$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/48326eaa-5ad2-46c1-8423-bcf18b6d4283/f6a4375e-a838-3d6a-b830-213e7dc77aec.roa File: f6a4375e-a838-3d6a-b830-213e7dc77aec.roa (raw, json) Hash identifier: VQ48DSr4UGEYRjgnYAnHYZl7/ApXQ5JOlPFvZmeyHCA= Subject key identifier: E0:21:B6:79:5D:05:11:D0:9B:D1:A3:72:EA:41:28:14:CC:5A:B5:47 Certificate issuer: /CN=48326eaa-5ad2-46c1-8423-bcf18b6d4283 Certificate serial: 010D0C9F4328584F94D3410253AB1FC935738B00 Authority key identifier: 2E:E1:7C:C7:66:B7:6E:2A:F0:F3:FC:D4:6E:31:F8:33:EC:51:BC:5F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/48326eaa-5ad2-46c1-8423-bcf18b6d4283.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/48326eaa-5ad2-46c1-8423-bcf18b6d4283/f6a4375e-a838-3d6a-b830-213e7dc77aec.roa Signing time: Thu 22 Oct 2026 01:00:12 +0000 ROA not before: Thu 22 Oct 2026 01:00:12 +0000 ROA not after: Wed 20 Jan 2027 02:00:12 +0000 asID: 20278 IP address blocks: 23.186.112.0/24 maxlen: 24 2602:fc41::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/48326eaa-5ad2-46c1-8423-bcf18b6d4283/48326eaa-5ad2-46c1-8423-bcf18b6d4283.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/48326eaa-5ad2-46c1-8423-bcf18b6d4283/48326eaa-5ad2-46c1-8423-bcf18b6d4283.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/48326eaa-5ad2-46c1-8423-bcf18b6d4283.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 30 Oct 2026 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:94:d3:41:02:53:ab:1f:c9:35:73:8b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=48326eaa-5ad2-46c1-8423-bcf18b6d4283 Validity Not Before: Oct 22 01:00:12 2026 GMT Not After : Jan 20 02:00:12 2027 GMT Subject: CN=880b67d0-e06a-40fd-ac36-84cf5b2ca2a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:f6:5d:0f:98:f3:f5:24:11:00:0a:f8:a0:58: 89:8c:ff:fb:ce:10:eb:d4:ca:f0:2c:10:78:4f:c6: dd:71:a3:01:f5:6f:73:a5:35:e7:64:56:5e:28:f5: 38:14:00:07:8b:ed:85:dc:a3:f7:92:70:3c:78:bd: 3c:78:c4:66:64:b8:a1:d0:12:21:8a:ab:98:a6:52: c3:cc:2d:37:af:d8:f4:e9:94:08:0c:8b:e2:a4:24: 0b:0d:5e:44:9d:e5:d9:10:93:3b:e9:b3:e9:d3:3f: 09:fe:51:f4:bb:e0:8c:ca:2b:08:dd:6c:38:fe:3c: 05:db:d2:81:dd:72:86:f2:f5:9f:3e:f0:ae:15:82: 11:07:13:a9:6e:73:b9:91:ce:02:f8:9b:71:74:fa: f2:92:ca:03:c5:7b:c5:1f:47:7e:5f:1b:6e:38:5b: eb:fe:d5:61:35:28:4e:9d:18:fc:c6:50:0e:e8:9d: 8c:e6:26:b3:f2:8b:cb:a1:63:1c:85:a2:7a:0d:e5: 3d:86:81:f4:06:d5:a0:6f:ad:01:53:26:d5:44:31: ba:25:39:f5:c9:32:d2:a8:cc:25:91:86:01:19:0d: 0e:50:c5:9c:b5:82:9d:77:0b:5d:92:53:8d:b4:49: 41:36:3f:cc:6e:21:66:7c:43:23:8e:45:e2:f0:60: e9:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:21:B6:79:5D:05:11:D0:9B:D1:A3:72:EA:41:28:14:CC:5A:B5:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/48326eaa-5ad2-46c1-8423-bcf18b6d4283/f6a4375e-a838-3d6a-b830-213e7dc77aec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/48326eaa-5ad2-46c1-8423-bcf18b6d4283/48326eaa-5ad2-46c1-8423-bcf18b6d4283.crl