$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/caf0457f-9c91-4448-9ab1-89863b146bb7/c3758790-f14f-3adb-ac49-9e07dcefddac.roa File: c3758790-f14f-3adb-ac49-9e07dcefddac.roa (raw, json) Hash identifier: dyx4+rsaq2aKrTAtwxl31sfgZfPvdzRhpC8pvoIt+Hs= Subject key identifier: A2:DD:CB:E4:78:89:07:A4:7D:54:91:05:40:F1:CE:AE:0E:A7:74:B2 Certificate issuer: /CN=caf0457f-9c91-4448-9ab1-89863b146bb7 Certificate serial: 010D0C9F4328584F4972A6356298C04CC9AF7B60 Authority key identifier: 40:FB:62:A2:2E:69:3F:64:EC:39:85:C5:28:A7:0D:2B:64:CB:0E:08 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/caf0457f-9c91-4448-9ab1-89863b146bb7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/caf0457f-9c91-4448-9ab1-89863b146bb7/c3758790-f14f-3adb-ac49-9e07dcefddac.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 14618 IP address blocks: 23.158.148.0/24 maxlen: 24 2602:f3b4::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/caf0457f-9c91-4448-9ab1-89863b146bb7/caf0457f-9c91-4448-9ab1-89863b146bb7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/caf0457f-9c91-4448-9ab1-89863b146bb7/caf0457f-9c91-4448-9ab1-89863b146bb7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/caf0457f-9c91-4448-9ab1-89863b146bb7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 16 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:72:a6:35:62:98:c0:4c:c9:af:7b:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=caf0457f-9c91-4448-9ab1-89863b146bb7 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=6c8808e3-278e-45f5-bb92-fb4918deb2e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:fb:9a:81:b8:a6:2f:21:0e:e4:00:10:4a:62: 82:33:75:8a:35:d9:59:54:07:83:3a:04:4f:a5:3a: d2:cc:26:c6:ac:18:40:8e:fd:b2:65:f5:ff:22:be: 4d:e6:d4:9c:13:2e:76:a5:f0:dd:ee:a6:44:fc:68: 94:b3:f2:d3:bf:2f:10:be:46:fa:b5:96:ad:4c:a6: b8:47:e5:4c:aa:ea:dc:ca:df:b9:45:49:0c:3f:77: 77:dd:0d:26:c8:ef:6d:4a:b7:fc:99:97:36:4c:0d: 57:61:71:c0:81:17:6a:a8:aa:38:55:c9:af:a5:9f: 79:d0:12:55:c2:5f:1e:57:88:fd:c5:e0:15:02:4a: f8:de:cf:85:b5:f7:4e:e3:42:d7:de:f9:f3:1d:b0: 75:16:0d:51:ef:2f:a2:af:39:01:89:fc:09:65:a9: 58:33:15:7d:0c:67:79:4b:25:7d:c8:9d:92:19:b4: 44:77:c6:2e:27:48:92:99:53:ee:22:67:7e:a0:26: 8d:26:62:de:e4:d4:9d:b8:a8:7f:aa:17:49:28:8d: 45:80:5c:e7:0e:03:9b:e6:74:d8:62:ae:c2:7c:77: 62:f3:04:91:f6:ea:e7:f2:73:47:19:42:fe:84:5c: a9:a3:e5:31:fc:38:71:a5:fb:42:59:4c:07:c3:ab: 12:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:DD:CB:E4:78:89:07:A4:7D:54:91:05:40:F1:CE:AE:0E:A7:74:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/caf0457f-9c91-4448-9ab1-89863b146bb7/c3758790-f14f-3adb-ac49-9e07dcefddac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/caf0457f-9c91-4448-9ab1-89863b146bb7/caf0457f-9c91-4448-9ab1-89863b146bb7.crl X509v3 Authority Key Identifier: keyid:40:FB:62:A2:2E:69:3F:64:EC:39:85:C5:28:A7:0D:2B:64:CB:0E:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/caf0457f-9c91-4448-9ab1-89863b146bb7.cer sbgp-ipAddrBlock: critical IPv4: 23.158.148.0/24 IPv6: 2602:f3b4::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:ac:e6:4c:7a:55:68:46:e6:4f:f8:4e:fc:e1:af:e1:16:b0: 48:65:c4:2b:dc:e0:c1:71:81:28:57:c4:80:f8:69:a3:53:49: 86:c4:1b:1b:46:5d:c8:60:bd:b2:92:77:47:3c:34:92:01:7e: 19:e5:59:21:57:21:23:c2:ed:f8:bc:01:8a:df:1a:c2:8f:99: 12:be:71:80:15:a9:9e:eb:85:ad:b9:3a:3b:4c:bd:55:86:25: 09:a3:e7:5c:47:84:a3:8f:ab:7a:9e:2d:1e:13:33:d0:69:b2: b7:05:73:7f:f5:cd:3f:fa:a8:d7:11:49:b8:e4:71:0e:60:63: 21:44:c1:14:a5:92:f0:14:e1:d5:5e:a6:69:34:bc:5d:3d:70: 09:6c:53:ae:2a:ed:55:97:a3:2b:16:f2:02:b0:96:49:3e:f6: 20:df:29:09:c6:f9:71:b8:42:fe:b4:dc:43:af:66:06:af:d0: 5d:39:64:0b:ee:40:88:04:65:62:15:90:01:16:72:5e:7b:d8: 54:0e:0d:0d:6b:29:fd:df:a2:03:d5:71:a8:96:3e:7e:01:f7: 0f:50:11:92:bd:96:c5:37:ce:14:a7:56:3c:27:33:60:cc:8b: 72:de:37:72:e6:02:86:f9:91:fb:d0:dc:46:31:f0:89:01:11: f3:a3:b1:5f -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE9JcqY1YpjATMmve2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2FmMDQ1N2YtOWM5MS00NDQ4LTlhYjEtODk4NjNiMTQ2 YmI3MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NmM4ODA4ZTMtMjc4ZS00NWY1LWJiOTItZmI0OTE4ZGViMmU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkfuagbimLyEO5AAQSmKCM3WKNdlZVAeDOgRP pTrSzCbGrBhAjv2yZfX/Ir5N5tScEy52pfDd7qZE/GiUs/LTvy8Qvkb6tZatTKa4 R+VMqurcyt+5RUkMP3d33Q0myO9tSrf8mZc2TA1XYXHAgRdqqKo4VcmvpZ950BJV wl8eV4j9xeAVAkr43s+FtfdO40LX3vnzHbB1Fg1R7y+irzkBifwJZalYMxV9DGd5 SyV9yJ2SGbREd8YuJ0iSmVPuImd+oCaNJmLe5NSduKh/qhdJKI1FgFznDgOb5nTY Yq7CfHdi8wSR9urn8nNHGUL+hFypo+Ux/DhxpftCWUwHw6sSWwIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFKLdy+R4iQekfVSRBUDxzq4Op3SyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9jYWYw NDU3Zi05YzkxLTQ0NDgtOWFiMS04OTg2M2IxNDZiYjcvYzM3NTg3OTAtZjE0Zi0z YWRiLWFjNDktOWUwN2RjZWZkZGFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvY2FmMDQ1N2YtOWM5MS00NDQ4LTlh YjEtODk4NjNiMTQ2YmI3L2NhZjA0NTdmLTljOTEtNDQ0OC05YWIxLTg5ODYzYjE0 NmJiNy5jcmwwHwYDVR0jBBgwFoAUQPtioi5pP2TsOYXFKKcNK2TLDggwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi9jYWYwNDU3Zi05YzkxLTQ0NDgtOWFiMS04OTg2 M2IxNDZiYjcuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF56UMA4E AgACMAgDBgAmAvO0ADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQArrOZMelVoRuZP+E784a/hFrBIZcQr3ODB cYEoV8SA+GmjU0mGxBsbRl3IYL2ykndHPDSSAX4Z5VkhVyEjwu34vAGK3xrCj5kS vnGAFame64WtuTo7TL1VhiUJo+dcR4Sjj6t6ni0eEzPQabK3BXN/9c0/+qjXEUm4 5HEOYGMhRMEUpZLwFOHVXqZpNLxdPXAJbFOuKu1Vl6MrFvICsJZJPvYg3ykJxvlx uEL+tNxDr2YGr9BdOWQL7kCIBGViFZABFnJee9hUDg0Nayn936ID1XGolj5+AfcP UBGSvZbFN84Up1Y8JzNgzIty3jdy5gKG+ZH70NxGMfCJARHzo7Ff -----END CERTIFICATE-----Generated at Thu Oct 15 05:58:40 2026 by rpki-client