$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/affcec42-3d91-4bd4-91a9-094e86b16e3a/4bfa845b-38ab-32ef-b99a-8f10a7452ff3.roa File: 4bfa845b-38ab-32ef-b99a-8f10a7452ff3.roa (raw, json) Hash identifier: nX+G5+ErYuBR+Z4ixM7MkoSSJgfd2GfaBmK8LtNQVek= Subject key identifier: 27:08:10:00:A5:16:1D:A6:E8:E6:14:43:68:5A:0A:69:59:3C:70:82 Certificate issuer: /CN=affcec42-3d91-4bd4-91a9-094e86b16e3a Certificate serial: 010D0C9F4328584EFE1231AA169955A5D299F080 Authority key identifier: 00:C6:02:63:2D:43:DC:7C:16:1B:C3:B1:34:F6:1D:6A:16:86:4B:55 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/affcec42-3d91-4bd4-91a9-094e86b16e3a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/affcec42-3d91-4bd4-91a9-094e86b16e3a/4bfa845b-38ab-32ef-b99a-8f10a7452ff3.roa Signing time: Sat 29 Aug 2026 01:00:12 +0000 ROA not before: Sat 29 Aug 2026 01:00:12 +0000 ROA not after: Fri 27 Nov 2026 02:00:12 +0000 asID: 174 IP address blocks: 23.148.164.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/affcec42-3d91-4bd4-91a9-094e86b16e3a/affcec42-3d91-4bd4-91a9-094e86b16e3a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/affcec42-3d91-4bd4-91a9-094e86b16e3a/affcec42-3d91-4bd4-91a9-094e86b16e3a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/affcec42-3d91-4bd4-91a9-094e86b16e3a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Sep 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:fe:12:31:aa:16:99:55:a5:d2:99:f0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=affcec42-3d91-4bd4-91a9-094e86b16e3a Validity Not Before: Aug 29 01:00:12 2026 GMT Not After : Nov 27 02:00:12 2026 GMT Subject: CN=8853372b-e49c-4167-9e65-5b1cb6d8e77b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:97:6c:50:08:e1:bc:18:6c:bb:d7:cd:91:1f: 67:fe:b0:92:22:77:13:d4:a1:73:4c:0c:3b:90:64: ac:03:be:ea:9f:11:81:d2:e5:d9:ae:f7:b1:01:3c: 73:39:f3:1d:01:f5:4f:3c:96:0a:83:7b:6e:60:dd: 41:d5:26:ef:84:c9:ad:c6:3d:6e:79:b7:be:db:bf: 4c:2a:13:83:37:3f:15:3e:46:4d:33:58:86:17:89: 83:f8:85:82:17:a3:62:20:19:c0:a1:11:20:72:9f: b9:74:56:fe:a4:4d:15:d9:96:fe:9d:d8:9b:2f:52: ef:73:c0:24:37:0b:3c:c1:01:30:ce:e2:6c:0d:af: 15:24:35:d2:a6:f9:5b:13:bf:eb:08:41:55:7c:d5: 71:7a:f4:f0:ad:68:f7:b7:09:a5:61:d7:36:1a:86: e4:c0:74:64:2b:3c:3e:a4:4f:46:bd:1c:39:d3:da: 50:81:45:57:71:e2:ed:34:b1:f0:15:a1:51:16:a3: 4e:b0:52:1a:a4:9d:d1:c5:48:3d:35:d6:e5:20:97: 48:31:a1:fd:04:a7:8b:e6:55:81:43:fc:e4:ee:72: f1:4c:db:a8:5c:7d:17:04:5a:72:c4:a6:61:f2:27: 55:c5:35:0f:65:4d:39:71:7d:b7:b3:01:b8:e3:e9: 46:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:08:10:00:A5:16:1D:A6:E8:E6:14:43:68:5A:0A:69:59:3C:70:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/affcec42-3d91-4bd4-91a9-094e86b16e3a/4bfa845b-38ab-32ef-b99a-8f10a7452ff3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/affcec42-3d91-4bd4-91a9-094e86b16e3a/affcec42-3d91-4bd4-91a9-094e86b16e3a.crl X509v3 Authority Key Identifier: keyid:00:C6:02:63:2D:43:DC:7C:16:1B:C3:B1:34:F6:1D:6A:16:86:4B:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/affcec42-3d91-4bd4-91a9-094e86b16e3a.cer sbgp-ipAddrBlock: critical IPv4: 23.148.164.