$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dd7b2d92-487c-472a-b6c0-a0d9cfc490ba/9e00c1ae-460d-3dcf-bccf-135f8beee00b.roa File: 9e00c1ae-460d-3dcf-bccf-135f8beee00b.roa (raw, json) Hash identifier: ZaavXZwRmjHwaJPnw8r1bq/iWGQuzNr5idc4rBnyr04= Subject key identifier: 24:12:41:5B:70:0B:36:BC:01:A9:AA:D2:EE:0A:D0:0C:84:0C:17:B2 Certificate issuer: /CN=dd7b2d92-487c-472a-b6c0-a0d9cfc490ba Certificate serial: 010D0C9F4328584ECA6C8AA501C28598EB24BB80 Authority key identifier: BF:C1:82:C5:D5:C0:98:39:07:1B:F1:6D:3F:F3:9C:AB:D9:A3:F0:6C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dd7b2d92-487c-472a-b6c0-a0d9cfc490ba.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dd7b2d92-487c-472a-b6c0-a0d9cfc490ba/9e00c1ae-460d-3dcf-bccf-135f8beee00b.roa Signing time: Mon 10 Aug 2026 13:00:12 +0000 ROA not before: Mon 10 Aug 2026 13:00:12 +0000 ROA not after: Sun 08 Nov 2026 14:00:12 +0000 asID: 402037 IP address blocks: 23.146.132.0/24 maxlen: 24 2602:f539::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dd7b2d92-487c-472a-b6c0-a0d9cfc490ba/dd7b2d92-487c-472a-b6c0-a0d9cfc490ba.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dd7b2d92-487c-472a-b6c0-a0d9cfc490ba/dd7b2d92-487c-472a-b6c0-a0d9cfc490ba.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dd7b2d92-487c-472a-b6c0-a0d9cfc490ba.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ca:6c:8a:a5:01:c2:85:98:eb:24:bb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dd7b2d92-487c-472a-b6c0-a0d9cfc490ba Validity Not Before: Aug 10 13:00:12 2026 GMT Not After : Nov 8 14:00:12 2026 GMT Subject: CN=800688c9-6164-4885-9d07-1b5e68b036e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:b2:de:71:96:42:80:07:78:8b:61:de:db:89: 78:30:8d:3b:b0:18:05:19:a3:a0:be:0f:36:b1:d8: e7:c0:ed:dc:b3:59:69:f2:7f:36:5e:ff:ce:d8:70: f9:7c:f0:b7:3a:55:cb:8e:c2:a3:85:04:1a:12:1c: 2a:70:69:46:4a:51:38:cd:47:f9:19:88:99:b5:2d: e4:78:02:67:e8:b8:6b:d7:79:0e:75:8b:37:5c:80: 76:24:8c:f6:94:ec:c7:39:c7:05:bb:83:e9:69:8a: 56:bc:75:18:f1:7d:d5:3b:8d:d3:92:fc:59:6e:92: 8e:ff:42:50:d4:32:0d:2f:e5:f9:7f:52:0f:c7:b0: c7:4e:1b:9a:af:5f:16:00:2d:da:81:50:2b:34:9f: 63:31:40:9a:69:a3:b7:db:29:5b:52:f5:e9:8f:39: da:2b:20:7c:54:09:28:23:c9:2b:c7:70:60:23:0f: d2:b6:ca:e9:de:f0:a8:2d:b0:e5:39:38:45:06:bd: f0:7b:6e:a9:c5:2d:b1:61:a4:e4:ee:eb:20:1e:c0: 52:dd:eb:7e:ad:56:ff:f8:14:98:e0:92:c0:0c:b2: 63:22:8c:b2:a4:7e:64:44:34:8e:be:25:82:aa:61: 20:b0:1e:5f:25:16:5d:6f:87:7f:6d:d3:20:78:46: 42:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:12:41:5B:70:0B:36:BC:01:A9:AA:D2:EE:0A:D0:0C:84:0C:17:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dd7b2d92-487c-472a-b6c0-a0d9cfc490ba/9e00c1ae-460d-3dcf-bccf-135f8beee00b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dd7b2d92-487c-472a-b6c0-a0d9cfc490ba/dd7b2d92-487c-472a-b6c0-a0d9cfc490ba.crl X509v3 Authority Key