$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/dd4ce57e-c75a-4199-ab3a-1e663124fa84/4f8160d2-2f77-3e96-8581-84d50b5ca8c4.roa File: 4f8160d2-2f77-3e96-8581-84d50b5ca8c4.roa (raw, json) Hash identifier: 2vjfOvLzXtjx/Qqw73wByL0+z3cj7hY0hL4cDgchdWc= Subject key identifier: A9:3E:E9:4E:BF:40:D4:04:77:B1:A9:30:B3:26:A1:B2:DD:B8:BF:4B Certificate issuer: /CN=dd4ce57e-c75a-4199-ab3a-1e663124fa84 Certificate serial: 010D0C9F4328584ECA6C67160C688B8C8A25BB80 Authority key identifier: E5:7F:5E:E9:67:53:20:B7:EA:65:22:E4:72:FF:A4:A9:1D:BB:E9:2C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/dd4ce57e-c75a-4199-ab3a-1e663124fa84.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/dd4ce57e-c75a-4199-ab3a-1e663124fa84/4f8160d2-2f77-3e96-8581-84d50b5ca8c4.roa Signing time: Mon 10 Aug 2026 13:00:12 +0000 ROA not before: Mon 10 Aug 2026 13:00:12 +0000 ROA not after: Sun 08 Nov 2026 14:00:12 +0000 asID: 1014 IP address blocks: 23.148.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/dd4ce57e-c75a-4199-ab3a-1e663124fa84/dd4ce57e-c75a-4199-ab3a-1e663124fa84.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/dd4ce57e-c75a-4199-ab3a-1e663124fa84/dd4ce57e-c75a-4199-ab3a-1e663124fa84.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/dd4ce57e-c75a-4199-ab3a-1e663124fa84.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 20 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ca:6c:67:16:0c:68:8b:8c:8a:25:bb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dd4ce57e-c75a-4199-ab3a-1e663124fa84 Validity Not Before: Aug 10 13:00:12 2026 GMT Not After : Nov 8 14:00:12 2026 GMT Subject: CN=02ac71d4-294e-4bf5-a5c1-70af48a3926a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:b7:43:35:14:46:e5:1c:45:8e:b8:f9:41:03: 95:04:89:70:10:68:9f:d1:b2:49:80:80:7e:95:1d: f2:ad:ae:3b:da:7a:3e:a6:ab:93:c3:d9:f2:0d:42: f6:cc:b0:13:19:e9:b7:04:81:b2:cf:95:ce:05:46: 78:9a:58:02:3b:f6:a5:94:6f:14:64:5b:15:0a:cd: d6:04:61:31:1f:82:b0:66:c9:24:fe:01:bc:22:f2: 19:40:c8:a4:09:37:be:30:7f:63:e9:27:75:5d:c1: d9:ac:c5:a5:9a:09:f6:54:4a:a8:21:82:e9:05:00: 27:54:b9:87:10:8b:15:26:a3:64:3f:b6:20:b5:52: 81:38:6e:ac:fd:bf:11:fb:98:f7:a2:ff:58:85:b9: a9:0e:63:02:90:c0:b9:17:09:30:e7:d7:28:b2:14: 76:f0:88:d3:8e:1c:9b:80:bd:1b:95:2b:02:c4:91: b7:7f:57:dd:d5:85:e1:86:19:c0:6b:3f:37:a5:84: af:32:35:6e:21:45:09:12:f2:34:7b:1b:bc:86:52: d3:50:23:de:75:10:45:3a:01:af:85:35:b3:e4:24: 0e:df:03:7b:b6:f6:ac:82:dc:e2:ea:67:0e:2a:66: 5f:63:bd:b0:0f:41:65:1a:a0:e4:0a:ec:27:a6:7e: d0:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:3E:E9:4E:BF:40:D4:04:77:B1:A9:30:B3:26:A1:B2:DD:B8:BF:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/dd4ce57e-c75a-4199-ab3a-1e663124fa84/4f8160d2-2f77-3e96-8581-84d50b5ca8c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/dd4ce57e-c75a-4199-ab3a-1e663124fa84/dd4ce57e-c75a-4199-ab3a-1e663124fa84.crl X509v3 Authority Key Identifier: keyid:E5:7F:5E:E9:67:53:20:B7:EA:65:22:E4:72:FF:A4:A9:1D:BB:E9:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/dd4ce57e-c75a-4199-ab3a-1e663124fa84.cer sbgp-ipAddrBlock: critical IPv4: 23.148.