$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2fea4f6a-bb4e-46be-b327-330bf8f7e209/47c9278e-dc66-39c2-884a-deec4ee4f615.roa File: 47c9278e-dc66-39c2-884a-deec4ee4f615.roa (raw, json) Hash identifier: dcAlf2osELqEH2B0UenZe0GSR3lcEmLhlA02Q68Cnas= Subject key identifier: AC:17:8D:31:CE:E1:CE:66:C8:1A:1B:66:19:31:44:5D:41:C7:F6:77 Certificate issuer: /CN=2fea4f6a-bb4e-46be-b327-330bf8f7e209 Certificate serial: 010D0C9F4328584F49751F54F7423201A54E8580 Authority key identifier: 46:B8:BD:76:5E:8D:0E:C9:9A:1D:62:0D:0B:0E:2D:E8:BE:4E:D7:11 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2fea4f6a-bb4e-46be-b327-330bf8f7e209.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2fea4f6a-bb4e-46be-b327-330bf8f7e209/47c9278e-dc66-39c2-884a-deec4ee4f615.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 20473 IP address blocks: 23.158.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2fea4f6a-bb4e-46be-b327-330bf8f7e209/2fea4f6a-bb4e-46be-b327-330bf8f7e209.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2fea4f6a-bb4e-46be-b327-330bf8f7e209/2fea4f6a-bb4e-46be-b327-330bf8f7e209.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2fea4f6a-bb4e-46be-b327-330bf8f7e209.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:75:1f:54:f7:42:32:01:a5:4e:85:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2fea4f6a-bb4e-46be-b327-330bf8f7e209 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=8c3f4c8b-9f4c-4258-b2e4-7b4173101295 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:16:79:91:36:52:4c:06:6f:2c:10:22:8d:4c: ed:e1:2c:5b:34:15:9c:f5:68:7d:2c:1c:50:00:48: 0f:0a:49:e8:73:5b:e7:20:b9:b1:fe:b6:b9:5f:af: d7:ad:de:d6:20:c7:2f:a5:37:a1:12:f1:5f:7f:49: 23:b1:43:2c:ae:52:5d:25:ca:05:2d:88:04:e4:c4: 41:80:38:1b:2d:02:0a:e4:12:c2:8c:52:3b:33:7e: 18:68:ca:a6:f2:22:a9:39:64:43:5c:97:61:b7:c4: 80:fb:96:5a:16:f8:99:fd:fa:5f:9e:59:fd:5d:a3: 78:f0:62:a7:c4:88:97:70:e4:a3:bc:2d:39:9c:34: ec:78:f6:59:bd:13:a7:70:16:40:67:f5:de:0d:ea: 46:8b:a2:ff:27:29:7e:0e:c0:13:05:91:76:e0:91: 80:4c:7e:ac:54:ab:ce:cf:13:d2:7d:f0:9d:38:c2: a8:39:67:6d:20:0d:d4:7c:ff:91:65:f5:4f:8a:a1: b2:00:54:87:c9:5f:fc:b6:35:35:0e:9d:6d:0c:f4: 93:56:db:1f:8a:2d:91:79:fd:30:81:52:25:f5:82: 99:ab:56:f0:81:4b:0c:f3:34:15:03:92:71:a4:1e: da:f7:cd:c9:a1:2e:33:9a:1d:d9:4d:a2:d4:eb:5a: d1:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:17:8D:31:CE:E1:CE:66:C8:1A:1B:66:19:31:44:5D:41:C7:F6:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2fea4f6a-bb4e-46be-b327-330bf8f7e209/47c9278e-dc66-39c2-884a-deec4ee4f615.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2fea4f6a-bb4e-46be-b327-330bf8f7e209/2fea4f6a-bb4e-46be-b327-330bf8f7e209.crl X509v3 Authority Key Identifier: keyid:46:B8:BD:76:5E:8D:0E:C9:9A:1D:62:0D:0B:0E:2D:E8:BE:4E:D7:11 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2fea4f6a-bb4e-46be-b327-330bf8f7e209.cer sbgp-ipAddrBlock: critical IPv4: 23.158.88.