$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/affcec42-3d91-4bd4-91a9-094e86b16e3a/4bfa845b-38ab-32ef-b99a-8f10a7452ff3.roa File: 4bfa845b-38ab-32ef-b99a-8f10a7452ff3.roa (raw, json) Hash identifier: GKr+TYFBSP3JZx1+QkLVNgmH9V8Ks4xZcutP5MRyRyo= Subject key identifier: 31:8C:A8:2E:90:16:63:DB:39:C0:FF:90:18:35:0F:C7:8E:0C:21:BB Certificate issuer: /CN=affcec42-3d91-4bd4-91a9-094e86b16e3a Certificate serial: 010D0C9F4328584D7B6A9B9FA99C0963AD379280 Authority key identifier: 00:C6:02:63:2D:43:DC:7C:16:1B:C3:B1:34:F6:1D:6A:16:86:4B:55 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/affcec42-3d91-4bd4-91a9-094e86b16e3a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/affcec42-3d91-4bd4-91a9-094e86b16e3a/4bfa845b-38ab-32ef-b99a-8f10a7452ff3.roa Signing time: Sun 12 Apr 2026 13:00:30 +0000 ROA not before: Sun 12 Apr 2026 13:00:30 +0000 ROA not after: Sat 11 Jul 2026 13:00:30 +0000 asID: 174 IP address blocks: 23.148.164.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/affcec42-3d91-4bd4-91a9-094e86b16e3a/affcec42-3d91-4bd4-91a9-094e86b16e3a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/affcec42-3d91-4bd4-91a9-094e86b16e3a/affcec42-3d91-4bd4-91a9-094e86b16e3a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/affcec42-3d91-4bd4-91a9-094e86b16e3a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Apr 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7b:6a:9b:9f:a9:9c:09:63:ad:37:92:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=affcec42-3d91-4bd4-91a9-094e86b16e3a Validity Not Before: Apr 12 13:00:30 2026 GMT Not After : Jul 11 13:00:30 2026 GMT Subject: CN=0518f8aa-24ff-4ef3-b3ae-ebd7a69863c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:38:43:69:ac:63:65:2d:dc:60:e3:f7:83:07: 2e:f4:9b:12:a3:11:85:1e:0a:40:fe:7e:88:6f:20: 68:7c:e6:40:b1:b3:47:5f:99:fa:d3:ce:f1:12:8c: f6:55:fe:37:90:02:61:5a:cc:8d:c5:bd:1a:8b:9d: fb:52:d1:32:81:2b:9f:63:c4:0a:d9:88:f2:a3:be: e8:bf:25:28:0c:67:fb:38:03:a3:60:e3:35:96:dd: 3b:3d:55:40:10:41:df:a0:f5:22:50:36:a1:40:99: 14:9a:d7:a2:81:5b:16:f9:ae:9f:e0:27:ed:ef:dd: 37:06:54:c4:fc:49:19:08:8a:7b:34:3d:e4:81:6e: cb:9f:c0:32:81:f7:48:7b:01:43:82:c3:63:2e:29: a2:20:16:e9:ca:47:ad:1f:a5:91:28:42:cf:44:52: 8e:b0:ef:98:12:b9:c6:ef:2d:de:9d:40:b0:30:93: 9c:96:a7:52:11:39:4b:ca:ae:a9:52:29:e1:85:07: d7:fa:43:a8:47:e1:43:8a:74:28:7f:a0:0c:5b:24: c4:5e:bf:34:a4:a7:23:e0:9a:78:76:17:bd:e9:43: cd:21:60:b3:af:30:aa:dd:f3:68:1a:e9:39:8c:94: e8:f6:ca:cf:ff:ce:51:31:45:0a:95:56:42:01:e3: 9c:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:8C:A8:2E:90:16:63:DB:39:C0:FF:90:18:35:0F:C7:8E:0C:21:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/affcec42-3d91-4bd4-91a9-094e86b16e3a/4bfa845b-38ab-32ef-b99a-8f10a7452ff3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/affcec42-3d91-4bd4-91a9-094e86b16e3a/affcec42-3d91-4bd4-91a9-094e86b16e3a.crl X509v3 Authority Key Identifier: keyid:00:C6:02:63:2D:43:DC:7C:16:1B:C3:B1:34:F6:1D:6A:16:86:4B:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/affcec42-3d91-4bd4-91a9-094e86b16e3a.cer sbgp-ipAddrBlock: critical IPv4: 23.148.164.