$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a4f9c6b8-3944-422b-8c9c-2ce45c9d038d/d91df06c-d7be-3991-8ca5-81afbc593f6b.roa File: d91df06c-d7be-3991-8ca5-81afbc593f6b.roa (raw, json) Hash identifier: lTWZm1i5usTUiX6o179apannylpcMeLz4O9tUSLjjVg= Subject key identifier: 05:AA:A3:26:92:A0:36:24:88:86:D8:94:F9:8E:A2:32:D1:8A:18:D7 Certificate issuer: /CN=a4f9c6b8-3944-422b-8c9c-2ce45c9d038d Certificate serial: 010D0C9F4328584F9BCDED5284FA90A31C9E3F00 Authority key identifier: 09:46:8A:85:47:EE:D0:06:33:D6:40:02:E9:9A:69:1D:BA:11:51:2D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a4f9c6b8-3944-422b-8c9c-2ce45c9d038d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a4f9c6b8-3944-422b-8c9c-2ce45c9d038d/d91df06c-d7be-3991-8ca5-81afbc593f6b.roa Signing time: Sat 24 Oct 2026 13:00:12 +0000 ROA not before: Sat 24 Oct 2026 13:00:12 +0000 ROA not after: Fri 22 Jan 2027 14:00:12 +0000 asID: 9304 IP address blocks: 23.148.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a4f9c6b8-3944-422b-8c9c-2ce45c9d038d/a4f9c6b8-3944-422b-8c9c-2ce45c9d038d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a4f9c6b8-3944-422b-8c9c-2ce45c9d038d/a4f9c6b8-3944-422b-8c9c-2ce45c9d038d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a4f9c6b8-3944-422b-8c9c-2ce45c9d038d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Nov 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:9b:cd:ed:52:84:fa:90:a3:1c:9e:3f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4f9c6b8-3944-422b-8c9c-2ce45c9d038d Validity Not Before: Oct 24 13:00:12 2026 GMT Not After : Jan 22 14:00:12 2027 GMT Subject: CN=510d32c5-6899-4853-b597-b826e0862074 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:e9:14:5a:dd:46:5a:e5:be:92:e2:53:9f:c7: 71:94:62:a5:ab:72:b0:ba:86:0a:f5:63:6c:6d:77: 24:97:2a:27:58:4f:7c:94:ec:2e:e3:7d:fb:27:31: dd:93:be:86:ec:4b:c8:45:be:99:e5:d5:e2:e9:ec: 74:5b:76:67:bc:e8:ab:6d:36:1e:73:cf:77:20:6b: 03:0d:74:1d:64:fd:18:76:9d:9e:ac:4d:6b:c1:2b: 2a:69:54:22:3e:0c:58:ec:45:f3:43:c8:52:d9:bc: 9e:2a:b4:1f:a5:85:48:0d:01:d8:9c:38:cc:e7:78: d0:4d:62:c0:3f:f3:53:30:c1:48:e6:a1:81:42:95: a0:e1:f4:9b:ca:3a:61:7c:25:37:7b:d5:2f:e8:bd: 25:2f:5a:c2:ca:ad:77:9d:e3:3b:78:fe:8e:06:0a: 39:5c:c1:40:9f:29:72:53:dc:c8:7f:28:ed:ac:1e: 11:95:0d:59:aa:68:e8:a6:73:d8:a7:ff:5d:c4:d2: 46:c7:fd:02:e5:46:d4:f5:68:8a:b9:9b:05:bf:81: 98:69:e2:ef:89:39:f1:9d:77:74:ab:a1:08:61:cd: 82:42:68:d2:36:95:52:0a:f7:5c:b5:e0:4a:b6:a1: f9:70:38:38:51:03:cc:12:f0:70:88:a8:ad:3f:5d: 51:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:AA:A3:26:92:A0:36:24:88:86:D8:94:F9:8E:A2:32:D1:8A:18:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a4f9c6b8-3944-422b-8c9c-2ce45c9d038d/d91df06c-d7be-3991-8ca5-81afbc593f6b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a4f9c6b8-3944-422b-8c9c-2ce45c9d038d/a4f9c6b8-3944-422b-8c9c-2ce45c9d038d.crl X509v3 Authority Key Identifier: keyid:09:46:8A:85:47:EE:D0:06:33:D6:40:02:E9:9A:69:1D:BA:11:51:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a4f9c6b8-3944-422b-8c9c-2ce45c9d038d.cer sbgp-ipAddrBlock: critical IPv4: 23.148.236.