$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/caf0457f-9c91-4448-9ab1-89863b146bb7/398f8cb6-79b9-313b-b0c2-51e40aac25a3.roa File: 398f8cb6-79b9-313b-b0c2-51e40aac25a3.roa (raw, json) Hash identifier: O0y22jGuLQfkvsWtVeNuJsjhrkaEqwHAhLsaKhibkpE= Subject key identifier: 11:F8:AA:A3:14:60:7C:64:4F:3F:3D:E1:B1:C7:22:6B:E5:5A:68:C3 Certificate issuer: /CN=caf0457f-9c91-4448-9ab1-89863b146bb7 Certificate serial: 010D0C9F4328584E354A9A546BF80D48338A6080 Authority key identifier: 40:FB:62:A2:2E:69:3F:64:EC:39:85:C5:28:A7:0D:2B:64:CB:0E:08 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/caf0457f-9c91-4448-9ab1-89863b146bb7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/caf0457f-9c91-4448-9ab1-89863b146bb7/398f8cb6-79b9-313b-b0c2-51e40aac25a3.roa Signing time: Thu 18 Jun 2026 02:56:40 +0000 ROA not before: Thu 18 Jun 2026 02:56:40 +0000 ROA not after: Wed 16 Sep 2026 02:56:40 +0000 asID: 402540 IP address blocks: 23.158.148.0/24 maxlen: 24 2602:f3b4::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/caf0457f-9c91-4448-9ab1-89863b146bb7/caf0457f-9c91-4448-9ab1-89863b146bb7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/caf0457f-9c91-4448-9ab1-89863b146bb7/caf0457f-9c91-4448-9ab1-89863b146bb7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/caf0457f-9c91-4448-9ab1-89863b146bb7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 26 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:35:4a:9a:54:6b:f8:0d:48:33:8a:60:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=caf0457f-9c91-4448-9ab1-89863b146bb7 Validity Not Before: Jun 18 02:56:40 2026 GMT Not After : Sep 16 02:56:40 2026 GMT Subject: CN=4f62e4bf-370a-41eb-b85a-0c8bcfc0c7e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:d5:97:8c:c8:9a:25:bd:3a:2d:d0:2c:1e:9f: 91:93:62:d1:d7:fc:3d:24:d5:11:ea:3a:17:69:c6: 96:2c:e3:65:fb:51:85:56:96:45:09:90:fd:18:f3: d6:82:57:d8:a5:1f:e6:48:40:f8:bb:77:cc:44:01: 5d:33:e0:66:7b:a0:e1:c8:5a:8c:13:04:94:50:cd: 7b:81:f6:cd:ee:56:c3:a6:6f:89:e6:22:18:79:2d: 60:4a:a1:4b:0b:99:84:46:66:34:e7:e4:3e:dc:4d: 30:e1:4a:7c:19:dd:51:14:da:99:12:7f:c4:58:0f: 1e:7a:0a:cb:3d:f0:85:26:22:70:53:99:bd:60:79: fa:68:de:ad:ac:b1:2b:ff:1b:d3:52:73:54:61:b9: 2c:a3:62:77:a0:09:2e:de:bc:d4:b1:a6:5e:b1:c4: 0f:48:9b:7b:f0:e0:d8:9a:5f:db:0a:aa:6b:19:4d: 4b:3b:a1:e7:13:87:dc:20:37:5f:8d:35:1d:5a:f0: c6:fe:99:67:8c:93:af:33:de:01:cf:ea:6b:bd:ff: ba:52:5d:4f:19:45:c4:80:eb:69:a6:02:a4:80:9b: f1:c2:df:74:3b:92:92:68:dd:8b:2e:f9:6b:23:17: e0:35:e1:d6:3b:c1:51:d4:63:4d:28:b3:db:3a:ef: 86:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:F8:AA:A3:14:60:7C:64:4F:3F:3D:E1:B1:C7:22:6B:E5:5A:68:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/caf0457f-9c91-4448-9ab1-89863b146bb7/398f8cb6-79b9-313b-b0c2-51e40aac25a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/caf0457f-9c91-4448-9ab1-89863b146bb7/caf0457f-9c91-4448-9ab1-89863b146bb7.crl