$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/fc36d1ae-ceb3-4fab-9df1-071c2c65feec/ada54cf3-8423-3a65-99ba-057950859788.roa File: ada54cf3-8423-3a65-99ba-057950859788.roa (raw, json) Hash identifier: 9kCMHAmgg1/1eJhq5/+OoHmsgXtV1GuOpVCRT8JWaLY= Subject key identifier: 9A:64:0B:E8:29:E8:85:7B:1C:FE:EF:B2:87:BF:C0:B0:D9:40:5F:23 Certificate issuer: /CN=fc36d1ae-ceb3-4fab-9df1-071c2c65feec Certificate serial: 010D0C9F4328584F19FCFC937178C30E2F58E340 Authority key identifier: E1:78:80:9D:DE:AA:90:2F:87:4C:E1:7E:AD:35:49:38:01:CF:68:A9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/fc36d1ae-ceb3-4fab-9df1-071c2c65feec.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/fc36d1ae-ceb3-4fab-9df1-071c2c65feec/ada54cf3-8423-3a65-99ba-057950859788.roa Signing time: Tue 08 Sep 2026 01:00:12 +0000 ROA not before: Tue 08 Sep 2026 01:00:12 +0000 ROA not after: Mon 07 Dec 2026 02:00:12 +0000 asID: 402067 IP address blocks: 23.147.252.0/24 maxlen: 24 2602:f509::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/fc36d1ae-ceb3-4fab-9df1-071c2c65feec/fc36d1ae-ceb3-4fab-9df1-071c2c65feec.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/fc36d1ae-ceb3-4fab-9df1-071c2c65feec/fc36d1ae-ceb3-4fab-9df1-071c2c65feec.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/fc36d1ae-ceb3-4fab-9df1-071c2c65feec.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:19:fc:fc:93:71:78:c3:0e:2f:58:e3:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fc36d1ae-ceb3-4fab-9df1-071c2c65feec Validity Not Before: Sep 8 01:00:12 2026 GMT Not After : Dec 7 02:00:12 2026 GMT Subject: CN=4f3a605a-e552-485d-8ac4-79ddb4d4fe59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:5c:b6:83:d7:9d:e6:59:8f:fa:ea:e1:c3:06: ae:cd:08:05:cb:71:7f:5a:ab:f0:6d:eb:9d:61:3b: c2:5e:fd:f2:e5:9e:d3:c9:5e:be:5d:1e:f4:57:23: 23:d8:57:16:6c:1f:de:c3:c4:4a:74:8f:d6:1f:00: d9:04:96:ad:fe:fa:79:99:84:a6:7b:ef:6c:91:bc: 8b:0e:c5:0a:00:4c:cf:bd:d0:e5:50:a8:fe:0c:ca: bf:32:bd:9e:6c:bd:31:8a:19:c7:76:23:f0:12:76: 1c:6a:7a:47:b8:c3:aa:f8:3b:a8:b9:cc:d0:38:45: bf:6b:0c:2b:ba:95:c7:e9:ed:e0:ef:d6:3c:ff:2a: 21:cb:66:da:ef:33:9f:30:f9:ff:45:e3:52:15:e4: a9:e3:17:15:17:2f:30:fb:cb:e0:1a:d6:bd:72:af: 74:f5:a9:3f:71:9e:d9:f3:92:27:41:f2:e0:ca:32: 73:14:19:52:b9:e9:9a:98:1e:08:7c:94:cc:9c:b7: 10:c0:e8:1f:70:ae:05:6e:8b:fb:34:06:3e:d8:70: 39:6c:c0:6e:2e:69:be:51:b4:3f:7e:7a:61:bf:b4: b1:d5:e7:3b:88:b3:63:0d:19:fd:7c:93:12:17:81: 5e:8c:7b:51:43:32:f8:76:d5:d0:a9:82:8a:fa:bc: f0:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:64:0B:E8:29:E8:85:7B:1C:FE:EF:B2:87:BF:C0:B0:D9:40:5F:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/fc36d1ae-ceb3-4fab-9df1-071c2c65feec/ada54cf3-8423-3a65-99ba-057950859788.