$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8d958c47-c18f-46e2-a3c3-ed4ba29e1c99/dc9340d4-1065-3b08-8328-cfc7a0f59eac.roa File: dc9340d4-1065-3b08-8328-cfc7a0f59eac.roa (raw, json) Hash identifier: XJfl/rrPGUXmI+I/5HuIzdGUEdLVScj+6HktQIfp9Xo= Subject key identifier: 2B:EB:F5:B4:59:72:7F:55:F3:B6:A4:21:1C:F2:D4:D4:E2:18:B4:78 Certificate issuer: /CN=8d958c47-c18f-46e2-a3c3-ed4ba29e1c99 Certificate serial: 010D0C9F4328584EC371C53896391AFDA4836B00 Authority key identifier: F3:52:5D:C8:D4:AD:4B:3D:CE:6F:9A:85:FA:C4:51:53:61:27:FF:24 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8d958c47-c18f-46e2-a3c3-ed4ba29e1c99.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8d958c47-c18f-46e2-a3c3-ed4ba29e1c99/dc9340d4-1065-3b08-8328-cfc7a0f59eac.roa Signing time: Sat 08 Aug 2026 01:00:11 +0000 ROA not before: Sat 08 Aug 2026 01:00:11 +0000 ROA not after: Fri 06 Nov 2026 02:00:11 +0000 asID: 396935 IP address blocks: 23.135.48.0/24 maxlen: 24 2602:fdd9::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8d958c47-c18f-46e2-a3c3-ed4ba29e1c99/8d958c47-c18f-46e2-a3c3-ed4ba29e1c99.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8d958c47-c18f-46e2-a3c3-ed4ba29e1c99/8d958c47-c18f-46e2-a3c3-ed4ba29e1c99.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8d958c47-c18f-46e2-a3c3-ed4ba29e1c99.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:c3:71:c5:38:96:39:1a:fd:a4:83:6b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d958c47-c18f-46e2-a3c3-ed4ba29e1c99 Validity Not Before: Aug 8 01:00:11 2026 GMT Not After : Nov 6 02:00:11 2026 GMT Subject: CN=636b1346-c323-467f-8a79-cf42535e8b2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:b2:8b:51:5d:26:c3:ab:9a:d1:74:60:e5:62: 34:47:02:36:60:1b:a0:32:fd:da:90:2d:41:b1:b3: 62:e9:ab:6c:53:cd:64:d1:22:85:2d:ae:31:28:44: 86:04:b2:83:27:2c:36:bc:c3:23:1a:05:58:48:af: 06:92:b9:bc:64:ec:ac:98:f1:8f:24:04:eb:74:06: 79:77:51:7a:7f:cf:46:38:bc:49:83:e7:48:15:d0: 20:d5:3a:12:b4:8b:08:1e:f0:f0:a5:68:f0:c6:ea: 2c:c2:25:58:40:d3:3e:c1:07:5e:cc:23:50:62:85: fb:7e:6f:06:25:8e:ae:23:6c:30:2a:d5:fc:fd:57: 0a:f6:a8:90:0a:c1:3c:d8:0b:ec:af:d1:2a:13:22: 6d:17:9f:33:8e:71:2b:41:c3:31:28:e0:ec:d5:bd: 42:c1:d8:c8:96:a6:81:2a:61:91:7e:1e:ba:ef:cd: e4:bc:28:24:a2:fd:98:5f:94:9c:3a:c9:11:c2:bf: e0:a9:1c:70:9e:5a:7e:b0:a2:f5:36:25:5a:32:96: be:72:8d:44:a1:04:82:c1:d4:c0:a1:1e:7f:f1:a4: 31:c1:b2:c7:a2:eb:2a:8b:93:97:d2:7c:fa:19:01: f1:59:95:cc:6a:c3:04:fe:97:8f:87:44:1e:89:3e: 86:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:EB:F5:B4:59:72:7F:55:F3:B6:A4:21:1C:F2:D4:D4:E2:18:B4:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8d958c47-c18f-46e2-a3c3-ed4ba29e1c99/dc9340d4-1065-3b08-8328-cfc7a0f59eac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8d958c47-c18f-46e2-a3c3-ed4ba29e1c99/8d958c47-c18f-46e2-a3c3-ed4ba29e1c99.crl X509v3 Authority Key