$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/5df2f9d4-692d-4fbf-9b69-7ca2162be947/b233ed48-0941-3a4f-aef1-ba15444613f4.roa File: b233ed48-0941-3a4f-aef1-ba15444613f4.roa (raw, json) Hash identifier: NWKgWfZPJfnEdzylswH4ZdqAwCYEUy/sEKtQ8QNObwI= Subject key identifier: 96:58:CF:F2:A2:8B:15:8F:13:82:52:DA:17:0B:63:9D:EC:9D:DA:E6 Certificate issuer: /CN=5df2f9d4-692d-4fbf-9b69-7ca2162be947 Certificate serial: 010D0C9F4328584ED8648BC9A6B3D901ACB88690 Authority key identifier: 41:C2:72:55:89:D4:FF:4D:BB:DE:33:5D:8E:F1:E8:BD:F6:5A:AB:C8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/5df2f9d4-692d-4fbf-9b69-7ca2162be947.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/5df2f9d4-692d-4fbf-9b69-7ca2162be947/b233ed48-0941-3a4f-aef1-ba15444613f4.roa Signing time: Sat 15 Aug 2026 13:00:11 +0000 ROA not before: Sat 15 Aug 2026 13:00:11 +0000 ROA not after: Fri 13 Nov 2026 14:00:11 +0000 asID: 15312 IP address blocks: 23.148.52.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/5df2f9d4-692d-4fbf-9b69-7ca2162be947/5df2f9d4-692d-4fbf-9b69-7ca2162be947.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/5df2f9d4-692d-4fbf-9b69-7ca2162be947/5df2f9d4-692d-4fbf-9b69-7ca2162be947.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/5df2f9d4-692d-4fbf-9b69-7ca2162be947.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d8:64:8b:c9:a6:b3:d9:01:ac:b8:86:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5df2f9d4-692d-4fbf-9b69-7ca2162be947 Validity Not Before: Aug 15 13:00:11 2026 GMT Not After : Nov 13 14:00:11 2026 GMT Subject: CN=38bbced9-b4c7-4a35-9b95-1bef326ed689 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:25:50:4e:c9:6a:50:e3:18:f3:9b:36:ef:50: 28:a7:cc:71:4a:85:10:15:45:12:98:fa:30:ed:ab: 89:d3:57:e0:ba:44:00:b9:82:b3:53:40:d6:13:5b: 83:8d:fc:46:77:d9:16:dd:70:5a:20:42:2d:69:cf: fb:ce:98:fa:21:de:e3:68:05:dc:30:ef:9a:ef:d0: c0:b1:08:39:48:1e:80:72:ca:2a:52:d1:26:24:67: 94:62:c5:e0:69:b2:0c:ae:aa:8a:34:d0:da:86:ee: 7f:60:d2:2e:5b:5c:a6:30:96:51:64:50:d8:bc:c2: 22:5f:26:8c:b5:6b:6c:81:48:ef:01:67:d5:98:5f: 13:38:41:a2:7d:85:0a:c5:b2:9e:f2:da:87:47:6a: 3c:36:a2:5f:49:48:73:4c:98:bd:01:0a:3b:a1:b1: 64:72:2b:48:f2:03:e9:5c:81:4b:ab:45:c9:ca:70: 6c:ca:2d:f0:34:9e:07:04:27:80:ec:50:22:42:9a: f6:93:f6:5a:77:80:d7:c4:63:ac:17:e0:26:bc:ff: 6e:64:b8:ab:c2:a0:50:d0:72:ce:0d:61:c2:04:ab: 4f:95:58:46:89:2f:4e:b8:e2:6f:ef:e4:5f:67:d9: 28:4d:a3:9c:f3:b2:9c:02:b5:74:c0:6b:6c:cb:1e: ff:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:58:CF:F2:A2:8B:15:8F:13:82:52:DA:17:0B:63:9D:EC:9D:DA:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/5df2f9d4-692d-4fbf-9b69-7ca2162be947/b233ed48-0941-3a4f-aef1-ba15444613f4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/5df2f9d4-692d-4fbf-9b69-7ca2162be947/5df2f9d4-692d-4fbf-9b69-7ca2162be947.crl X509v3 Authority Key Identifier: keyid:41:C2:72:55:89:D4:FF:4D:BB:DE:33:5D:8E:F1:E8:BD:F6:5A:AB:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/5df2f9d4-692d-4fbf-9b69-7ca2162be947.cer sbgp-ipAddrBlock: critical IPv4: 23.148.52.