$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/40163235-a725-497c-92e8-c077e46672e7/edbc4368-04f8-39ad-ab95-27d27d332ba3.roa File: edbc4368-04f8-39ad-ab95-27d27d332ba3.roa (raw, json) Hash identifier: PHUhC4iMvJvssAq/JsMqnCAMqb9e/HEoXOW2+Ya1Rlk= Subject key identifier: 29:57:01:A9:71:08:CE:3A:C1:18:75:FF:E9:1C:2C:2A:BC:42:05:A0 Certificate issuer: /CN=40163235-a725-497c-92e8-c077e46672e7 Certificate serial: 010D0C9F4328584D3B34DCE3EC8ABD06D6BFBF00 Authority key identifier: 09:85:22:05:AF:AE:B9:30:AC:FE:43:2E:92:53:EC:11:2F:B3:33:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/40163235-a725-497c-92e8-c077e46672e7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/40163235-a725-497c-92e8-c077e46672e7/edbc4368-04f8-39ad-ab95-27d27d332ba3.roa Signing time: Fri 20 Mar 2026 13:00:40 +0000 ROA not before: Fri 20 Mar 2026 13:00:40 +0000 ROA not after: Thu 18 Jun 2026 13:00:40 +0000 asID: 400773 IP address blocks: 23.157.24.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/40163235-a725-497c-92e8-c077e46672e7/40163235-a725-497c-92e8-c077e46672e7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/40163235-a725-497c-92e8-c077e46672e7/40163235-a725-497c-92e8-c077e46672e7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/40163235-a725-497c-92e8-c077e46672e7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3b:34:dc:e3:ec:8a:bd:06:d6:bf:bf:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40163235-a725-497c-92e8-c077e46672e7 Validity Not Before: Mar 20 13:00:40 2026 GMT Not After : Jun 18 13:00:40 2026 GMT Subject: CN=24f90bc7-712e-4250-84d3-90c3e9a9fffe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:b0:37:58:c3:df:5b:f4:44:ad:64:83:0c:64: b2:5d:5d:9f:92:a4:05:f2:71:b4:1c:e4:cb:6d:34: 00:cd:3f:7e:38:8f:62:18:75:4a:0c:a2:29:7d:df: cc:2c:47:66:5c:f5:e6:7d:00:fc:1a:21:e1:d3:ef: 17:b9:16:e8:b6:e2:67:b0:2f:4e:32:68:d0:dc:47: e1:af:84:a5:f1:df:fd:26:58:b1:fb:21:af:bf:f2: 01:ae:c2:22:70:5b:80:eb:da:b0:24:b9:55:63:ea: 77:b2:14:13:98:59:64:37:6c:e5:99:c1:08:0a:74: d2:c6:ac:45:43:84:90:de:04:20:c4:14:6c:0d:fe: 94:5a:2b:2b:b0:f6:0f:37:b8:6a:b9:b8:21:c6:d2: 1a:02:d8:2c:cf:5e:30:ee:39:2d:d4:44:af:0c:a3: 14:05:40:f2:69:61:cb:20:d5:af:bf:74:81:a0:33: 4e:ba:29:82:ea:fd:82:19:c3:e8:df:01:15:39:e3: 93:c0:f3:6f:56:44:48:0a:e1:3b:86:c6:86:d4:70: e6:01:ed:e5:3c:8c:d4:e5:dc:71:59:42:c9:2b:94: a7:4d:59:d1:d0:0e:fa:75:26:92:e0:61:35:a4:0c: aa:9d:c0:28:fd:a6:1f:2e:4f:bb:fc:49:1c:40:c3: 0c:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:57:01:A9:71:08:CE:3A:C1:18:75:FF:E9:1C:2C:2A:BC:42:05:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/40163235-a725-497c-92e8-c077e46672e7/edbc4368-04f8-39ad-ab95-27d27d332ba3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/40163235-a725-497c-92e8-c077e46672e7/40163235-a725-497c-92e8-c077e46672e7.crl X509v3 Authority Key Identifier: keyid:09:85:22:05:AF:AE:B9:30:AC:FE:43:2E:92:53:EC:11:2F:B3:33:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/40163235-a725-497c-92e8-c077e46672e7.cer sbgp-ipAddrBlock: critical IPv4: 23.157.24.