X509v3 Authority Key Identifier: keyid:2E:E1:7C:C7:66:B7:6E:2A:F0:F3:FC:D4:6E:31:F8:33:EC:51:BC:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/48326eaa-5ad2-46c1-8423-bcf18b6d4283.cer sbgp-ipAddrBlock: critical IPv4: 23.186.112.0/24 IPv6: 2602:fc41::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c2:cd:00:39:9f:ad:e4:8a:66:3b:79:8e:1a:17:9a:9e:c4:4b: 72:88:9e:f6:f5:39:f1:dc:82:7d:36:e3:cb:76:d6:bc:06:36: c1:7f:31:df:05:53:72:58:2c:b8:e4:32:7f:74:37:33:19:00: 77:33:9e:b9:38:86:d8:4c:2b:b3:3c:8c:63:ca:2e:85:76:ba: e7:0e:42:6d:ab:2c:79:99:d1:34:fc:c8:fe:1b:2f:85:62:b7: 78:37:c9:98:9b:23:e0:03:1d:ca:7d:91:27:7a:b1:25:ea:c0: 7b:a3:0b:6c:3e:72:c7:c8:24:fc:c0:34:aa:d2:0f:0e:2f:e1: 66:d6:9b:a5:b8:92:fa:63:39:e1:4b:4a:48:f5:0b:27:15:39: 65:60:30:d7:41:3e:ff:a0:6a:64:8b:8c:e2:8c:7f:84:bb:cd: 79:61:3a:9b:89:71:d1:02:84:7a:ec:45:96:8d:ca:ae:10:0f: ba:ee:da:2e:68:b7:24:a8:bf:0b:60:10:f4:30:c6:55:c1:b9: 04:1b:1c:ef:2c:11:31:ed:05:25:8e:55:bd:5c:55:91:ce:dc: c9:a9:e3:92:3d:b8:cb:9b:69:9c:91:f1:17:d4:21:5e:34:fe: 8e:d2:ec:73:ec:5c:b7:73:c8:be:6b:ac:10:f1:4e:a7:fb:ef: 7b:4d:77:71 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE+U00ECU6sfyTVziwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDgzMjZlYWEtNWFkMi00NmMxLTg0MjMtYmNmMThiNmQ0 MjgzMB4XDTI2MTAyMjAxMDAxMloXDTI3MDEyMDAyMDAxMlowLzEtMCsGA1UEAxMk ODgwYjY3ZDAtZTA2YS00MGZkLWFjMzYtODRjZjViMmNhMmExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm/ZdD5jz9SQRAAr4oFiJjP/7zhDr1MrwLBB4 T8bdcaMB9W9zpTXnZFZeKPU4FAAHi+2F3KP3knA8eL08eMRmZLih0BIhiquYplLD zC03r9j06ZQIDIvipCQLDV5EneXZEJM76bPp0z8J/lH0u+CMyisI3Ww4/jwF29KB 3XKG8vWfPvCuFYIRBxOpbnO5kc4C+JtxdPryksoDxXvFH0d+XxtuOFvr/tVhNShO nRj8xlAO6J2M5iaz8ovLoWMchaJ6DeU9hoH0BtWgb60BUybVRDG6JTn1yTLSqMwl kYYBGQ0OUMWctYKddwtdklONtElBNj/MbiFmfEMjjkXi8GDpkQIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFOAhtnldBRHQm9GjcupBKBTMWrVHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ODMy NmVhYS01YWQyLTQ2YzEtODQyMy1iY2YxOGI2ZDQyODMvZjZhNDM3NWUtYTgzOC0z ZDZhLWI4MzAtMjEzZTdkYzc3YWVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNDgzMjZlYWEtNWFkMi00NmMxLTg0 MjMtYmNmMThiNmQ0MjgzLzQ4MzI2ZWFhLTVhZDItNDZjMS04NDIzLWJjZjE4YjZk NDI4My5jcmwwHwYDVR0jBBgwFoAULuF8x2a3birw8/zUbjH4M+xRvF8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80ODMyNmVhYS01YWQyLTQ2YzEtODQyMy1iY2Yx OGI2ZDQyODMuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF7pwMA4E AgACMAgDBgAmAvxBADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQDCzQA5n63kimY7eY4aF5qexEtyiJ729Tnx 3IJ9NuPLdta8BjbBfzHfBVNyWCy45DJ/dDczGQB3M565OIbYTCuzPIxjyi6Fdrrn DkJtqyx5mdE0/Mj+Gy+FYrd4N8mYmyPgAx3KfZEnerEl6sB7owtsPnLHyCT8wDSq 0g8OL+Fm1puluJL6YznhS0pI9QsnFTllYDDXQT7/oGpki4zijH+Eu815YTqbiXHR AoR67EWWjcquEA+67touaLckqL8LYBD0MMZVwbkEGxzvLBEx7QUljlW9XFWRztzJ qeOSPbjLm2mckfEX1CFeNP6O0uxz7Fy3c8i+a6wQ8U6n++97TXdx -----END CERTIFICATE-----Generated at Tue Oct 27 20:35:28 2026 by rpki-client