$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/be15a26b-f84c-4a26-80bf-412c1bc133a1/fffa2d48-0064-31ba-9b29-d239d610482f.roa File: fffa2d48-0064-31ba-9b29-d239d610482f.roa (raw, json) Hash identifier: SJ4NNwqxZjJMKmC8I/V/g1U7kNxPbVdsKNvGgnl3D04= Subject key identifier: 49:D2:69:3A:1B:00:D9:24:71:5A:EE:C5:A5:35:6A:AB:43:EF:CA:0B Certificate issuer: /CN=be15a26b-f84c-4a26-80bf-412c1bc133a1 Certificate serial: 010D0C9F4328584EDF5C91577DFA99C374C78080 Authority key identifier: E8:FA:35:7A:70:C5:6B:31:4C:58:2B:AB:79:5B:C1:2B:D4:A5:46:5A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/be15a26b-f84c-4a26-80bf-412c1bc133a1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/be15a26b-f84c-4a26-80bf-412c1bc133a1/fffa2d48-0064-31ba-9b29-d239d610482f.roa Signing time: Tue 18 Aug 2026 01:00:12 +0000 ROA not before: Tue 18 Aug 2026 01:00:12 +0000 ROA not after: Mon 16 Nov 2026 02:00:12 +0000 asID: 152918 IP address blocks: 23.147.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/be15a26b-f84c-4a26-80bf-412c1bc133a1/be15a26b-f84c-4a26-80bf-412c1bc133a1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/be15a26b-f84c-4a26-80bf-412c1bc133a1/be15a26b-f84c-4a26-80bf-412c1bc133a1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/be15a26b-f84c-4a26-80bf-412c1bc133a1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 29 Aug 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:df:5c:91:57:7d:fa:99:c3:74:c7:80:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=be15a26b-f84c-4a26-80bf-412c1bc133a1 Validity Not Before: Aug 18 01:00:12 2026 GMT Not After : Nov 16 02:00:12 2026 GMT Subject: CN=648e63dd-25a9-459b-8a6d-885705248e78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:54:7c:b7:af:4a:dd:6c:29:1c:65:b7:5e:fa: 9e:f6:9e:95:65:e1:68:ce:97:7d:2d:fc:bb:3f:a3: 6b:2c:3f:fc:33:ba:fa:59:66:0b:f1:a3:61:f8:78: c3:f5:12:44:3c:43:24:9e:03:8e:9d:07:65:ce:e1: 57:f6:9d:40:ad:8f:38:61:74:1e:49:54:46:a4:b2: 75:ae:cc:9c:d6:4d:49:b1:af:69:60:db:27:d7:00: a2:8f:70:d9:40:f4:8e:b7:45:67:7a:b1:c6:26:22: 87:7e:fa:04:80:54:64:4a:93:f6:21:b5:01:d7:9a: f3:af:7d:e3:22:8b:55:98:fa:5f:91:19:03:98:50: 7c:a2:9c:3d:67:50:8b:22:a7:56:c9:52:91:27:43: 84:37:dd:3f:e2:a2:69:da:bf:e0:9f:8f:b1:3d:9f: ea:d4:de:d9:27:d2:c4:7b:a4:1e:94:d9:3e:8e:b9: 45:37:47:02:1c:2e:f8:7c:0c:45:0e:57:28:dd:2c: ab:f7:b5:81:81:a8:65:56:74:fb:a5:d3:d1:34:3b: 95:1f:db:1e:01:f3:14:cd:68:aa:9d:47:11:c2:8b: 16:86:91:a5:9a:3e:7e:b3:f9:54:bd:54:7d:d3:81: bc:16:ce:f6:48:3e:8a:86:f5:d1:35:0b:7d:c7:c1: b6:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:D2:69:3A:1B:00:D9:24:71:5A:EE:C5:A5:35:6A:AB:43:EF:CA:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/be15a26b-f84c-4a26-80bf-412c1bc133a1/fffa2d48-0064-31ba-9b29-d239d610482f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/be15a26b-f84c-4a26-80bf-412c1bc133a1/be15a26b-f84c-4a26-80bf-412c1bc133a1.crl X509v3 Authority Key Identifier: keyid:E8:FA:35:7A:70:C5:6B:31:4C:58:2B:AB:79:5B:C1:2B:D4:A5:46:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/be15a26b-f84c-4a26-80bf-412c1bc133a1.cer sbgp-ipAddrBlock: critical IPv4: 23.147.