$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85a2f8a8-9415-4c10-b6d4-df78f2ad1243/78ada5fc-c4db-325a-a651-59b7a9d5ae86.roa File: 78ada5fc-c4db-325a-a651-59b7a9d5ae86.roa (raw, json) Hash identifier: iDWHlidKmoMDGRJs6KXkO8GbLBuDFZbzQv6EKDFAI2s= Subject key identifier: 7D:A2:1E:A1:56:AC:07:86:E5:7A:8D:2B:EC:77:E5:F3:BD:87:68:A8 Certificate issuer: /CN=85a2f8a8-9415-4c10-b6d4-df78f2ad1243 Certificate serial: 010D0C9F4328584F9FFDE0C5078C0A52862F9D80 Authority key identifier: 4D:04:7C:7C:D1:1B:74:6E:EC:2D:58:F3:A4:A8:96:FB:A4:9A:D9:42 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85a2f8a8-9415-4c10-b6d4-df78f2ad1243.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85a2f8a8-9415-4c10-b6d4-df78f2ad1243/78ada5fc-c4db-325a-a651-59b7a9d5ae86.roa Signing time: Mon 26 Oct 2026 01:00:13 +0000 ROA not before: Mon 26 Oct 2026 01:00:13 +0000 ROA not after: Sun 24 Jan 2027 02:00:13 +0000 asID: 174 IP address blocks: 23.148.116.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85a2f8a8-9415-4c10-b6d4-df78f2ad1243/85a2f8a8-9415-4c10-b6d4-df78f2ad1243.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85a2f8a8-9415-4c10-b6d4-df78f2ad1243/85a2f8a8-9415-4c10-b6d4-df78f2ad1243.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85a2f8a8-9415-4c10-b6d4-df78f2ad1243.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 06 Nov 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:9f:fd:e0:c5:07:8c:0a:52:86:2f:9d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85a2f8a8-9415-4c10-b6d4-df78f2ad1243 Validity Not Before: Oct 26 01:00:13 2026 GMT Not After : Jan 24 02:00:13 2027 GMT Subject: CN=1b65c489-57ba-4b81-9a2d-558b2448438a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:d6:31:78:b4:f2:a4:c0:01:14:73:9f:6d:7a: 77:e9:07:c2:55:7f:c5:30:e4:9a:a8:5f:40:98:34: b8:6f:5f:f9:e4:5f:65:4f:0e:28:6c:a3:bb:45:80: 9f:e2:6d:8e:34:d5:9d:d8:bc:78:42:c9:12:10:c0: 2d:be:8d:99:8a:ad:1e:87:82:cc:80:ce:05:aa:82: 38:14:3d:1f:6e:8a:fd:27:2b:10:dd:2c:f0:20:89: ac:1f:a8:e4:cc:84:5b:50:77:7f:fe:ed:fb:b4:f7: 47:b3:e0:8a:61:8d:77:c8:1f:a0:be:d3:9a:6b:9f: 47:52:f5:a2:db:9e:af:d8:a2:b9:e9:ea:2b:37:70: ab:00:93:43:cb:e7:0e:96:45:53:67:39:12:fb:52: a7:cb:eb:22:3f:a4:bd:28:f1:53:4e:e0:46:a1:6e: 70:0e:d0:04:3d:00:5a:16:bd:19:c2:10:c1:7a:68: c8:7e:35:7b:a8:ce:f4:76:82:74:bc:76:7c:10:74: 7a:79:05:b4:27:52:83:6f:72:c4:17:83:7c:43:4d: c2:a2:b0:99:05:2d:3f:1e:fd:12:aa:2b:9f:ae:bc: f9:c9:60:83:cc:7f:a6:0a:6d:42:2a:be:61:ca:6c: d3:c6:25:9e:f0:15:c6:ab:3f:3f:39:f9:c4:79:21: b1:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:A2:1E:A1:56:AC:07:86:E5:7A:8D:2B:EC:77:E5:F3:BD:87:68:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85a2f8a8-9415-4c10-b6d4-df78f2ad1243/78ada5fc-c4db-325a-a651-59b7a9d5ae86.