$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0/25390b21-bdd0-35cb-b226-e2626b45dc25.roa File: 25390b21-bdd0-35cb-b226-e2626b45dc25.roa (raw, json) Hash identifier: IwTGiQeEJfp03Z/9kGHrjSWWC6DPp4mNsmNchlfmYco= Subject key identifier: 48:5F:30:37:29:15:F1:55:30:24:07:F2:6C:EB:9B:17:7A:6E:4B:75 Certificate issuer: /CN=91a20fbd-d241-4454-b2ba-4938f807efb0 Certificate serial: 010D0C9F4328584F093CD14C3901A3A34F45E040 Authority key identifier: B6:7E:EC:DB:29:C2:DE:FE:5D:4A:00:37:44:EC:49:90:D1:55:56:CE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0/25390b21-bdd0-35cb-b226-e2626b45dc25.roa Signing time: Wed 02 Sep 2026 01:00:12 +0000 ROA not before: Wed 02 Sep 2026 01:00:12 +0000 ROA not after: Tue 01 Dec 2026 02:00:12 +0000 asID: 9516 IP address blocks: 23.148.40.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0/91a20fbd-d241-4454-b2ba-4938f807efb0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0/91a20fbd-d241-4454-b2ba-4938f807efb0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:09:3c:d1:4c:39:01:a3:a3:4f:45:e0:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91a20fbd-d241-4454-b2ba-4938f807efb0 Validity Not Before: Sep 2 01:00:12 2026 GMT Not After : Dec 1 02:00:12 2026 GMT Subject: CN=997e66ae-3987-4d29-aa4e-36ecd698e098 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:bf:31:9c:54:19:8a:25:7d:d6:e6:d9:07:8c: 47:49:64:d7:10:73:58:25:53:e4:22:39:78:0a:10: 2a:f6:76:b9:8b:41:3b:5f:b2:b2:b5:5f:ee:1e:0a: c5:4a:39:a6:0a:36:e9:df:20:8a:5e:3b:2e:92:85: 80:5e:23:ab:90:8a:27:27:92:ca:c0:b1:8f:f5:47: 93:00:66:5f:f9:9a:90:f2:ec:ce:16:9d:a5:a1:db: 0d:16:bc:d1:41:5b:0d:8a:3d:a6:c2:6f:cb:9c:8c: aa:07:35:74:b0:04:89:e0:b0:cc:11:30:64:b9:e0: bf:11:af:46:8f:b7:82:66:a3:59:48:b0:5d:e9:24: f6:c7:d2:ce:f1:46:ed:4b:9b:e7:20:26:e4:62:82: 5e:58:d0:6a:3f:c6:73:29:ad:02:c8:d7:e4:4e:56: 16:d5:61:c2:73:83:a0:6a:07:3e:4c:c3:d7:40:84: f0:d8:ef:b3:85:89:6d:02:2d:6a:a3:a7:bb:0e:d5: 7c:49:c7:08:77:0d:04:5a:98:f3:a6:ab:ca:e7:23: 8c:18:40:de:f8:c7:99:b6:be:5a:86:44:11:11:45: a6:41:5f:5c:66:a3:83:14:ac:5a:04:d6:ed:87:27: 62:a2:60:b4:03:6d:86:46:e3:e0:64:7a:7f:14:a7: e5:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:5F:30:37:29:15:F1:55:30:24:07:F2:6C:EB:9B:17:7A:6E:4B:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0/25390b21-bdd0-35cb-b226-e2626b45dc25.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0/91a20fbd-d241-4454-b2ba-4938f807efb0.crl X509v3 Authority Key Identifier: keyid:B6:7E:EC:DB:29:C2:DE:FE:5D:4A:00:37:44:EC:49:90:D1:55:56:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/91a20fbd-d241-4454-b2ba-4938f807efb0.cer sbgp-ipAddrBlock: critical IPv4: 23.148.40.