$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/5df2f9d4-692d-4fbf-9b69-7ca2162be947/b233ed48-0941-3a4f-aef1-ba15444613f4.roa File: b233ed48-0941-3a4f-aef1-ba15444613f4.roa (raw, json) Hash identifier: Mhkc/q+N+JDJ+/rCOjzwlAlQPMSYdeEOmPFrv34L+6E= Subject key identifier: BE:C6:31:E9:5B:87:92:52:E9:8F:CF:29:C9:27:2B:4D:09:BF:90:DA Certificate issuer: /CN=5df2f9d4-692d-4fbf-9b69-7ca2162be947 Certificate serial: 010D0C9F4328584F7A502955820B63A2F7507FC0 Authority key identifier: 41:C2:72:55:89:D4:FF:4D:BB:DE:33:5D:8E:F1:E8:BD:F6:5A:AB:C8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/5df2f9d4-692d-4fbf-9b69-7ca2162be947.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/5df2f9d4-692d-4fbf-9b69-7ca2162be947/b233ed48-0941-3a4f-aef1-ba15444613f4.roa Signing time: Mon 12 Oct 2026 13:00:12 +0000 ROA not before: Mon 12 Oct 2026 13:00:12 +0000 ROA not after: Sun 10 Jan 2027 14:00:12 +0000 asID: 15312 IP address blocks: 23.148.52.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/5df2f9d4-692d-4fbf-9b69-7ca2162be947/5df2f9d4-692d-4fbf-9b69-7ca2162be947.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/5df2f9d4-692d-4fbf-9b69-7ca2162be947/5df2f9d4-692d-4fbf-9b69-7ca2162be947.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/5df2f9d4-692d-4fbf-9b69-7ca2162be947.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:7a:50:29:55:82:0b:63:a2:f7:50:7f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5df2f9d4-692d-4fbf-9b69-7ca2162be947 Validity Not Before: Oct 12 13:00:12 2026 GMT Not After : Jan 10 14:00:12 2027 GMT Subject: CN=897205b1-c600-415a-a0ae-5d9016f1e9ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:56:ef:56:f3:98:c9:20:5d:8a:dc:54:45:ff: 51:a9:64:5c:70:f5:d7:a3:b1:9a:83:51:36:7b:f2: 01:f6:89:6c:0f:a1:71:cf:52:08:5a:e2:75:8b:4b: b2:7a:e6:2e:14:d2:8d:de:e7:6a:02:74:f1:1f:71: 17:b0:cc:10:98:64:48:9d:1f:32:67:0d:32:d0:37: 95:70:05:15:49:91:6e:6d:e5:8c:82:71:b6:5e:ef: 27:6f:98:ce:a5:c5:cf:2b:91:4d:3a:55:e6:ff:46: 2b:7c:6d:25:d1:66:45:38:78:8a:a4:ad:37:26:2c: db:11:6c:93:9f:4c:b5:c8:61:60:60:56:82:a9:d0: f3:17:da:3b:67:44:8d:67:eb:f3:24:86:64:a1:3d: f4:72:14:c3:95:c0:a5:6c:36:28:32:7d:37:1d:d2: 1a:74:1a:52:5d:91:61:42:25:38:9e:4c:a5:e1:7d: ee:a1:e3:37:e4:7d:dc:4b:f8:37:0b:93:dc:03:05: 21:63:0e:04:ef:62:76:d5:f9:96:c7:75:4a:f4:55: 53:e8:6b:ba:0a:3e:5c:a3:96:f1:35:16:4e:c4:45: b0:98:c4:57:82:a0:85:ef:9a:0b:16:cf:51:3b:bd: e2:c6:68:d0:a0:38:0b:05:34:9d:ee:b2:5b:78:6c: 47:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:C6:31:E9:5B:87:92:52:E9:8F:CF:29:C9:27:2B:4D:09:BF:90:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/5df2f9d4-692d-4fbf-9b69-7ca2162be947/b233ed48-0941-3a4f-aef1-ba15444613f4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/5df2f9d4-692d-4fbf-9b69-7ca2162be947/5df2f9d4-692d-4fbf-9b69-7ca2162be947.crl X509v3 Authority Key Identifier: keyid:41:C2:72:55:89:D4:FF:4D:BB:DE:33:5D:8E:F1:E8:BD:F6:5A:AB:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/5df2f9d4-692d-4fbf-9b69-7ca2162be947.cer sbgp-ipAddrBlock: critical IPv4: 23.148.52.