$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4dcdf1f4-5e60-438d-8934-0ca21d0b45af/d979104e-8a4c-3a7f-aca8-ea9d9c867f80.roa File: d979104e-8a4c-3a7f-aca8-ea9d9c867f80.roa (raw, json) Hash identifier: n6fJ7C1wt8PAcCqemGsEwKCrRDI0AR/2CVpUqMop4Nk= Subject key identifier: 74:72:D9:B6:E2:C5:B3:6E:8C:12:9A:0F:AE:44:65:E6:DB:06:DB:3D Certificate issuer: /CN=4dcdf1f4-5e60-438d-8934-0ca21d0b45af Certificate serial: 010D0C9F4328584F0AA22A4AB674509280044600 Authority key identifier: 2A:D7:2B:37:A6:0A:F1:0A:F9:08:FD:66:B5:F8:38:C0:C4:B1:61:63 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4dcdf1f4-5e60-438d-8934-0ca21d0b45af.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4dcdf1f4-5e60-438d-8934-0ca21d0b45af/d979104e-8a4c-3a7f-aca8-ea9d9c867f80.roa Signing time: Wed 02 Sep 2026 13:00:12 +0000 ROA not before: Wed 02 Sep 2026 13:00:12 +0000 ROA not after: Tue 01 Dec 2026 14:00:12 +0000 asID: 8143 IP address blocks: 23.146.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4dcdf1f4-5e60-438d-8934-0ca21d0b45af/4dcdf1f4-5e60-438d-8934-0ca21d0b45af.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4dcdf1f4-5e60-438d-8934-0ca21d0b45af/4dcdf1f4-5e60-438d-8934-0ca21d0b45af.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4dcdf1f4-5e60-438d-8934-0ca21d0b45af.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0a:a2:2a:4a:b6:74:50:92:80:04:46:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4dcdf1f4-5e60-438d-8934-0ca21d0b45af Validity Not Before: Sep 2 13:00:12 2026 GMT Not After : Dec 1 14:00:12 2026 GMT Subject: CN=40b10c49-c6d2-42e6-b60e-c375d56744e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:e7:08:11:a9:a8:be:6d:48:89:2c:8d:44:84: c7:6b:17:aa:c3:ee:cb:5b:40:47:82:d8:ec:72:b8: 21:d8:a3:39:19:40:14:3c:7e:6a:33:1d:42:8e:fe: 86:61:f3:d8:f1:9b:9f:b6:55:4e:59:38:f9:c4:f5: 4a:a5:66:36:9f:22:71:60:02:56:94:3a:4e:9f:96: f5:28:d5:2d:aa:59:79:62:f3:9a:d5:6d:b2:7e:a1: 35:3a:53:75:bc:7f:4b:4f:8d:de:09:d3:83:fe:e7: 14:00:e3:33:eb:96:83:09:af:67:c9:d8:90:0e:04: 5d:4c:75:1d:60:79:9d:b6:f5:ad:9c:33:d5:c5:9f: 1e:5c:4f:ac:d4:a1:04:33:cd:05:af:a5:2c:bd:0f: 94:56:7e:92:7b:73:5e:1b:8a:ec:45:af:29:52:31: 83:5e:85:ef:b0:18:8f:f1:96:d8:ed:a8:57:dd:f1: 0d:78:f9:bc:00:8c:7f:9f:60:7f:83:a6:51:69:4a: 3b:c6:df:61:1d:93:03:b6:a1:8b:6c:b0:98:e3:57: 0e:c6:03:ce:18:a5:50:c1:f0:f1:24:d2:d6:da:39: 8c:3c:9c:4a:4a:18:49:c1:29:98:37:91:ed:09:34: 68:04:dd:aa:60:9c:c6:32:39:91:95:60:56:43:cf: a2:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:72:D9:B6:E2:C5:B3:6E:8C:12:9A:0F:AE:44:65:E6:DB:06:DB:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4dcdf1f4-5e60-438d-8934-0ca21d0b45af/d979104e-8a4c-3a7f-aca8-ea9d9c867f80.