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:bf:ba:bc:e2:7a:ef:19:0d:38:e0:57:b9:ef:0c:f0:d3:1d: e5:81:73:23:a2:ff:cf:4f:03:d5:94:f9:81:07:36:3f:fa:06: 95:1c:66:8a:6c:ec:a5:4e:c9:03:90:17:3b:5d:0c:3f:1b:2d: 95:44:4a:63:14:28:0a:1b:57:3d:80:92:f8:d5:51:ad:80:d3: 24:c3:a1:12:98:ee:15:c0:0f:7d:bb:9b:26:ea:9a:81:dc:ab: e7:61:3e:35:5b:c9:c0:47:56:31:cc:e0:27:26:88:56:6b:e6: 33:c9:d8:85:de:17:fb:62:6f:94:ed:8a:b8:d7:0a:7a:c5:4f: 9e:b1:15:0b:3f:50:8d:e7:f5:8d:2f:cf:04:82:64:5f:97:e3: 84:a8:a6:c2:01:81:d8:05:4d:7f:5f:d0:bb:7c:23:f4:21:af: bd:a2:96:a5:d2:2b:7f:d7:35:89:22:5a:9f:8b:a3:06:e2:d1: c2:5c:4a:b6:48:28:32:47:07:26:6b:39:d5:54:dd:c1:4f:bd: ba:6c:ad:ed:14:65:5c:07:c3:00:8f:98:5d:49:5a:65:fe:e2: 44:7a:8a:72:4b:73:4b:8a:ed:1c:78:8c:31:a5:a2:46:1b:57: d1:d7:08:d6:a2:24:74:d8:c5:83:4c:92:83:e3:dd:d3:a2:85: a2:2a:0d:6b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7KbGcWDGiLjIolu4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGQ0Y2U1N2UtYzc1YS00MTk5LWFiM2EtMWU2NjMxMjRm YTg0MB4XDTI2MDgxMDEzMDAxMloXDTI2MTEwODE0MDAxMlowLzEtMCsGA1UEAxMk MDJhYzcxZDQtMjk0ZS00YmY1LWE1YzEtNzBhZjQ4YTM5MjZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnrdDNRRG5RxFjrj5QQOVBIlwEGif0bJJgIB+ lR3yra472no+pquTw9nyDUL2zLATGem3BIGyz5XOBUZ4mlgCO/allG8UZFsVCs3W BGExH4KwZskk/gG8IvIZQMikCTe+MH9j6Sd1XcHZrMWlmgn2VEqoIYLpBQAnVLmH EIsVJqNkP7YgtVKBOG6s/b8R+5j3ov9YhbmpDmMCkMC5Fwkw59coshR28IjTjhyb gL0blSsCxJG3f1fd1YXhhhnAaz83pYSvMjVuIUUJEvI0exu8hlLTUCPedRBFOgGv hTWz5CQO3wN7tvasgtzi6mcOKmZfY72wD0FlGqDkCuwnpn7QKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKk+6U6/QNQEd7GpMLMmobLduL9LMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9kZDRj ZTU3ZS1jNzVhLTQxOTktYWIzYS0xZTY2MzEyNGZhODQvNGY4MTYwZDItMmY3Ny0z ZTk2LTg1ODEtODRkNTBiNWNhOGM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvZGQ0Y2U1N2UtYzc1YS00MTk5LWFi M2EtMWU2NjMxMjRmYTg0L2RkNGNlNTdlLWM3NWEtNDE5OS1hYjNhLTFlNjYzMTI0 ZmE4NC5jcmwwHwYDVR0jBBgwFoAU5X9e6WdTILfqZSLkcv+kqR276SwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi9kZDRjZTU3ZS1jNzVhLTQxOTktYWIzYS0xZTY2 MzEyNGZhODQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5TcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAG/urzieu8ZDTjgV7nvDPDTHeWBcyOi/89PA9WU+YEHNj/6BpUcZops 7KVOyQOQFztdDD8bLZVESmMUKAobVz2AkvjVUa2A0yTDoRKY7hXAD327mybqmoHc q+dhPjVbycBHVjHM4CcmiFZr5jPJ2IXeF/tib5TtirjXCnrFT56xFQs/UI3n9Y0v zwSCZF+X44SopsIBgdgFTX9f0Lt8I/Qhr72ilqXSK3/XNYkiWp+Lowbi0cJcSrZI KDJHByZrOdVU3cFPvbpsre0UZVwHwwCPmF1JWmX+4kR6inJLc0uK7Rx4jDGlokYb V9HXCNaiJHTYxYNMkoPj3dOihaIqDWs= -----END CERTIFICATE-----Generated at Sat Sep 19 12:40:52 2026 by rpki-client