$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bdd46844-e081-4813-bfe2-0cfbeac92e08/ca4eafff-9365-3068-b787-140215783a30.roa File: ca4eafff-9365-3068-b787-140215783a30.roa (raw, json) Hash identifier: ITKzzhGW2REBY+9XHlCLBfrQ2W2ko7tjJ6NJ+yP/YVw= Subject key identifier: A9:A8:11:EB:84:1D:42:41:23:82:27:77:D1:70:CB:36:1A:FF:12:A6 Certificate issuer: /CN=bdd46844-e081-4813-bfe2-0cfbeac92e08 Certificate serial: 010D0C9F4328584D1B1A1C588FA8449BD1FDB980 Authority key identifier: FF:99:49:19:84:88:39:A6:03:55:7D:CC:8A:2D:A2:C6:77:B4:D5:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bdd46844-e081-4813-bfe2-0cfbeac92e08.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bdd46844-e081-4813-bfe2-0cfbeac92e08/ca4eafff-9365-3068-b787-140215783a30.roa Signing time: Mon 09 Mar 2026 01:00:32 +0000 ROA not before: Mon 09 Mar 2026 01:00:32 +0000 ROA not after: Sun 07 Jun 2026 01:00:32 +0000 asID: 401472 IP address blocks: 23.129.28.0/24 maxlen: 24 2602:f7af::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bdd46844-e081-4813-bfe2-0cfbeac92e08/bdd46844-e081-4813-bfe2-0cfbeac92e08.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bdd46844-e081-4813-bfe2-0cfbeac92e08/bdd46844-e081-4813-bfe2-0cfbeac92e08.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bdd46844-e081-4813-bfe2-0cfbeac92e08.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1b:1a:1c:58:8f:a8:44:9b:d1:fd:b9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bdd46844-e081-4813-bfe2-0cfbeac92e08 Validity Not Before: Mar 9 01:00:32 2026 GMT Not After : Jun 7 01:00:32 2026 GMT Subject: CN=c426a822-087b-482c-bf88-5ca3d80ea220 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:d9:19:5e:3a:80:67:a1:da:9c:44:0d:8c:e3: dc:0d:20:53:70:f3:4c:be:6a:39:35:72:98:ab:3f: 83:f8:ec:a2:fa:66:cb:0c:bf:b6:af:cf:a7:42:a4: 29:6e:a5:b0:57:c7:f4:3f:1d:b9:aa:2e:d6:45:11: 60:39:cc:0c:29:eb:68:0d:4d:cb:fe:cc:4a:bf:5e: 93:83:e9:0e:82:fd:a6:f5:c3:b0:37:b5:ca:15:0d: 44:09:74:7b:0f:b2:44:c4:c7:dc:4d:7d:ff:a2:0f: ab:d4:2c:88:11:1a:73:d5:fd:97:06:e3:f6:2e:c4: 53:2e:e3:e1:0f:ac:fa:54:ee:a4:3b:03:a2:7a:b4: bf:44:5a:ad:27:7f:01:63:e4:f8:d6:21:f9:f4:e5: 4b:94:0e:57:5e:0b:fd:68:7f:1d:49:6a:ae:e2:76: e4:95:d7:de:5a:de:96:e4:5d:79:ab:a9:24:bc:cc: 40:95:06:4a:5a:3d:dc:6c:05:34:95:f8:e6:dc:7b: 5f:ee:a0:c3:fb:a0:d5:3b:f1:70:68:36:a2:1e:7d: 2a:b8:dd:b4:f1:65:cf:35:b6:43:e5:6f:f0:6f:06: 95:85:39:fe:b3:e7:49:fe:f2:20:3b:78:54:6a:f5: ad:84:ee:bb:94:2a:8c:61:79:2e:d3:db:ea:89:40: 5a:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:A8:11:EB:84:1D:42:41:23:82:27:77:D1:70:CB:36:1A:FF:12:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bdd46844-e081-4813-bfe2-0cfbeac92e08/ca4eafff-9365-3068-b787-140215783a30.