$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6528c9ac-3735-430d-99f2-7ac01944d688/6af0c050-7612-319a-ad24-aec5eb373930.roa File: 6af0c050-7612-319a-ad24-aec5eb373930.roa (raw, json) Hash identifier: +JsbLXjrlJEALDo+//t9SSCcHt0ZDp5r4Cb9TQBRaZA= Subject key identifier: D8:E7:E3:8E:A8:27:B9:CC:5C:10:3C:C0:92:78:11:9A:8F:94:D0:E5 Certificate issuer: /CN=6528c9ac-3735-430d-99f2-7ac01944d688 Certificate serial: 010D0C9F4328584F1B6256C99B89632AC4956500 Authority key identifier: 64:79:50:96:C9:A4:0D:34:86:46:BD:1D:64:20:0D:DB:7C:9D:BA:F8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6528c9ac-3735-430d-99f2-7ac01944d688.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6528c9ac-3735-430d-99f2-7ac01944d688/6af0c050-7612-319a-ad24-aec5eb373930.roa Signing time: Tue 08 Sep 2026 13:00:12 +0000 ROA not before: Tue 08 Sep 2026 13:00:12 +0000 ROA not after: Mon 07 Dec 2026 14:00:12 +0000 asID: 54696 IP address blocks: 23.148.154.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6528c9ac-3735-430d-99f2-7ac01944d688/6528c9ac-3735-430d-99f2-7ac01944d688.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6528c9ac-3735-430d-99f2-7ac01944d688/6528c9ac-3735-430d-99f2-7ac01944d688.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6528c9ac-3735-430d-99f2-7ac01944d688.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 Oct 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:1b:62:56:c9:9b:89:63:2a:c4:95:65:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6528c9ac-3735-430d-99f2-7ac01944d688 Validity Not Before: Sep 8 13:00:12 2026 GMT Not After : Dec 7 14:00:12 2026 GMT Subject: CN=13b82059-cd90-4f1e-b6fc-b42bc055a540 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:c6:9d:50:40:d0:2b:33:6d:22:0f:00:76:4e: c0:00:74:b1:c8:18:93:0d:06:a7:8c:76:a9:cd:8c: c9:82:7c:22:23:c0:98:b1:9a:e0:ce:85:5b:44:8b: b2:cd:5d:4f:52:4a:f3:77:79:4a:eb:90:a8:80:9a: 34:3d:92:da:db:10:36:e6:6b:c0:45:ca:fd:df:f2: cd:0c:5f:08:dd:4e:73:3c:67:a2:c3:f5:e7:be:d2: f7:ce:dc:78:a9:12:1d:7d:dc:7a:c5:be:72:39:cf: f8:41:fa:aa:27:96:1e:0f:82:f7:47:65:c8:a8:57: b2:ad:d2:ca:a4:91:23:57:95:ff:d9:44:b1:7c:a8: bc:78:82:47:ce:5f:ee:fc:2c:77:b6:cd:34:54:8a: 29:eb:12:a1:c7:3e:ca:2e:0d:b6:53:5e:af:4e:a5: dd:65:ff:b8:e0:43:68:74:d9:15:f9:04:93:fb:e0: c2:eb:d2:e4:82:89:3c:53:d8:8e:0b:8f:3b:a3:28: ae:37:93:5a:f6:31:d7:1c:88:4d:c3:6e:5e:0a:7c: 5f:d8:af:30:b3:94:32:de:6c:1a:5c:51:b7:b7:1d: e4:90:15:ef:29:4f:09:52:66:a5:90:8b:c7:c8:51: 01:2c:f1:b0:22:36:46:31:ef:f6:f8:f9:d3:c7:11: f6:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:E7:E3:8E:A8:27:B9:CC:5C:10:3C:C0:92:78:11:9A:8F:94:D0:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6528c9ac-3735-430d-99f2-7ac01944d688/6af0c050-7612-319a-ad24-aec5eb373930.