$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/caf0457f-9c91-4448-9ab1-89863b146bb7/a8acece1-00db-390a-bed5-232c755e89c3.roa File: a8acece1-00db-390a-bed5-232c755e89c3.roa (raw, json) Hash identifier: F8V4+NbUgNF01G9e93Kj6b4kRjR4naOSSojEHxOwWDY= Subject key identifier: 25:F5:C6:79:0A:68:02:D1:68:B9:D5:26:AB:64:DD:B3:9D:41:21:DE Certificate issuer: /CN=caf0457f-9c91-4448-9ab1-89863b146bb7 Certificate serial: 010D0C9F4328584E010918E7A7791DA1CF9E8940 Authority key identifier: 40:FB:62:A2:2E:69:3F:64:EC:39:85:C5:28:A7:0D:2B:64:CB:0E:08 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/caf0457f-9c91-4448-9ab1-89863b146bb7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/caf0457f-9c91-4448-9ab1-89863b146bb7/a8acece1-00db-390a-bed5-232c755e89c3.roa Signing time: Sat 30 May 2026 09:42:39 +0000 ROA not before: Sat 30 May 2026 09:42:39 +0000 ROA not after: Fri 28 Aug 2026 09:40:07 +0000 asID: 16509 IP address blocks: 23.158.148.0/24 maxlen: 24 2602:f3b4::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/caf0457f-9c91-4448-9ab1-89863b146bb7/caf0457f-9c91-4448-9ab1-89863b146bb7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/caf0457f-9c91-4448-9ab1-89863b146bb7/caf0457f-9c91-4448-9ab1-89863b146bb7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/caf0457f-9c91-4448-9ab1-89863b146bb7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 07 Jun 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:01:09:18:e7:a7:79:1d:a1:cf:9e:89:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=caf0457f-9c91-4448-9ab1-89863b146bb7 Validity Not Before: May 30 09:42:39 2026 GMT Not After : Aug 28 09:40:07 2026 GMT Subject: CN=cbeb4d65-14a8-45d1-ba26-acdeef834592 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:c9:4b:dd:2c:f7:28:55:38:a1:34:eb:67:c5: 36:fc:c7:55:61:5e:81:07:71:ea:65:a2:76:f1:d3: 55:20:6c:cb:e3:22:82:82:c3:e6:a0:72:4e:fd:2a: 25:5f:96:b9:9f:ac:dd:7f:e2:99:79:e0:44:3e:c1: 34:fc:8b:05:21:ac:ba:d1:37:a8:81:b0:ca:a8:72: be:62:56:1b:ea:f0:98:09:87:a3:4d:38:16:eb:4e: 2f:d4:69:15:49:36:e3:65:00:86:29:a8:bd:ae:0c: e7:79:bb:b6:7b:07:fe:f9:45:61:31:57:ca:8e:35: 5a:1e:39:db:e5:0d:09:a5:a9:dc:a4:6c:f0:fe:b4: be:28:84:79:2e:38:d9:88:c4:3d:96:5b:d3:88:c3: 40:ea:88:26:0f:c2:c7:7f:78:8c:ff:ac:2a:f1:0a: 0b:44:64:c2:80:99:15:a8:b6:b8:f6:ea:d8:95:d0: 9c:4d:46:0d:65:20:19:e0:91:65:50:59:c3:5e:7b: 69:a7:ec:0c:26:24:1e:24:ff:56:d4:dc:b0:8e:f8: dd:6b:b6:b0:61:9d:47:19:75:f9:3a:55:51:db:26: 38:7a:b4:65:25:d0:0a:b7:9f:42:00:48:36:df:f3: 9c:6e:41:78:8f:b5:9b:a0:a9:db:9d:b2:c5:62:c5: c4:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:F5:C6:79:0A:68:02:D1:68:B9:D5:26:AB:64:DD:B3:9D:41:21:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/caf0457f-9c91-4448-9ab1-89863b146bb7/a8acece1-00db-390a-bed5-232c755e89c3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/caf0457f-9c91-4448-9ab1-89863b146bb7/caf0457f-9c91-4448-9ab1-89863b146bb7.crl