBi0pcxck4cwPnryA/1cjBs776k9jwpKLpN8VYl7fOgw4Itfk8FtQd+gxmW4O8Mb 5OxBZOerRHcCYxufBLZX5yueaHZKW2YGHtBbqIJYt0IKnS822fVeQLv+z+/uxIy4 gaIE/E9YPztO5U7K5w7zH6MqnyKGa8M= -----END CERTIFICATE-----Generated at Mon Oct 12 03:23:05 2026 by rpki-client