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:cf:d5:cb:9c:a8:80:9b:ba:1c:95:be:e4:61:5e:ef:e4:77: 2d:4e:d3:eb:b5:8a:30:aa:70:78:54:ec:b4:d1:03:71:a6:3f: ab:93:9a:fb:1d:63:6c:7b:f2:42:e2:e1:04:be:79:6d:07:5c: c7:d5:4d:29:4c:11:9f:eb:3e:cc:93:aa:a2:bf:17:b5:84:4f: 95:e3:49:f1:73:2e:b8:0b:12:9a:c2:08:54:5c:30:46:19:de: b6:b8:54:16:bb:43:4a:c8:a4:01:8b:c5:a5:16:67:02:44:e9: f2:67:8c:db:d5:fe:0a:86:bf:b4:f0:ae:ea:39:8c:86:a8:87: 7d:28:20:2c:90:ed:01:9e:e3:3b:f3:7e:82:78:d5:30:64:75: c0:8f:26:d2:37:27:60:16:89:51:48:82:a4:76:60:e7:95:fe: a3:eb:ac:93:b9:42:ac:e8:09:93:93:b7:8f:40:79:55:ce:e7: 49:e5:76:bd:60:47:f7:5a:8c:19:01:aa:e4:7c:d9:79:dc:40: 93:44:63:01:c0:9f:54:e6:f4:91:d2:55:f5:8c:f6:e7:f1:8d: c7:20:fa:57:f7:4a:62:89:22:c1:30:c7:8d:86:9a:50:c0:f9: 88:74:26:17:6f:b8:fa:b7:c4:13:32:81:25:98:36:3b:27:04: ef:4d:52:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+bze1ShPqQoxyePwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTRmOWM2YjgtMzk0NC00MjJiLThjOWMtMmNlNDVjOWQw MzhkMB4XDTI2MTAyNDEzMDAxMloXDTI3MDEyMjE0MDAxMlowLzEtMCsGA1UEAxMk NTEwZDMyYzUtNjg5OS00ODUzLWI1OTctYjgyNmUwODYyMDc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnOkUWt1GWuW+kuJTn8dxlGKlq3KwuoYK9WNs bXcklyonWE98lOwu4337JzHdk76G7EvIRb6Z5dXi6ex0W3ZnvOirbTYec893IGsD DXQdZP0Ydp2erE1rwSsqaVQiPgxY7EXzQ8hS2byeKrQfpYVIDQHYnDjM53jQTWLA P/NTMMFI5qGBQpWg4fSbyjphfCU3e9Uv6L0lL1rCyq13neM7eP6OBgo5XMFAnyly U9zIfyjtrB4RlQ1ZqmjopnPYp/9dxNJGx/0C5UbU9WiKuZsFv4GYaeLviTnxnXd0 q6EIYc2CQmjSNpVSCvdcteBKtqH5cDg4UQPMEvBwiKitP11RmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAWqoyaSoDYkiIbYlPmOojLRihjXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9hNGY5 YzZiOC0zOTQ0LTQyMmItOGM5Yy0yY2U0NWM5ZDAzOGQvZDkxZGYwNmMtZDdiZS0z OTkxLThjYTUtODFhZmJjNTkzZjZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYTRmOWM2YjgtMzk0NC00MjJiLThj OWMtMmNlNDVjOWQwMzhkL2E0ZjljNmI4LTM5NDQtNDIyYi04YzljLTJjZTQ1Yzlk MDM4ZC5jcmwwHwYDVR0jBBgwFoAUCUaKhUfu0AYz1kAC6ZppHboRUS0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9hNGY5YzZiOC0zOTQ0LTQyMmItOGM5Yy0yY2U0 NWM5ZDAzOGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5TsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFHP1cucqICbuhyVvuRhXu/kdy1O0+u1ijCqcHhU7LTRA3GmP6uTmvsd Y2x78kLi4QS+eW0HXMfVTSlMEZ/rPsyTqqK/F7WET5XjSfFzLrgLEprCCFRcMEYZ 3ra4VBa7Q0rIpAGLxaUWZwJE6fJnjNvV/gqGv7Twruo5jIaoh30oICyQ7QGe4zvz foJ41TBkdcCPJtI3J2AWiVFIgqR2YOeV/qPrrJO5QqzoCZOTt49AeVXO50nldr1g R/dajBkBquR82XncQJNEYwHAn1Tm9JHSVfWM9ufxjccg+lf3SmKJIsEwx42GmlDA +Yh0JhdvuPq3xBMygSWYNjsnBO9NUjI= -----END CERTIFICATE-----Generated at Sun Nov 15 10:30:16 2026 by rpki-client