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:71:a5:f8:30:45:41:9c:12:58:fe:2f:44:31:07:cb:c8:16: fc:9c:d9:2e:d9:65:d5:4a:22:8c:29:86:3c:a9:df:7b:18:43: cd:63:1d:6d:10:c8:cd:0a:9b:82:71:81:b2:f0:4c:ec:b6:83: b3:79:c9:30:f4:4f:26:39:bd:10:cf:e8:55:5c:8a:3a:47:05: be:66:5c:70:83:dd:41:36:af:0c:3a:4f:b0:9a:d7:fd:d2:4d: d3:9c:af:a4:64:35:33:2f:92:ed:09:07:98:59:e8:86:80:17: f5:ce:b8:6c:23:90:00:56:1a:2a:70:45:49:55:80:2d:23:4c: 8f:e6:b0:73:eb:4b:be:1b:13:63:2d:61:f4:0f:ab:49:fd:4c: 5a:27:39:ed:17:36:cb:08:e5:79:48:81:22:41:4f:5e:a0:0c: d0:e4:bd:5f:0e:96:07:99:c7:2a:d8:db:d4:e3:6d:bc:16:a5: 41:bc:e7:01:16:4e:a1:32:04:b1:9e:76:3b:89:92:4e:da:1b: d1:f3:43:9d:3d:a2:ae:91:bc:87:ef:50:df:ca:3d:79:98:e3: 70:5c:7c:c4:6d:28:06:f8:a5:08:b3:46:2b:bd:de:10:66:8e: a0:34:d9:07:cd:f9:6a:96:93:c7:4b:f0:89:82:de:28:1a:ea: f9:2f:39:2a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7fXJFXffqZw3THgIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmUxNWEyNmItZjg0Yy00YTI2LTgwYmYtNDEyYzFiYzEz M2ExMB4XDTI2MDgxODAxMDAxMloXDTI2MTExNjAyMDAxMlowLzEtMCsGA1UEAxMk NjQ4ZTYzZGQtMjVhOS00NTliLThhNmQtODg1NzA1MjQ4ZTc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAplR8t69K3WwpHGW3Xvqe9p6VZeFozpd9Lfy7 P6NrLD/8M7r6WWYL8aNh+HjD9RJEPEMkngOOnQdlzuFX9p1ArY84YXQeSVRGpLJ1 rsyc1k1Jsa9pYNsn1wCij3DZQPSOt0VnerHGJiKHfvoEgFRkSpP2IbUB15rzr33j IotVmPpfkRkDmFB8opw9Z1CLIqdWyVKRJ0OEN90/4qJp2r/gn4+xPZ/q1N7ZJ9LE e6QelNk+jrlFN0cCHC74fAxFDlco3Syr97WBgahlVnT7pdPRNDuVH9seAfMUzWiq nUcRwosWhpGlmj5+s/lUvVR904G8Fs72SD6KhvXRNQt9x8G2FQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEnSaTobANkkcVruxaU1aqtD78oLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9iZTE1 YTI2Yi1mODRjLTRhMjYtODBiZi00MTJjMWJjMTMzYTEvZmZmYTJkNDgtMDA2NC0z MWJhLTliMjktZDIzOWQ2MTA0ODJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYmUxNWEyNmItZjg0Yy00YTI2LTgw YmYtNDEyYzFiYzEzM2ExL2JlMTVhMjZiLWY4NGMtNGEyNi04MGJmLTQxMmMxYmMx MzNhMS5jcmwwHwYDVR0jBBgwFoAU6Po1enDFazFMWCureVvBK9SlRlowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9iZTE1YTI2Yi1mODRjLTRhMjYtODBiZi00MTJj MWJjMTMzYTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5PcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACpxpfgwRUGcElj+L0QxB8vIFvyc2S7ZZdVKIowphjyp33sYQ81jHW0Q yM0Km4JxgbLwTOy2g7N5yTD0TyY5vRDP6FVcijpHBb5mXHCD3UE2rww6T7Ca1/3S TdOcr6RkNTMvku0JB5hZ6IaAF/XOuGwjkABWGipwRUlVgC0jTI/msHPrS74bE2Mt YfQPq0n9TFonOe0XNssI5XlIgSJBT16gDNDkvV8OlgeZxyrY29TjbbwWpUG85wEW TqEyBLGedjuJkk7aG9HzQ509oq6RvIfvUN/KPXmY43BcfMRtKAb4pQizRiu93hBm jqA02QfN+WqWk8dL8ImC3iga6vkvOSo= -----END CERTIFICATE-----Generated at Thu Aug 27 16:10:16 2026 by rpki-client