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:27:1d:15:43:df:e5:5f:0e:26:03:75:97:34:f5:55:f5:b4: 65:b6:10:2d:3d:36:fb:0f:9d:fc:e6:2d:3e:6f:f2:ff:cc:3d: 30:55:b9:65:d6:b1:d1:0c:e8:74:61:30:5f:27:b4:4a:36:09: 04:57:48:14:61:bb:3e:68:0d:2a:61:ce:80:23:a8:13:31:0c: 0f:70:43:53:21:7f:0c:9d:e0:62:24:8b:b9:cf:30:82:3d:ba: c1:16:05:13:24:4a:71:24:5d:05:81:1b:8f:75:32:05:1c:7e: c4:c9:0f:59:df:87:27:4a:7e:00:4c:d3:c2:1d:a4:6a:05:13: de:c8:31:88:63:f1:17:45:9a:66:84:24:28:cd:18:79:d9:1f: 96:7d:25:a0:3d:8c:e6:9c:f3:dc:c8:5e:41:ee:7c:3b:b6:01: 8e:e3:a9:7e:28:08:56:ff:ec:8e:2a:de:67:d7:b5:49:2f:98: 01:dc:17:22:cd:8a:84:3b:e1:23:95:20:6a:d5:aa:02:58:95: 27:c6:0d:25:93:6f:cc:e5:15:93:50:87:b4:75:a4:57:8d:6e: 22:96:76:ca:cb:d1:a8:eb:c2:a8:38:cb:64:c6:27:42:a3:db: df:ad:8b:ba:44:37:2e:1a:a8:41:25:0b:03:b2:5c:a6:fb:16: 53:ed:bc:fc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7+EjGqFplVpdKZ8IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWZmY2VjNDItM2Q5MS00YmQ0LTkxYTktMDk0ZTg2YjE2 ZTNhMB4XDTI2MDgyOTAxMDAxMloXDTI2MTEyNzAyMDAxMlowLzEtMCsGA1UEAxMk ODg1MzM3MmItZTQ5Yy00MTY3LTllNjUtNWIxY2I2ZDhlNzdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2JdsUAjhvBhsu9fNkR9n/rCSIncT1KFzTAw7 kGSsA77qnxGB0uXZrvexATxzOfMdAfVPPJYKg3tuYN1B1SbvhMmtxj1uebe+279M KhODNz8VPkZNM1iGF4mD+IWCF6NiIBnAoREgcp+5dFb+pE0V2Zb+ndibL1Lvc8Ak Nws8wQEwzuJsDa8VJDXSpvlbE7/rCEFVfNVxevTwrWj3twmlYdc2GobkwHRkKzw+ pE9GvRw509pQgUVXceLtNLHwFaFRFqNOsFIapJ3RxUg9NdblIJdIMaH9BKeL5lWB Q/zk7nLxTNuoXH0XBFpyxKZh8idVxTUPZU05cX23swG44+lGgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCcIEAClFh2m6OYUQ2haCmlZPHCCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9hZmZj ZWM0Mi0zZDkxLTRiZDQtOTFhOS0wOTRlODZiMTZlM2EvNGJmYTg0NWItMzhhYi0z MmVmLWI5OWEtOGYxMGE3NDUyZmYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYWZmY2VjNDItM2Q5MS00YmQ0LTkx YTktMDk0ZTg2YjE2ZTNhL2FmZmNlYzQyLTNkOTEtNGJkNC05MWE5LTA5NGU4NmIx NmUzYS5jcmwwHwYDVR0jBBgwFoAUAMYCYy1D3HwWG8OxNPYdahaGS1UwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9hZmZjZWM0Mi0zZDkxLTRiZDQtOTFhOS0wOTRl ODZiMTZlM2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5SkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEQnHRVD3+VfDiYDdZc09VX1tGW2EC09NvsPnfzmLT5v8v/MPTBVuWXW sdEM6HRhMF8ntEo2CQRXSBRhuz5oDSphzoAjqBMxDA9wQ1Mhfwyd4GIki7nPMII9 usEWBRMkSnEkXQWBG491MgUcfsTJD1nfhydKfgBM08IdpGoFE97IMYhj8RdFmmaE JCjNGHnZH5Z9JaA9jOac89zIXkHufDu2AY7jqX4oCFb/7I4q3mfXtUkvmAHcFyLN ioQ74SOVIGrVqgJYlSfGDSWTb8zlFZNQh7R1pFeNbiKWdsrL0ajrwqg4y2TGJ0Kj 29+ti7pENy4aqEElCwOyXKb7FlPtvPw= -----END CERTIFICATE-----Generated at Sun Sep 20 10:59:13 2026 by rpki-client