$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f8de89ab-ca8c-4ea5-b8b9-b79313f0d48d/bedc2541-9f1d-3098-ad90-8907351a956b.roa File: bedc2541-9f1d-3098-ad90-8907351a956b.roa (raw, json) Hash identifier: oKH9Bnk7u6+Ia4uxKDgEQP/kwgETRqGbbZx6RswMvKU= Subject key identifier: D3:11:7F:79:86:B8:87:7C:7D:C2:25:D0:A8:E5:04:88:8C:86:81:9F Certificate issuer: /CN=f8de89ab-ca8c-4ea5-b8b9-b79313f0d48d Certificate serial: 010D0C9F4328584F497478D6421535CCE233A200 Authority key identifier: 26:96:45:A4:79:6C:86:91:3C:0B:3D:35:A2:3B:A2:35:7F:81:18:C1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f8de89ab-ca8c-4ea5-b8b9-b79313f0d48d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f8de89ab-ca8c-4ea5-b8b9-b79313f0d48d/bedc2541-9f1d-3098-ad90-8907351a956b.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 8095 IP address blocks: 23.154.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f8de89ab-ca8c-4ea5-b8b9-b79313f0d48d/f8de89ab-ca8c-4ea5-b8b9-b79313f0d48d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f8de89ab-ca8c-4ea5-b8b9-b79313f0d48d/f8de89ab-ca8c-4ea5-b8b9-b79313f0d48d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f8de89ab-ca8c-4ea5-b8b9-b79313f0d48d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:78:d6:42:15:35:cc:e2:33:a2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8de89ab-ca8c-4ea5-b8b9-b79313f0d48d Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=754d02de-4791-4943-889d-5f770edd1be9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:29:ce:e5:82:57:f5:03:5a:db:de:6b:c6:41: 9a:9c:19:5c:74:98:f1:a7:68:88:3c:75:6e:ef:3e: dd:67:28:19:68:90:ec:f6:fd:9f:c0:70:7e:f8:73: 6e:5c:59:fb:76:95:92:ea:d4:f6:aa:0e:48:c5:32: 11:2d:ce:6d:f6:90:80:94:11:2f:41:f8:f0:ad:d1: 15:32:64:59:a6:f5:53:cb:1a:98:55:b7:f1:18:44: 76:b9:95:fa:b2:e5:08:d7:54:5e:fd:03:7c:d5:f4: 0f:4e:6f:8e:c2:d5:1b:b0:59:12:f3:d2:2a:19:25: 41:1d:51:9f:7f:e6:b4:b3:c3:13:55:53:fb:5e:e6: 51:bf:dc:18:5f:81:ce:5f:db:79:69:1c:4f:5a:6d: d3:e1:a9:36:23:dc:0a:fe:a2:07:3e:98:b0:a6:6e: 4d:25:80:1c:fe:eb:ce:85:05:65:82:05:92:1a:f3: fc:09:bf:eb:71:3d:99:ab:62:ce:3c:c7:e6:34:49: 7c:a1:be:f0:74:da:27:74:f0:42:09:8e:ed:19:c6: a1:fa:26:e4:a8:3f:4b:70:88:be:f4:87:92:3c:8a: 4e:a5:8c:3c:23:aa:4a:f2:a7:9a:53:59:7d:4c:f9: ff:6c:f5:5f:3b:42:b1:9a:b4:ca:b9:fc:b9:ca:87: 3e:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:11:7F:79:86:B8:87:7C:7D:C2:25:D0:A8:E5:04:88:8C:86:81:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f8de89ab-ca8c-4ea5-b8b9-b79313f0d48d/bedc2541-9f1d-3098-ad90-8907351a956b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f8de89ab-ca8c-4ea5-b8b9-b79313f0d48d/f8de89ab-ca8c-4ea5-b8b9-b79313f0d48d.crl X509v3 Authority Key Identifier: keyid:26:96:45:A4:79:6C:86:91:3C:0B:3D:35:A2:3B:A2:35:7F:81:18:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f8de89ab-ca8c-4ea5-b8b9-b79313f0d48d.cer sbgp-ipAddrBlock: critical IPv4: 23.154.200.