$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/caf0457f-9c91-4448-9ab1-89863b146bb7/398f8cb6-79b9-313b-b0c2-51e40aac25a3.roa File: 398f8cb6-79b9-313b-b0c2-51e40aac25a3.roa (raw, json) Hash identifier: EOAg1CfnOAhn+fF+d+zzT3WU0mSU6WZ/8Wz/2OHvwUE= Subject key identifier: 65:B4:2F:10:81:DE:79:68:64:C8:AA:10:21:58:DB:08:41:B5:18:01 Certificate issuer: /CN=caf0457f-9c91-4448-9ab1-89863b146bb7 Certificate serial: 010D0C9F4328584ED861D229338C74F3E84FAB80 Authority key identifier: 40:FB:62:A2:2E:69:3F:64:EC:39:85:C5:28:A7:0D:2B:64:CB:0E:08 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/caf0457f-9c91-4448-9ab1-89863b146bb7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/caf0457f-9c91-4448-9ab1-89863b146bb7/398f8cb6-79b9-313b-b0c2-51e40aac25a3.roa Signing time: Sat 15 Aug 2026 13:00:11 +0000 ROA not before: Sat 15 Aug 2026 13:00:11 +0000 ROA not after: Fri 13 Nov 2026 14:00:11 +0000 asID: 402540 IP address blocks: 23.158.148.0/24 maxlen: 24 2602:f3b4::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/caf0457f-9c91-4448-9ab1-89863b146bb7/caf0457f-9c91-4448-9ab1-89863b146bb7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/caf0457f-9c91-4448-9ab1-89863b146bb7/caf0457f-9c91-4448-9ab1-89863b146bb7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/caf0457f-9c91-4448-9ab1-89863b146bb7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d8:61:d2:29:33:8c:74:f3:e8:4f:ab:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=caf0457f-9c91-4448-9ab1-89863b146bb7 Validity Not Before: Aug 15 13:00:11 2026 GMT Not After : Nov 13 14:00:11 2026 GMT Subject: CN=4e3ebf55-af9e-4f22-ae8b-08260fa4f062 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:14:82:bf:b0:21:0a:f3:29:12:c7:21:1c:e3: 68:e1:2d:30:f7:56:39:ff:ba:16:2b:b1:ac:8f:a9: e9:5e:e6:f2:3c:23:e2:c9:e8:ef:84:52:c6:19:82: 30:d8:31:99:2f:ea:e5:84:03:13:af:e9:07:de:13: 38:10:17:d9:39:bd:f9:50:8b:60:3c:b7:0c:b7:30: 43:2d:a6:d7:ff:6f:fa:df:2d:c0:32:4b:1a:29:11: 0a:50:5e:21:74:29:9d:3f:fb:1c:ad:f6:9d:a1:dd: 6b:4f:cb:b0:3c:91:48:76:18:80:6f:dc:80:23:94: f8:8f:28:09:59:14:12:70:11:fa:61:87:00:06:10: 6b:fe:63:a3:d5:19:6e:b3:35:9c:91:96:b3:a4:c5: 5f:a6:99:c4:21:0c:07:5b:be:09:9c:e8:83:c2:3a: e7:0c:f6:8e:1c:40:9c:ba:f3:3e:7f:92:a1:68:3d: f4:fa:f1:c5:08:92:2d:dc:f5:93:9d:25:c0:18:aa: f5:b9:91:4d:33:24:02:7b:64:0a:2a:08:60:f2:2b: d7:60:99:e2:98:07:b0:35:59:95:5e:e9:87:03:9d: 2b:0c:9c:c8:42:08:73:9b:56:80:8e:b7:9e:1b:3d: e4:44:c3:03:6b:95:e0:89:c7:fa:7f:53:27:32:d5: 22:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:B4:2F:10:81:DE:79:68:64:C8:AA:10:21:58:DB:08:41:B5:18:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/caf0457f-9c91-4448-9ab1-89863b146bb7/398f8cb6-79b9-313b-b0c2-51e40aac25a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/caf0457f-9c91-4448-9ab1-89863b146bb7/caf0457f-9c91-4448-9ab1-89863b146bb7.crl X509v3 Authority Key