Identifier: keyid:F3:52:5D:C8:D4:AD:4B:3D:CE:6F:9A:85:FA:C4:51:53:61:27:FF:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8d958c47-c18f-46e2-a3c3-ed4ba29e1c99.cer sbgp-ipAddrBlock: critical IPv4: 23.135.48.0/24 IPv6: 2602:fdd9::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:1c:5c:07:ee:c5:09:49:b0:6c:28:af:20:f3:55:c2:d1:69: aa:54:f3:a8:a5:95:d5:ab:93:bd:ac:83:28:f0:e7:0a:a1:34: ef:dd:57:c3:1c:a5:b8:b6:e2:e5:12:2c:ad:5e:fb:61:7a:0e: 67:28:5b:00:b6:38:65:1e:da:11:1e:93:2d:5a:c7:03:03:2e: e1:dc:8c:e2:d9:f9:be:a4:27:e9:0d:38:b5:86:87:be:ab:24: 56:dd:9c:39:ad:7f:87:f1:7b:a0:11:6e:4d:6b:ed:c3:c0:55: 98:f7:fd:3d:7b:54:1a:e9:28:b1:61:75:f0:57:44:1d:7f:5c: 25:cb:90:f3:38:43:80:20:72:50:d6:0d:c4:d2:15:72:58:56: 11:6c:db:0d:cc:81:5a:bd:bc:9d:b8:f7:9a:61:41:77:21:6e: 18:4b:25:ca:b3:63:c3:10:90:a1:a8:01:03:fe:61:e7:c0:66: ba:19:0a:3c:39:aa:ae:21:bd:74:04:f4:84:57:1b:2d:64:88: 52:75:bb:f5:90:20:9b:4c:85:13:45:b3:cf:da:5f:9e:4a:58: a0:6b:50:6f:a5:23:3e:e9:88:b2:fb:62:cc:55:65:ff:42:71: 19:5d:b6:57:61:c2:11:37:2d:a9:d0:16:7d:60:b1:e9:a1:a5: 88:de:40:2a -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE7DccU4ljka/aSDawAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGQ5NThjNDctYzE4Zi00NmUyLWEzYzMtZWQ0YmEyOWUx Yzk5MB4XDTI2MDgwODAxMDAxMVoXDTI2MTEwNjAyMDAxMVowLzEtMCsGA1UEAxMk NjM2YjEzNDYtYzMyMy00NjdmLThhNzktY2Y0MjUzNWU4YjJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAobKLUV0mw6ua0XRg5WI0RwI2YBugMv3akC1B sbNi6atsU81k0SKFLa4xKESGBLKDJyw2vMMjGgVYSK8Gkrm8ZOysmPGPJATrdAZ5 d1F6f89GOLxJg+dIFdAg1ToStIsIHvDwpWjwxuoswiVYQNM+wQdezCNQYoX7fm8G JY6uI2wwKtX8/VcK9qiQCsE82Avsr9EqEyJtF58zjnErQcMxKODs1b1CwdjIlqaB KmGRfh66783kvCgkov2YX5ScOskRwr/gqRxwnlp+sKL1NiVaMpa+co1EoQSCwdTA oR5/8aQxwbLHousqi5OX0nz6GQHxWZXMasME/pePh0QeiT6GLwIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFCvr9bRZcn9V87akIRzy1NTiGLR4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC84ZDk1 OGM0Ny1jMThmLTQ2ZTItYTNjMy1lZDRiYTI5ZTFjOTkvZGM5MzQwZDQtMTA2NS0z YjA4LTgzMjgtY2ZjN2EwZjU5ZWFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOGQ5NThjNDctYzE4Zi00NmUyLWEz YzMtZWQ0YmEyOWUxYzk5LzhkOTU4YzQ3LWMxOGYtNDZlMi1hM2MzLWVkNGJhMjll MWM5OS5jcmwwHwYDVR0jBBgwFoAU81JdyNStSz3Ob5qF+sRRU2En/yQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC84ZDk1OGM0Ny1jMThmLTQ2ZTItYTNjMy1lZDRi YTI5ZTFjOTkuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF4cwMA4E AgACMAgDBgQmAv3ZADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBzHFwH7sUJSbBsKK8g81XC0WmqVPOopZXV q5O9rIMo8OcKoTTv3VfDHKW4tuLlEiytXvtheg5nKFsAtjhlHtoRHpMtWscDAy7h 3Izi2fm+pCfpDTi1hoe+qyRW3Zw5rX+H8XugEW5Na+3DwFWY9/09e1Qa6SixYXXw V0Qdf1wly5DzOEOAIHJQ1g3E0hVyWFYRbNsNzIFavbyduPeaYUF3IW4YSyXKs2PD EJChqAED/mHnwGa6GQo8OaquIb10BPSEVxstZIhSdbv1kCCbTIUTRbPP2l+eSlig a1BvpSM+6Yiy+2LMVWX/QnEZXbZXYcIRNy2p0BZ9YLHpoaWI3kAq -----END CERTIFICATE-----Generated at Tue Sep 22 13:29:56 2026 by rpki-client