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:79:7a:6b:a7:bc:44:61:64:aa:37:6a:7a:61:4c:82:a8:00: 04:37:68:0d:69:81:87:42:13:de:f7:68:56:e8:42:e9:c4:e1: 2c:16:69:cb:9c:0d:d8:56:4b:45:71:1f:d0:c3:bd:e6:21:c9: 87:3d:df:cc:8a:b4:1c:c4:5f:09:aa:a9:dc:90:4e:56:cf:a8: d3:e1:e4:24:c2:ea:b5:0e:64:c4:40:8a:c9:1d:c0:52:57:de: fe:89:f4:19:44:d0:05:ba:d3:3c:6c:d3:fd:bc:11:d8:28:f9: 8c:7f:59:a5:28:c0:4d:e8:75:09:27:ab:80:6f:ba:ba:a8:ab: cb:70:1b:75:49:ae:24:7d:f4:7d:7d:a2:3d:2c:da:de:31:39: b7:16:db:01:90:be:78:00:e8:91:f6:d3:1b:71:c6:ba:53:fe: e4:9f:90:dc:be:ca:38:78:88:1c:bf:86:2c:19:86:15:ba:3a: 46:8c:22:68:2c:94:95:da:7b:93:57:44:32:cb:51:7e:26:85: a5:c9:ca:94:62:36:82:3b:f4:55:43:3a:ce:a5:9f:86:a5:00: a7:10:09:b7:18:6e:71:16:f3:ef:4e:41:7d:76:2d:68:15:cd: 76:aa:33:1a:41:1d:25:57:e4:8b:b0:56:6d:45:73:dc:59:26: 89:23:33:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdHjWQhU1zOIzogAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjhkZTg5YWItY2E4Yy00ZWE1LWI4YjktYjc5MzEzZjBk NDhkMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NzU0ZDAyZGUtNDc5MS00OTQzLTg4OWQtNWY3NzBlZGQxYmU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnynO5YJX9QNa295rxkGanBlcdJjxp2iIPHVu 7z7dZygZaJDs9v2fwHB++HNuXFn7dpWS6tT2qg5IxTIRLc5t9pCAlBEvQfjwrdEV MmRZpvVTyxqYVbfxGER2uZX6suUI11Re/QN81fQPTm+OwtUbsFkS89IqGSVBHVGf f+a0s8MTVVP7XuZRv9wYX4HOX9t5aRxPWm3T4ak2I9wK/qIHPpiwpm5NJYAc/uvO hQVlggWSGvP8Cb/rcT2Zq2LOPMfmNEl8ob7wdNondPBCCY7tGcah+ibkqD9LcIi+ 9IeSPIpOpYw8I6pK8qeaU1l9TPn/bPVfO0KxmrTKufy5yoc+KwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNMRf3mGuId8fcIl0KjlBIiMhoGfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mOGRl ODlhYi1jYThjLTRlYTUtYjhiOS1iNzkzMTNmMGQ0OGQvYmVkYzI1NDEtOWYxZC0z MDk4LWFkOTAtODkwNzM1MWE5NTZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZjhkZTg5YWItY2E4Yy00ZWE1LWI4 YjktYjc5MzEzZjBkNDhkL2Y4ZGU4OWFiLWNhOGMtNGVhNS1iOGI5LWI3OTMxM2Yw ZDQ4ZC5jcmwwHwYDVR0jBBgwFoAUJpZFpHlshpE8Cz01ojuiNX+BGMEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9mOGRlODlhYi1jYThjLTRlYTUtYjhiOS1iNzkz MTNmMGQ0OGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5rIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEZ5emunvERhZKo3anphTIKoAAQ3aA1pgYdCE973aFboQunE4SwWacuc DdhWS0VxH9DDveYhyYc938yKtBzEXwmqqdyQTlbPqNPh5CTC6rUOZMRAiskdwFJX 3v6J9BlE0AW60zxs0/28Edgo+Yx/WaUowE3odQknq4Bvurqoq8twG3VJriR99H19 oj0s2t4xObcW2wGQvngA6JH20xtxxrpT/uSfkNy+yjh4iBy/hiwZhhW6OkaMImgs lJXae5NXRDLLUX4mhaXJypRiNoI79FVDOs6ln4alAKcQCbcYbnEW8+9OQX12LWgV zXaqMxpBHSVX5IuwVm1Fc9xZJokjM0Q= -----END CERTIFICATE-----Generated at Fri Sep 25 05:06:02 2026 by rpki-client