Identifier: keyid:BF:C1:82:C5:D5:C0:98:39:07:1B:F1:6D:3F:F3:9C:AB:D9:A3:F0:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/dd7b2d92-487c-472a-b6c0-a0d9cfc490ba.cer sbgp-ipAddrBlock: critical IPv4: 23.146.132.0/24 IPv6: 2602:f539::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:e2:f5:f9:9b:af:66:63:70:29:99:4e:ad:0a:a7:82:69:28: 4e:23:92:89:f4:cb:ae:e6:86:67:0b:33:18:30:29:3d:6f:75: 61:6f:74:97:63:5e:28:82:53:e6:06:d3:e7:7b:e5:e9:0a:8d: b7:07:60:a5:5a:30:36:ae:57:1b:3d:ff:30:a6:4f:b4:2a:34: eb:63:7f:a4:26:89:ff:41:11:47:47:4a:89:91:bc:da:42:07: b9:48:d4:e6:83:0e:d8:9b:fa:77:e0:6d:98:b0:c7:16:cd:7e: d4:ed:30:40:15:aa:06:f6:d3:27:15:61:1c:a4:34:af:71:73: c2:e9:5c:07:20:a6:4b:90:30:9c:1b:cb:49:46:13:24:0e:01: c9:23:6e:8c:15:29:6a:50:4e:40:83:b8:46:a4:96:9c:32:1e: 52:c1:c7:2c:57:77:10:08:b0:54:1a:c0:08:76:56:3f:83:1c: 03:ad:e4:2e:fc:aa:c5:01:6c:64:4b:8a:98:0f:f3:d1:d9:42: fe:f5:78:46:da:74:6d:e5:4f:b3:74:7f:7e:8e:3b:c6:43:5a: 5e:12:06:9c:ec:37:49:ba:e0:e1:9c:70:e9:d3:b5:3d:e7:99: 29:5f:7e:65:73:78:b2:df:8f:48:38:8f:28:8b:c2:a2:bf:25: 2b:12:99:a9 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE7KbIqlAcKFmOsku4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGQ3YjJkOTItNDg3Yy00NzJhLWI2YzAtYTBkOWNmYzQ5 MGJhMB4XDTI2MDgxMDEzMDAxMloXDTI2MTEwODE0MDAxMlowLzEtMCsGA1UEAxMk ODAwNjg4YzktNjE2NC00ODg1LTlkMDctMWI1ZTY4YjAzNmU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmbLecZZCgAd4i2He24l4MI07sBgFGaOgvg82 sdjnwO3cs1lp8n82Xv/O2HD5fPC3OlXLjsKjhQQaEhwqcGlGSlE4zUf5GYiZtS3k eAJn6Lhr13kOdYs3XIB2JIz2lOzHOccFu4PpaYpWvHUY8X3VO43TkvxZbpKO/0JQ 1DINL+X5f1IPx7DHThuar18WAC3agVArNJ9jMUCaaaO32ylbUvXpjznaKyB8VAko I8krx3BgIw/Stsrp3vCoLbDlOThFBr3we26pxS2xYaTk7usgHsBS3et+rVb/+BSY 4JLADLJjIoyypH5kRDSOviWCqmEgsB5fJRZdb4d/bdMgeEZC7wIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFCQSQVtwCza8Aamq0u4K0AyEDBeyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9kZDdi MmQ5Mi00ODdjLTQ3MmEtYjZjMC1hMGQ5Y2ZjNDkwYmEvOWUwMGMxYWUtNDYwZC0z ZGNmLWJjY2YtMTM1ZjhiZWVlMDBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvZGQ3YjJkOTItNDg3Yy00NzJhLWI2 YzAtYTBkOWNmYzQ5MGJhL2RkN2IyZDkyLTQ4N2MtNDcyYS1iNmMwLWEwZDljZmM0 OTBiYS5jcmwwHwYDVR0jBBgwFoAUv8GCxdXAmDkHG/FtP/Ocq9mj8GwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9kZDdiMmQ5Mi00ODdjLTQ3MmEtYjZjMC1hMGQ5 Y2ZjNDkwYmEuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF5KEMA4E AgACMAgDBgAmAvU5ADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAi4vX5m69mY3ApmU6tCqeCaShOI5KJ9Muu 5oZnCzMYMCk9b3Vhb3SXY14oglPmBtPne+XpCo23B2ClWjA2rlcbPf8wpk+0KjTr Y3+kJon/QRFHR0qJkbzaQge5SNTmgw7Ym/p34G2YsMcWzX7U7TBAFaoG9tMnFWEc pDSvcXPC6VwHIKZLkDCcG8tJRhMkDgHJI26MFSlqUE5Ag7hGpJacMh5SwccsV3cQ CLBUGsAIdlY/gxwDreQu/KrFAWxkS4qYD/PR2UL+9XhG2nRt5U+zdH9+jjvGQ1pe Egac7DdJuuDhnHDp07U955kpX35lc3iy349IOI8oi8KivyUrEpmp -----END CERTIFICATE-----Generated at Tue Sep 22 05:36:33 2026 by rpki-client