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4dcdf1f4-5e60-438d-8934-0ca21d0b45af/4dcdf1f4-5e60-438d-8934-0ca21d0b45af.crl X509v3 Authority Key Identifier: keyid:2A:D7:2B:37:A6:0A:F1:0A:F9:08:FD:66:B5:F8:38:C0:C4:B1:61:63 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/4dcdf1f4-5e60-438d-8934-0ca21d0b45af.cer sbgp-ipAddrBlock: critical IPv4: 23.146.4.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:08:7a:e1:86:f9:80:03:18:b7:cb:1a:4a:20:65:38:11:38: 67:ef:ae:ac:38:44:02:ea:5b:ce:cc:8b:71:f0:56:df:23:c0: 36:c7:95:f7:71:c2:f1:df:80:ff:2f:e2:d8:3f:45:99:f4:79: 4e:ac:81:66:05:3f:39:aa:27:50:a5:1c:1c:ad:be:d0:6b:37: 3c:e3:41:f0:c9:23:e3:25:4e:74:44:7a:dc:6b:5d:1b:c1:ad: 02:5d:65:8e:44:72:3f:8a:61:89:61:9a:61:40:73:a2:0f:88: a0:c7:cc:5e:ee:eb:3f:0a:75:7a:c3:58:f2:66:24:a2:c7:d8: 51:e9:4f:9f:86:1d:0b:63:6f:9e:4c:ab:a9:c6:30:7a:c5:cb: c2:bf:78:97:ab:33:20:f1:55:61:8f:9b:80:7f:a7:4f:71:92: 91:84:f1:16:14:bb:b5:bf:b4:ba:2d:36:35:18:e9:dd:39:5b: 94:59:b8:54:27:a7:ff:1d:8e:48:27:1b:65:a6:ae:d3:4c:a5: b3:e9:32:5c:8d:bf:4f:d9:94:92:29:99:dc:43:f8:b8:43:ae: 8d:aa:2b:96:3f:2f:b5:ea:b1:50:8e:66:d0:60:6d:d3:64:7d: 6b:2c:f7:9c:da:7a:50:2d:58:81:ac:1b:12:3d:4c:c7:ea:2a: c1:de:9c:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8KoipKtnRQkoAERgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGRjZGYxZjQtNWU2MC00MzhkLTg5MzQtMGNhMjFkMGI0 NWFmMB4XDTI2MDkwMjEzMDAxMloXDTI2MTIwMTE0MDAxMlowLzEtMCsGA1UEAxMk NDBiMTBjNDktYzZkMi00MmU2LWI2MGUtYzM3NWQ1Njc0NGU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkucIEamovm1IiSyNRITHaxeqw+7LW0BHgtjs crgh2KM5GUAUPH5qMx1Cjv6GYfPY8ZuftlVOWTj5xPVKpWY2nyJxYAJWlDpOn5b1 KNUtqll5YvOa1W2yfqE1OlN1vH9LT43eCdOD/ucUAOMz65aDCa9nydiQDgRdTHUd YHmdtvWtnDPVxZ8eXE+s1KEEM80Fr6UsvQ+UVn6Se3NeG4rsRa8pUjGDXoXvsBiP 8ZbY7ahX3fENePm8AIx/n2B/g6ZRaUo7xt9hHZMDtqGLbLCY41cOxgPOGKVQwfDx JNLW2jmMPJxKShhJwSmYN5HtCTRoBN2qYJzGMjmRlWBWQ8+iCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHRy2bbixbNujBKaD65EZebbBts9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi80ZGNk ZjFmNC01ZTYwLTQzOGQtODkzNC0wY2EyMWQwYjQ1YWYvZDk3OTEwNGUtOGE0Yy0z YTdmLWFjYTgtZWE5ZDljODY3ZjgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvNGRjZGYxZjQtNWU2MC00MzhkLTg5 MzQtMGNhMjFkMGI0NWFmLzRkY2RmMWY0LTVlNjAtNDM4ZC04OTM0LTBjYTIxZDBi NDVhZi5jcmwwHwYDVR0jBBgwFoAUKtcrN6YK8Qr5CP1mtfg4wMSxYWMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi80ZGNkZjFmNC01ZTYwLTQzOGQtODkzNC0wY2Ey MWQwYjQ1YWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5IEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH8IeuGG+YADGLfLGkogZTgROGfvrqw4RALqW87Mi3HwVt8jwDbHlfdx wvHfgP8v4tg/RZn0eU6sgWYFPzmqJ1ClHBytvtBrNzzjQfDJI+MlTnREetxrXRvB rQJdZY5Ecj+KYYlhmmFAc6IPiKDHzF7u6z8KdXrDWPJmJKLH2FHpT5+GHQtjb55M q6nGMHrFy8K/eJerMyDxVWGPm4B/p09xkpGE8RYUu7W/tLotNjUY6d05W5RZuFQn p/8djkgnG2WmrtNMpbPpMlyNv0/ZlJIpmdxD+LhDro2qK5Y/L7XqsVCOZtBgbdNk fWss95zaelAtWIGsGxI9TMfqKsHenPI= -----END CERTIFICATE-----Generated at Mon Sep 21 23:25:01 2026 by rpki-client