$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/89089cbd-0f7a-444f-95e7-38535bb2fc45/9ecb2996-7f58-31dd-9561-7c0f6374da48.roa File: 9ecb2996-7f58-31dd-9561-7c0f6374da48.roa (raw, json) Hash identifier: jOiKTjxSLEVJRGHm8SKAVeJ/zRBF2K17iGuU14UmsFI= Subject key identifier: DF:E0:AE:4F:46:71:33:1B:AA:9E:AD:32:7C:F7:AD:B5:67:42:4D:49 Certificate issuer: /CN=89089cbd-0f7a-444f-95e7-38535bb2fc45 Certificate serial: 010D0C9F4328584FAB287BCC1CCA4C5DD5B96F80 Authority key identifier: 38:2A:5A:14:16:40:82:F8:CA:90:33:DD:00:00:78:7D:21:E0:F1:68 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/89089cbd-0f7a-444f-95e7-38535bb2fc45.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/89089cbd-0f7a-444f-95e7-38535bb2fc45/9ecb2996-7f58-31dd-9561-7c0f6374da48.roa Signing time: Fri 30 Oct 2026 01:00:13 +0000 ROA not before: Fri 30 Oct 2026 01:00:13 +0000 ROA not after: Thu 28 Jan 2027 02:00:13 +0000 asID: 214483 IP address blocks: 23.147.36.0/24 maxlen: 24 2602:f524::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/89089cbd-0f7a-444f-95e7-38535bb2fc45/89089cbd-0f7a-444f-95e7-38535bb2fc45.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/89089cbd-0f7a-444f-95e7-38535bb2fc45/89089cbd-0f7a-444f-95e7-38535bb2fc45.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/89089cbd-0f7a-444f-95e7-38535bb2fc45.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 07 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:ab:28:7b:cc:1c:ca:4c:5d:d5:b9:6f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89089cbd-0f7a-444f-95e7-38535bb2fc45 Validity Not Before: Oct 30 01:00:13 2026 GMT Not After : Jan 28 02:00:13 2027 GMT Subject: CN=281f4ffb-43f0-47d5-abec-ff720202101b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:25:54:df:19:51:07:dd:1e:5c:c9:dc:e9:8a: f2:7a:15:8d:b7:9a:f7:54:8c:32:ce:5c:f8:a9:22: 0d:ea:47:22:64:15:f7:d2:40:f2:b4:05:4a:d2:38: 78:b0:0d:a9:59:b6:21:97:c8:f0:31:41:33:fb:16: 16:e6:c0:9d:25:3e:a4:02:f5:f2:aa:c5:0a:64:de: 8b:eb:2b:2e:79:f4:8c:20:16:e8:85:69:3d:b6:ce: bd:02:ef:45:11:4c:b7:0c:fc:4b:1d:06:2a:b8:22: 48:8e:36:3b:38:6f:a3:44:0b:63:a0:b2:68:a4:9b: b5:f1:25:28:e4:25:54:64:47:ef:42:1f:69:f3:c0: a7:7d:29:b9:09:c2:52:9b:23:14:71:c7:5f:a6:6d: 2b:34:cb:f8:ab:80:4d:fa:4a:02:e8:2b:6f:85:83: cf:9d:d5:b5:a8:25:36:88:42:ec:13:41:a5:ff:bc: f9:14:02:77:8e:8f:74:6b:b8:4f:f2:0b:62:2a:dc: 64:c4:76:04:a3:ea:7e:b2:19:f7:c7:94:1a:76:43: a9:3f:a7:d5:08:8b:eb:e2:32:54:a7:12:22:32:3f: 15:d0:32:ae:08:41:67:47:e5:bf:8e:ba:9f:1d:97: fa:03:0c:7d:34:26:a1:05:12:d0:14:38:4b:bc:2e: f9:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:E0:AE:4F:46:71:33:1B:AA:9E:AD:32:7C:F7:AD:B5:67:42:4D:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/89089cbd-0f7a-444f-95e7-38535bb2fc45/9ecb2996-7f58-31dd-9561-7c0f6374da48.