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:64:4c:b9:e6:81:8a:c2:eb:24:22:e1:02:78:c8:e8:fb:0f: 17:66:7f:7b:d8:39:79:5f:e2:e1:0d:d6:c5:d2:9f:b5:fa:2d: 62:10:0d:a1:fc:99:f3:4d:11:d5:f6:36:3f:23:ed:db:63:bc: 72:cf:4d:e1:98:b2:b4:87:a2:e7:a8:c1:0e:89:60:96:bc:e2: f8:40:e9:07:67:05:d3:8a:48:8a:4a:1e:95:00:89:d8:7c:7d: 3e:03:e7:60:5a:77:8d:1b:32:61:5a:60:56:20:3d:c9:7b:48: 03:a2:b3:dd:9c:40:ea:6f:b8:72:36:be:6e:1e:df:67:78:68: 17:ab:90:a6:3e:b9:72:67:61:7a:07:a2:45:79:13:99:57:f6: 32:82:61:54:29:93:32:64:71:10:d5:3a:33:f1:c7:45:d0:05: b5:a5:f5:46:1e:2b:23:2f:c6:07:00:78:d1:f1:d9:9b:d7:8e: 84:c7:fb:95:e1:a0:7a:09:c0:f0:4f:dc:50:eb:93:1f:2e:29: 10:1a:e4:0d:13:06:e8:8c:9c:b2:9d:0a:89:8d:1e:40:f3:7a: ec:76:22:8a:e8:24:56:cb:ce:ec:9e:69:4b:e3:54:33:e9:32: e0:be:fd:9b:44:59:64:1f:cd:fe:49:0f:0c:37:e1:f0:66:d1: e4:89:2b:8f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8JPNFMOQGjo09F4EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTFhMjBmYmQtZDI0MS00NDU0LWIyYmEtNDkzOGY4MDdl ZmIwMB4XDTI2MDkwMjAxMDAxMloXDTI2MTIwMTAyMDAxMlowLzEtMCsGA1UEAxMk OTk3ZTY2YWUtMzk4Ny00ZDI5LWFhNGUtMzZlY2Q2OThlMDk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnL8xnFQZiiV91ubZB4xHSWTXEHNYJVPkIjl4 ChAq9na5i0E7X7KytV/uHgrFSjmmCjbp3yCKXjsukoWAXiOrkIonJ5LKwLGP9UeT AGZf+ZqQ8uzOFp2lodsNFrzRQVsNij2mwm/LnIyqBzV0sASJ4LDMETBkueC/Ea9G j7eCZqNZSLBd6ST2x9LO8UbtS5vnICbkYoJeWNBqP8ZzKa0CyNfkTlYW1WHCc4Og agc+TMPXQITw2O+zhYltAi1qo6e7DtV8SccIdw0EWpjzpqvK5yOMGEDe+MeZtr5a hkQREUWmQV9cZqODFKxaBNbthydiomC0A22GRuPgZHp/FKflEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEhfMDcpFfFVMCQH8mzrmxd6bkt1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85MWEy MGZiZC1kMjQxLTQ0NTQtYjJiYS00OTM4ZjgwN2VmYjAvMjUzOTBiMjEtYmRkMC0z NWNiLWIyMjYtZTI2MjZiNDVkYzI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOTFhMjBmYmQtZDI0MS00NDU0LWIy YmEtNDkzOGY4MDdlZmIwLzkxYTIwZmJkLWQyNDEtNDQ1NC1iMmJhLTQ5MzhmODA3 ZWZiMC5jcmwwHwYDVR0jBBgwFoAUtn7s2ynC3v5dSgA3ROxJkNFVVs4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS85MWEyMGZiZC1kMjQxLTQ0NTQtYjJiYS00OTM4 ZjgwN2VmYjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5QoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGpkTLnmgYrC6yQi4QJ4yOj7Dxdmf3vYOXlf4uEN1sXSn7X6LWIQDaH8 mfNNEdX2Nj8j7dtjvHLPTeGYsrSHoueowQ6JYJa84vhA6QdnBdOKSIpKHpUAidh8 fT4D52Bad40bMmFaYFYgPcl7SAOis92cQOpvuHI2vm4e32d4aBerkKY+uXJnYXoH okV5E5lX9jKCYVQpkzJkcRDVOjPxx0XQBbWl9UYeKyMvxgcAeNHx2ZvXjoTH+5Xh oHoJwPBP3FDrkx8uKRAa5A0TBuiMnLKdComNHkDzeux2IoroJFbLzuyeaUvjVDPp MuC+/ZtEWWQfzf5JDww34fBm0eSJK48= -----END CERTIFICATE-----Generated at Fri Sep 11 08:27:49 2026 by rpki-client