$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/afdb7b70-bb28-4db3-8af5-2daa1a5b10e0/1a43c809-86cd-3b9d-92ef-9d674b98686d.roa File: 1a43c809-86cd-3b9d-92ef-9d674b98686d.roa (raw, json) Hash identifier: 7tcR8L/kHI+e95zlGldRzDijIbNei0a3OUv2HKEh4uo= Subject key identifier: F6:D8:A3:79:4F:ED:D4:CE:60:90:D3:09:F4:F4:B2:32:F6:C4:1F:A6 Certificate issuer: /CN=afdb7b70-bb28-4db3-8af5-2daa1a5b10e0 Certificate serial: 010D0C9F4328584F2C333915EB65CEBD0541B5C0 Authority key identifier: 41:F7:1F:2B:24:78:89:7D:9D:DD:A3:40:7E:D3:9F:61:5B:F0:14:E3 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/afdb7b70-bb28-4db3-8af5-2daa1a5b10e0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/afdb7b70-bb28-4db3-8af5-2daa1a5b10e0/1a43c809-86cd-3b9d-92ef-9d674b98686d.roa Signing time: Mon 14 Sep 2026 13:34:14 +0000 ROA not before: Mon 14 Sep 2026 13:34:14 +0000 ROA not after: Sun 13 Dec 2026 14:34:14 +0000 asID: 53813 IP address blocks: 148.107.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/afdb7b70-bb28-4db3-8af5-2daa1a5b10e0/afdb7b70-bb28-4db3-8af5-2daa1a5b10e0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/afdb7b70-bb28-4db3-8af5-2daa1a5b10e0/afdb7b70-bb28-4db3-8af5-2daa1a5b10e0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/afdb7b70-bb28-4db3-8af5-2daa1a5b10e0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 20 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:2c:33:39:15:eb:65:ce:bd:05:41:b5:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=afdb7b70-bb28-4db3-8af5-2daa1a5b10e0 Validity Not Before: Sep 14 13:34:14 2026 GMT Not After : Dec 13 14:34:14 2026 GMT Subject: CN=8b394147-e289-4c47-a978-fa18cf95f166 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:2d:63:6d:72:97:4e:5e:17:90:29:e3:2e:25: 64:64:9b:ac:fc:7a:70:14:34:ac:af:1f:ac:d1:9c: 52:74:57:d5:f6:3c:85:50:db:8d:70:12:42:f4:88: e3:72:a7:9e:0a:73:2d:90:fb:fe:07:43:da:e4:58: f1:66:b7:95:bc:59:85:20:53:d8:56:07:22:a1:18: 5a:00:9f:55:0f:56:b4:72:78:0b:84:34:e2:79:b1: 49:37:83:73:3c:43:65:99:08:5f:a8:43:7c:75:70: ad:b7:0d:65:39:d4:48:6b:bf:ae:85:86:f2:d3:08: 62:11:3d:fc:76:8a:8a:1b:7f:14:32:c3:2a:b9:c0: e6:c1:a3:e3:a2:9b:63:94:9b:c6:b6:63:4f:9e:9e: 19:4f:e9:d5:26:7a:65:3c:12:4a:fb:6b:b3:bc:f7: 51:69:ec:1a:b2:e3:c6:cf:28:c0:30:28:a5:b3:50: a1:20:b0:03:c8:81:ce:44:cb:ef:ef:57:bc:b1:07: ae:56:9d:f0:21:7c:36:b3:59:5d:81:83:c8:d0:c8: 45:a1:39:d3:10:69:21:52:63:1d:d3:75:ff:f7:67: 4b:8c:d1:52:2e:48:ce:59:a5:20:97:7c:63:9f:cc: 15:f4:c5:6a:78:1b:37:e4:c9:50:3f:31:ef:58:4c: 48:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:D8:A3:79:4F:ED:D4:CE:60:90:D3:09:F4:F4:B2:32:F6:C4:1F:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/afdb7b70-bb28-4db3-8af5-2daa1a5b10e0/1a43c809-86cd-3b9d-92ef-9d674b98686d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/afdb7b70-bb28-4db3-8af5-2daa1a5b10e0/afdb7b70-bb28-4db3-8af5-2daa1a5b10e0.crl X509v3 Authority Key Identifier: keyid:41:F7:1F:2B:24:78:89:7D:9D:DD:A3:40:7E:D3:9F:61:5B:F0:14:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/afdb7b70-bb28-4db3-8af5-2daa1a5b10e0.cer sbgp-ipAddrBlock: critical IPv4: 148.107.