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6528c9ac-3735-430d-99f2-7ac01944d688/6528c9ac-3735-430d-99f2-7ac01944d688.crl X509v3 Authority Key Identifier: keyid:64:79:50:96:C9:A4:0D:34:86:46:BD:1D:64:20:0D:DB:7C:9D:BA:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/6528c9ac-3735-430d-99f2-7ac01944d688.cer sbgp-ipAddrBlock: critical IPv4: 23.148.154.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:c2:d7:31:93:cc:85:46:6c:84:d2:11:58:e5:e0:c4:38:d7: 8e:c8:ad:75:9e:ce:d7:be:41:a6:82:70:b9:d9:b4:87:88:58: 2c:31:fd:28:5f:d9:21:3c:3f:1a:d7:f6:6b:9e:fb:3f:8d:04: 88:5a:2e:ef:8a:6e:cb:94:ec:8b:3d:a4:9c:12:5e:c3:12:35: 9e:5f:7b:ee:a5:30:64:89:d8:f1:7f:bb:d4:75:1b:dd:68:fc: dd:b1:01:1e:65:3e:b5:e4:04:7a:84:9a:f2:db:b2:fe:c4:55: 75:df:80:4d:95:c9:a4:69:b7:f2:39:d3:23:0f:21:2d:6d:42: 15:60:4f:50:fb:2c:ef:f8:8b:b5:08:69:ab:8f:79:aa:8b:4d: c9:f0:82:08:42:25:85:9f:a9:d3:af:bc:b3:b7:d9:f2:a6:55: a5:0f:f2:f6:09:44:2d:58:7e:45:28:66:e5:7f:d1:f4:c0:7a: 0c:f6:2b:8a:a3:c6:dc:12:86:47:d6:cc:5e:bb:1f:36:d7:6d: 99:d3:b9:b9:97:c3:ef:cc:03:aa:d6:d9:61:ce:0b:2b:8f:c9: 59:c7:78:ac:cc:4b:56:bb:50:64:bb:8f:32:97:a8:f5:e0:bc: 5a:e1:6f:29:50:8e:27:c4:ff:56:6c:91:fd:0a:df:a6:ff:8a: 2f:59:35:d8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8bYlbJm4ljKsSVZQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjUyOGM5YWMtMzczNS00MzBkLTk5ZjItN2FjMDE5NDRk Njg4MB4XDTI2MDkwODEzMDAxMloXDTI2MTIwNzE0MDAxMlowLzEtMCsGA1UEAxMk MTNiODIwNTktY2Q5MC00ZjFlLWI2ZmMtYjQyYmMwNTVhNTQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmMadUEDQKzNtIg8Adk7AAHSxyBiTDQanjHap zYzJgnwiI8CYsZrgzoVbRIuyzV1PUkrzd3lK65CogJo0PZLa2xA25mvARcr93/LN DF8I3U5zPGeiw/XnvtL3ztx4qRIdfdx6xb5yOc/4QfqqJ5YeD4L3R2XIqFeyrdLK pJEjV5X/2USxfKi8eIJHzl/u/Cx3ts00VIop6xKhxz7KLg22U16vTqXdZf+44ENo dNkV+QST++DC69Lkgok8U9iOC487oyiuN5Na9jHXHIhNw25eCnxf2K8ws5Qy3mwa XFG3tx3kkBXvKU8JUmalkIvHyFEBLPGwIjZGMe/2+PnTxxH2CwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNjn446oJ7nMXBA8wJJ4EZqPlNDlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82NTI4 YzlhYy0zNzM1LTQzMGQtOTlmMi03YWMwMTk0NGQ2ODgvNmFmMGMwNTAtNzYxMi0z MTlhLWFkMjQtYWVjNWViMzczOTMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjUyOGM5YWMtMzczNS00MzBkLTk5 ZjItN2FjMDE5NDRkNjg4LzY1MjhjOWFjLTM3MzUtNDMwZC05OWYyLTdhYzAxOTQ0 ZDY4OC5jcmwwHwYDVR0jBBgwFoAUZHlQlsmkDTSGRr0dZCAN23yduvgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82NTI4YzlhYy0zNzM1LTQzMGQtOTlmMi03YWMw MTk0NGQ2ODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5SaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEjC1zGTzIVGbITSEVjl4MQ4147IrXWezte+QaaCcLnZtIeIWCwx/Shf 2SE8PxrX9mue+z+NBIhaLu+KbsuU7Is9pJwSXsMSNZ5fe+6lMGSJ2PF/u9R1G91o /N2xAR5lPrXkBHqEmvLbsv7EVXXfgE2VyaRpt/I50yMPIS1tQhVgT1D7LO/4i7UI aauPeaqLTcnwgghCJYWfqdOvvLO32fKmVaUP8vYJRC1YfkUoZuV/0fTAegz2K4qj xtwShkfWzF67HzbXbZnTubmXw+/MA6rW2WHOCyuPyVnHeKzMS1a7UGS7jzKXqPXg vFrhbylQjifE/1Zskf0K36b/ii9ZNdg= -----END CERTIFICATE-----Generated at Sun Oct 4 08:45:16 2026 by rpki-client