$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4dcdf1f4-5e60-438d-8934-0ca21d0b45af/d979104e-8a4c-3a7f-aca8-ea9d9c867f80.roa File: d979104e-8a4c-3a7f-aca8-ea9d9c867f80.roa (raw, json) Hash identifier: +C6VvON30XWEhn6uE/VihFWt4cd+HqA4u0saFW9oozU= Subject key identifier: 90:AA:AE:8D:CD:27:F3:FA:11:F6:07:9E:43:97:AD:04:4E:0A:7C:05 Certificate issuer: /CN=4dcdf1f4-5e60-438d-8934-0ca21d0b45af Certificate serial: 010D0C9F4328584E683F60E277166F2F6FE82200 Authority key identifier: 2A:D7:2B:37:A6:0A:F1:0A:F9:08:FD:66:B5:F8:38:C0:C4:B1:61:63 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4dcdf1f4-5e60-438d-8934-0ca21d0b45af.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4dcdf1f4-5e60-438d-8934-0ca21d0b45af/d979104e-8a4c-3a7f-aca8-ea9d9c867f80.roa Signing time: Mon 06 Jul 2026 09:00:12 +0000 ROA not before: Mon 06 Jul 2026 09:00:12 +0000 ROA not after: Sun 04 Oct 2026 09:00:12 +0000 asID: 8143 IP address blocks: 23.146.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4dcdf1f4-5e60-438d-8934-0ca21d0b45af/4dcdf1f4-5e60-438d-8934-0ca21d0b45af.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4dcdf1f4-5e60-438d-8934-0ca21d0b45af/4dcdf1f4-5e60-438d-8934-0ca21d0b45af.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4dcdf1f4-5e60-438d-8934-0ca21d0b45af.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Jul 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:68:3f:60:e2:77:16:6f:2f:6f:e8:22:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4dcdf1f4-5e60-438d-8934-0ca21d0b45af Validity Not Before: Jul 6 09:00:12 2026 GMT Not After : Oct 4 09:00:12 2026 GMT Subject: CN=8b703a8d-bc10-4ce4-abbf-4941fe129bb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:ca:f0:14:fe:f5:b5:55:97:f3:75:82:2f:28: 32:22:10:06:8e:fd:d3:83:1a:d1:a2:26:1d:2e:dc: 00:f1:85:75:13:e9:5d:bf:72:a6:19:e2:5c:09:f7: 0e:f6:f5:16:20:fc:6e:e0:b7:e4:ed:4a:de:60:14: dd:3b:41:8d:9c:df:58:45:0d:14:95:d8:b9:81:9c: d4:20:0e:12:16:86:a5:27:ac:4b:fa:f5:52:73:3e: a0:8c:e5:7c:88:3a:09:94:77:a0:87:62:e0:15:1b: 11:6f:ec:4c:4e:bd:39:c0:48:f4:b9:bd:5a:c9:5e: f5:f3:e2:e5:ca:1d:fe:60:3b:47:f7:89:d1:43:b3: 04:a2:78:14:4b:b0:b5:38:65:75:ea:bf:25:a4:48: 2c:28:06:06:83:d8:6a:77:c9:8a:95:c4:e9:31:1f: 25:cd:53:12:45:a7:f4:1a:ee:1a:0f:65:e7:24:0f: 46:74:a2:af:91:d0:45:5e:f6:66:93:6c:a0:cd:e4: b2:5c:6c:7f:15:e5:db:46:49:e2:d5:4b:05:e9:da: db:8c:2d:5c:43:30:5f:cb:95:ee:e5:44:7d:0a:85: dc:2a:80:19:6b:d6:47:6d:ca:c8:fd:6a:4b:8e:43: 2a:04:73:dc:53:c7:2c:08:67:a6:29:96:ac:61:98: 21:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:AA:AE:8D:CD:27:F3:FA:11:F6:07:9E:43:97:AD:04:4E:0A:7C:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4dcdf1f4-5e60-438d-8934-0ca21d0b45af/d979104e-8a4c-3a7f-aca8-ea9d9c867f80.