$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8b0c570a-5446-44a6-b51f-a75c2f3aa621/f218d0fa-4c56-3887-a658-b8c8d1b0acb6.roa File: f218d0fa-4c56-3887-a658-b8c8d1b0acb6.roa (raw, json) Hash identifier: uzERoZCJkCHQ2vPxr/Nzx/0x1mWNOVe8MSmL1iXyEbc= Subject key identifier: 12:13:AD:D7:72:E4:07:C1:30:0C:32:E0:7F:4B:3F:B7:CC:E6:67:95 Certificate issuer: /CN=8b0c570a-5446-44a6-b51f-a75c2f3aa621 Certificate serial: 010D0C9F4328584D1F4A487C39F11A677D470D80 Authority key identifier: 40:AB:E0:A2:5E:B2:A8:F1:0C:E2:50:F3:92:C8:53:19:7B:67:12:8B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8b0c570a-5446-44a6-b51f-a75c2f3aa621.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8b0c570a-5446-44a6-b51f-a75c2f3aa621/f218d0fa-4c56-3887-a658-b8c8d1b0acb6.roa Signing time: Tue 10 Mar 2026 13:00:41 +0000 ROA not before: Tue 10 Mar 2026 13:00:41 +0000 ROA not after: Mon 08 Jun 2026 13:00:41 +0000 asID: 401297 IP address blocks: 23.142.88.0/24 maxlen: 24 23.142.90.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8b0c570a-5446-44a6-b51f-a75c2f3aa621/8b0c570a-5446-44a6-b51f-a75c2f3aa621.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8b0c570a-5446-44a6-b51f-a75c2f3aa621/8b0c570a-5446-44a6-b51f-a75c2f3aa621.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8b0c570a-5446-44a6-b51f-a75c2f3aa621.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1f:4a:48:7c:39:f1:1a:67:7d:47:0d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8b0c570a-5446-44a6-b51f-a75c2f3aa621 Validity Not Before: Mar 10 13:00:41 2026 GMT Not After : Jun 8 13:00:41 2026 GMT Subject: CN=1b9b16c1-9219-4bfb-b16c-7173386aaa1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:c2:79:9d:30:13:b9:f3:db:86:56:52:16:c4: a0:7f:2e:3f:72:04:b7:77:f8:a9:92:7b:30:3f:23: a9:b0:86:5b:93:21:93:ad:18:d8:78:ff:3e:e5:19: c0:c1:33:5c:b1:2f:bb:3b:de:f2:d0:59:bf:80:95: 63:5f:d2:53:16:ec:c1:ac:ba:a4:dc:11:91:df:4b: a0:d9:d0:3d:56:83:f6:2a:97:1f:f3:68:96:95:8b: 0e:d9:43:a0:cf:e0:53:bd:8d:67:eb:ad:ac:95:e4: 38:ac:38:f7:a3:2c:a8:b4:94:e7:27:92:fa:45:13: 51:96:e9:2e:91:a8:a4:24:7c:78:06:d1:4a:5b:ef: c1:48:0d:91:34:26:2b:e8:3f:b0:94:9d:fc:3b:06: 5f:72:f8:52:4b:01:7b:06:c5:65:46:3b:9f:bc:03: e4:32:b5:c9:c0:3e:7d:90:dc:2a:d7:81:12:08:6b: 63:b3:f8:f1:8e:82:7e:89:0b:e7:4e:0a:9f:10:af: 2c:79:56:83:f3:52:30:a9:b1:66:d2:5a:8c:2e:46: d2:ea:d9:e1:82:8d:d6:53:61:52:c6:36:9a:ab:b8: 40:6b:44:bd:ce:f7:e8:90:61:33:af:d4:9e:fd:03: b4:98:8d:d3:df:04:6f:a5:06:84:14:65:e0:2c:42: 63:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:13:AD:D7:72:E4:07:C1:30:0C:32:E0:7F:4B:3F:B7:CC:E6:67:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8b0c570a-5446-44a6-b51f-a75c2f3aa621/f218d0fa-4c56-3887-a658-b8c8d1b0acb6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8b0c570a-5446-44a6-b51f-a75c2f3aa621/8b0c570a-5446-44a6-b51f-a75c2f3aa621.crl X509v3 Authority Key Identifier: keyid:40:AB:E0:A2:5E:B2:A8:F1:0C:E2:50:F3:92:C8:53:19:7B:67:12:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8b0c570a-5446-44a6-b51f-a75c2f3aa621.cer sbgp-ipAddrBlock: critical IPv4: 23.142.88.0/24 23.142.90.