$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1a168038-48c3-4606-9551-509bf3eb6071/cbd0ddf3-f7ce-3536-9d60-9cde8e71e5d3.roa File: cbd0ddf3-f7ce-3536-9d60-9cde8e71e5d3.roa (raw, json) Hash identifier: MvcsMQRicpm9Hvqf/d9SwnKvPeMoZb7msHKuUpnd7pQ= Subject key identifier: 5B:6A:31:EB:D9:0D:5D:90:C6:3B:51:5E:AB:D9:88:85:21:4F:BC:98 Certificate issuer: /CN=1a168038-48c3-4606-9551-509bf3eb6071 Certificate serial: 010D0C9F4328584EFB476054F093C4A60F41FD00 Authority key identifier: 51:E1:F4:44:2F:CD:43:64:18:CD:96:8D:DD:98:40:79:74:F7:4C:98 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1a168038-48c3-4606-9551-509bf3eb6071.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1a168038-48c3-4606-9551-509bf3eb6071/cbd0ddf3-f7ce-3536-9d60-9cde8e71e5d3.roa Signing time: Fri 28 Aug 2026 01:00:12 +0000 ROA not before: Fri 28 Aug 2026 01:00:12 +0000 ROA not after: Thu 26 Nov 2026 02:00:12 +0000 asID: 23112 IP address blocks: 23.148.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1a168038-48c3-4606-9551-509bf3eb6071/1a168038-48c3-4606-9551-509bf3eb6071.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1a168038-48c3-4606-9551-509bf3eb6071/1a168038-48c3-4606-9551-509bf3eb6071.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1a168038-48c3-4606-9551-509bf3eb6071.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:fb:47:60:54:f0:93:c4:a6:0f:41:fd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a168038-48c3-4606-9551-509bf3eb6071 Validity Not Before: Aug 28 01:00:12 2026 GMT Not After : Nov 26 02:00:12 2026 GMT Subject: CN=b4298758-c827-40df-91c9-1098b1c95cbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:2f:f3:cf:f4:5b:71:63:71:9e:96:a9:2e:c2: 9b:ca:af:9b:83:b2:54:14:dd:6f:47:99:41:bf:ee: 15:a9:3e:bd:b9:7d:75:c4:0f:2a:13:30:a7:bc:23: 7d:f9:db:09:33:48:c4:c9:4e:6d:eb:fc:2e:75:34: 4d:ef:2f:1e:22:e3:fc:f6:47:bd:db:01:0e:0a:ab: 6a:66:fb:47:7c:a4:30:f5:86:0e:29:1c:c3:62:4f: ce:f0:87:e1:f6:1b:7a:bb:56:89:c0:36:b9:79:e7: 52:70:ce:7f:c6:73:28:37:ea:d3:92:ff:5e:52:90: a0:58:4e:2c:be:5c:2b:cf:bb:d8:54:7a:78:48:61: b4:d1:18:d1:29:05:3f:ea:da:79:26:46:4a:24:2f: 01:2f:59:0b:15:3b:b2:2a:f0:47:2f:25:35:a3:e4: dd:fc:f5:67:43:0e:38:f6:23:db:bd:69:e2:28:0e: 04:59:e1:43:94:b9:ae:b2:bd:18:14:d3:1b:53:2e: 51:06:75:de:ff:17:5b:09:f6:da:7b:54:55:e5:65: d9:16:1d:5a:88:3b:e8:49:79:48:f8:e7:5c:d4:da: d8:03:b0:75:12:97:e3:58:94:e9:35:02:17:c7:54: a3:92:a0:3e:85:ef:a3:90:7f:c2:19:8b:6e:00:2f: fb:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:6A:31:EB:D9:0D:5D:90:C6:3B:51:5E:AB:D9:88:85:21:4F:BC:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1a168038-48c3-4606-9551-509bf3eb6071/cbd0ddf3-f7ce-3536-9d60-9cde8e71e5d3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1a168038-48c3-4606-9551-509bf3eb6071/1a168038-48c3-4606-9551-509bf3eb6071.crl X509v3 Authority Key Identifier: keyid:51:E1:F4:44:2F:CD:43:64:18:CD:96:8D:DD:98:40:79:74:F7:4C:98 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1a168038-48c3-4606-9551-509bf3eb6071.cer sbgp-ipAddrBlock: critical IPv4: 23.148.140.