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/89089cbd-0f7a-444f-95e7-38535bb2fc45/89089cbd-0f7a-444f-95e7-38535bb2fc45.crl X509v3 Authority Key Identifier: keyid:38:2A:5A:14:16:40:82:F8:CA:90:33:DD:00:00:78:7D:21:E0:F1:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/89089cbd-0f7a-444f-95e7-38535bb2fc45.cer sbgp-ipAddrBlock: critical IPv4: 23.147.36.0/24 IPv6: 2602:f524::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:18:fe:3f:d5:19:72:5d:1b:52:00:9a:5e:b4:93:9d:54:cd: f7:0c:c8:a1:fb:18:10:e4:2a:60:e0:6a:04:a2:c6:3b:48:9b: 91:98:92:5f:9c:8c:f9:e0:0c:b6:16:55:9f:30:d7:30:06:26: 9a:4d:f1:db:d7:2a:6a:b2:cc:a5:e4:f7:e7:42:e1:bb:94:a6: a7:66:6c:1a:dd:1b:b0:f9:9e:f4:40:d7:10:74:2e:2b:1b:12: 22:9c:c0:bd:c0:a7:f2:d5:d1:20:17:ce:5e:33:f0:ce:8c:94: 93:d2:da:32:3d:87:b4:7e:cd:2c:d6:4f:6e:ad:b8:10:bf:10: d2:18:d4:11:e8:a7:21:e2:9e:da:2b:12:3a:c9:0c:df:89:94: 50:37:57:88:44:d2:e7:ff:51:de:47:fb:e2:ac:f8:bb:b6:d4: a6:c5:3f:ae:81:a6:ba:e6:81:df:e1:48:15:76:eb:6e:45:dc: 13:5f:92:2b:3d:19:cc:6d:89:ba:c7:b1:6f:31:7a:03:76:af: 45:19:d5:c3:df:43:b4:b0:c8:3d:c7:a9:92:bb:00:3d:57:cb: 22:60:e5:87:57:5f:c9:e5:ca:5f:b6:f2:0a:c2:37:e0:45:39: bf:b6:65:c9:ee:5d:fa:6f:3c:d9:92:75:f6:1d:f2:4b:61:4d: 18:01:3c:83 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE+rKHvMHMpMXdW5b4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODkwODljYmQtMGY3YS00NDRmLTk1ZTctMzg1MzViYjJm YzQ1MB4XDTI2MTAzMDAxMDAxM1oXDTI3MDEyODAyMDAxM1owLzEtMCsGA1UEAxMk MjgxZjRmZmItNDNmMC00N2Q1LWFiZWMtZmY3MjAyMDIxMDFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzSVU3xlRB90eXMnc6YryehWNt5r3VIwyzlz4 qSIN6kciZBX30kDytAVK0jh4sA2pWbYhl8jwMUEz+xYW5sCdJT6kAvXyqsUKZN6L 6ysuefSMIBbohWk9ts69Au9FEUy3DPxLHQYquCJIjjY7OG+jRAtjoLJopJu18SUo 5CVUZEfvQh9p88CnfSm5CcJSmyMUccdfpm0rNMv4q4BN+koC6CtvhYPPndW1qCU2 iELsE0Gl/7z5FAJ3jo90a7hP8gtiKtxkxHYEo+p+shn3x5QadkOpP6fVCIvr4jJU pxIiMj8V0DKuCEFnR+W/jrqfHZf6Awx9NCahBRLQFDhLvC75VQIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFN/grk9GcTMbqp6tMnz3rbVnQk1JMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84OTA4 OWNiZC0wZjdhLTQ0NGYtOTVlNy0zODUzNWJiMmZjNDUvOWVjYjI5OTYtN2Y1OC0z MWRkLTk1NjEtN2MwZjYzNzRkYTQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvODkwODljYmQtMGY3YS00NDRmLTk1 ZTctMzg1MzViYjJmYzQ1Lzg5MDg5Y2JkLTBmN2EtNDQ0Zi05NWU3LTM4NTM1YmIy ZmM0NS5jcmwwHwYDVR0jBBgwFoAUOCpaFBZAgvjKkDPdAAB4fSHg8WgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi84OTA4OWNiZC0wZjdhLTQ0NGYtOTVlNy0zODUz NWJiMmZjNDUuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF5MkMA4E AgACMAgDBgAmAvUkADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB7GP4/1RlyXRtSAJpetJOdVM33DMih+xgQ 5Cpg4GoEosY7SJuRmJJfnIz54Ay2FlWfMNcwBiaaTfHb1ypqssyl5PfnQuG7lKan Zmwa3Ruw+Z70QNcQdC4rGxIinMC9wKfy1dEgF85eM/DOjJST0toyPYe0fs0s1k9u rbgQvxDSGNQR6Kch4p7aKxI6yQzfiZRQN1eIRNLn/1HeR/virPi7ttSmxT+ugaa6 5oHf4UgVdutuRdwTX5IrPRnMbYm6x7FvMXoDdq9FGdXD30O0sMg9x6mSuwA9V8si YOWHV1/J5cpftvIKwjfgRTm/tmXJ7l36bzzZknX2HfJLYU0YATyD -----END CERTIFICATE-----Generated at Thu Nov 5 14:03:42 2026 by rpki-client