$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6d7a15c9-bd4b-4b40-8bd0-21493b541c0d/ce00dd86-e265-3568-ab4e-161ec0685a22.roa File: ce00dd86-e265-3568-ab4e-161ec0685a22.roa (raw, json) Hash identifier: D4jxcT56tLvUsolPygFdLxLtqF+nans+Y3bI9/yCMSI= Subject key identifier: 31:7C:4D:79:B9:7E:D1:CD:04:F6:93:11:62:84:C5:98:38:52:B7:BB Certificate issuer: /CN=6d7a15c9-bd4b-4b40-8bd0-21493b541c0d Certificate serial: 010D0C9F4328584EF71765A01902A34C557EB274 Authority key identifier: FC:99:D6:C4:97:A8:48:B2:94:1E:9B:83:88:19:F8:EE:02:96:42:85 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6d7a15c9-bd4b-4b40-8bd0-21493b541c0d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6d7a15c9-bd4b-4b40-8bd0-21493b541c0d/ce00dd86-e265-3568-ab4e-161ec0685a22.roa Signing time: Wed 26 Aug 2026 13:00:12 +0000 ROA not before: Wed 26 Aug 2026 13:00:12 +0000 ROA not after: Tue 24 Nov 2026 14:00:12 +0000 asID: 152179 IP address blocks: 23.148.76.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6d7a15c9-bd4b-4b40-8bd0-21493b541c0d/6d7a15c9-bd4b-4b40-8bd0-21493b541c0d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6d7a15c9-bd4b-4b40-8bd0-21493b541c0d/6d7a15c9-bd4b-4b40-8bd0-21493b541c0d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6d7a15c9-bd4b-4b40-8bd0-21493b541c0d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 04 Sep 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f7:17:65:a0:19:02:a3:4c:55:7e:b2:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d7a15c9-bd4b-4b40-8bd0-21493b541c0d Validity Not Before: Aug 26 13:00:12 2026 GMT Not After : Nov 24 14:00:12 2026 GMT Subject: CN=5390b267-1331-4993-938e-aa4a139dc53e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:2a:05:ea:39:0b:a5:eb:0d:92:79:9a:a1:18: 4a:91:4d:db:2d:6a:56:7c:29:83:39:bf:03:a8:06: 4d:69:51:18:ac:e9:a7:fa:a1:9e:5b:d1:14:bf:ca: 66:c2:21:f5:6a:7d:a3:f6:44:90:ca:15:d8:04:d2: ac:35:ad:04:57:b8:b7:21:34:fc:a6:7e:e9:21:03: 74:7a:39:0d:69:c9:db:39:64:76:99:fa:4e:a0:37: 92:4d:e7:c6:21:7e:25:52:bf:c4:d7:a5:99:e2:48: e7:06:17:28:21:81:af:6c:a8:fa:39:38:fd:f7:92: 9d:15:56:9e:c0:a9:eb:5f:34:99:c4:e0:fd:5f:d6: 38:3a:b5:3a:03:8d:89:18:bd:12:56:90:3e:8b:c2: e7:6c:90:3b:fa:5a:0e:fe:9a:75:7f:98:5d:1e:3d: cb:ae:ec:6f:ef:05:6e:87:d6:dc:19:b3:9e:23:62: c8:c0:b9:88:39:f4:8b:ed:c9:3e:e8:4f:df:87:28: 51:e9:f7:7d:7a:56:83:17:3a:a5:97:99:5d:1f:e8: 21:46:12:74:86:c7:b7:d2:30:53:c4:9d:ba:01:09: 78:e1:10:38:79:75:60:cc:20:72:ad:07:3d:c2:2e: c9:4d:e3:83:9a:6b:02:d0:cd:8c:ac:e3:a6:b8:26: b2:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:7C:4D:79:B9:7E:D1:CD:04:F6:93:11:62:84:C5:98:38:52:B7:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6d7a15c9-bd4b-4b40-8bd0-21493b541c0d/ce00dd86-e265-3568-ab4e-161ec0685a22.