$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/af5b6246-c953-3c3b-93c3-790f63471378.roa File: af5b6246-c953-3c3b-93c3-790f63471378.roa (raw, json) Hash identifier: 5MfkV6i10qbM8uP7lHLzvKutK/XhXfu3Jlvzc0Tq9/g= Subject key identifier: 1D:C0:95:5E:D9:FA:69:58:9B:8B:71:D5:AA:21:D5:BA:8C:8F:3E:30 Certificate issuer: /CN=7b143713-7923-4e4d-9476-b8e5ce1ca9c9 Certificate serial: 010D0C9F4328584F4977459ACC9E3B9EB1B2E080 Authority key identifier: 61:D5:32:E9:6D:BB:CA:2E:A4:34:67:90:E5:3E:1C:8C:AF:B2:D9:30 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/af5b6246-c953-3c3b-93c3-790f63471378.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 14555 IP address blocks: 198.23.48.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:77:45:9a:cc:9e:3b:9e:b1:b2:e0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b143713-7923-4e4d-9476-b8e5ce1ca9c9 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=04e2cc21-8504-49d2-988b-ce48e1042f1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:29:ab:c1:df:8d:c7:76:cb:be:1c:2f:11:11: dd:5a:bc:5d:d1:a4:9f:4b:18:d8:9c:8d:fc:38:ac: 3c:0f:99:04:35:3f:f0:5e:cc:95:b0:26:22:14:55: 59:11:2e:53:d5:54:be:4c:63:61:46:46:4a:16:82: 19:0f:c1:2c:f2:43:dd:49:36:3b:d7:6d:95:97:75: d1:79:f8:84:5d:d3:ca:c2:b1:51:85:f7:7f:53:05: 59:8e:7a:72:c5:c7:d3:af:d3:98:28:f8:3d:d9:8b: c0:a5:d9:c5:35:6b:09:f4:25:77:71:39:fc:22:09: a1:96:e3:cb:87:53:00:c5:9a:1f:3d:e4:d2:77:7f: 5a:99:5f:03:36:2c:e7:9d:ea:c1:cd:e8:0d:1a:73: d9:ad:ae:99:b4:cf:a2:bb:57:e8:5a:46:ec:a4:8d: cd:87:47:f3:86:a7:b5:93:17:a9:4b:28:e2:2b:73: 1d:c0:bf:d9:00:a1:39:af:49:57:72:ad:20:37:ae: 3d:62:7a:e9:c2:da:10:67:a8:c0:21:e3:44:cb:ac: 0b:d5:0b:83:23:26:13:5d:b3:56:dd:d5:4d:9b:c4: 4f:94:17:15:37:9c:7d:10:d4:9e:d4:dc:62:ed:0b: 85:31:95:2b:22:64:d9:e9:4a:41:db:e9:b3:f8:25: ef:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:C0:95:5E:D9:FA:69:58:9B:8B:71:D5:AA:21:D5:BA:8C:8F:3E:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/af5b6246-c953-3c3b-93c3-790f63471378.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.crl X509v3 Authority Key Identifier: keyid:61:D5:32:E9:6D:BB:CA:2E:A4:34:67:90:E5:3E:1C:8C:AF:B2:D9:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7b143713-7923-4e4d-9476-b8e5ce1ca9c9.cer sbgp-ipAddrBlock: critical IPv4: 198.23.