$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fc035063-bc0b-41c0-9f50-9cfa0f9db697/2f4ee87e-0e82-31e9-8364-c88930e7d7e6.roa File: 2f4ee87e-0e82-31e9-8364-c88930e7d7e6.roa (raw, json) Hash identifier: CIT/kybJSs9XLiHbXcOaNU+5BeUeJAdRajsI5TgRIcA= Subject key identifier: 1E:87:BA:B1:A7:05:B0:3A:D4:AA:8B:9C:30:21:E2:5A:50:C0:B4:3B Certificate issuer: /CN=fc035063-bc0b-41c0-9f50-9cfa0f9db697 Certificate serial: 010D0C9F4328584D07ACFFA72A56AA9420977580 Authority key identifier: 89:40:2D:A2:5D:38:A2:01:A7:FD:47:31:54:2A:8D:81:DF:4E:6A:2A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fc035063-bc0b-41c0-9f50-9cfa0f9db697.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fc035063-bc0b-41c0-9f50-9cfa0f9db697/2f4ee87e-0e82-31e9-8364-c88930e7d7e6.roa Signing time: Mon 02 Mar 2026 02:00:31 +0000 ROA not before: Mon 02 Mar 2026 02:00:31 +0000 ROA not after: Sun 31 May 2026 01:00:31 +0000 asID: 401468 IP address blocks: 23.128.124.0/24 maxlen: 24 192.43.161.0/24 maxlen: 24 2602:f9a0::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fc035063-bc0b-41c0-9f50-9cfa0f9db697/fc035063-bc0b-41c0-9f50-9cfa0f9db697.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fc035063-bc0b-41c0-9f50-9cfa0f9db697/fc035063-bc0b-41c0-9f50-9cfa0f9db697.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fc035063-bc0b-41c0-9f50-9cfa0f9db697.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:07:ac:ff:a7:2a:56:aa:94:20:97:75:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fc035063-bc0b-41c0-9f50-9cfa0f9db697 Validity Not Before: Mar 2 02:00:31 2026 GMT Not After : May 31 01:00:31 2026 GMT Subject: CN=83ce9c8c-b0fe-4b46-b388-d4303ef303f1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:af:d6:d8:8d:3a:5c:29:8e:b6:50:4b:e0:19: 02:c6:69:3c:80:14:68:4a:9e:0c:15:f5:39:96:d1: ec:67:1e:78:12:17:12:11:44:6f:c8:b0:f6:fc:f6: 58:3d:a9:b7:18:ad:19:39:77:0d:5e:1d:d4:6c:67: c6:75:7e:99:5d:ec:65:dd:3b:50:a6:5c:a2:3e:55: 4f:c0:a0:22:4b:5c:a9:ef:00:57:29:b9:69:13:6d: 99:3f:40:4c:6e:2d:99:71:ad:57:14:85:d9:d4:09: 27:e5:ca:c8:43:bc:16:7f:ad:0c:e3:12:a3:ff:cc: e2:5d:34:c1:dc:61:d5:cc:bf:63:af:b3:69:0c:c1: 4d:bb:53:c5:3b:e2:55:8e:b8:b5:24:44:e2:b8:00: 8e:56:d4:e9:fb:52:bf:cd:fe:c7:c1:bd:98:02:da: b0:ae:34:b4:c0:71:1a:0e:f1:ec:7b:ac:25:2c:2b: 83:96:b9:f3:87:cf:0d:d1:61:57:7c:de:5f:1f:8d: 02:d3:6d:45:9d:4a:83:fb:e7:83:55:4c:9c:fa:23: d1:aa:f6:15:a0:cc:57:20:7f:61:b7:d1:62:4b:d7: d9:88:5c:79:84:84:da:b1:11:ea:8a:f1:f3:68:95: fc:ea:4b:4c:09:b5:61:8d:38:04:44:3c:4b:01:c8: a5:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:87:BA:B1:A7:05:B0:3A:D4:AA:8B:9C:30:21:E2:5A:50:C0:B4:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fc035063-bc0b-41c0-9f50-9cfa0f9db697/2f4ee87e-0e82-31e9-8364-c88930e7d7e6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fc035063-bc0b-41c0-9f50-9cfa0f9db697/fc035063-bc0b-41c0-9f50-9cfa0f9db697.crl X509v3 