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption e1:b8:83:f8:43:f0:41:0d:ce:04:23:b4:11:bd:61:39:02:ec: ff:c0:a8:13:1f:65:ae:5e:03:3c:17:7b:9a:5f:f5:7a:84:4b: 8f:5c:5d:e0:8c:38:85:31:83:84:ad:d9:49:71:58:61:18:3b: ed:cb:45:ab:00:da:c2:c3:77:3d:c1:85:73:2d:8d:3e:56:f9: 06:fa:3d:2c:26:5a:2b:6d:10:2a:90:27:66:73:f5:df:ce:f0: 65:8b:d9:9b:1a:e0:83:29:94:e7:7d:21:0e:a6:8c:50:e9:aa: 33:f6:ca:00:89:70:1f:a4:5e:01:e3:4a:86:79:3e:d8:74:70: 67:5c:72:d4:92:ef:70:b0:f3:6d:5a:ec:59:d1:6f:96:a7:4c: fa:62:21:cb:f9:ed:21:ae:e2:17:b5:d3:6d:d8:8d:b0:86:06: b6:7e:54:5d:72:8a:ae:de:d1:b9:94:e5:f3:ac:c0:e4:24:69: 17:d8:40:c9:da:40:99:72:f3:96:c6:5c:95:a9:de:f3:7e:51: 4b:a9:5e:7d:25:b4:17:18:a7:05:a4:75:1a:80:02:8a:d5:26: c7:56:74:39:4a:ea:2b:29:9d:4d:cb:21:c0:15:02:4c:92:9c: f6:c5:df:78:06:61:a2:21:c6:20:ba:1f:72:68:ce:68:b9:22: bb:bf:8e:3e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8sMzkV62XOvQVBtcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWZkYjdiNzAtYmIyOC00ZGIzLThhZjUtMmRhYTFhNWIx MGUwMB4XDTI2MDkxNDEzMzQxNFoXDTI2MTIxMzE0MzQxNFowLzEtMCsGA1UEAxMk OGIzOTQxNDctZTI4OS00YzQ3LWE5NzgtZmExOGNmOTVmMTY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAli1jbXKXTl4XkCnjLiVkZJus/HpwFDSsrx+s 0ZxSdFfV9jyFUNuNcBJC9IjjcqeeCnMtkPv+B0Pa5FjxZreVvFmFIFPYVgcioRha AJ9VD1a0cngLhDTiebFJN4NzPENlmQhfqEN8dXCttw1lOdRIa7+uhYby0whiET38 doqKG38UMsMqucDmwaPjoptjlJvGtmNPnp4ZT+nVJnplPBJK+2uzvPdRaewasuPG zyjAMCils1ChILADyIHORMvv71e8sQeuVp3wIXw2s1ldgYPI0MhFoTnTEGkhUmMd 03X/92dLjNFSLkjOWaUgl3xjn8wV9MVqeBs35MlQPzHvWExICwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPbYo3lP7dTOYJDTCfT0sjL2xB+mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi9hZmRi N2I3MC1iYjI4LTRkYjMtOGFmNS0yZGFhMWE1YjEwZTAvMWE0M2M4MDktODZjZC0z YjlkLTkyZWYtOWQ2NzRiOTg2ODZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82MTVmZTFkZC1k ODI5LTRjODctYjJjYy01Njg5MzgxYTNjNDIvYWZkYjdiNzAtYmIyOC00ZGIzLThh ZjUtMmRhYTFhNWIxMGUwL2FmZGI3YjcwLWJiMjgtNGRiMy04YWY1LTJkYWExYTVi MTBlMC5jcmwwHwYDVR0jBBgwFoAUQfcfKyR4iX2d3aNAftOfYVvwFOMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4 Ny1iMmNjLTU2ODkzODFhM2M0Mi9hZmRiN2I3MC1iYjI4LTRkYjMtOGFmNS0yZGFh MWE1YjEwZTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlGvkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAOG4g/hD8EENzgQjtBG9YTkC7P/AqBMfZa5eAzwXe5pf9XqES49cXeCM OIUxg4St2UlxWGEYO+3LRasA2sLDdz3BhXMtjT5W+Qb6PSwmWittECqQJ2Zz9d/O 8GWL2Zsa4IMplOd9IQ6mjFDpqjP2ygCJcB+kXgHjSoZ5Pth0cGdcctSS73Cw821a 7FnRb5anTPpiIcv57SGu4he1023YjbCGBrZ+VF1yiq7e0bmU5fOswOQkaRfYQMna QJly85bGXJWp3vN+UUupXn0ltBcYpwWkdRqAAorVJsdWdDlK6ispnU3LIcAVAkyS nPbF33gGYaIhxiC6H3Jozmi5Iru/jj4= -----END CERTIFICATE-----Generated at Sat Sep 19 14:06:33 2026 by rpki-client