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:b4:d0:ae:c6:f0:42:0b:76:2e:5b:07:ae:22:8b:7f:36:eb: f0:e2:d1:2e:2b:ea:ca:ba:fb:72:08:54:5b:36:08:8f:94:94: 26:ce:20:f0:30:9f:7a:7d:48:03:c9:a2:b8:88:fb:7b:41:6d: 9c:01:8c:df:e7:7d:f9:ce:bb:07:0b:3a:9c:f0:58:c2:76:d4: b0:2a:af:e7:61:9f:68:16:72:4c:23:67:58:aa:7b:b3:65:86: 05:5f:ef:15:4d:94:a0:f9:94:a1:3d:05:df:99:a9:f2:bb:6b: 59:71:ba:d1:80:5a:64:54:ee:82:87:96:28:29:c9:e1:dc:1e: 20:7f:f8:72:bb:8c:1c:89:97:47:60:20:88:91:26:56:9b:6c: 51:e9:95:d6:7b:60:44:de:77:8c:05:a9:86:71:6d:1c:c8:fc: 69:69:0c:6a:7b:2e:4f:8a:0c:47:7a:f4:73:4b:f3:30:69:61: 7a:af:13:80:6c:e5:e7:9b:bd:ee:0f:0d:95:d0:75:2d:6a:60: a8:c4:03:00:1e:80:92:30:fb:d3:e5:63:e6:3c:63:98:d6:33: 79:fb:50:86:59:f0:89:c3:16:ed:36:a1:91:da:18:a2:c9:4d: b0:1a:49:96:e5:ec:77:83:da:9d:52:44:17:c5:03:99:a6:8c: 64:99:bf:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE77R2BU8JPEpg9B/QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWExNjgwMzgtNDhjMy00NjA2LTk1NTEtNTA5YmYzZWI2 MDcxMB4XDTI2MDgyODAxMDAxMloXDTI2MTEyNjAyMDAxMlowLzEtMCsGA1UEAxMk YjQyOTg3NTgtYzgyNy00MGRmLTkxYzktMTA5OGIxYzk1Y2JlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAky/zz/RbcWNxnpapLsKbyq+bg7JUFN1vR5lB v+4VqT69uX11xA8qEzCnvCN9+dsJM0jEyU5t6/wudTRN7y8eIuP89ke92wEOCqtq ZvtHfKQw9YYOKRzDYk/O8Ifh9ht6u1aJwDa5eedScM5/xnMoN+rTkv9eUpCgWE4s vlwrz7vYVHp4SGG00RjRKQU/6tp5JkZKJC8BL1kLFTuyKvBHLyU1o+Td/PVnQw44 9iPbvWniKA4EWeFDlLmusr0YFNMbUy5RBnXe/xdbCfbae1RV5WXZFh1aiDvoSXlI +Odc1NrYA7B1EpfjWJTpNQIXx1SjkqA+he+jkH/CGYtuAC/7tQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFtqMevZDV2QxjtRXqvZiIUhT7yYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8xYTE2 ODAzOC00OGMzLTQ2MDYtOTU1MS01MDliZjNlYjYwNzEvY2JkMGRkZjMtZjdjZS0z NTM2LTlkNjAtOWNkZThlNzFlNWQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMWExNjgwMzgtNDhjMy00NjA2LTk1 NTEtNTA5YmYzZWI2MDcxLzFhMTY4MDM4LTQ4YzMtNDYwNi05NTUxLTUwOWJmM2Vi NjA3MS5jcmwwHwYDVR0jBBgwFoAUUeH0RC/NQ2QYzZaN3ZhAeXT3TJgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8xYTE2ODAzOC00OGMzLTQ2MDYtOTU1MS01MDli ZjNlYjYwNzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5SMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEy00K7G8EILdi5bB64ii3826/Di0S4r6sq6+3IIVFs2CI+UlCbOIPAw n3p9SAPJoriI+3tBbZwBjN/nffnOuwcLOpzwWMJ21LAqr+dhn2gWckwjZ1iqe7Nl hgVf7xVNlKD5lKE9Bd+ZqfK7a1lxutGAWmRU7oKHligpyeHcHiB/+HK7jByJl0dg IIiRJlabbFHpldZ7YETed4wFqYZxbRzI/GlpDGp7Lk+KDEd69HNL8zBpYXqvE4Bs 5eebve4PDZXQdS1qYKjEAwAegJIw+9PlY+Y8Y5jWM3n7UIZZ8InDFu02oZHaGKLJ TbAaSZbl7HeD2p1SRBfFA5mmjGSZv2Q= -----END CERTIFICATE-----Generated at Tue Sep 29 12:03:15 2026 by rpki-client