$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/14f5a8e1-3d1a-47a5-b6c8-cf6c1242d2aa/9a8c514a-5fb3-38bf-9ce7-e9d5e7942004.roa File: 9a8c514a-5fb3-38bf-9ce7-e9d5e7942004.roa (raw, json) Hash identifier: 5DO1bFAN3qcS6738wLbY5C27IA8R8+SMpl2HfZ5GV3U= Subject key identifier: DA:5C:9F:F4:71:68:B2:9A:31:FE:5F:D5:4E:EF:77:EC:AA:55:5F:4A Certificate issuer: /CN=14f5a8e1-3d1a-47a5-b6c8-cf6c1242d2aa Certificate serial: 010D0C9F4328584F7782DA6E740EFE9A8B1AEB80 Authority key identifier: AF:7E:74:FC:70:9F:AB:B7:AA:68:46:E8:30:D2:DD:9B:F3:08:30:3A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/14f5a8e1-3d1a-47a5-b6c8-cf6c1242d2aa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/14f5a8e1-3d1a-47a5-b6c8-cf6c1242d2aa/9a8c514a-5fb3-38bf-9ce7-e9d5e7942004.roa Signing time: Sun 11 Oct 2026 13:00:12 +0000 ROA not before: Sun 11 Oct 2026 13:00:12 +0000 ROA not after: Sat 09 Jan 2027 14:00:12 +0000 asID: 401160 IP address blocks: 23.145.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/14f5a8e1-3d1a-47a5-b6c8-cf6c1242d2aa/14f5a8e1-3d1a-47a5-b6c8-cf6c1242d2aa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/14f5a8e1-3d1a-47a5-b6c8-cf6c1242d2aa/14f5a8e1-3d1a-47a5-b6c8-cf6c1242d2aa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/14f5a8e1-3d1a-47a5-b6c8-cf6c1242d2aa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 01 Nov 2026 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:77:82:da:6e:74:0e:fe:9a:8b:1a:eb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14f5a8e1-3d1a-47a5-b6c8-cf6c1242d2aa Validity Not Before: Oct 11 13:00:12 2026 GMT Not After : Jan 9 14:00:12 2027 GMT Subject: CN=856703ca-982b-4f2f-9d01-1f203c8090ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:68:d8:86:96:10:0b:0d:b0:70:53:e8:ca:93: 53:c9:99:3d:55:cd:bb:99:dc:39:90:7b:b4:8b:53: 36:15:a2:04:91:ff:43:2d:46:07:32:b2:0f:ec:13: 2c:41:8e:52:c8:75:19:0d:c2:7c:47:a5:f5:a2:7e: e3:8d:8a:55:60:f1:06:e8:ec:50:a8:4e:c6:d5:4d: 1d:73:99:68:46:50:f5:3f:ed:c3:77:55:b3:3a:11: 76:38:a0:4b:94:47:c4:99:20:5a:e9:fa:47:5f:b9: 4a:4b:e2:73:99:25:f1:89:51:91:8d:5b:d0:83:a7: 4d:e2:92:16:3e:f9:7f:f3:ff:f0:a6:cc:34:a3:d4: ae:f9:96:1e:6e:91:83:2f:1e:ae:56:25:72:a9:35: 55:26:60:1f:d4:20:42:1b:6a:74:54:96:60:bb:19: 17:21:19:5f:1a:f1:ca:91:1f:7e:5a:d0:30:33:32: 1e:29:29:5c:ee:6e:4b:84:f7:cf:34:49:df:c4:da: 51:a3:ed:8c:7e:c4:a9:5c:be:5d:56:06:4b:4b:35: 9c:2e:d8:c6:2a:52:47:8e:c0:4d:84:28:ea:b0:99: e4:65:fd:69:a7:df:24:63:34:e7:8a:10:32:4a:71: 62:b9:3f:51:1e:e7:69:e4:3a:d2:b4:bb:ac:7b:fa: 7a:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:5C:9F:F4:71:68:B2:9A:31:FE:5F:D5:4E:EF:77:EC:AA:55:5F:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/14f5a8e1-3d1a-47a5-b6c8-cf6c1242d2aa/9a8c514a-5fb3-38bf-9ce7-e9d5e7942004.