Identifier: keyid:40:FB:62:A2:2E:69:3F:64:EC:39:85:C5:28:A7:0D:2B:64:CB:0E:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/caf0457f-9c91-4448-9ab1-89863b146bb7.cer sbgp-ipAddrBlock: critical IPv4: 23.158.148.0/24 IPv6: 2602:f3b4::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:01:d9:8c:38:23:87:19:33:b0:10:bf:2a:0a:24:76:04:36: 78:68:28:6f:9d:11:8f:66:a5:2a:57:25:45:99:0c:c3:d8:f9: 57:ba:38:93:8d:cd:56:c5:19:d8:59:4e:18:01:4a:1c:f5:cf: df:03:fd:2e:58:dc:27:ff:a1:d0:29:e5:ae:29:60:ff:2f:68: 6b:d1:c8:8f:83:dd:9c:05:54:4f:16:b9:43:fb:9a:78:f2:e9: f0:dd:b8:e0:02:9d:de:9f:00:b9:6b:53:33:b2:08:6a:74:b1: dc:62:ed:95:3b:9e:40:ea:55:a5:89:e4:fd:1b:51:63:3f:f2: 85:3e:da:a9:f1:6e:1d:8d:28:dd:20:27:c5:33:c3:a7:95:2d: a7:df:08:5e:5f:33:f3:df:60:92:82:1b:4d:14:24:be:5f:00: c9:eb:72:1d:2c:d6:43:cb:3b:b3:3e:64:dd:81:e5:dd:75:cd: b7:af:5c:21:1c:87:18:99:ac:2d:fa:e9:ae:62:06:57:e9:da: 0e:c2:92:9b:15:9b:2d:82:49:2e:7d:c9:62:9d:1f:6d:14:b8: 35:01:4f:3c:67:56:f8:f7:20:1f:f3:4c:54:92:4c:bc:82:7e: df:de:d3:30:75:9e:f9:db:91:2a:0d:b6:37:b2:90:03:1c:44: 23:bf:69:21 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE7YYdIpM4x08+hPq4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2FmMDQ1N2YtOWM5MS00NDQ4LTlhYjEtODk4NjNiMTQ2 YmI3MB4XDTI2MDgxNTEzMDAxMVoXDTI2MTExMzE0MDAxMVowLzEtMCsGA1UEAxMk NGUzZWJmNTUtYWY5ZS00ZjIyLWFlOGItMDgyNjBmYTRmMDYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjxSCv7AhCvMpEschHONo4S0w91Y5/7oWK7Gs j6npXubyPCPiyejvhFLGGYIw2DGZL+rlhAMTr+kH3hM4EBfZOb35UItgPLcMtzBD LabX/2/63y3AMksaKREKUF4hdCmdP/scrfadod1rT8uwPJFIdhiAb9yAI5T4jygJ WRQScBH6YYcABhBr/mOj1RluszWckZazpMVfppnEIQwHW74JnOiDwjrnDPaOHECc uvM+f5KhaD30+vHFCJIt3PWTnSXAGKr1uZFNMyQCe2QKKghg8ivXYJnimAewNVmV XumHA50rDJzIQghzm1aAjreeGz3kRMMDa5Xgicf6f1MnMtUieQIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFGW0LxCB3nloZMiqECFY2whBtRgBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9jYWYw NDU3Zi05YzkxLTQ0NDgtOWFiMS04OTg2M2IxNDZiYjcvMzk4ZjhjYjYtNzliOS0z MTNiLWIwYzItNTFlNDBhYWMyNWEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvY2FmMDQ1N2YtOWM5MS00NDQ4LTlh YjEtODk4NjNiMTQ2YmI3L2NhZjA0NTdmLTljOTEtNDQ0OC05YWIxLTg5ODYzYjE0 NmJiNy5jcmwwHwYDVR0jBBgwFoAUQPtioi5pP2TsOYXFKKcNK2TLDggwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi9jYWYwNDU3Zi05YzkxLTQ0NDgtOWFiMS04OTg2 M2IxNDZiYjcuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF56UMA4E AgACMAgDBgAmAvO0ADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCBAdmMOCOHGTOwEL8qCiR2BDZ4aChvnRGP ZqUqVyVFmQzD2PlXujiTjc1WxRnYWU4YAUoc9c/fA/0uWNwn/6HQKeWuKWD/L2hr 0ciPg92cBVRPFrlD+5p48unw3bjgAp3enwC5a1MzsghqdLHcYu2VO55A6lWlieT9 G1FjP/KFPtqp8W4djSjdICfFM8OnlS2n3wheXzPz32CSghtNFCS+XwDJ63IdLNZD yzuzPmTdgeXddc23r1whHIcYmawt+umuYgZX6doOwpKbFZstgkkufclinR9tFLg1 AU88Z1b49yAf80xUkky8gn7f3tMwdZ7525EqDbY3spADHEQjv2kh -----END CERTIFICATE-----Generated at Tue Sep 22 22:44:22 2026 by rpki-client