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:12:1e:d4:c0:d8:83:5a:a0:24:0e:a1:06:bd:9b:14:8c:0d: b7:24:6f:ad:4c:a2:de:37:a3:7e:89:20:e4:fb:94:64:10:f9: fc:a6:32:7d:05:17:b4:29:ca:32:8a:f5:51:ad:cb:16:13:71: 24:6f:97:e2:03:47:81:6a:e4:d3:c1:38:ae:82:c7:9c:48:b8: 12:83:a4:30:31:1d:f6:9b:71:d7:43:51:8a:ea:0e:70:13:36: f0:76:c0:32:f4:6d:fc:dc:83:66:8a:90:16:17:6e:54:8e:bb: f1:74:07:f9:34:00:d8:e6:7a:7c:b0:c8:24:88:88:92:da:d5: 8d:6e:9e:1a:58:0e:e9:38:0f:87:35:2a:88:c7:53:0d:df:95: 91:34:a7:3e:07:80:3f:2e:9b:c6:f0:73:d5:88:fe:0f:ec:9d: 2a:44:45:df:a4:95:84:2a:e3:9d:51:37:79:9f:26:52:65:f0: 67:c5:4c:28:0d:0d:74:a1:3e:45:37:37:16:76:40:a9:5a:f3: dc:b0:d0:f3:c6:96:45:2d:d8:56:9a:d7:42:52:47:64:97:fd: d9:d2:1d:d7:30:45:58:4e:89:c4:70:58:a5:64:0d:79:ef:f0: 20:e0:ee:5d:f3:f4:48:7f:e7:4a:3f:5d:0b:ad:b3:c1:76:0b: 8e:c5:93:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7YZIvJprPZAay4hpAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWRmMmY5ZDQtNjkyZC00ZmJmLTliNjktN2NhMjE2MmJl OTQ3MB4XDTI2MDgxNTEzMDAxMVoXDTI2MTExMzE0MDAxMVowLzEtMCsGA1UEAxMk MzhiYmNlZDktYjRjNy00YTM1LTliOTUtMWJlZjMyNmVkNjg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2CVQTslqUOMY85s271Aop8xxSoUQFUUSmPow 7auJ01fgukQAuYKzU0DWE1uDjfxGd9kW3XBaIEItac/7zpj6Id7jaAXcMO+a79DA sQg5SB6AcsoqUtEmJGeUYsXgabIMrqqKNNDahu5/YNIuW1ymMJZRZFDYvMIiXyaM tWtsgUjvAWfVmF8TOEGifYUKxbKe8tqHR2o8NqJfSUhzTJi9AQo7obFkcitI8gPp XIFLq0XJynBsyi3wNJ4HBCeA7FAiQpr2k/Zad4DXxGOsF+AmvP9uZLirwqBQ0HLO DWHCBKtPlVhGiS9OuOJv7+RfZ9koTaOc87KcArV0wGtsyx7/4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJZYz/KiixWPE4JS2hcLY53sndrmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS81ZGYy ZjlkNC02OTJkLTRmYmYtOWI2OS03Y2EyMTYyYmU5NDcvYjIzM2VkNDgtMDk0MS0z YTRmLWFlZjEtYmExNTQ0NDYxM2Y0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvNWRmMmY5ZDQtNjkyZC00ZmJmLTli NjktN2NhMjE2MmJlOTQ3LzVkZjJmOWQ0LTY5MmQtNGZiZi05YjY5LTdjYTIxNjJi ZTk0Ny5jcmwwHwYDVR0jBBgwFoAUQcJyVYnU/0273jNdjvHovfZaq8gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS81ZGYyZjlkNC02OTJkLTRmYmYtOWI2OS03Y2Ey MTYyYmU5NDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5Q0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEYSHtTA2INaoCQOoQa9mxSMDbckb61Mot43o36JIOT7lGQQ+fymMn0F F7QpyjKK9VGtyxYTcSRvl+IDR4Fq5NPBOK6Cx5xIuBKDpDAxHfabcddDUYrqDnAT NvB2wDL0bfzcg2aKkBYXblSOu/F0B/k0ANjmenywyCSIiJLa1Y1unhpYDuk4D4c1 KojHUw3flZE0pz4HgD8um8bwc9WI/g/snSpERd+klYQq451RN3mfJlJl8GfFTCgN DXShPkU3NxZ2QKla89yw0PPGlkUt2Faa10JSR2SX/dnSHdcwRVhOicRwWKVkDXnv 8CDg7l3z9Eh/50o/XQuts8F2C47Fk6k= -----END CERTIFICATE-----Generated at Mon Aug 31 11:24:59 2026 by rpki-client