X509v3 Authority Key Identifier: keyid:40:FB:62:A2:2E:69:3F:64:EC:39:85:C5:28:A7:0D:2B:64:CB:0E:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/caf0457f-9c91-4448-9ab1-89863b146bb7.cer sbgp-ipAddrBlock: critical IPv4: 23.158.148.0/24 IPv6: 2602:f3b4::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:56:9e:e8:55:be:16:c9:42:ba:5a:a0:8f:46:d1:2c:38:c1: 84:b4:9a:ef:ac:69:c7:10:90:b8:01:c7:5b:14:62:ab:42:34: cd:82:30:3b:39:97:be:a2:43:16:fd:ff:80:54:b1:b6:13:f5: 66:b1:44:02:d8:f6:c3:94:24:75:9a:75:35:ea:eb:3e:d3:e6: b1:90:d9:bd:d2:d9:62:5d:1f:11:ee:19:74:b3:8d:b3:b8:63: c0:bc:79:3e:9e:35:2a:59:9b:54:33:71:42:1c:85:c3:5f:cd: 01:8d:0a:b3:ac:c5:9d:f7:32:27:07:73:be:15:d2:e4:05:47: 1d:4a:7c:3d:86:c1:48:dc:20:d3:b2:9f:76:fe:64:9b:ca:7a: 85:3c:80:1e:e1:5b:7e:54:e0:20:6a:2b:41:cb:40:68:c5:14: 7c:1a:97:fa:0d:ed:4c:65:95:cd:76:4f:21:1c:23:6e:79:74: 50:de:7a:ff:86:7d:97:f7:0f:7e:a5:14:29:25:39:98:31:a1: 66:c3:fc:b4:68:10:e8:01:a2:7d:c1:39:8a:a5:db:08:41:4c: 9b:1d:01:cc:6b:04:f4:96:70:dc:a5:80:78:13:8e:ca:67:36: 1c:67:95:d6:1c:5a:86:a2:91:6f:0a:c7:76:de:57:73:b2:6e: 16:f4:64:49 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE41SppUa/gNSDOKYIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2FmMDQ1N2YtOWM5MS00NDQ4LTlhYjEtODk4NjNiMTQ2 YmI3MB4XDTI2MDYxODAyNTY0MFoXDTI2MDkxNjAyNTY0MFowLzEtMCsGA1UEAxMk NGY2MmU0YmYtMzcwYS00MWViLWI4NWEtMGM4YmNmYzBjN2UzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoNWXjMiaJb06LdAsHp+Rk2LR1/w9JNUR6joX acaWLONl+1GFVpZFCZD9GPPWglfYpR/mSED4u3fMRAFdM+Bme6DhyFqMEwSUUM17 gfbN7lbDpm+J5iIYeS1gSqFLC5mERmY05+Q+3E0w4Up8Gd1RFNqZEn/EWA8eegrL PfCFJiJwU5m9YHn6aN6trLEr/xvTUnNUYbkso2J3oAku3rzUsaZescQPSJt78ODY ml/bCqprGU1LO6HnE4fcIDdfjTUdWvDG/plnjJOvM94Bz+prvf+6Ul1PGUXEgOtp pgKkgJvxwt90O5KSaN2LLvlrIxfgNeHWO8FR1GNNKLPbOu+GywIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFBH4qqMUYHxkTz894bHHImvlWmjDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9jYWYw NDU3Zi05YzkxLTQ0NDgtOWFiMS04OTg2M2IxNDZiYjcvMzk4ZjhjYjYtNzliOS0z MTNiLWIwYzItNTFlNDBhYWMyNWEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvY2FmMDQ1N2YtOWM5MS00NDQ4LTlh YjEtODk4NjNiMTQ2YmI3L2NhZjA0NTdmLTljOTEtNDQ0OC05YWIxLTg5ODYzYjE0 NmJiNy5jcmwwHwYDVR0jBBgwFoAUQPtioi5pP2TsOYXFKKcNK2TLDggwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi9jYWYwNDU3Zi05YzkxLTQ0NDgtOWFiMS04OTg2 M2IxNDZiYjcuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF56UMA4E AgACMAgDBgAmAvO0ADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAvVp7oVb4WyUK6WqCPRtEsOMGEtJrvrGnH EJC4AcdbFGKrQjTNgjA7OZe+okMW/f+AVLG2E/VmsUQC2PbDlCR1mnU16us+0+ax kNm90tliXR8R7hl0s42zuGPAvHk+njUqWZtUM3FCHIXDX80BjQqzrMWd9zInB3O+ FdLkBUcdSnw9hsFI3CDTsp92/mSbynqFPIAe4Vt+VOAgaitBy0BoxRR8Gpf6De1M ZZXNdk8hHCNueXRQ3nr/hn2X9w9+pRQpJTmYMaFmw/y0aBDoAaJ9wTmKpdsIQUyb HQHMawT0lnDcpYB4E47KZzYcZ5XWHFqGopFvCsd23ldzsm4W9GRJ -----END CERTIFICATE-----Generated at Thu Jun 25 08:26:08 2026 by rpki-client