$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/813b9a12-50ed-45ab-a965-73c5f633a2d0/bf2c89d1-f9d3-3e3d-8a04-f7fed4c2d3a4.roa File: bf2c89d1-f9d3-3e3d-8a04-f7fed4c2d3a4.roa (raw, json) Hash identifier: oCB084SGGq7nspIJNUKM4BkP/SIHQBg187GYIJocTes= Subject key identifier: 37:80:49:DD:85:58:98:A0:B1:DB:53:B6:18:C5:FB:A2:0A:A1:3E:49 Certificate issuer: /CN=813b9a12-50ed-45ab-a965-73c5f633a2d0 Certificate serial: 010D0C9F4328584F20F7D1634A91822975957F00 Authority key identifier: D3:29:29:B8:D6:6F:58:50:DF:E3:7A:C4:1D:87:EA:63:A8:B0:20:04 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/813b9a12-50ed-45ab-a965-73c5f633a2d0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/813b9a12-50ed-45ab-a965-73c5f633a2d0/bf2c89d1-f9d3-3e3d-8a04-f7fed4c2d3a4.roa Signing time: Thu 10 Sep 2026 13:00:12 +0000 ROA not before: Thu 10 Sep 2026 13:00:12 +0000 ROA not after: Wed 09 Dec 2026 14:00:12 +0000 asID: 214483 IP address blocks: 23.149.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/813b9a12-50ed-45ab-a965-73c5f633a2d0/813b9a12-50ed-45ab-a965-73c5f633a2d0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/813b9a12-50ed-45ab-a965-73c5f633a2d0/813b9a12-50ed-45ab-a965-73c5f633a2d0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/813b9a12-50ed-45ab-a965-73c5f633a2d0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:20:f7:d1:63:4a:91:82:29:75:95:7f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=813b9a12-50ed-45ab-a965-73c5f633a2d0 Validity Not Before: Sep 10 13:00:12 2026 GMT Not After : Dec 9 14:00:12 2026 GMT Subject: CN=cdf4ab92-afc6-4c60-9e5c-a7ebe7e6415c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:40:be:3e:32:16:66:7b:4e:ef:1e:ed:94:18: 38:67:fe:c5:e1:6c:7c:85:a8:cb:70:e9:d5:31:4b: 60:4f:cf:dd:8c:6f:69:79:80:c9:70:30:91:bf:18: 40:97:e2:9f:9a:88:3c:b8:f5:bc:17:3f:13:d3:78: b3:63:53:ac:cd:ce:ce:8a:bb:35:d4:c4:61:64:86: d8:70:29:61:d1:65:4d:a8:1e:4f:0f:4f:2f:6e:0e: 1a:c5:ed:2d:84:84:f3:46:1f:f5:22:df:1a:6e:b9: 62:0c:1e:4f:bc:37:01:52:c6:09:39:60:07:26:fe: 43:37:51:bb:96:69:23:bf:58:fd:03:9f:c5:83:d1: 47:72:19:8c:7a:7e:2c:28:8c:90:72:c2:b9:57:68: 4e:40:ff:e2:0d:45:b7:e5:2b:d8:9f:3a:4c:43:ff: b7:8c:82:18:73:ce:ad:64:56:da:0f:cc:9e:74:56: fa:42:ab:34:29:c1:2a:ae:1d:f1:5c:05:3c:82:a7: 6b:54:b6:03:fc:dd:57:41:7d:fa:a3:ae:6c:ca:f9: bf:08:d5:e8:1d:45:00:e7:2b:7c:52:f5:74:62:2f: b2:4c:32:3a:8d:fc:a8:51:7c:a7:15:56:07:28:e2: cb:a6:f9:02:55:6c:dd:ab:9a:d6:56:8b:bf:37:3d: cb:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:80:49:DD:85:58:98:A0:B1:DB:53:B6:18:C5:FB:A2:0A:A1:3E:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/813b9a12-50ed-45ab-a965-73c5f633a2d0/bf2c89d1-f9d3-3e3d-8a04-f7fed4c2d3a4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/813b9a12-50ed-45ab-a965-73c5f633a2d0/813b9a12-50ed-45ab-a965-73c5f633a2d0.crl X509v3 Authority Key Identifier: keyid:D3:29:29:B8:D6:6F:58:50:DF:E3:7A:C4:1D:87:EA:63:A8:B0:20:04 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/813b9a12-50ed-45ab-a965-73c5f633a2d0.cer sbgp-ipAddrBlock: critical IPv4: 23.149.140.