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85a2f8a8-9415-4c10-b6d4-df78f2ad1243/85a2f8a8-9415-4c10-b6d4-df78f2ad1243.crl X509v3 Authority Key Identifier: keyid:4D:04:7C:7C:D1:1B:74:6E:EC:2D:58:F3:A4:A8:96:FB:A4:9A:D9:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85a2f8a8-9415-4c10-b6d4-df78f2ad1243.cer sbgp-ipAddrBlock: critical IPv4: 23.148.116.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:3d:4e:f3:a6:15:3e:b7:28:cf:df:7e:dc:cb:a5:63:d6:e9: b9:b7:04:cb:20:3f:87:54:7e:36:4e:0b:9a:d7:e1:fa:df:98: 5b:b2:0f:65:61:cf:5e:b2:a3:86:60:ec:ac:50:f9:b5:6b:19: b5:8f:2f:ed:d1:3e:bf:f7:d2:40:97:40:d4:ef:a7:b7:56:c3: 9a:89:63:d8:41:de:d2:2d:f9:9a:f7:75:bd:b0:74:6f:5a:14: 1c:74:51:c7:c5:c8:4b:48:c8:dd:d0:88:53:2e:70:0b:70:dc: 0f:77:72:8a:08:a2:dd:ba:23:df:42:df:01:b4:f7:23:21:e1: f0:f2:f9:41:5a:0c:2b:27:cf:5e:dc:b8:62:55:f2:f9:b0:e3: 2d:61:55:56:fc:71:e4:0d:1f:8b:5f:41:91:3e:dd:51:71:3d: 30:d0:4d:25:f0:06:76:9b:78:9a:6b:58:f3:e0:49:bd:be:8e: ed:5d:bd:51:fd:4d:aa:b0:91:e7:c3:5c:d8:10:da:31:0a:d3: e8:17:a6:31:9f:7b:b7:b6:e7:51:a3:3b:02:6b:66:d0:a7:c5: bb:46:ed:29:4f:d3:6b:d0:26:69:52:f3:89:a0:b9:0e:2c:d9: af:4a:96:16:a5:4d:ed:e2:bc:f3:6b:72:95:b8:fd:88:9e:0f: 37:62:9b:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+f/eDFB4wKUoYvnYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODVhMmY4YTgtOTQxNS00YzEwLWI2ZDQtZGY3OGYyYWQx MjQzMB4XDTI2MTAyNjAxMDAxM1oXDTI3MDEyNDAyMDAxM1owLzEtMCsGA1UEAxMk MWI2NWM0ODktNTdiYS00YjgxLTlhMmQtNTU4YjI0NDg0MzhhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh9YxeLTypMABFHOfbXp36QfCVX/FMOSaqF9A mDS4b1/55F9lTw4obKO7RYCf4m2ONNWd2Lx4QskSEMAtvo2Ziq0eh4LMgM4FqoI4 FD0fbor9JysQ3SzwIImsH6jkzIRbUHd//u37tPdHs+CKYY13yB+gvtOaa59HUvWi 256v2KK56eorN3CrAJNDy+cOlkVTZzkS+1Kny+siP6S9KPFTTuBGoW5wDtAEPQBa Fr0ZwhDBemjIfjV7qM70doJ0vHZ8EHR6eQW0J1KDb3LEF4N8Q03CorCZBS0/Hv0S qiufrrz5yWCDzH+mCm1CKr5hymzTxiWe8BXGqz8/OfnEeSGxxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH2iHqFWrAeG5XqNK+x35fO9h2ioMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84NWEy ZjhhOC05NDE1LTRjMTAtYjZkNC1kZjc4ZjJhZDEyNDMvNzhhZGE1ZmMtYzRkYi0z MjVhLWE2NTEtNTliN2E5ZDVhZTg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvODVhMmY4YTgtOTQxNS00YzEwLWI2 ZDQtZGY3OGYyYWQxMjQzLzg1YTJmOGE4LTk0MTUtNGMxMC1iNmQ0LWRmNzhmMmFk MTI0My5jcmwwHwYDVR0jBBgwFoAUTQR8fNEbdG7sLVjzpKiW+6Sa2UIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi84NWEyZjhhOC05NDE1LTRjMTAtYjZkNC1kZjc4 ZjJhZDEyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5R0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEE9TvOmFT63KM/fftzLpWPW6bm3BMsgP4dUfjZOC5rX4frfmFuyD2Vh z16yo4Zg7KxQ+bVrGbWPL+3RPr/30kCXQNTvp7dWw5qJY9hB3tIt+Zr3db2wdG9a FBx0UcfFyEtIyN3QiFMucAtw3A93cooIot26I99C3wG09yMh4fDy+UFaDCsnz17c uGJV8vmw4y1hVVb8ceQNH4tfQZE+3VFxPTDQTSXwBnabeJprWPPgSb2+ju1dvVH9 TaqwkefDXNgQ2jEK0+gXpjGfe7e251GjOwJrZtCnxbtG7SlP02vQJmlS84mguQ4s 2a9KlhalTe3ivPNrcpW4/YieDzdimzQ= -----END CERTIFICATE-----Generated at Thu Nov 5 16:42:48 2026 by rpki-client