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/14f5a8e1-3d1a-47a5-b6c8-cf6c1242d2aa/14f5a8e1-3d1a-47a5-b6c8-cf6c1242d2aa.crl X509v3 Authority Key Identifier: keyid:AF:7E:74:FC:70:9F:AB:B7:AA:68:46:E8:30:D2:DD:9B:F3:08:30:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/14f5a8e1-3d1a-47a5-b6c8-cf6c1242d2aa.cer sbgp-ipAddrBlock: critical IPv4: 23.145.248.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:59:a1:f9:f8:7a:10:a0:25:23:80:58:93:38:43:97:d2:12: 00:ef:34:00:a8:7c:e7:03:08:e1:63:29:e7:fa:f0:cd:3a:0f: b3:50:81:88:0f:8d:41:ee:6b:36:ca:ef:89:fb:10:0c:2f:20: 0a:af:59:9a:86:c6:fb:c1:16:ad:dd:c3:05:89:87:5c:4e:55: 24:8d:b8:65:a6:b3:4f:37:b2:ad:6c:0c:49:c4:a4:e7:02:a6: c3:25:2d:25:18:3b:2d:cb:d4:bc:23:4c:69:d8:8d:9d:52:bb: 3e:19:86:37:d3:d4:dd:c6:f5:28:fe:3d:cb:17:b4:e9:68:6a: 63:20:34:1b:9b:b9:0a:83:86:30:fe:28:a9:cc:d7:fb:56:f0: cc:e0:25:0e:09:35:d2:a2:ef:32:b0:40:64:ef:66:3f:f2:be: bc:fe:9c:4c:e8:25:c5:20:cd:ba:08:1b:6c:00:59:d1:56:05: ea:b6:bc:21:ef:7e:2d:58:14:71:45:dd:ad:c1:60:53:d0:d0: a8:f6:e0:4d:10:3c:0f:3f:90:ab:5f:8b:96:1d:df:19:ea:2e: 9a:45:15:41:43:91:d3:99:6f:17:b8:c0:68:43:4c:a5:ca:23: dd:2c:a0:06:2e:bd:77:06:40:28:f4:5e:41:59:2b:a6:5d:59: 1b:65:6e:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE93gtpudA7+mosa64AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTRmNWE4ZTEtM2QxYS00N2E1LWI2YzgtY2Y2YzEyNDJk MmFhMB4XDTI2MTAxMTEzMDAxMloXDTI3MDEwOTE0MDAxMlowLzEtMCsGA1UEAxMk ODU2NzAzY2EtOTgyYi00ZjJmLTlkMDEtMWYyMDNjODA5MGVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3GjYhpYQCw2wcFPoypNTyZk9Vc27mdw5kHu0 i1M2FaIEkf9DLUYHMrIP7BMsQY5SyHUZDcJ8R6X1on7jjYpVYPEG6OxQqE7G1U0d c5loRlD1P+3Dd1WzOhF2OKBLlEfEmSBa6fpHX7lKS+JzmSXxiVGRjVvQg6dN4pIW Pvl/8//wpsw0o9Su+ZYebpGDLx6uViVyqTVVJmAf1CBCG2p0VJZguxkXIRlfGvHK kR9+WtAwMzIeKSlc7m5LhPfPNEnfxNpRo+2MfsSpXL5dVgZLSzWcLtjGKlJHjsBN hCjqsJnkZf1pp98kYzTnihAySnFiuT9RHudp5DrStLuse/p6jwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNpcn/RxaLKaMf5f1U7vd+yqVV9KMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8xNGY1 YThlMS0zZDFhLTQ3YTUtYjZjOC1jZjZjMTI0MmQyYWEvOWE4YzUxNGEtNWZiMy0z OGJmLTljZTctZTlkNWU3OTQyMDA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMTRmNWE4ZTEtM2QxYS00N2E1LWI2 YzgtY2Y2YzEyNDJkMmFhLzE0ZjVhOGUxLTNkMWEtNDdhNS1iNmM4LWNmNmMxMjQy ZDJhYS5jcmwwHwYDVR0jBBgwFoAUr350/HCfq7eqaEboMNLdm/MIMDowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8xNGY1YThlMS0zZDFhLTQ3YTUtYjZjOC1jZjZj MTI0MmQyYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5H4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHFZofn4ehCgJSOAWJM4Q5fSEgDvNACofOcDCOFjKef68M06D7NQgYgP jUHuazbK74n7EAwvIAqvWZqGxvvBFq3dwwWJh1xOVSSNuGWms083sq1sDEnEpOcC psMlLSUYOy3L1LwjTGnYjZ1Suz4ZhjfT1N3G9Sj+PcsXtOloamMgNBubuQqDhjD+ KKnM1/tW8MzgJQ4JNdKi7zKwQGTvZj/yvrz+nEzoJcUgzboIG2wAWdFWBeq2vCHv fi1YFHFF3a3BYFPQ0Kj24E0QPA8/kKtfi5Yd3xnqLppFFUFDkdOZbxe4wGhDTKXK I90soAYuvXcGQCj0XkFZK6ZdWRtlbiQ= -----END CERTIFICATE-----Generated at Fri Oct 30 18:09:36 2026 by rpki-client