$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/664e4c51-f7b5-453e-a7b0-8081a6404662/90c541eb-ba46-3128-aaf9-910fe52666c7.roa File: 90c541eb-ba46-3128-aaf9-910fe52666c7.roa (raw, json) Hash identifier: BIxp0ZY9EZPZFgqXuXLyiiRh6fJ3Fz6k2dkkwhACCYI= Subject key identifier: 7F:F5:52:89:42:7E:CC:FD:C1:61:1C:8B:A2:D2:E9:49:22:D8:D6:3A Certificate issuer: /CN=664e4c51-f7b5-453e-a7b0-8081a6404662 Certificate serial: 010D0C9F4328584F000CF1795937B9E61790B580 Authority key identifier: AE:05:4A:9B:BB:A9:94:F0:70:AC:83:1B:55:05:B4:5D:05:E3:C4:74 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/664e4c51-f7b5-453e-a7b0-8081a6404662.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/664e4c51-f7b5-453e-a7b0-8081a6404662/90c541eb-ba46-3128-aaf9-910fe52666c7.roa Signing time: Sat 29 Aug 2026 18:01:32 +0000 ROA not before: Sat 29 Aug 2026 18:01:32 +0000 ROA not after: Fri 27 Nov 2026 19:01:32 +0000 asID: 62731 IP address blocks: 23.148.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/664e4c51-f7b5-453e-a7b0-8081a6404662/664e4c51-f7b5-453e-a7b0-8081a6404662.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/664e4c51-f7b5-453e-a7b0-8081a6404662/664e4c51-f7b5-453e-a7b0-8081a6404662.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/664e4c51-f7b5-453e-a7b0-8081a6404662.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:00:0c:f1:79:59:37:b9:e6:17:90:b5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=664e4c51-f7b5-453e-a7b0-8081a6404662 Validity Not Before: Aug 29 18:01:32 2026 GMT Not After : Nov 27 19:01:32 2026 GMT Subject: CN=2f0dd7f8-c662-4661-aaf9-c7481089d5e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:2f:3a:c8:ec:99:88:00:06:b3:b4:37:08:81: 2b:e9:6f:19:ec:23:c4:65:c6:ea:b8:06:44:ba:72: 7a:30:5b:f0:95:ee:31:fd:a9:62:f9:d1:4b:78:45: e7:a0:58:a2:54:18:07:69:a8:42:30:6c:a9:e2:d4: ac:a6:ba:d6:c1:06:4a:41:e7:83:65:c9:f0:31:31: 7d:74:93:8c:db:f5:6b:2f:0b:e4:80:bc:5a:4e:22: 79:53:0c:85:85:99:10:8b:e4:22:12:8a:f9:80:cd: b9:86:7c:12:2c:76:12:3f:e2:bd:3a:d2:4c:94:32: 99:6f:ac:c5:41:e7:44:41:93:93:b3:3c:48:29:c7: eb:60:76:29:e4:1c:c8:fa:d1:e3:16:e3:de:0e:96: 1e:48:11:31:f4:7d:71:c0:4c:b6:c3:90:8e:81:68: 8e:86:2a:73:76:b3:ed:07:3b:43:ff:5d:1a:cf:90: 45:96:8d:c0:68:da:fa:f6:04:17:26:87:62:38:66: 63:b4:15:42:a3:3f:4e:c9:b9:70:23:bd:51:46:95: 6e:2b:40:0a:ed:22:6c:ca:73:39:e2:4f:54:6c:36: aa:57:74:6d:c5:d6:b0:96:38:e1:84:ab:de:25:a9: 65:b9:e3:6c:09:9b:f5:4d:7d:de:d9:ef:d8:3c:7b: 9f:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:F5:52:89:42:7E:CC:FD:C1:61:1C:8B:A2:D2:E9:49:22:D8:D6:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/664e4c51-f7b5-453e-a7b0-8081a6404662/90c541eb-ba46-3128-aaf9-910fe52666c7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/664e4c51-f7b5-453e-a7b0-8081a6404662/664e4c51-f7b5-453e-a7b0-8081a6404662.crl X509v3 Authority Key Identifier: keyid:AE:05:4A:9B:BB:A9:94:F0:70:AC:83:1B:55:05:B4:5D:05:E3:C4:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/664e4c51-f7b5-453e-a7b0-8081a6404662.cer sbgp-ipAddrBlock: critical IPv4: 23.148.