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6d7a15c9-bd4b-4b40-8bd0-21493b541c0d/6d7a15c9-bd4b-4b40-8bd0-21493b541c0d.crl X509v3 Authority Key Identifier: keyid:FC:99:D6:C4:97:A8:48:B2:94:1E:9B:83:88:19:F8:EE:02:96:42:85 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/6d7a15c9-bd4b-4b40-8bd0-21493b541c0d.cer sbgp-ipAddrBlock: critical IPv4: 23.148.76.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:0d:74:3a:57:f2:e9:1a:2b:0a:68:b9:fe:22:c0:74:78:5e: 92:ec:70:d7:85:b2:53:8a:cb:09:e8:94:d2:d1:8d:e2:f9:42: fd:d5:60:ed:a9:a9:c9:0b:c8:85:2f:26:ef:6f:53:3d:96:27: 30:07:71:1b:c2:b8:b3:f2:ab:0f:3a:28:32:86:13:7d:63:90: 99:4d:35:10:e0:36:6e:5c:41:15:23:f1:2d:42:e1:7b:35:77: 87:85:d7:b8:17:14:10:85:e6:cc:4e:b5:c8:c0:0c:a0:a0:9e: 67:bd:ce:3f:26:52:50:12:3c:98:83:91:0f:23:c8:ee:6b:cc: 31:ee:ca:5c:a0:94:28:6d:b3:5f:02:31:d4:01:b6:99:7a:12: a8:bf:a2:ef:3e:a1:d5:46:2d:78:53:99:10:49:94:71:98:29: 47:12:11:ca:0b:5b:89:2a:45:53:65:28:b6:52:15:84:c4:3a: 32:72:4c:a1:c0:41:f2:c4:9a:72:64:9f:cb:c5:43:b9:99:57: 90:0a:a9:88:9c:97:ed:95:6e:f2:56:74:65:15:98:06:43:b5: 60:19:7a:b5:07:7e:a1:b9:06:6f:cb:a5:c2:27:d4:7c:9b:8e: c9:e9:bd:f4:9b:47:e0:0a:e3:b4:04:fe:cd:d6:42:82:14:7e: ef:5e:83:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE73F2WgGQKjTFV+snQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmQ3YTE1YzktYmQ0Yi00YjQwLThiZDAtMjE0OTNiNTQx YzBkMB4XDTI2MDgyNjEzMDAxMloXDTI2MTEyNDE0MDAxMlowLzEtMCsGA1UEAxMk NTM5MGIyNjctMTMzMS00OTkzLTkzOGUtYWE0YTEzOWRjNTNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoyoF6jkLpesNknmaoRhKkU3bLWpWfCmDOb8D qAZNaVEYrOmn+qGeW9EUv8pmwiH1an2j9kSQyhXYBNKsNa0EV7i3ITT8pn7pIQN0 ejkNacnbOWR2mfpOoDeSTefGIX4lUr/E16WZ4kjnBhcoIYGvbKj6OTj995KdFVae wKnrXzSZxOD9X9Y4OrU6A42JGL0SVpA+i8LnbJA7+loO/pp1f5hdHj3Lruxv7wVu h9bcGbOeI2LIwLmIOfSL7ck+6E/fhyhR6fd9elaDFzqll5ldH+ghRhJ0hse30jBT xJ26AQl44RA4eXVgzCByrQc9wi7JTeODmmsC0M2MrOOmuCayNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDF8TXm5ftHNBPaTEWKExZg4Ure7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi82ZDdh MTVjOS1iZDRiLTRiNDAtOGJkMC0yMTQ5M2I1NDFjMGQvY2UwMGRkODYtZTI2NS0z NTY4LWFiNGUtMTYxZWMwNjg1YTIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvNmQ3YTE1YzktYmQ0Yi00YjQwLThi ZDAtMjE0OTNiNTQxYzBkLzZkN2ExNWM5LWJkNGItNGI0MC04YmQwLTIxNDkzYjU0 MWMwZC5jcmwwHwYDVR0jBBgwFoAU/JnWxJeoSLKUHpuDiBn47gKWQoUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi82ZDdhMTVjOS1iZDRiLTRiNDAtOGJkMC0yMTQ5 M2I1NDFjMGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5RMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADQNdDpX8ukaKwpouf4iwHR4XpLscNeFslOKywnolNLRjeL5Qv3VYO2p qckLyIUvJu9vUz2WJzAHcRvCuLPyqw86KDKGE31jkJlNNRDgNm5cQRUj8S1C4Xs1 d4eF17gXFBCF5sxOtcjADKCgnme9zj8mUlASPJiDkQ8jyO5rzDHuylyglChts18C MdQBtpl6Eqi/ou8+odVGLXhTmRBJlHGYKUcSEcoLW4kqRVNlKLZSFYTEOjJyTKHA QfLEmnJkn8vFQ7mZV5AKqYicl+2VbvJWdGUVmAZDtWAZerUHfqG5Bm/LpcIn1Hyb jsnpvfSbR+AK47QE/s3WQoIUfu9eg5c= -----END CERTIFICATE-----Generated at Thu Sep 3 20:01:08 2026 by rpki-client