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:b9:42:08:f0:bd:33:ff:8d:75:f2:aa:d1:a9:81:7a:31:b7: 7b:3a:27:1a:58:1d:6b:d5:f9:0a:91:b7:02:f3:7d:bd:75:ec: 96:4e:23:8d:73:ce:07:39:e8:d3:a6:76:f2:2f:b5:d7:33:2b: 64:aa:91:66:37:aa:5c:81:88:53:5a:13:3b:56:4a:6d:05:70: 10:21:c1:bd:5a:30:32:39:cf:7c:eb:a3:96:83:35:88:55:e1: 85:1c:b1:65:a1:d6:eb:3c:78:cb:f3:6e:78:63:dd:7a:3d:1e: c9:f2:07:62:b4:0e:a1:f8:fb:f0:5f:73:0c:a2:0d:3b:a5:f1: ac:58:87:6b:a2:d3:38:79:77:be:e4:39:fe:d0:c5:da:84:88: 3f:79:48:b1:87:98:e9:15:76:31:de:73:1c:52:b7:19:77:ca: dd:7e:dd:57:0d:cc:da:24:29:45:c5:6a:04:49:e6:f7:ea:a1: 49:b2:2b:c8:e2:2c:53:ac:3b:5a:16:3d:a3:b6:8d:46:3d:3e: 5a:4e:64:8e:7c:ca:ec:19:c6:13:22:20:d3:df:5c:26:d1:a3: 83:03:92:0d:b9:0f:71:46:e7:b4:ef:1f:c8:16:1c:64:06:21: 38:42:66:4e:3c:b8:7f:30:c0:72:39:82:a1:a3:fa:10:65:b8: a9:48:ce:a2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdR9U90IyAaVOhYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmZlYTRmNmEtYmI0ZS00NmJlLWIzMjctMzMwYmY4Zjdl MjA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk OGMzZjRjOGItOWY0Yy00MjU4LWIyZTQtN2I0MTczMTAxMjk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnBZ5kTZSTAZvLBAijUzt4SxbNBWc9Wh9LBxQ AEgPCknoc1vnILmx/ra5X6/Xrd7WIMcvpTehEvFff0kjsUMsrlJdJcoFLYgE5MRB gDgbLQIK5BLCjFI7M34YaMqm8iKpOWRDXJdht8SA+5ZaFviZ/fpfnln9XaN48GKn xIiXcOSjvC05nDTsePZZvROncBZAZ/XeDepGi6L/Jyl+DsATBZF24JGATH6sVKvO zxPSffCdOMKoOWdtIA3UfP+RZfVPiqGyAFSHyV/8tjU1Dp1tDPSTVtsfii2Ref0w gVIl9YKZq1bwgUsM8zQVA5JxpB7a983JoS4zmh3ZTaLU61rRGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKwXjTHO4c5myBobZhkxRF1Bx/Z3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yZmVh NGY2YS1iYjRlLTQ2YmUtYjMyNy0zMzBiZjhmN2UyMDkvNDdjOTI3OGUtZGM2Ni0z OWMyLTg4NGEtZGVlYzRlZTRmNjE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMmZlYTRmNmEtYmI0ZS00NmJlLWIz MjctMzMwYmY4ZjdlMjA5LzJmZWE0ZjZhLWJiNGUtNDZiZS1iMzI3LTMzMGJmOGY3 ZTIwOS5jcmwwHwYDVR0jBBgwFoAURri9dl6NDsmaHWINCw4t6L5O1xEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8yZmVhNGY2YS1iYjRlLTQ2YmUtYjMyNy0zMzBi ZjhmN2UyMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF55YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA65QgjwvTP/jXXyqtGpgXoxt3s6JxpYHWvV+QqRtwLzfb117JZOI41z zgc56NOmdvIvtdczK2SqkWY3qlyBiFNaEztWSm0FcBAhwb1aMDI5z3zro5aDNYhV 4YUcsWWh1us8eMvzbnhj3Xo9HsnyB2K0DqH4+/BfcwyiDTul8axYh2ui0zh5d77k Of7QxdqEiD95SLGHmOkVdjHecxxStxl3yt1+3VcNzNokKUXFagRJ5vfqoUmyK8ji LFOsO1oWPaO2jUY9PlpOZI58yuwZxhMiINPfXCbRo4MDkg25D3FG57TvH8gWHGQG IThCZk48uH8wwHI5gqGj+hBluKlIzqI= -----END CERTIFICATE-----Generated at Sun Sep 27 11:59:46 2026 by rpki-client