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:95:52:5d:bd:c4:04:93:ad:59:96:00:1d:22:a8:48:ae:9c: 3a:99:4b:8f:4f:d6:81:27:86:b3:40:38:08:ae:6e:6b:65:14: 45:ed:22:97:a0:92:77:5b:50:5e:31:53:43:30:4d:3d:89:de: 65:a9:29:55:bc:b6:63:59:f3:26:cf:0f:8e:a8:d1:ce:77:97: 41:71:5b:f6:c1:c8:37:6e:55:86:c3:24:54:6b:aa:0c:cc:b8: 66:23:7b:06:02:7d:82:0e:aa:f2:d6:67:e1:55:1b:40:a7:0d: 38:95:1e:74:62:f0:9b:69:d6:e1:f5:14:1b:72:42:a6:53:e2: 20:db:36:30:20:ef:8e:8c:9e:72:da:eb:a1:b5:7e:24:ee:95: 18:b8:6c:3b:10:87:4a:68:a0:ad:e7:2d:74:55:87:5c:33:22: 43:0a:27:b0:da:44:69:7c:e5:ba:65:3a:35:48:6d:46:50:b1: c7:a0:c1:f0:aa:3e:fc:f4:b5:b4:14:d1:f2:e4:b3:36:c0:94: 1b:d6:ba:a3:ea:2a:66:af:6b:7c:1f:fe:9b:93:05:31:e7:2b: ff:a2:77:50:ef:e6:28:80:76:7f:c1:cf:2d:a3:ca:7d:6e:10: 47:07:85:50:3e:d5:38:1e:7e:63:0a:14:86:9b:bc:d6:ef:b5: a0:d4:b9:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8ADPF5WTe55heQtYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjY0ZTRjNTEtZjdiNS00NTNlLWE3YjAtODA4MWE2NDA0 NjYyMB4XDTI2MDgyOTE4MDEzMloXDTI2MTEyNzE5MDEzMlowLzEtMCsGA1UEAxMk MmYwZGQ3ZjgtYzY2Mi00NjYxLWFhZjktYzc0ODEwODlkNWU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgi86yOyZiAAGs7Q3CIEr6W8Z7CPEZcbquAZE unJ6MFvwle4x/ali+dFLeEXnoFiiVBgHaahCMGyp4tSsprrWwQZKQeeDZcnwMTF9 dJOM2/VrLwvkgLxaTiJ5UwyFhZkQi+QiEor5gM25hnwSLHYSP+K9OtJMlDKZb6zF QedEQZOTszxIKcfrYHYp5BzI+tHjFuPeDpYeSBEx9H1xwEy2w5COgWiOhipzdrPt BztD/10az5BFlo3AaNr69gQXJodiOGZjtBVCoz9OyblwI71RRpVuK0AK7SJsynM5 4k9UbDaqV3RtxdawljjhhKveJallueNsCZv1TX3e2e/YPHuf2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH/1UolCfsz9wWEci6LS6Uki2NY6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi82NjRl NGM1MS1mN2I1LTQ1M2UtYTdiMC04MDgxYTY0MDQ2NjIvOTBjNTQxZWItYmE0Ni0z MTI4LWFhZjktOTEwZmU1MjY2NmM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvNjY0ZTRjNTEtZjdiNS00NTNlLWE3 YjAtODA4MWE2NDA0NjYyLzY2NGU0YzUxLWY3YjUtNDUzZS1hN2IwLTgwODFhNjQw NDY2Mi5jcmwwHwYDVR0jBBgwFoAUrgVKm7uplPBwrIMbVQW0XQXjxHQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi82NjRlNGM1MS1mN2I1LTQ1M2UtYTdiMC04MDgx YTY0MDQ2NjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5QDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHuVUl29xASTrVmWAB0iqEiunDqZS49P1oEnhrNAOAiubmtlFEXtIpeg kndbUF4xU0MwTT2J3mWpKVW8tmNZ8ybPD46o0c53l0FxW/bByDduVYbDJFRrqgzM uGYjewYCfYIOqvLWZ+FVG0CnDTiVHnRi8Jtp1uH1FBtyQqZT4iDbNjAg746MnnLa 66G1fiTulRi4bDsQh0pooK3nLXRVh1wzIkMKJ7DaRGl85bplOjVIbUZQscegwfCq Pvz0tbQU0fLkszbAlBvWuqPqKmava3wf/puTBTHnK/+id1Dv5iiAdn/Bzy2jyn1u EEcHhVA+1TgefmMKFIabvNbvtaDUuSE= -----END CERTIFICATE-----Generated at Fri Sep 25 18:02:42 2026 by rpki-client