$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cb5b14dc-69ee-4b58-b27d-78fe51b1335f/295d13d7-99ef-33dd-a625-3a2596a0f75d.roa File: 295d13d7-99ef-33dd-a625-3a2596a0f75d.roa (raw, json) Hash identifier: 0fElsM3bYQzProfDxk6PAf8XgaeRBdkNxlQ1kJQwOvM= Subject key identifier: 93:9A:CF:78:7B:44:1A:0E:D7:E0:92:1A:BC:B1:87:C1:FF:F6:3C:1E Certificate issuer: /CN=cb5b14dc-69ee-4b58-b27d-78fe51b1335f Certificate serial: 010D0C9F4328584F1B624B11177CDAD978F999C0 Authority key identifier: A1:9A:77:2F:FD:70:E8:07:64:E2:E3:1C:A4:41:24:B6:42:51:05:D1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cb5b14dc-69ee-4b58-b27d-78fe51b1335f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cb5b14dc-69ee-4b58-b27d-78fe51b1335f/295d13d7-99ef-33dd-a625-3a2596a0f75d.roa Signing time: Tue 08 Sep 2026 13:00:12 +0000 ROA not before: Tue 08 Sep 2026 13:00:12 +0000 ROA not after: Mon 07 Dec 2026 14:00:12 +0000 asID: 401010 IP address blocks: 23.148.136.0/24 maxlen: 24 130.51.77.0/24 maxlen: 24 2602:face::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cb5b14dc-69ee-4b58-b27d-78fe51b1335f/cb5b14dc-69ee-4b58-b27d-78fe51b1335f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cb5b14dc-69ee-4b58-b27d-78fe51b1335f/cb5b14dc-69ee-4b58-b27d-78fe51b1335f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cb5b14dc-69ee-4b58-b27d-78fe51b1335f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:1b:62:4b:11:17:7c:da:d9:78:f9:99:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb5b14dc-69ee-4b58-b27d-78fe51b1335f Validity Not Before: Sep 8 13:00:12 2026 GMT Not After : Dec 7 14:00:12 2026 GMT Subject: CN=0d3b8d98-42aa-49b7-9782-bb3216fc3510 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:66:86:a1:12:e2:e4:23:de:25:ba:3d:45:a0: c3:e2:37:0c:57:8a:f1:6d:12:f5:eb:c5:53:42:87: 28:19:f3:3f:46:c8:c8:c2:96:75:81:e5:ca:c5:a1: 42:70:f3:45:4d:c4:bc:39:cf:61:80:8b:08:7d:6b: 89:90:fd:c2:ce:01:d8:22:2e:81:e8:65:b3:dd:c2: 54:86:9c:22:8e:cb:de:f9:26:54:ac:11:e3:4b:88: 79:b0:7d:c5:43:dd:02:d1:2b:1f:eb:94:a9:c4:d5: 04:7a:ef:79:e4:81:dc:56:a9:34:e5:a1:2f:81:35: ab:15:85:8b:7c:1a:85:3e:fb:67:55:9e:45:20:cf: a3:e3:2f:c6:75:19:af:87:46:a7:65:09:ce:94:9d: 7d:6d:42:f5:2d:af:5e:a3:e4:77:e7:c2:14:f2:01: 14:af:4c:89:2d:03:ef:67:8e:2c:b1:1d:eb:c6:ec: e3:f0:81:56:da:2d:c1:49:7c:31:ec:c0:1d:4d:96: 5b:2e:c9:17:4c:3b:2e:20:c9:a7:bc:de:13:cb:ef: a3:50:bf:7b:83:a4:d4:72:60:7a:84:d4:55:6d:4f: e0:88:ff:8f:50:55:44:c3:21:28:d5:89:ee:7a:a1: ad:33:8a:8c:c7:8a:cc:a7:ae:eb:35:02:06:9c:7b: a7:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:9A:CF:78:7B:44:1A:0E:D7:E0:92:1A:BC:B1:87:C1:FF:F6:3C:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cb5b14dc-69ee-4b58-b27d-78fe51b1335f/295d13d7-99ef-33dd-a625-3a2596a0f75d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cb5b14dc-69ee-4b58-b27d-78fe51b1335f/cb5b14dc-69ee-4b58-b27d-78fe51b1335f.crl X509v3 