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:40:5d:e3:23:c5:0d:28:8d:1a:16:4d:d1:e4:48:93:df:30: 4a:fd:c8:3b:14:a8:74:ab:6c:cd:1a:85:05:87:1e:64:6f:bf: 2c:d1:af:6e:78:20:24:67:2a:08:1c:9d:d1:12:bf:04:64:cb: 23:bd:f3:e1:73:e4:4f:aa:fc:21:7c:62:56:ad:e3:67:c4:d3: 19:f2:d1:2e:58:5a:b8:13:1a:04:36:ab:2f:1a:f1:37:15:d7: c3:71:d3:c8:b5:b0:8a:0e:25:e2:de:e8:48:80:6b:6f:00:01: 8d:ef:41:33:e9:ab:fc:1a:5d:a7:f5:45:78:1d:65:58:8a:e9: 38:8c:c9:41:88:34:23:4a:ab:80:3c:5d:c4:4b:d6:dd:5c:81: c4:c6:a9:a1:98:12:68:cb:f0:20:10:ef:6d:59:5e:af:d4:bd: 1c:dc:1e:4b:9c:b8:63:fb:da:74:6a:ac:c4:9f:0e:81:4f:9c: 7d:30:9c:74:80:78:48:bf:e1:76:e1:5a:f6:b2:ff:a3:66:7a: 05:bf:9f:83:ba:88:66:bd:19:5a:35:c3:99:21:f3:04:b8:98: a9:6e:41:55:1a:dc:6e:9f:68:99:3a:2b:3d:ee:26:3a:84:53: 2d:8a:3e:66:0b:9d:51:ac:5f:52:ca:ef:22:eb:54:af:e9:f1: 40:5e:bf:5b -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE0fSkh8OfEaZ31HDYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGIwYzU3MGEtNTQ0Ni00NGE2LWI1MWYtYTc1YzJmM2Fh NjIxMB4XDTI2MDMxMDEzMDA0MVoXDTI2MDYwODEzMDA0MVowLzEtMCsGA1UEAxMk MWI5YjE2YzEtOTIxOS00YmZiLWIxNmMtNzE3MzM4NmFhYTFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAscJ5nTATufPbhlZSFsSgfy4/cgS3d/ipknsw PyOpsIZbkyGTrRjYeP8+5RnAwTNcsS+7O97y0Fm/gJVjX9JTFuzBrLqk3BGR30ug 2dA9VoP2Kpcf82iWlYsO2UOgz+BTvY1n662sleQ4rDj3oyyotJTnJ5L6RRNRluku kaikJHx4BtFKW+/BSA2RNCYr6D+wlJ38OwZfcvhSSwF7BsVlRjufvAPkMrXJwD59 kNwq14ESCGtjs/jxjoJ+iQvnTgqfEK8seVaD81IwqbFm0lqMLkbS6tnhgo3WU2FS xjaaq7hAa0S9zvfokGEzr9Se/QO0mI3T3wRvpQaEFGXgLEJjbQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFBITrddy5AfBMAwy4H9LP7fM5meVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84YjBj NTcwYS01NDQ2LTQ0YTYtYjUxZi1hNzVjMmYzYWE2MjEvZjIxOGQwZmEtNGM1Ni0z ODg3LWE2NTgtYjhjOGQxYjBhY2I2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOGIwYzU3MGEtNTQ0Ni00NGE2LWI1 MWYtYTc1YzJmM2FhNjIxLzhiMGM1NzBhLTU0NDYtNDRhNi1iNTFmLWE3NWMyZjNh YTYyMS5jcmwwHwYDVR0jBBgwFoAUQKvgol6yqPEM4lDzkshTGXtnEoswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi84YjBjNTcwYS01NDQ2LTQ0YTYtYjUxZi1hNzVj MmYzYWE2MjEuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAF45YAwQA F45aMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAAlAXeMjxQ0ojRoWTdHkSJPfMEr9yDsUqHSrbM0ahQWHHmRv vyzRr254ICRnKggcndESvwRkyyO98+Fz5E+q/CF8Ylat42fE0xny0S5YWrgTGgQ2 qy8a8TcV18Nx08i1sIoOJeLe6EiAa28AAY3vQTPpq/waXaf1RXgdZViK6TiMyUGI NCNKq4A8XcRL1t1cgcTGqaGYEmjL8CAQ721ZXq/UvRzcHkucuGP72nRqrMSfDoFP nH0wnHSAeEi/4XbhWvay/6NmegW/n4O6iGa9GVo1w5kh8wS4mKluQVUa3G6faJk6 Kz3uJjqEUy2KPmYLnVGsX1LK7yLrVK/p8UBev1s= -----END CERTIFICATE-----Generated at Wed Mar 25 23:26:16 2026 by rpki-client