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:4c:f8:23:e6:65:33:4b:c5:29:09:a4:47:d9:71:11:aa:e7: d4:6e:cf:e2:12:84:c6:b9:6f:b1:8a:55:58:0b:9c:78:f3:c7: aa:1d:41:83:fb:2b:23:9c:20:a1:ec:4a:d0:ea:c4:c6:50:bc: ab:44:4c:3a:ed:9a:15:5b:fc:fb:d2:33:f7:a7:60:a5:75:40: be:9e:08:7a:31:76:12:ff:cd:32:52:9b:d5:2a:b3:42:9a:c9: f7:fb:a8:a7:d5:70:1a:8e:90:e6:0c:cc:92:38:87:b7:75:5c: 9d:ad:66:7f:b6:95:3a:c7:d8:be:ad:0b:b7:cd:fc:17:9c:7d: 38:e5:16:71:65:aa:e4:e3:d0:a9:fb:01:6c:95:ca:69:6e:ba: 69:20:51:83:e6:85:0b:51:12:7f:93:8b:9d:10:e2:b3:45:d3: 8f:e3:f0:29:f8:28:1a:8c:0d:7a:89:90:32:81:9f:e5:e5:9d: 08:bb:af:f5:33:7b:db:41:c9:3e:b4:a5:b9:62:aa:04:e4:76: fd:f8:66:a7:a7:28:cf:e2:fc:db:6f:e5:99:c0:54:66:c7:d7: ed:04:d5:f5:ee:06:4d:ca:d0:4f:44:51:22:8a:9f:52:3d:3b: e2:69:81:5c:bc:21:c6:a9:d0:6a:86:d7:ca:6c:33:50:36:e5: 09:ab:08:5e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jd0WazJ47nrGy4IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2IxNDM3MTMtNzkyMy00ZTRkLTk0NzYtYjhlNWNlMWNh OWM5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MDRlMmNjMjEtODUwNC00OWQyLTk4OGItY2U0OGUxMDQyZjFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgCmrwd+Nx3bLvhwvERHdWrxd0aSfSxjYnI38 OKw8D5kENT/wXsyVsCYiFFVZES5T1VS+TGNhRkZKFoIZD8Es8kPdSTY7122Vl3XR efiEXdPKwrFRhfd/UwVZjnpyxcfTr9OYKPg92YvApdnFNWsJ9CV3cTn8IgmhluPL h1MAxZofPeTSd39amV8DNiznnerBzegNGnPZra6ZtM+iu1foWkbspI3Nh0fzhqe1 kxepSyjiK3MdwL/ZAKE5r0lXcq0gN649YnrpwtoQZ6jAIeNEy6wL1QuDIyYTXbNW 3dVNm8RPlBcVN5x9ENSe1Nxi7QuFMZUrImTZ6UpB2+mz+CXv8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB3AlV7Z+mlYm4tx1aoh1bqMjz4wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS83YjE0 MzcxMy03OTIzLTRlNGQtOTQ3Ni1iOGU1Y2UxY2E5YzkvYWY1YjYyNDYtYzk1My0z YzNiLTkzYzMtNzkwZjYzNDcxMzc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvN2IxNDM3MTMtNzkyMy00ZTRkLTk0 NzYtYjhlNWNlMWNhOWM5LzdiMTQzNzEzLTc5MjMtNGU0ZC05NDc2LWI4ZTVjZTFj YTljOS5jcmwwHwYDVR0jBBgwFoAUYdUy6W27yi6kNGeQ5T4cjK+y2TAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS83YjE0MzcxMy03OTIzLTRlNGQtOTQ3Ni1iOGU1 Y2UxY2E5YzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQExhcwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFlM+CPmZTNLxSkJpEfZcRGq59Ruz+IShMa5b7GKVVgLnHjzx6odQYP7 KyOcIKHsStDqxMZQvKtETDrtmhVb/PvSM/enYKV1QL6eCHoxdhL/zTJSm9Uqs0Ka yff7qKfVcBqOkOYMzJI4h7d1XJ2tZn+2lTrH2L6tC7fN/BecfTjlFnFlquTj0Kn7 AWyVymluumkgUYPmhQtREn+Ti50Q4rNF04/j8Cn4KBqMDXqJkDKBn+XlnQi7r/Uz e9tByT60pbliqgTkdv34ZqenKM/i/Ntv5ZnAVGbH1+0E1fXuBk3K0E9EUSKKn1I9 O+JpgVy8Icap0GqG18psM1A25QmrCF4= -----END CERTIFICATE-----Generated at Sun Oct 4 17:21:19 2026 by rpki-client