$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/664e4c51-f7b5-453e-a7b0-8081a6404662/41f615f4-5032-3a4f-9d58-73f1892e03fa.roa File: 41f615f4-5032-3a4f-9d58-73f1892e03fa.roa (raw, json) Hash identifier: 2B7tOy3Vcycxdqz9SOWV99EV8tjd+FgdXj8uVr1SDCw= Subject key identifier: 3C:71:8A:1D:6C:56:9C:95:4B:EC:E0:2D:1D:24:0D:27:D2:10:D2:AE Certificate issuer: /CN=664e4c51-f7b5-453e-a7b0-8081a6404662 Certificate serial: 010D0C9F4328584F0533CCC3A899A87C0CA1D340 Authority key identifier: AE:05:4A:9B:BB:A9:94:F0:70:AC:83:1B:55:05:B4:5D:05:E3:C4:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/664e4c51-f7b5-453e-a7b0-8081a6404662.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/664e4c51-f7b5-453e-a7b0-8081a6404662/41f615f4-5032-3a4f-9d58-73f1892e03fa.roa Signing time: Mon 31 Aug 2026 14:18:52 +0000 ROA not before: Mon 31 Aug 2026 14:18:52 +0000 ROA not after: Sun 29 Nov 2026 15:18:52 +0000 asID: 398578 IP address blocks: 23.148.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/664e4c51-f7b5-453e-a7b0-8081a6404662/664e4c51-f7b5-453e-a7b0-8081a6404662.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/664e4c51-f7b5-453e-a7b0-8081a6404662/664e4c51-f7b5-453e-a7b0-8081a6404662.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/664e4c51-f7b5-453e-a7b0-8081a6404662.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 Oct 2026 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:05:33:cc:c3:a8:99:a8:7c:0c:a1:d3:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=664e4c51-f7b5-453e-a7b0-8081a6404662 Validity Not Before: Aug 31 14:18:52 2026 GMT Not After : Nov 29 15:18:52 2026 GMT Subject: CN=dbb1e8c2-9079-438a-896f-a7cf815cc5b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:61:b7:74:03:0a:b0:5c:6d:fa:88:1a:e0:8b: 91:3a:36:81:ac:58:e2:15:ac:65:cc:a9:c9:a3:ad: 91:6d:80:6b:a5:b4:5c:d1:aa:38:6f:73:43:a4:96: 6f:99:90:98:03:6b:72:6e:3a:73:10:62:d3:de:2e: 55:d6:06:bb:9d:d4:09:bf:c8:b4:21:cf:eb:e1:a9: 6e:51:80:e6:8c:6b:8b:74:b7:99:92:48:e1:7e:7c: da:75:40:04:b9:8d:9c:30:cf:78:54:1f:4c:c7:b6: 68:9a:a0:e5:73:77:67:e3:7e:0e:59:8c:91:57:e3: d8:4b:c9:45:ab:e0:25:de:1b:5b:fb:86:58:59:26: 1d:5f:e9:85:10:8c:c2:f2:3a:a3:d3:b7:dd:9a:db: 23:63:3d:7e:e7:86:e8:3f:a0:f4:ec:ef:c8:48:a6: 84:d9:cd:c4:c1:3e:a9:58:f0:db:4b:f6:e9:36:21: 62:d0:29:9a:ff:2e:bf:13:13:12:ff:8a:cf:02:35: de:0f:07:b3:55:55:cd:7b:1a:ea:2d:85:69:52:dd: 41:7b:0e:76:d1:c5:54:ff:03:9f:59:29:56:88:b0: 43:32:bf:46:40:75:d0:3e:8a:0b:38:3f:db:64:31: 99:e5:a9:c4:a0:2e:f9:71:0f:9b:aa:c6:10:25:6f: 1f:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:71:8A:1D:6C:56:9C:95:4B:EC:E0:2D:1D:24:0D:27:D2:10:D2:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/664e4c51-f7b5-453e-a7b0-8081a6404662/41f615f4-5032-3a4f-9d58-73f1892e03fa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/664e4c51-f7b5-453e-a7b0-8081a6404662/664e4c51-f7b5-453e-a7b0-8081a6404662.crl X509v3 Authority Key Identifier: keyid:AE:05:4A:9B:BB:A9:94:F0:70:AC:83:1B:55:05:B4:5D:05:E3:C4:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/664e4c51-f7b5-453e-a7b0-8081a6404662.cer sbgp-ipAddrBlock: critical IPv4: 23.148.1.