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/fc36d1ae-ceb3-4fab-9df1-071c2c65feec/fc36d1ae-ceb3-4fab-9df1-071c2c65feec.crl X509v3 Authority Key Identifier: keyid:E1:78:80:9D:DE:AA:90:2F:87:4C:E1:7E:AD:35:49:38:01:CF:68:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/fc36d1ae-ceb3-4fab-9df1-071c2c65feec.cer sbgp-ipAddrBlock: critical IPv4: 23.147.252.0/24 IPv6: 2602:f509::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:98:a1:9a:79:b5:e3:63:a4:68:fa:e3:43:0c:b2:cb:51:81: 72:37:cc:97:19:ce:f0:82:46:52:3b:10:6f:dd:d4:cc:de:eb: 27:8a:f6:53:aa:31:68:c5:98:ab:8e:12:1a:ec:81:9c:50:0a: 64:e6:7d:70:89:5c:a4:e7:a5:7c:a3:2b:60:13:b6:a3:21:d4: bc:ce:72:a9:04:ba:b0:29:c9:42:a3:7a:35:87:4d:36:f7:48: 89:2a:48:c7:4e:a4:da:f0:49:63:9f:cb:1c:4a:74:af:dd:9e: a9:e3:47:95:0a:74:1f:e6:fa:ea:29:42:d6:e9:24:34:13:87: 20:de:96:7b:42:61:53:cf:a8:79:86:60:c7:96:a7:e9:a3:bc: 42:1c:72:d2:6f:07:ac:0f:3e:8b:3b:e5:36:4d:1d:56:26:c7: c9:de:5f:dc:e6:c8:28:d2:77:8e:d4:5e:53:c4:2e:3e:d4:17: 6e:2a:a1:1e:0f:5a:bb:89:e5:16:93:38:a2:5c:34:90:1f:a7: b8:f6:e5:fb:98:62:95:d5:8d:11:8d:e0:65:fa:36:5d:81:f9: df:0f:3f:c3:f9:37:2b:d4:a2:72:e2:61:93:3d:9b:4e:52:fc: 0b:7c:07:7e:65:1b:f2:c9:7b:f4:f0:55:b2:8a:0f:06:1a:e0: 0d:2b:c3:59 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE8Z/PyTcXjDDi9Y40AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmMzNmQxYWUtY2ViMy00ZmFiLTlkZjEtMDcxYzJjNjVm ZWVjMB4XDTI2MDkwODAxMDAxMloXDTI2MTIwNzAyMDAxMlowLzEtMCsGA1UEAxMk NGYzYTYwNWEtZTU1Mi00ODVkLThhYzQtNzlkZGI0ZDRmZTU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsFy2g9ed5lmP+urhwwauzQgFy3F/Wqvwbeud YTvCXv3y5Z7TyV6+XR70VyMj2FcWbB/ew8RKdI/WHwDZBJat/vp5mYSme+9skbyL DsUKAEzPvdDlUKj+DMq/Mr2ebL0xihnHdiPwEnYcanpHuMOq+DuouczQOEW/awwr upXH6e3g79Y8/yohy2ba7zOfMPn/ReNSFeSp4xcVFy8w+8vgGta9cq909ak/cZ7Z 85InQfLgyjJzFBlSuemamB4IfJTMnLcQwOgfcK4Fbov7NAY+2HA5bMBuLmm+UbQ/ fnphv7Sx1ec7iLNjDRn9fJMSF4FejHtRQzL4dtXQqYKK+rzwGwIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFJpkC+gp6IV7HP7vsoe/wLDZQF8jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9mYzM2 ZDFhZS1jZWIzLTRmYWItOWRmMS0wNzFjMmM2NWZlZWMvYWRhNTRjZjMtODQyMy0z YTY1LTk5YmEtMDU3OTUwODU5Nzg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvZmMzNmQxYWUtY2ViMy00ZmFiLTlk ZjEtMDcxYzJjNjVmZWVjL2ZjMzZkMWFlLWNlYjMtNGZhYi05ZGYxLTA3MWMyYzY1 ZmVlYy5jcmwwHwYDVR0jBBgwFoAU4XiAnd6qkC+HTOF+rTVJOAHPaKkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9mYzM2ZDFhZS1jZWIzLTRmYWItOWRmMS0wNzFj MmM2NWZlZWMuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF5P8MA4E AgACMAgDBgAmAvUJADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB/mKGaebXjY6Ro+uNDDLLLUYFyN8yXGc7w gkZSOxBv3dTM3usnivZTqjFoxZirjhIa7IGcUApk5n1wiVyk56V8oytgE7ajIdS8 znKpBLqwKclCo3o1h00290iJKkjHTqTa8Eljn8scSnSv3Z6p40eVCnQf5vrqKULW 6SQ0E4cg3pZ7QmFTz6h5hmDHlqfpo7xCHHLSbwesDz6LO+U2TR1WJsfJ3l/c5sgo 0neO1F5TxC4+1BduKqEeD1q7ieUWkziiXDSQH6e49uX7mGKV1Y0RjeBl+jZdgfnf Dz/D+Tcr1KJy4mGTPZtOUvwLfAd+ZRvyyXv08FWyig8GGuANK8NZ -----END CERTIFICATE-----Generated at Mon Sep 21 17:57:54 2026 by rpki-client