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:00:e7:bf:89:d4:79:29:56:ef:fa:ae:61:07:9f:b9:47:7b: ef:bf:1f:15:10:c4:b9:0e:a2:49:e2:be:58:f1:53:6c:e1:50: 66:60:0d:b5:eb:c4:c1:f7:7d:34:e0:cc:ba:06:be:1c:8a:7a: 76:2c:12:b0:cb:00:6e:64:1d:d4:0e:8e:3a:ae:3d:da:f1:a4: 2d:e1:7d:53:2e:27:b1:b5:b6:1e:6b:83:26:6e:90:49:a7:df: a9:3a:35:41:7f:ec:de:ba:b0:ac:e0:28:4c:c8:b6:c2:71:5f: d7:c0:ef:78:2f:69:cc:c4:f4:e6:31:07:d1:c4:b8:e6:b3:a7: 2f:58:7a:b8:97:d0:1b:a0:ad:3d:13:4c:35:e4:05:9a:c2:3f: 48:1c:92:8c:a5:e7:d6:b8:4f:32:94:3f:1e:97:02:dc:f8:92: 19:16:5b:e7:8e:bf:d9:63:31:02:ac:63:e5:c2:c1:96:39:66: 65:e9:dd:41:a1:4c:e9:8f:6e:c5:5e:b9:86:a7:06:75:ca:42: b7:0f:32:d7:99:16:c3:09:c0:1d:9c:42:68:43:30:35:02:d7: 25:e6:9d:11:7b:ba:0b:4c:00:98:74:6d:02:1b:8b:87:91:f6: ea:9d:3c:e7:65:0d:83:48:44:ca:e1:8c:6a:dd:1c:d6:8f:20: ff:54:8f:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE17apufqZwJY603koAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWZmY2VjNDItM2Q5MS00YmQ0LTkxYTktMDk0ZTg2YjE2 ZTNhMB4XDTI2MDQxMjEzMDAzMFoXDTI2MDcxMTEzMDAzMFowLzEtMCsGA1UEAxMk MDUxOGY4YWEtMjRmZi00ZWYzLWIzYWUtZWJkN2E2OTg2M2MzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyThDaaxjZS3cYOP3gwcu9JsSoxGFHgpA/n6I byBofOZAsbNHX5n6087xEoz2Vf43kAJhWsyNxb0ai537UtEygSufY8QK2Yjyo77o vyUoDGf7OAOjYOM1lt07PVVAEEHfoPUiUDahQJkUmteigVsW+a6f4Cft7903BlTE /EkZCIp7ND3kgW7Ln8AygfdIewFDgsNjLimiIBbpyketH6WRKELPRFKOsO+YErnG 7y3enUCwMJOclqdSETlLyq6pUinhhQfX+kOoR+FDinQof6AMWyTEXr80pKcj4Jp4 dhe96UPNIWCzrzCq3fNoGuk5jJTo9srP/85RMUUKlVZCAeOc7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDGMqC6QFmPbOcD/kBg1D8eODCG7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9hZmZj ZWM0Mi0zZDkxLTRiZDQtOTFhOS0wOTRlODZiMTZlM2EvNGJmYTg0NWItMzhhYi0z MmVmLWI5OWEtOGYxMGE3NDUyZmYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYWZmY2VjNDItM2Q5MS00YmQ0LTkx YTktMDk0ZTg2YjE2ZTNhL2FmZmNlYzQyLTNkOTEtNGJkNC05MWE5LTA5NGU4NmIx NmUzYS5jcmwwHwYDVR0jBBgwFoAUAMYCYy1D3HwWG8OxNPYdahaGS1UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9hZmZjZWM0Mi0zZDkxLTRiZDQtOTFhOS0wOTRl ODZiMTZlM2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5SkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIQA57+J1HkpVu/6rmEHn7lHe++/HxUQxLkOoknivljxU2zhUGZgDbXr xMH3fTTgzLoGvhyKenYsErDLAG5kHdQOjjquPdrxpC3hfVMuJ7G1th5rgyZukEmn 36k6NUF/7N66sKzgKEzItsJxX9fA73gvaczE9OYxB9HEuOazpy9YeriX0BugrT0T TDXkBZrCP0gckoyl59a4TzKUPx6XAtz4khkWW+eOv9ljMQKsY+XCwZY5ZmXp3UGh TOmPbsVeuYanBnXKQrcPMteZFsMJwB2cQmhDMDUC1yXmnRF7ugtMAJh0bQIbi4eR 9uqdPOdlDYNIRMrhjGrdHNaPIP9UjwE= -----END CERTIFICATE-----Generated at Mon Apr 13 06:47:18 2026 by rpki-client