$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/86d41278-dbec-4ce1-a2aa-72427ed93680/3971871e-fda7-3ecf-a1d6-4ef7cf417e2d.roa File: 3971871e-fda7-3ecf-a1d6-4ef7cf417e2d.roa (raw, json) Hash identifier: qYr3GCbs3IzIZDRpbb2sZgLw73madJvky6xfO5tdGuY= Subject key identifier: A2:21:32:30:7F:49:4F:C3:69:83:69:8E:69:43:F0:C0:AF:E0:A3:45 Certificate issuer: /CN=86d41278-dbec-4ce1-a2aa-72427ed93680 Certificate serial: 010D0C9F4328584E842A369805559C146D473500 Authority key identifier: 89:3D:8C:5B:1A:3F:09:A2:DA:D4:57:63:26:C0:70:4A:67:1B:75:84 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/86d41278-dbec-4ce1-a2aa-72427ed93680.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/86d41278-dbec-4ce1-a2aa-72427ed93680/3971871e-fda7-3ecf-a1d6-4ef7cf417e2d.roa Signing time: Thu 16 Jul 2026 09:00:12 +0000 ROA not before: Thu 16 Jul 2026 09:00:12 +0000 ROA not after: Wed 14 Oct 2026 09:00:12 +0000 asID: 393857 IP address blocks: 23.148.64.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/86d41278-dbec-4ce1-a2aa-72427ed93680/86d41278-dbec-4ce1-a2aa-72427ed93680.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/86d41278-dbec-4ce1-a2aa-72427ed93680/86d41278-dbec-4ce1-a2aa-72427ed93680.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/86d41278-dbec-4ce1-a2aa-72427ed93680.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:84:2a:36:98:05:55:9c:14:6d:47:35:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86d41278-dbec-4ce1-a2aa-72427ed93680 Validity Not Before: Jul 16 09:00:12 2026 GMT Not After : Oct 14 09:00:12 2026 GMT Subject: CN=e20cba83-152d-4dfc-863a-ec84cb06343a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:cc:f6:01:36:82:da:e3:45:4e:f0:ee:ae:26: e9:ee:ca:15:30:80:a0:0a:02:35:97:c6:cb:73:d0: 6c:04:4c:e4:cf:dc:68:1b:cb:af:bf:8b:be:f0:d2: cd:67:ea:cc:72:95:f8:41:62:71:28:53:1e:57:ca: 04:7d:6f:32:e3:ba:2c:21:e9:49:76:f2:00:3f:1f: b0:b5:be:47:32:94:a7:55:64:c8:98:84:e5:a5:99: 12:3d:06:5c:22:21:53:42:cb:84:3f:50:2d:22:fd: d0:8a:8f:fd:da:68:87:7b:58:bb:3c:31:2a:a5:db: 90:a2:2f:37:58:6c:ba:e4:48:bf:fe:2b:94:fa:02: d4:ac:1e:ec:c4:5b:93:60:52:c6:92:8a:8e:ce:28: 2e:71:5d:8f:30:c2:57:b7:d3:20:f0:21:2a:c4:16: 04:fe:c9:20:c6:fc:f6:71:7e:66:7c:32:5d:23:0f: 22:d8:97:4c:5f:9d:62:88:75:3e:9c:c3:f7:83:03: ca:bf:44:b2:bd:a3:46:5b:06:1b:50:1e:6a:2f:1a: 17:29:81:4f:e9:c6:35:e5:c7:e3:54:93:fd:7a:a5: 61:d4:45:2d:c8:00:3f:41:3d:3b:23:75:39:6d:fc: 74:68:0e:35:15:bc:1c:c6:f9:89:43:12:6f:bd:4d: ea:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:21:32:30:7F:49:4F:C3:69:83:69:8E:69:43:F0:C0:AF:E0:A3:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/86d41278-dbec-4ce1-a2aa-72427ed93680/3971871e-fda7-3ecf-a1d6-4ef7cf417e2d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/86d41278-dbec-4ce1-a2aa-72427ed93680/86d41278-dbec-4ce1-a2aa-72427ed93680.crl X509v3 Authority Key Identifier: keyid:89:3D:8C:5B:1A:3F:09:A2:DA:D4:57:63:26:C0:70:4A:67:1B:75:84 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/86d41278-dbec-4ce1-a2aa-72427ed93680.cer sbgp-ipAddrBlock: critical IPv4: 23.148.64.