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bdd46844-e081-4813-bfe2-0cfbeac92e08/bdd46844-e081-4813-bfe2-0cfbeac92e08.crl X509v3 Authority Key Identifier: keyid:FF:99:49:19:84:88:39:A6:03:55:7D:CC:8A:2D:A2:C6:77:B4:D5:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bdd46844-e081-4813-bfe2-0cfbeac92e08.cer sbgp-ipAddrBlock: critical IPv4: 23.129.28.0/24 IPv6: 2602:f7af::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:7c:fd:29:9b:40:e7:3a:6a:f1:f5:2b:be:5d:ea:46:f7:ac: ed:52:99:d0:f2:6f:81:4d:dd:67:45:55:8d:e9:a5:23:84:cc: 7e:20:1a:df:dc:88:01:6d:f7:4f:a7:29:fa:6e:08:3f:88:30: 4c:52:67:e9:4d:e0:c0:3c:b3:ba:3e:63:f7:01:9f:d6:97:e3: 68:97:a2:c0:2f:4b:5e:38:99:8a:c4:f4:10:f8:ad:2c:9a:67: 69:d1:a9:7d:34:ff:a4:90:dc:f8:cf:a5:d4:c8:f8:80:f0:02: a4:fe:52:ab:47:36:dd:e2:1f:4a:a3:b2:83:55:9e:e9:85:83: a6:ab:99:4b:7f:35:49:00:0a:98:73:72:01:09:2e:f9:cc:62: f7:a4:7e:41:03:92:b7:2d:9b:19:6f:26:97:4b:4c:83:e0:42: b9:43:0e:6b:ce:43:90:91:53:45:58:c0:25:e8:9f:06:f0:5f: 66:87:d1:92:ac:df:8d:cb:32:29:f3:eb:98:1d:f0:52:89:3a: 42:e2:21:7c:6c:53:66:dc:1c:8a:03:2f:61:c3:c1:f4:af:3c: 97:c8:fb:36:42:00:77:4f:3f:a2:b2:51:a9:77:e6:6b:5d:6c: 90:fa:9f:ca:63:39:61:50:95:ca:dc:b7:f9:52:02:be:dd:f7: e7:be:aa:e8 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE0bGhxYj6hEm9H9uYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmRkNDY4NDQtZTA4MS00ODEzLWJmZTItMGNmYmVhYzky ZTA4MB4XDTI2MDMwOTAxMDAzMloXDTI2MDYwNzAxMDAzMlowLzEtMCsGA1UEAxMk YzQyNmE4MjItMDg3Yi00ODJjLWJmODgtNWNhM2Q4MGVhMjIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1tkZXjqAZ6HanEQNjOPcDSBTcPNMvmo5NXKY qz+D+Oyi+mbLDL+2r8+nQqQpbqWwV8f0Px25qi7WRRFgOcwMKetoDU3L/sxKv16T g+kOgv2m9cOwN7XKFQ1ECXR7D7JExMfcTX3/og+r1CyIERpz1f2XBuP2LsRTLuPh D6z6VO6kOwOierS/RFqtJ38BY+T41iH59OVLlA5XXgv9aH8dSWqu4nbkldfeWt6W 5F15q6kkvMxAlQZKWj3cbAU0lfjm3Htf7qDD+6DVO/FwaDaiHn0quN208WXPNbZD 5W/wbwaVhTn+s+dJ/vIgO3hUavWthO67lCqMYXku09vqiUBa2QIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFKmoEeuEHUJBI4Ind9FwyzYa/xKmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iZGQ0 Njg0NC1lMDgxLTQ4MTMtYmZlMi0wY2ZiZWFjOTJlMDgvY2E0ZWFmZmYtOTM2NS0z MDY4LWI3ODctMTQwMjE1NzgzYTMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYmRkNDY4NDQtZTA4MS00ODEzLWJm ZTItMGNmYmVhYzkyZTA4L2JkZDQ2ODQ0LWUwODEtNDgxMy1iZmUyLTBjZmJlYWM5 MmUwOC5jcmwwHwYDVR0jBBgwFoAU/5lJGYSIOaYDVX3Mii2ixne01bQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iZGQ0Njg0NC1lMDgxLTQ4MTMtYmZlMi0wY2Zi ZWFjOTJlMDguY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF4EcMA4E AgACMAgDBgAmAvevADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAIfP0pm0DnOmrx9Su+XepG96ztUpnQ8m+B Td1nRVWN6aUjhMx+IBrf3IgBbfdPpyn6bgg/iDBMUmfpTeDAPLO6PmP3AZ/Wl+No l6LAL0teOJmKxPQQ+K0smmdp0al9NP+kkNz4z6XUyPiA8AKk/lKrRzbd4h9Ko7KD VZ7phYOmq5lLfzVJAAqYc3IBCS75zGL3pH5BA5K3LZsZbyaXS0yD4EK5Qw5rzkOQ kVNFWMAl6J8G8F9mh9GSrN+NyzIp8+uYHfBSiTpC4iF8bFNm3ByKAy9hw8H0rzyX yPs2QgB3Tz+islGpd+ZrXWyQ+p/KYzlhUJXK3Lf5UgK+3ffnvqro -----END CERTIFICATE-----Generated at Sat Mar 28 13:42:41 2026 by rpki-client