$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/845381b0-384a-4243-95e1-ae5dd9916fd7/2a96e1c8-e510-35b1-b0ed-2f58569aac75.roa File: 2a96e1c8-e510-35b1-b0ed-2f58569aac75.roa (raw, json) Hash identifier: njb2PH2+N40+uYlTviASNiHBo1KTzaeO1+WGom91bzg= Subject key identifier: 4E:8C:C9:05:0A:05:9D:29:A0:6A:02:23:DC:62:14:13:B8:79:34:34 Certificate issuer: /CN=845381b0-384a-4243-95e1-ae5dd9916fd7 Certificate serial: 010D0C9F4328584F4C3D532454B3E62C24793E40 Authority key identifier: CB:FC:80:79:7D:34:80:E4:19:8F:0D:A6:8E:CB:C6:E2:03:D3:60:29 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/845381b0-384a-4243-95e1-ae5dd9916fd7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/845381b0-384a-4243-95e1-ae5dd9916fd7/2a96e1c8-e510-35b1-b0ed-2f58569aac75.roa Signing time: Sat 26 Sep 2026 01:00:13 +0000 ROA not before: Sat 26 Sep 2026 01:00:13 +0000 ROA not after: Fri 25 Dec 2026 02:00:13 +0000 asID: 63023 IP address blocks: 23.158.56.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/845381b0-384a-4243-95e1-ae5dd9916fd7/845381b0-384a-4243-95e1-ae5dd9916fd7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/845381b0-384a-4243-95e1-ae5dd9916fd7/845381b0-384a-4243-95e1-ae5dd9916fd7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/845381b0-384a-4243-95e1-ae5dd9916fd7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 Oct 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:4c:3d:53:24:54:b3:e6:2c:24:79:3e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=845381b0-384a-4243-95e1-ae5dd9916fd7 Validity Not Before: Sep 26 01:00:13 2026 GMT Not After : Dec 25 02:00:13 2026 GMT Subject: CN=b48d84eb-26f4-439a-a347-a79e3e47bd4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:2c:0d:41:5c:bb:c9:07:89:ed:9b:26:09:32: 96:cb:72:cf:08:70:5c:ab:fb:7e:08:08:b9:27:19: 3c:02:25:c2:d1:1d:e4:ae:8f:46:4a:8d:03:f6:c8: a7:a4:58:6a:b7:ad:a5:62:21:40:52:b0:74:57:41: 1d:5c:9a:2c:54:77:b3:3b:62:d9:18:0a:b2:9c:00: d6:1b:30:33:35:31:20:69:95:54:89:59:1e:92:27: ab:34:1a:fd:60:6c:c7:b4:34:2c:cc:6d:c7:ad:25: d4:fd:dd:41:db:e2:53:a9:b4:f6:45:94:8c:1f:90: ff:67:c6:05:25:3e:e0:bb:1c:72:80:37:38:0b:46: 6a:31:c7:81:33:3b:dd:a3:04:8c:5e:09:21:fe:75: 00:13:d4:cc:66:1e:f4:68:47:2a:97:26:4a:5f:d2: dc:c2:2f:0e:1c:11:c1:06:55:26:2b:f9:38:f9:d9: 5d:90:b4:95:af:b5:84:fb:c6:4f:3a:7e:3c:69:d2: ff:ee:10:97:a2:9a:12:8a:d3:fd:7c:f3:fb:e4:b2: f9:e3:67:1c:28:3c:16:bf:66:ca:7e:cd:99:d0:3c: 43:da:65:fc:4d:ff:8a:07:4f:07:37:4e:55:cf:53: 1c:61:62:db:00:cd:86:a0:51:e4:32:ed:58:82:ee: bb:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:8C:C9:05:0A:05:9D:29:A0:6A:02:23:DC:62:14:13:B8:79:34:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/845381b0-384a-4243-95e1-ae5dd9916fd7/2a96e1c8-e510-35b1-b0ed-2f58569aac75.