X509v3 Authority Key Identifier: keyid:40:FB:62:A2:2E:69:3F:64:EC:39:85:C5:28:A7:0D:2B:64:CB:0E:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/caf0457f-9c91-4448-9ab1-89863b146bb7.cer sbgp-ipAddrBlock: critical IPv4: 23.158.148.0/24 IPv6: 2602:f3b4::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:80:3b:3b:c2:6d:ca:82:89:46:b4:80:1a:85:d8:d3:c6:2e: e7:0d:81:51:95:f3:92:b9:8a:58:0b:d0:86:8a:3a:4a:bb:ed: 60:ac:df:5e:1f:2b:d6:ec:e4:3c:d6:dd:ca:f8:c5:cf:92:69: 11:87:f6:30:27:31:62:d5:c6:ab:65:aa:bc:34:5b:c2:e1:0f: c3:79:df:79:93:1b:dd:cc:86:fb:e4:98:5d:54:f3:dc:d5:09: 5f:ca:f8:dd:dc:ef:0b:a1:56:ab:3f:8f:bd:32:a3:56:03:20: f0:6e:1a:68:35:fe:8d:ef:65:c9:9d:67:88:db:7d:5c:e8:cd: b0:54:af:49:73:5b:b3:11:fd:7c:3e:8c:a5:78:e6:44:c1:5b: 89:58:a6:c1:9c:18:cb:b8:fc:aa:86:ac:f9:05:05:42:99:7c: 30:d4:9c:2d:84:db:18:d0:34:f8:fa:f1:51:b6:aa:ce:b1:a0: f0:fe:6b:4d:b7:c4:d8:64:73:f2:85:b4:0c:fa:13:9f:85:fd: 07:3d:af:fd:df:80:d2:92:b4:90:da:01:a3:e8:a2:37:76:76: 93:76:18:a3:52:28:e9:08:a3:1e:01:8b:d2:54:d6:49:ca:ee: 27:cf:40:38:d7:b4:ab:f6:c4:cb:28:cf:17:2d:34:14:51:37: b5:66:76:d2 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE4BCRjnp3kdoc+eiUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2FmMDQ1N2YtOWM5MS00NDQ4LTlhYjEtODk4NjNiMTQ2 YmI3MB4XDTI2MDUzMDA5NDIzOVoXDTI2MDgyODA5NDAwN1owLzEtMCsGA1UEAxMk Y2JlYjRkNjUtMTRhOC00NWQxLWJhMjYtYWNkZWVmODM0NTkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAislL3Sz3KFU4oTTrZ8U2/MdVYV6BB3HqZaJ2 8dNVIGzL4yKCgsPmoHJO/SolX5a5n6zdf+KZeeBEPsE0/IsFIay60TeogbDKqHK+ YlYb6vCYCYejTTgW604v1GkVSTbjZQCGKai9rgznebu2ewf++UVhMVfKjjVaHjnb 5Q0JpancpGzw/rS+KIR5LjjZiMQ9llvTiMNA6ogmD8LHf3iM/6wq8QoLRGTCgJkV qLa49urYldCcTUYNZSAZ4JFlUFnDXntpp+wMJiQeJP9W1Nywjvjda7awYZ1HGXX5 OlVR2yY4erRlJdAKt59CAEg23/OcbkF4j7WboKnbnbLFYsXEpwIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFCX1xnkKaALRaLnVJqtk3bOdQSHeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9jYWYw NDU3Zi05YzkxLTQ0NDgtOWFiMS04OTg2M2IxNDZiYjcvYThhY2VjZTEtMDBkYi0z OTBhLWJlZDUtMjMyYzc1NWU4OWMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvY2FmMDQ1N2YtOWM5MS00NDQ4LTlh YjEtODk4NjNiMTQ2YmI3L2NhZjA0NTdmLTljOTEtNDQ0OC05YWIxLTg5ODYzYjE0 NmJiNy5jcmwwHwYDVR0jBBgwFoAUQPtioi5pP2TsOYXFKKcNK2TLDggwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi9jYWYwNDU3Zi05YzkxLTQ0NDgtOWFiMS04OTg2 M2IxNDZiYjcuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF56UMA4E AgACMAgDBgAmAvO0ADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBLgDs7wm3KgolGtIAahdjTxi7nDYFRlfOS uYpYC9CGijpKu+1grN9eHyvW7OQ81t3K+MXPkmkRh/YwJzFi1carZaq8NFvC4Q/D ed95kxvdzIb75JhdVPPc1Qlfyvjd3O8LoVarP4+9MqNWAyDwbhpoNf6N72XJnWeI 231c6M2wVK9Jc1uzEf18PoyleOZEwVuJWKbBnBjLuPyqhqz5BQVCmXww1JwthNsY 0DT4+vFRtqrOsaDw/mtNt8TYZHPyhbQM+hOfhf0HPa/934DSkrSQ2gGj6KI3dnaT dhijUijpCKMeAYvSVNZJyu4nz0A417Sr9sTLKM8XLTQUUTe1ZnbS -----END CERTIFICATE-----Generated at Sat Jun 6 10:49:27 2026 by rpki-client