Authority Key Identifier: keyid:A1:9A:77:2F:FD:70:E8:07:64:E2:E3:1C:A4:41:24:B6:42:51:05:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cb5b14dc-69ee-4b58-b27d-78fe51b1335f.cer sbgp-ipAddrBlock: critical IPv4: 23.148.136.0/24 130.51.77.0/24 IPv6: 2602:face::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:b6:52:18:58:28:bf:0d:e3:fa:e1:47:4c:e4:28:bb:3f:1e: af:3f:13:46:85:33:7e:40:3b:5e:be:e8:49:2e:7d:c4:48:95: 76:01:8f:53:25:d8:96:50:c9:6c:f3:a6:0f:37:cb:f8:a6:88: 26:86:01:94:80:40:1d:83:b3:cb:78:66:74:08:fb:bd:09:24: b7:37:6d:d7:df:ff:af:db:50:f9:ad:b8:c7:1f:23:35:8a:b3: 68:7b:3c:28:e9:86:83:33:c4:8e:70:cc:4c:d7:d4:69:eb:7b: b4:15:1c:ee:d5:15:8f:6f:a5:08:cf:68:ba:ac:36:65:8d:97: a0:27:45:25:49:fb:04:22:2b:0a:23:5a:97:55:18:bf:68:a6: e5:ec:f8:64:bd:67:ea:e2:ca:a0:ca:f5:2b:e0:ae:72:d7:5b: 6f:b5:fa:bc:f2:85:60:9f:17:f4:96:9c:43:77:5e:03:ed:3b: 05:aa:9d:f0:0a:64:e5:e2:69:17:7e:4d:14:b4:a5:9a:0d:20: 70:24:1a:0d:05:58:ee:17:5d:a4:29:b1:fb:a0:fc:ad:a9:e8: 0b:6a:7e:a5:ea:37:e6:50:df:f8:6c:bb:6c:f9:61:c3:8c:c7: 44:18:52:f9:9f:9b:54:58:5f:51:85:44:d0:0d:4c:c7:c6:87: 06:6f:f5:e8 -----BEGIN CERTIFICATE----- MIIGWTCCBUGgAwIBAgIUAQ0Mn0MoWE8bYksRF3za2Xj5mcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2I1YjE0ZGMtNjllZS00YjU4LWIyN2QtNzhmZTUxYjEz MzVmMB4XDTI2MDkwODEzMDAxMloXDTI2MTIwNzE0MDAxMlowLzEtMCsGA1UEAxMk MGQzYjhkOTgtNDJhYS00OWI3LTk3ODItYmIzMjE2ZmMzNTEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgmaGoRLi5CPeJbo9RaDD4jcMV4rxbRL168VT QocoGfM/RsjIwpZ1geXKxaFCcPNFTcS8Oc9hgIsIfWuJkP3CzgHYIi6B6GWz3cJU hpwijsve+SZUrBHjS4h5sH3FQ90C0Ssf65SpxNUEeu955IHcVqk05aEvgTWrFYWL fBqFPvtnVZ5FIM+j4y/GdRmvh0anZQnOlJ19bUL1La9eo+R358IU8gEUr0yJLQPv Z44ssR3rxuzj8IFW2i3BSXwx7MAdTZZbLskXTDsuIMmnvN4Ty++jUL97g6TUcmB6 hNRVbU/giP+PUFVEwyEo1YnueqGtM4qMx4rMp67rNQIGnHun7wIDAQABo4IDazCC A2cwHQYDVR0OBBYEFJOaz3h7RBoO1+CSGryxh8H/9jweMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9jYjVi MTRkYy02OWVlLTRiNTgtYjI3ZC03OGZlNTFiMTMzNWYvMjk1ZDEzZDctOTllZi0z M2RkLWE2MjUtM2EyNTk2YTBmNzVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvY2I1YjE0ZGMtNjllZS00YjU4LWIy N2QtNzhmZTUxYjEzMzVmL2NiNWIxNGRjLTY5ZWUtNGI1OC1iMjdkLTc4ZmU1MWIx MzM1Zi5jcmwwHwYDVR0jBBgwFoAUoZp3L/1w6Adk4uMcpEEktkJRBdEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9jYjViMTRkYy02OWVlLTRiNTgtYjI3ZC03OGZl NTFiMTMzNWYuY2VyMDUGCCsGAQUFBwEHAQH/BCYwJDASBAIAATAMAwQAF5SIAwQA gjNNMA4EAgACMAgDBgQmAvrOADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBPtlIYWCi/DeP64UdM5Ci7Px6v PxNGhTN+QDtevuhJLn3ESJV2AY9TJdiWUMls86YPN8v4pogmhgGUgEAdg7PLeGZ0 CPu9CSS3N23X3/+v21D5rbjHHyM1irNoezwo6YaDM8SOcMxM19Rp63u0FRzu1RWP b6UIz2i6rDZljZegJ0UlSfsEIisKI1qXVRi/aKbl7PhkvWfq4sqgyvUr4K5y11tv tfq88oVgnxf0lpxDd14D7TsFqp3wCmTl4mkXfk0UtKWaDSBwJBoNBVjuF12kKbH7 oPytqegLan6l6jfmUN/4bLts+WHDjMdEGFL5n5tUWF9RhUTQDUzHxocGb/Xo -----END CERTIFICATE-----Generated at Sun Sep 13 13:30:38 2026 by rpki-client