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ad:1d:46:0b:67:b9:94:60:7d:50:d8:e3:52:dc:14:b1:6e:60: b1:fd:b2:4a:07:1c:39:31:59:b6:bd:79:20:c3:c9:7c:36:5c: 4a:4e:5b:6b:b4:85:11:c6:37:02:2b:1e:47:eb:c5:04:23:d1: fc:12:0d:6c:11:8e:18:31:29:ff:e4:28:b1:84:c4:32:46:ab: b3:1c:c8:30:ec:52:bc:c9:ce:fb:4a:d2:3d:64:56:2c:82:7d: 6b:38:64:95:64:8c:ef:35:74:a9:fc:cb:97:c0:a2:c8:5b:72: b0:8c:d9:ea:f4:2d:9e:39:d0:5b:81:b2:9c:cc:c9:b8:73:9f: 40:38:97:ed:9f:b1:0a:a2:96:61:af:0e:67:b0:eb:fe:fa:85: db:b0:a7:41:82:9d:de:ea:93:24:04:54:0a:2d:25:60:d1:f9: 1a:ed:31:f3:42:85:12:83:10:72:bd:74:e7:37:67:57:7d:a4: 39:ac:1f:18:4a:41:b5:fb:4c:ca:69:fa:83:27:f6:3f:d3:e6: 22:0e:c7:d2:d9:c5:91:f0:3a:7a:01:91:69:43:23:96:24:58: 14:d8:a6:8c:fc:ad:36:f9:c0:ab:2e:0d:64:95:96:25:c0:37: 41:31:d3:64:d3:01:13:9c:e0:8e:5d:00:64:b1:1d:b9:6f:33: 1f:a0:c1:75 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE07NNzj7Iq9Bta/vwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDAxNjMyMzUtYTcyNS00OTdjLTkyZTgtYzA3N2U0NjY3 MmU3MB4XDTI2MDMyMDEzMDA0MFoXDTI2MDYxODEzMDA0MFowLzEtMCsGA1UEAxMk MjRmOTBiYzctNzEyZS00MjUwLTg0ZDMtOTBjM2U5YTlmZmZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqbA3WMPfW/RErWSDDGSyXV2fkqQF8nG0HOTL bTQAzT9+OI9iGHVKDKIpfd/MLEdmXPXmfQD8GiHh0+8XuRbotuJnsC9OMmjQ3Efh r4Sl8d/9Jlix+yGvv/IBrsIicFuA69qwJLlVY+p3shQTmFlkN2zlmcEICnTSxqxF Q4SQ3gQgxBRsDf6UWisrsPYPN7hqubghxtIaAtgsz14w7jkt1ESvDKMUBUDyaWHL INWvv3SBoDNOuimC6v2CGcPo3wEVOeOTwPNvVkRICuE7hsaG1HDmAe3lPIzU5dxx WULJK5SnTVnR0A76dSaS4GE1pAyqncAo/aYfLk+7/EkcQMMMwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFClXAalxCM46wRh1/+kcLCq8QgWgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy80MDE2 MzIzNS1hNzI1LTQ5N2MtOTJlOC1jMDc3ZTQ2NjcyZTcvZWRiYzQzNjgtMDRmOC0z OWFkLWFiOTUtMjdkMjdkMzMyYmEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNDAxNjMyMzUtYTcyNS00OTdjLTky ZTgtYzA3N2U0NjY3MmU3LzQwMTYzMjM1LWE3MjUtNDk3Yy05MmU4LWMwNzdlNDY2 NzJlNy5jcmwwHwYDVR0jBBgwFoAUCYUiBa+uuTCs/kMuklPsES+zM88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy80MDE2MzIzNS1hNzI1LTQ5N2MtOTJlOC1jMDc3 ZTQ2NjcyZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF50YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK0dRgtnuZRgfVDY41LcFLFuYLH9skoHHDkxWba9eSDDyXw2XEpOW2u0 hRHGNwIrHkfrxQQj0fwSDWwRjhgxKf/kKLGExDJGq7McyDDsUrzJzvtK0j1kViyC fWs4ZJVkjO81dKn8y5fAoshbcrCM2er0LZ450FuBspzMybhzn0A4l+2fsQqilmGv Dmew6/76hduwp0GCnd7qkyQEVAotJWDR+RrtMfNChRKDEHK9dOc3Z1d9pDmsHxhK QbX7TMpp+oMn9j/T5iIOx9LZxZHwOnoBkWlDI5YkWBTYpoz8rTb5wKsuDWSVliXA N0Ex02TTAROc4I5dAGSxHblvMx+gwXU= -----END CERTIFICATE-----Generated at Thu Mar 26 23:08:52 2026 by rpki-client