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:2b:96:7b:f2:5e:f1:89:fd:5f:cd:ff:62:64:50:e7:1a:e5: 1d:a4:e3:82:72:f9:f7:59:f2:73:28:de:dd:6a:75:9b:fa:ef: fc:22:fb:39:88:89:29:e9:21:e8:1a:53:26:6e:42:0a:d6:41: 88:3a:21:12:0a:09:61:5d:5c:87:f2:72:10:36:b4:3a:39:c5: 11:0c:c2:3c:15:ca:f6:0b:80:bd:54:02:47:13:3f:12:3d:9f: 85:85:7e:dc:05:87:ab:df:41:23:20:4e:da:b3:e3:85:69:82: 9e:3c:f2:8f:8d:b3:fb:4b:d4:ec:26:80:8a:ad:cf:32:65:f7: 5e:3f:92:11:01:20:39:72:b9:31:63:0c:fa:4f:8b:c3:42:15: 5c:98:59:df:b0:42:71:86:e4:7e:4e:55:95:8b:e7:75:20:41: c4:2f:05:57:25:94:b8:d6:ca:d1:0d:39:df:0e:f4:9f:24:4f: a0:f0:30:c3:18:43:e4:6c:f3:cb:74:76:5c:56:08:13:e3:77: 8a:9d:a5:3e:c2:15:5d:fa:74:9f:54:52:b2:65:8c:1d:dc:e1: 59:a8:01:0b:16:09:f8:88:56:bb:b4:07:50:28:e1:a0:07:3c: 20:0f:de:7e:b3:a7:e8:8c:1e:c6:41:9f:12:9e:1d:6b:c2:aa: 74:96:6a:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8g99FjSpGCKXWVfwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODEzYjlhMTItNTBlZC00NWFiLWE5NjUtNzNjNWY2MzNh MmQwMB4XDTI2MDkxMDEzMDAxMloXDTI2MTIwOTE0MDAxMlowLzEtMCsGA1UEAxMk Y2RmNGFiOTItYWZjNi00YzYwLTllNWMtYTdlYmU3ZTY0MTVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp0C+PjIWZntO7x7tlBg4Z/7F4Wx8hajLcOnV MUtgT8/djG9peYDJcDCRvxhAl+Kfmog8uPW8Fz8T03izY1Oszc7Oirs11MRhZIbY cClh0WVNqB5PD08vbg4axe0thITzRh/1It8abrliDB5PvDcBUsYJOWAHJv5DN1G7 lmkjv1j9A5/Fg9FHchmMen4sKIyQcsK5V2hOQP/iDUW35SvYnzpMQ/+3jIIYc86t ZFbaD8yedFb6Qqs0KcEqrh3xXAU8gqdrVLYD/N1XQX36o65syvm/CNXoHUUA5yt8 UvV0Yi+yTDI6jfyoUXynFVYHKOLLpvkCVWzdq5rWVou/Nz3LNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDeASd2FWJigsdtTthjF+6IKoT5JMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84MTNi OWExMi01MGVkLTQ1YWItYTk2NS03M2M1ZjYzM2EyZDAvYmYyYzg5ZDEtZjlkMy0z ZTNkLThhMDQtZjdmZWQ0YzJkM2E0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvODEzYjlhMTItNTBlZC00NWFiLWE5 NjUtNzNjNWY2MzNhMmQwLzgxM2I5YTEyLTUwZWQtNDVhYi1hOTY1LTczYzVmNjMz YTJkMC5jcmwwHwYDVR0jBBgwFoAU0ykpuNZvWFDf43rEHYfqY6iwIAQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi84MTNiOWExMi01MGVkLTQ1YWItYTk2NS03M2M1 ZjYzM2EyZDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5WMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABkrlnvyXvGJ/V/N/2JkUOca5R2k44Jy+fdZ8nMo3t1qdZv67/wi+zmI iSnpIegaUyZuQgrWQYg6IRIKCWFdXIfychA2tDo5xREMwjwVyvYLgL1UAkcTPxI9 n4WFftwFh6vfQSMgTtqz44Vpgp488o+Ns/tL1OwmgIqtzzJl914/khEBIDlyuTFj DPpPi8NCFVyYWd+wQnGG5H5OVZWL53UgQcQvBVcllLjWytENOd8O9J8kT6DwMMMY Q+Rs88t0dlxWCBPjd4qdpT7CFV36dJ9UUrJljB3c4VmoAQsWCfiIVru0B1Ao4aAH PCAP3n6zp+iMHsZBnxKeHWvCqnSWaiA= -----END CERTIFICATE-----Generated at Tue Sep 22 07:59:46 2026 by rpki-client