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:e4:7b:66:20:03:93:3b:7b:44:ae:95:28:ee:78:f9:96:3f: 67:b6:dd:33:47:99:7e:cf:31:2b:e0:26:d2:b6:6f:6f:7e:07: b2:59:66:6d:40:1c:8e:9a:a9:e6:55:fe:8a:bc:19:d4:68:55: e1:11:78:ba:f6:af:a4:5b:69:5e:fe:22:0e:9f:bc:5b:c6:ba: 5b:48:10:66:67:f1:41:8d:94:3a:55:ce:33:d3:4e:c9:ec:e6: 79:b0:01:6e:d7:f1:15:05:74:0a:60:61:6e:11:6a:5b:ff:ab: 80:b9:0a:bd:d9:80:e2:f0:fd:43:3a:4a:4f:ae:c1:5a:21:be: 88:6e:8e:7c:c4:6c:de:d4:c5:5f:dd:e3:d4:5a:47:f8:75:de: a4:1f:96:dc:03:85:17:e6:dd:df:3c:49:bf:8a:b0:85:76:fb: 80:3b:23:77:79:e1:3e:9b:60:f0:99:81:25:a7:26:0c:e4:ad: ad:65:e3:a2:b9:74:d8:f4:fb:1d:2e:14:9f:2d:21:e5:40:f2: 66:7d:52:15:a4:36:4d:04:e3:c8:c4:28:5f:78:71:c8:64:2a: 14:0b:b0:f8:0e:59:55:88:2f:ad:c1:b2:a8:ef:b4:1e:74:b4: 2f:5a:c7:43:cf:29:44:25:0f:9d:41:9a:1c:d1:7b:2f:2c:4e: ea:61:09:08 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8FM8zDqJmofAyh00AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjY0ZTRjNTEtZjdiNS00NTNlLWE3YjAtODA4MWE2NDA0 NjYyMB4XDTI2MDgzMTE0MTg1MloXDTI2MTEyOTE1MTg1MlowLzEtMCsGA1UEAxMk ZGJiMWU4YzItOTA3OS00MzhhLTg5NmYtYTdjZjgxNWNjNWI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp2G3dAMKsFxt+oga4IuROjaBrFjiFaxlzKnJ o62RbYBrpbRc0ao4b3NDpJZvmZCYA2tybjpzEGLT3i5V1ga7ndQJv8i0Ic/r4alu UYDmjGuLdLeZkkjhfnzadUAEuY2cMM94VB9Mx7ZomqDlc3dn434OWYyRV+PYS8lF q+Al3htb+4ZYWSYdX+mFEIzC8jqj07fdmtsjYz1+54boP6D07O/ISKaE2c3EwT6p WPDbS/bpNiFi0Cma/y6/ExMS/4rPAjXeDwezVVXNexrqLYVpUt1Bew520cVU/wOf WSlWiLBDMr9GQHXQPooLOD/bZDGZ5anEoC75cQ+bqsYQJW8faQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDxxih1sVpyVS+zgLR0kDSfSENKuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi82NjRl NGM1MS1mN2I1LTQ1M2UtYTdiMC04MDgxYTY0MDQ2NjIvNDFmNjE1ZjQtNTAzMi0z YTRmLTlkNTgtNzNmMTg5MmUwM2ZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvNjY0ZTRjNTEtZjdiNS00NTNlLWE3 YjAtODA4MWE2NDA0NjYyLzY2NGU0YzUxLWY3YjUtNDUzZS1hN2IwLTgwODFhNjQw NDY2Mi5jcmwwHwYDVR0jBBgwFoAUrgVKm7uplPBwrIMbVQW0XQXjxHQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi82NjRlNGM1MS1mN2I1LTQ1M2UtYTdiMC04MDgx YTY0MDQ2NjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5QBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGbke2YgA5M7e0SulSjuePmWP2e23TNHmX7PMSvgJtK2b29+B7JZZm1A HI6aqeZV/oq8GdRoVeEReLr2r6RbaV7+Ig6fvFvGultIEGZn8UGNlDpVzjPTTsns 5nmwAW7X8RUFdApgYW4Ralv/q4C5Cr3ZgOLw/UM6Sk+uwVohvohujnzEbN7UxV/d 49RaR/h13qQfltwDhRfm3d88Sb+KsIV2+4A7I3d54T6bYPCZgSWnJgzkra1l46K5 dNj0+x0uFJ8tIeVA8mZ9UhWkNk0E48jEKF94cchkKhQLsPgOWVWIL63BsqjvtB50 tC9ax0PPKUQlD51BmhzRey8sTuphCQg= -----END CERTIFICATE-----Generated at Sun Oct 4 12:59:04 2026 by rpki-client