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:9a:ef:38:9f:80:d0:bf:e3:e3:de:91:b6:51:b9:4d:7e:db: 74:98:a6:23:d3:5b:a0:c4:7a:f0:4f:d2:65:d5:41:6e:74:62: f1:8e:20:16:de:2d:46:32:3b:97:84:e5:bf:e1:ae:b6:2c:c0: 7d:36:b1:f6:76:a6:f4:a5:e1:be:55:81:0d:89:00:ba:ea:f9: a5:9f:7c:1e:96:ce:99:cc:c4:b7:c5:1f:21:0e:aa:03:1a:56: 3a:3b:26:1d:81:a4:ff:57:5b:b3:38:82:5e:9e:3a:f4:02:98: 28:5a:b1:a6:1a:3b:cc:05:80:6a:23:99:51:d7:ad:77:ef:0d: eb:54:cc:97:fb:0b:17:60:62:0b:0c:00:08:53:5c:6d:71:9f: fd:eb:0e:82:52:92:3f:c6:88:f9:65:f8:2b:64:3d:af:7e:60: 72:66:09:e9:37:ad:cf:94:bb:2a:fe:85:31:1a:fd:9d:cc:34: e5:f2:7e:b2:d9:af:04:39:b4:e2:e7:ac:55:f7:0f:7b:5d:a2: 0d:5e:2c:61:e5:6c:b7:1e:36:c8:50:ee:f2:f8:06:cb:5d:b2: 4f:e5:0f:f6:68:03:d4:3c:e8:a7:2d:ce:1d:de:e7:d6:cc:2a: be:d7:17:d5:7c:2c:e9:3a:a8:10:8b:68:be:bc:a6:c0:96:3b: ea:54:61:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE96UClVggtjovdQf8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWRmMmY5ZDQtNjkyZC00ZmJmLTliNjktN2NhMjE2MmJl OTQ3MB4XDTI2MTAxMjEzMDAxMloXDTI3MDExMDE0MDAxMlowLzEtMCsGA1UEAxMk ODk3MjA1YjEtYzYwMC00MTVhLWEwYWUtNWQ5MDE2ZjFlOWNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjlbvVvOYySBditxURf9RqWRccPXXo7Gag1E2 e/IB9olsD6Fxz1IIWuJ1i0uyeuYuFNKN3udqAnTxH3EXsMwQmGRInR8yZw0y0DeV cAUVSZFubeWMgnG2Xu8nb5jOpcXPK5FNOlXm/0YrfG0l0WZFOHiKpK03JizbEWyT n0y1yGFgYFaCqdDzF9o7Z0SNZ+vzJIZkoT30chTDlcClbDYoMn03HdIadBpSXZFh QiU4nkyl4X3uoeM35H3cS/g3C5PcAwUhYw4E72J21fmWx3VK9FVT6Gu6Cj5co5bx NRZOxEWwmMRXgqCF75oLFs9RO73ixmjQoDgLBTSd7rJbeGxH7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL7GMelbh5JS6Y/PKcknK00Jv5DaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS81ZGYy ZjlkNC02OTJkLTRmYmYtOWI2OS03Y2EyMTYyYmU5NDcvYjIzM2VkNDgtMDk0MS0z YTRmLWFlZjEtYmExNTQ0NDYxM2Y0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvNWRmMmY5ZDQtNjkyZC00ZmJmLTli NjktN2NhMjE2MmJlOTQ3LzVkZjJmOWQ0LTY5MmQtNGZiZi05YjY5LTdjYTIxNjJi ZTk0Ny5jcmwwHwYDVR0jBBgwFoAUQcJyVYnU/0273jNdjvHovfZaq8gwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS81ZGYyZjlkNC02OTJkLTRmYmYtOWI2OS03Y2Ey MTYyYmU5NDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5Q0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD6a7zifgNC/4+PekbZRuU1+23SYpiPTW6DEevBP0mXVQW50YvGOIBbe LUYyO5eE5b/hrrYswH02sfZ2pvSl4b5VgQ2JALrq+aWffB6WzpnMxLfFHyEOqgMa Vjo7Jh2BpP9XW7M4gl6eOvQCmChasaYaO8wFgGojmVHXrXfvDetUzJf7CxdgYgsM AAhTXG1xn/3rDoJSkj/GiPll+CtkPa9+YHJmCek3rc+Uuyr+hTEa/Z3MNOXyfrLZ rwQ5tOLnrFX3D3tdog1eLGHlbLceNshQ7vL4Bstdsk/lD/ZoA9Q86Kctzh3e59bM Kr7XF9V8LOk6qBCLaL68psCWO+pUYdc= -----END CERTIFICATE-----Generated at Sun Oct 25 05:49:33 2026 by rpki-client