Authority Key Identifier: keyid:89:40:2D:A2:5D:38:A2:01:A7:FD:47:31:54:2A:8D:81:DF:4E:6A:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fc035063-bc0b-41c0-9f50-9cfa0f9db697.cer sbgp-ipAddrBlock: critical IPv4: 23.128.124.0/24 192.43.161.0/24 IPv6: 2602:f9a0::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:3a:a7:a4:79:f9:39:db:06:49:ce:99:67:45:aa:51:ff:31: ea:b8:ce:f1:26:1f:80:09:c8:c3:91:28:ac:16:e7:07:17:0d: 65:44:1e:65:6a:b9:69:03:0d:7f:88:3f:70:4d:b4:57:f5:86: 17:5c:2b:94:41:67:8b:0b:9a:b7:42:27:af:91:a3:0b:02:c9: 4e:48:0d:b9:ef:59:ab:d4:3f:97:a5:11:34:0a:78:9f:75:10: 24:72:8d:e3:89:d1:07:3e:c1:a4:df:f2:c9:3d:c1:85:36:d6: 70:dd:29:c6:4f:7d:d0:9e:77:52:2a:ee:2c:34:e0:bd:13:6a: 82:f1:dc:7f:64:b0:d8:f8:fe:bf:38:c9:08:12:cb:a8:f7:e6: f6:b3:1f:a9:b8:cf:16:6d:ad:cb:e5:87:38:9c:80:96:98:c6: 54:55:87:b2:6e:c5:73:db:7f:86:bf:ad:a8:5d:32:c9:b5:5d: 39:bc:62:06:e5:4e:88:c6:d2:41:b5:ce:23:9c:2f:3e:75:af: 49:1e:c0:37:81:f5:a8:2d:6e:53:6e:7e:f9:8f:ff:38:e7:ac: e0:1c:a5:2a:00:e8:64:f3:a7:62:5f:ce:f4:28:00:d6:c4:6b: af:b6:3b:c1:e4:ef:3b:f1:d1:a3:82:78:f8:4b:e5:79:67:5f: 12:92:bd:d3 -----BEGIN CERTIFICATE----- MIIGWTCCBUGgAwIBAgIUAQ0Mn0MoWE0HrP+nKlaqlCCXdYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmMwMzUwNjMtYmMwYi00MWMwLTlmNTAtOWNmYTBmOWRi Njk3MB4XDTI2MDMwMjAyMDAzMVoXDTI2MDUzMTAxMDAzMVowLzEtMCsGA1UEAxMk ODNjZTljOGMtYjBmZS00YjQ2LWIzODgtZDQzMDNlZjMwM2YxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj6/W2I06XCmOtlBL4BkCxmk8gBRoSp4MFfU5 ltHsZx54EhcSEURvyLD2/PZYPam3GK0ZOXcNXh3UbGfGdX6ZXexl3TtQplyiPlVP wKAiS1yp7wBXKblpE22ZP0BMbi2Zca1XFIXZ1Akn5crIQ7wWf60M4xKj/8ziXTTB 3GHVzL9jr7NpDMFNu1PFO+JVjri1JETiuACOVtTp+1K/zf7Hwb2YAtqwrjS0wHEa DvHse6wlLCuDlrnzh88N0WFXfN5fH40C021FnUqD++eDVUyc+iPRqvYVoMxXIH9h t9FiS9fZiFx5hITasRHqivHzaJX86ktMCbVhjTgERDxLAcil4wIDAQABo4IDazCC A2cwHQYDVR0OBBYEFB6HurGnBbA61KqLnDAh4lpQwLQ7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9mYzAz NTA2My1iYzBiLTQxYzAtOWY1MC05Y2ZhMGY5ZGI2OTcvMmY0ZWU4N2UtMGU4Mi0z MWU5LTgzNjQtYzg4OTMwZTdkN2U2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZmMwMzUwNjMtYmMwYi00MWMwLTlm NTAtOWNmYTBmOWRiNjk3L2ZjMDM1MDYzLWJjMGItNDFjMC05ZjUwLTljZmEwZjlk YjY5Ny5jcmwwHwYDVR0jBBgwFoAUiUAtol04ogGn/UcxVCqNgd9OaiowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9mYzAzNTA2My1iYzBiLTQxYzAtOWY1MC05Y2Zh MGY5ZGI2OTcuY2VyMDUGCCsGAQUFBwEHAQH/BCYwJDASBAIAATAMAwQAF4B8AwQA wCuhMA4EAgACMAgDBgAmAvmgADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBSOqekefk52wZJzplnRapR/zHq uM7xJh+ACcjDkSisFucHFw1lRB5larlpAw1/iD9wTbRX9YYXXCuUQWeLC5q3Qiev kaMLAslOSA2571mr1D+XpRE0CnifdRAkco3jidEHPsGk3/LJPcGFNtZw3SnGT33Q nndSKu4sNOC9E2qC8dx/ZLDY+P6/OMkIEsuo9+b2sx+puM8Wba3L5Yc4nICWmMZU VYeybsVz23+Gv62oXTLJtV05vGIG5U6IxtJBtc4jnC8+da9JHsA3gfWoLW5Tbn75 j/8456zgHKUqAOhk86diX870KADWxGuvtjvB5O878dGjgnj4S+V5Z18Skr3T -----END CERTIFICATE-----Generated at Thu Mar 26 05:12:20 2026 by rpki-client