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/845381b0-384a-4243-95e1-ae5dd9916fd7/845381b0-384a-4243-95e1-ae5dd9916fd7.crl X509v3 Authority Key Identifier: keyid:CB:FC:80:79:7D:34:80:E4:19:8F:0D:A6:8E:CB:C6:E2:03:D3:60:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/845381b0-384a-4243-95e1-ae5dd9916fd7.cer sbgp-ipAddrBlock: critical IPv4: 23.158.56.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:05:46:6e:8a:5c:d0:3d:1a:49:bd:5d:4d:37:70:b0:ba:c5: 0d:95:ae:38:44:c9:f8:85:1c:ff:12:73:62:03:35:b7:0d:2e: 6e:91:b6:d7:f0:02:9e:28:79:d5:0a:ec:d0:01:2f:ce:19:dc: f1:a4:3c:02:40:1b:9b:af:0c:36:34:5e:e9:3a:c5:92:f0:93: 21:8b:57:81:1f:42:be:45:ec:f5:4f:14:e5:fd:43:4b:45:05: 38:ea:42:e9:b1:10:a6:10:26:c6:89:4f:7a:e8:24:e5:2c:14: a0:73:c1:02:10:21:cc:d2:22:75:3a:c6:a4:db:e4:fc:7c:2f: 18:d2:6b:dc:5b:69:9f:52:c2:37:26:04:7c:72:68:ec:ba:b7: f5:22:bd:2c:5a:b1:c1:78:7b:51:ca:8f:38:f4:63:20:ab:33: c5:51:a2:3d:bb:ed:ac:43:20:e8:de:84:2c:d5:c9:6b:6e:64: 5b:d1:ad:f2:99:89:62:93:90:7d:98:d5:7d:6f:11:d0:ba:8f: 1f:c1:bb:ce:d4:f4:6a:41:58:0a:bd:50:5a:c3:2c:d8:fd:12: a2:22:aa:59:be:28:6d:af:f3:91:cd:42:98:d6:78:f0:7e:8d: e5:22:10:68:5f:23:70:f4:05:ed:f5:a2:ae:6e:67:6e:be:b9: 0e:24:fa:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9MPVMkVLPmLCR5PkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODQ1MzgxYjAtMzg0YS00MjQzLTk1ZTEtYWU1ZGQ5OTE2 ZmQ3MB4XDTI2MDkyNjAxMDAxM1oXDTI2MTIyNTAyMDAxM1owLzEtMCsGA1UEAxMk YjQ4ZDg0ZWItMjZmNC00MzlhLWEzNDctYTc5ZTNlNDdiZDRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArCwNQVy7yQeJ7ZsmCTKWy3LPCHBcq/t+CAi5 Jxk8AiXC0R3kro9GSo0D9sinpFhqt62lYiFAUrB0V0EdXJosVHezO2LZGAqynADW GzAzNTEgaZVUiVkekierNBr9YGzHtDQszG3HrSXU/d1B2+JTqbT2RZSMH5D/Z8YF JT7guxxygDc4C0ZqMceBMzvdowSMXgkh/nUAE9TMZh70aEcqlyZKX9Lcwi8OHBHB BlUmK/k4+dldkLSVr7WE+8ZPOn48adL/7hCXopoSitP9fPP75LL542ccKDwWv2bK fs2Z0DxD2mX8Tf+KB08HN05Vz1McYWLbAM2GoFHkMu1Ygu672QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE6MyQUKBZ0poGoCI9xiFBO4eTQ0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi84NDUz ODFiMC0zODRhLTQyNDMtOTVlMS1hZTVkZDk5MTZmZDcvMmE5NmUxYzgtZTUxMC0z NWIxLWIwZWQtMmY1ODU2OWFhYzc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvODQ1MzgxYjAtMzg0YS00MjQzLTk1 ZTEtYWU1ZGQ5OTE2ZmQ3Lzg0NTM4MWIwLTM4NGEtNDI0My05NWUxLWFlNWRkOTkx NmZkNy5jcmwwHwYDVR0jBBgwFoAUy/yAeX00gOQZjw2mjsvG4gPTYCkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi84NDUzODFiMC0zODRhLTQyNDMtOTVlMS1hZTVk ZDk5MTZmZDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF544MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI0FRm6KXNA9Gkm9XU03cLC6xQ2VrjhEyfiFHP8Sc2IDNbcNLm6Rttfw Ap4oedUK7NABL84Z3PGkPAJAG5uvDDY0Xuk6xZLwkyGLV4EfQr5F7PVPFOX9Q0tF BTjqQumxEKYQJsaJT3roJOUsFKBzwQIQIczSInU6xqTb5Px8LxjSa9xbaZ9Swjcm BHxyaOy6t/UivSxascF4e1HKjzj0YyCrM8VRoj277axDIOjehCzVyWtuZFvRrfKZ iWKTkH2Y1X1vEdC6jx/Bu87U9GpBWAq9UFrDLNj9EqIiqlm+KG2v85HNQpjWePB+ jeUiEGhfI3D0Be31oq5uZ26+uQ4k+nM= -----END CERTIFICATE-----Generated at Tue Oct 13 20:30:07 2026 by rpki-client