$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/caf0457f-9c91-4448-9ab1-89863b146bb7/a8acece1-00db-390a-bed5-232c755e89c3.roa File: a8acece1-00db-390a-bed5-232c755e89c3.roa (raw, json) Hash identifier: qHwD8Wnq+QCeTJzih5PlvvF3EAvnFIFnJbOBJzNEj7k= Subject key identifier: C9:16:7C:A6:04:F9:4D:69:DD:FC:B9:DD:DF:EA:B8:F3:7D:BA:EC:E4 Certificate issuer: /CN=caf0457f-9c91-4448-9ab1-89863b146bb7 Certificate serial: 010D0C9F4328584EA79B43A68A451A2CA88F9600 Authority key identifier: 40:FB:62:A2:2E:69:3F:64:EC:39:85:C5:28:A7:0D:2B:64:CB:0E:08 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/caf0457f-9c91-4448-9ab1-89863b146bb7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/caf0457f-9c91-4448-9ab1-89863b146bb7/a8acece1-00db-390a-bed5-232c755e89c3.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 16509 IP address blocks: 23.158.148.0/24 maxlen: 24 2602:f3b4::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/caf0457f-9c91-4448-9ab1-89863b146bb7/caf0457f-9c91-4448-9ab1-89863b146bb7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/caf0457f-9c91-4448-9ab1-89863b146bb7/caf0457f-9c91-4448-9ab1-89863b146bb7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/caf0457f-9c91-4448-9ab1-89863b146bb7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9b:43:a6:8a:45:1a:2c:a8:8f:96:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=caf0457f-9c91-4448-9ab1-89863b146bb7 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=e9002efb-e4ac-43ef-b6c4-b04ac352c0d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:3a:c5:80:20:4c:77:8f:bc:32:f9:50:ab:ce: 54:37:4a:e8:82:56:7f:9c:a5:fb:a1:9b:6b:da:f2: 16:fb:d9:af:20:53:63:00:54:03:1e:7d:30:11:03: 8c:76:7b:e3:4d:f1:a2:96:6c:91:9b:26:0d:75:b1: 1a:4f:5e:db:4b:73:45:38:18:1f:86:af:09:57:59: f5:89:40:e8:4b:89:8d:53:c5:28:f6:5b:05:b8:d6: b9:61:29:76:a1:5d:1e:f2:98:36:cd:c9:84:f0:9b: e3:00:ce:34:30:85:dc:35:fa:a9:be:90:74:31:57: 65:30:93:62:6c:72:e2:49:f3:f9:6b:3f:9c:be:d7: 40:95:11:6d:3d:35:84:f2:79:72:14:b7:2e:81:38: 78:b4:7f:80:28:29:70:67:ca:2e:95:1f:08:04:d2: b4:53:8f:f8:35:b3:18:6d:ca:43:a7:2c:74:cd:8f: 21:d3:e8:e2:82:1b:10:67:42:8e:39:c9:35:d6:52: aa:00:1d:67:60:a5:f8:91:4c:05:82:a9:db:7c:da: 29:e2:a4:1b:86:08:32:de:4e:b2:c6:8a:87:dd:d4: 0f:cc:f0:e4:d3:44:26:25:aa:d8:85:bc:e8:d3:84: 96:05:11:cc:12:63:f0:b3:30:29:53:f9:33:e2:0a: af:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:16:7C:A6:04:F9:4D:69:DD:FC:B9:DD:DF:EA:B8:F3:7D:BA:EC:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/caf0457f-9c91-4448-9ab1-89863b146bb7/a8acece1-00db-390a-bed5-232c755e89c3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/caf0457f-9c91-4448-9ab1-89863b146bb7/caf0457f-9c91-4448-9ab1-89863b146bb7.crl X509v3 Authority Key Identifier: keyid:40:FB:62:A2:2E:69:3F:64:EC:39:85:C5:28:A7:0D:2B:64:CB:0E:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/caf0457f-9c91-4448-9ab1-89863b146bb7.cer sbgp-ipAddrBlock: critical IPv4: 23.158.148.0/24 IPv6: 2602:f3b4::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:70:b6:f4:90:cd:41:81:ab:40:02:f7:cf:36:75:a1:fc:81: 63:2c:c7:44:d3:ca:45:da:b1:c3:ec:16:e5:ca:34:de:f0:dc: b5:26:c5:aa:0d:94:e6:92:c3:51:89:83:67:21:62:cf:7e:f6: 55:97:0f:6d:48:94:67:99:ab:b1:2a:d4:d3:9c:62:42:26:ec: 39:e1:94:49:5a:6d:72:66:95:c4:3d:33:3d:ba:65:92:37:11: 05:23:79:2d:01:e0:f4:4b:08:e2:1a:54:fb:7e:5d:37:4a:96: 45:80:fa:8a:f8:92:c4:f8:c1:26:e6:d7:5e:c4:26:b9:4b:e1: e2:52:e0:4a:57:ac:3a:64:fb:82:e6:07:d2:16:cd:88:ee:e6: b6:e2:02:3f:26:93:ae:53:fb:9e:2a:5f:3d:ec:bb:e4:8c:06: 77:19:43:32:28:d6:b4:69:83:19:23:b7:bd:0e:dc:75:24:ae: cd:45:6c:40:4a:a0:2f:af:5b:13:7d:c1:96:87:74:02:6e:50: 90:da:1f:f1:83:c3:3e:96:ca:cc:6e:51:b8:29:21:30:ae:a1: 5f:f3:4b:ac:3b:c7:59:41:69:40:af:3a:9c:88:1a:d6:80:d0: 63:84:a6:19:a4:37:e4:56:a3:72:33:40:b6:7d:92:85:7b:7b: 3d:60:47:1b -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE6nm0OmikUaLKiPlgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2FmMDQ1N2YtOWM5MS00NDQ4LTlhYjEtODk4NjNiMTQ2 YmI3MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ZTkwMDJlZmItZTRhYy00M2VmLWI2YzQtYjA0YWMzNTJjMGQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhTrFgCBMd4+8MvlQq85UN0roglZ/nKX7oZtr 2vIW+9mvIFNjAFQDHn0wEQOMdnvjTfGilmyRmyYNdbEaT17bS3NFOBgfhq8JV1n1 iUDoS4mNU8Uo9lsFuNa5YSl2oV0e8pg2zcmE8JvjAM40MIXcNfqpvpB0MVdlMJNi bHLiSfP5az+cvtdAlRFtPTWE8nlyFLcugTh4tH+AKClwZ8oulR8IBNK0U4/4NbMY bcpDpyx0zY8h0+jighsQZ0KOOck11lKqAB1nYKX4kUwFgqnbfNop4qQbhggy3k6y xoqH3dQPzPDk00QmJarYhbzo04SWBRHMEmPwszApU/kz4gqv9wIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFMkWfKYE+U1p3fy53d/quPN9uuzkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9jYWYw NDU3Zi05YzkxLTQ0NDgtOWFiMS04OTg2M2IxNDZiYjcvYThhY2VjZTEtMDBkYi0z OTBhLWJlZDUtMjMyYzc1NWU4OWMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvY2FmMDQ1N2YtOWM5MS00NDQ4LTlh YjEtODk4NjNiMTQ2YmI3L2NhZjA0NTdmLTljOTEtNDQ0OC05YWIxLTg5ODYzYjE0 NmJiNy5jcmwwHwYDVR0jBBgwFoAUQPtioi5pP2TsOYXFKKcNK2TLDggwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi9jYWYwNDU3Zi05YzkxLTQ0NDgtOWFiMS04OTg2 M2IxNDZiYjcuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF56UMA4E AgACMAgDBgAmAvO0ADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAscLb0kM1BgatAAvfPNnWh/IFjLMdE08pF 2rHD7BblyjTe8Ny1JsWqDZTmksNRiYNnIWLPfvZVlw9tSJRnmauxKtTTnGJCJuw5 4ZRJWm1yZpXEPTM9umWSNxEFI3ktAeD0SwjiGlT7fl03SpZFgPqK+JLE+MEm5tde xCa5S+HiUuBKV6w6ZPuC5gfSFs2I7ua24gI/JpOuU/ueKl897LvkjAZ3GUMyKNa0 aYMZI7e9Dtx1JK7NRWxASqAvr1sTfcGWh3QCblCQ2h/xg8M+lsrMblG4KSEwrqFf 80usO8dZQWlArzqciBrWgNBjhKYZpDfkVqNyM0C2fZKFe3s9YEcb -----END CERTIFICATE-----Generated at Sat Sep 5 08:58:50 2026 by rpki-client