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4dcdf1f4-5e60-438d-8934-0ca21d0b45af/4dcdf1f4-5e60-438d-8934-0ca21d0b45af.crl X509v3 Authority Key Identifier: keyid:2A:D7:2B:37:A6:0A:F1:0A:F9:08:FD:66:B5:F8:38:C0:C4:B1:61:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4dcdf1f4-5e60-438d-8934-0ca21d0b45af.cer sbgp-ipAddrBlock: critical IPv4: 23.146.4.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:dd:d6:ff:6d:67:6e:e1:92:eb:b1:92:07:c0:15:06:56:bf: 52:47:c9:46:51:64:bd:7a:06:00:b9:68:71:c7:e8:d2:7a:82: 19:90:82:43:9b:d7:5a:be:50:f1:ec:a4:0c:bd:50:70:1a:ea: 42:7c:49:db:45:62:ba:7a:d3:96:c7:33:4b:25:0a:cb:a5:99: 3f:8e:dc:94:8d:1a:ff:af:fc:65:a7:56:3b:64:87:62:c2:4e: e8:03:d1:b6:16:e2:36:d8:85:6b:1b:65:3b:0f:7e:62:38:c4: fc:87:2d:09:57:36:62:6c:69:5a:60:9b:7a:6d:23:4d:06:66: f9:36:fd:d6:bb:d5:55:68:1c:ce:4f:d2:a8:ce:bf:1d:b0:d6: 27:cf:84:67:bb:c1:42:38:b2:08:7b:a6:2a:16:19:a5:e2:ae: 74:a1:61:f9:5f:24:99:7a:c3:e6:57:65:f8:96:48:17:ac:d1: 57:e2:9e:f4:7a:cd:76:e3:7d:95:92:63:2b:c7:d3:ad:61:ea: 15:a6:23:64:e1:a0:b3:95:52:e7:2b:fe:7a:d7:75:f0:2a:7c: 46:d8:a3:a8:6a:87:80:11:ad:a5:0a:2c:0b:0e:ba:d5:0f:59: 09:18:6f:00:00:14:c6:0b:85:49:4e:32:8b:ea:12:42:97:1c: 47:dd:fc:9f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5oP2DidxZvL2/oIgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGRjZGYxZjQtNWU2MC00MzhkLTg5MzQtMGNhMjFkMGI0 NWFmMB4XDTI2MDcwNjA5MDAxMloXDTI2MTAwNDA5MDAxMlowLzEtMCsGA1UEAxMk OGI3MDNhOGQtYmMxMC00Y2U0LWFiYmYtNDk0MWZlMTI5YmIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm8rwFP71tVWX83WCLygyIhAGjv3TgxrRoiYd LtwA8YV1E+ldv3KmGeJcCfcO9vUWIPxu4Lfk7UreYBTdO0GNnN9YRQ0Uldi5gZzU IA4SFoalJ6xL+vVScz6gjOV8iDoJlHegh2LgFRsRb+xMTr05wEj0ub1ayV718+Ll yh3+YDtH94nRQ7MEongUS7C1OGV16r8lpEgsKAYGg9hqd8mKlcTpMR8lzVMSRaf0 Gu4aD2XnJA9GdKKvkdBFXvZmk2ygzeSyXGx/FeXbRkni1UsF6drbjC1cQzBfy5Xu 5UR9CoXcKoAZa9ZHbcrI/WpLjkMqBHPcU8csCGemKZasYZghlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJCqro3NJ/P6EfYHnkOXrQROCnwFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi80ZGNk ZjFmNC01ZTYwLTQzOGQtODkzNC0wY2EyMWQwYjQ1YWYvZDk3OTEwNGUtOGE0Yy0z YTdmLWFjYTgtZWE5ZDljODY3ZjgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvNGRjZGYxZjQtNWU2MC00MzhkLTg5 MzQtMGNhMjFkMGI0NWFmLzRkY2RmMWY0LTVlNjAtNDM4ZC04OTM0LTBjYTIxZDBi NDVhZi5jcmwwHwYDVR0jBBgwFoAUKtcrN6YK8Qr5CP1mtfg4wMSxYWMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi80ZGNkZjFmNC01ZTYwLTQzOGQtODkzNC0wY2Ey MWQwYjQ1YWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5IEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC/d1v9tZ27hkuuxkgfAFQZWv1JHyUZRZL16BgC5aHHH6NJ6ghmQgkOb 11q+UPHspAy9UHAa6kJ8SdtFYrp605bHM0slCsulmT+O3JSNGv+v/GWnVjtkh2LC TugD0bYW4jbYhWsbZTsPfmI4xPyHLQlXNmJsaVpgm3ptI00GZvk2/da71VVoHM5P 0qjOvx2w1ifPhGe7wUI4sgh7pioWGaXirnShYflfJJl6w+ZXZfiWSBes0VfinvR6 zXbjfZWSYyvH061h6hWmI2ThoLOVUucr/nrXdfAqfEbYo6hqh4ARraUKLAsOutUP WQkYbwAAFMYLhUlOMovqEkKXHEfd/J8= -----END CERTIFICATE-----Generated at Sun Jul 12 23:45:55 2026 by rpki-client