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:74:1e:83:7c:52:1c:87:98:ac:3a:60:9c:2a:bf:85:09:b2: 10:b2:e6:d0:94:52:db:07:36:8f:9c:e9:03:62:26:ca:dd:0f: 8a:85:d6:58:b3:53:8e:c4:72:45:e7:c4:29:77:2c:27:98:b9: a8:56:af:8a:c4:1d:6f:e7:bb:97:74:b3:d5:c2:60:09:ba:71: cf:5d:aa:d6:e8:6d:1e:51:6d:59:48:a5:ec:e5:f4:e9:98:ef: 1b:6b:1a:69:01:02:54:92:64:d3:9c:86:46:5d:ec:5e:3c:02: 56:fd:24:ad:18:b5:53:c7:97:92:30:c4:97:9f:74:f1:9f:16: 42:c8:f4:69:84:52:ca:b0:25:17:4a:f4:a5:ab:74:39:ce:57: 75:4c:17:56:76:d4:a5:00:97:d9:5c:7b:e0:96:3f:d6:0a:52: ac:68:ab:e8:93:b7:cd:0e:49:f4:75:1a:cd:66:48:44:ab:21: 96:6f:c5:48:20:9d:78:f4:50:bc:8f:24:c8:f3:9a:30:0f:cb: 91:93:ff:bb:d1:41:21:90:d9:5e:16:9e:c6:f0:e8:6c:79:df: 0c:09:92:7d:c8:8e:e6:ac:4d:2b:64:32:79:42:7b:9d:e8:54: 41:ac:69:ab:a4:6e:9a:bd:34:0b:a2:47:aa:e7:57:8d:0d:51: e2:36:38:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6EKjaYBVWcFG1HNQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODZkNDEyNzgtZGJlYy00Y2UxLWEyYWEtNzI0MjdlZDkz NjgwMB4XDTI2MDcxNjA5MDAxMloXDTI2MTAxNDA5MDAxMlowLzEtMCsGA1UEAxMk ZTIwY2JhODMtMTUyZC00ZGZjLTg2M2EtZWM4NGNiMDYzNDNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnsz2ATaC2uNFTvDuribp7soVMICgCgI1l8bL c9BsBEzkz9xoG8uvv4u+8NLNZ+rMcpX4QWJxKFMeV8oEfW8y47osIelJdvIAPx+w tb5HMpSnVWTImITlpZkSPQZcIiFTQsuEP1AtIv3Qio/92miHe1i7PDEqpduQoi83 WGy65Ei//iuU+gLUrB7sxFuTYFLGkoqOzigucV2PMMJXt9Mg8CEqxBYE/skgxvz2 cX5mfDJdIw8i2JdMX51iiHU+nMP3gwPKv0SyvaNGWwYbUB5qLxoXKYFP6cY15cfj VJP9eqVh1EUtyAA/QT07I3U5bfx0aA41FbwcxvmJQxJvvU3qtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKIhMjB/SU/DaYNpjmlD8MCv4KNFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC84NmQ0 MTI3OC1kYmVjLTRjZTEtYTJhYS03MjQyN2VkOTM2ODAvMzk3MTg3MWUtZmRhNy0z ZWNmLWExZDYtNGVmN2NmNDE3ZTJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvODZkNDEyNzgtZGJlYy00Y2UxLWEy YWEtNzI0MjdlZDkzNjgwLzg2ZDQxMjc4LWRiZWMtNGNlMS1hMmFhLTcyNDI3ZWQ5 MzY4MC5jcmwwHwYDVR0jBBgwFoAUiT2MWxo/CaLa1FdjJsBwSmcbdYQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC84NmQ0MTI3OC1kYmVjLTRjZTEtYTJhYS03MjQy N2VkOTM2ODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5RAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEF0HoN8UhyHmKw6YJwqv4UJshCy5tCUUtsHNo+c6QNiJsrdD4qF1liz U47EckXnxCl3LCeYuahWr4rEHW/nu5d0s9XCYAm6cc9dqtbobR5RbVlIpezl9OmY 7xtrGmkBAlSSZNOchkZd7F48Alb9JK0YtVPHl5IwxJefdPGfFkLI9GmEUsqwJRdK 9KWrdDnOV3VMF1Z21KUAl9lce+CWP9YKUqxoq+iTt80OSfR1Gs1mSESrIZZvxUgg nXj0ULyPJMjzmjAPy5GT/7vRQSGQ2V4Wnsbw6Gx53wwJkn3IjuasTStkMnlCe53o VEGsaaukbpq9NAuiR6rnV40NUeI2OLc= -----END CERTIFICATE-----Generated at Fri Jul 24 06:27:39 2026 by rpki-client