$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8d958c47-c18f-46e2-a3c3-ed4ba29e1c99/dc9340d4-1065-3b08-8328-cfc7a0f59eac.roa File: dc9340d4-1065-3b08-8328-cfc7a0f59eac.roa (raw, json) Hash identifier: 1H+eCs3+ZjZz/zrSy8Uou59SPpIr5iwftQu5CTAMMpE= Subject key identifier: F4:0E:3E:30:46:F7:FC:8A:AA:D7:57:4A:45:95:AC:42:B6:72:00:BE Certificate issuer: /CN=8d958c47-c18f-46e2-a3c3-ed4ba29e1c99 Certificate serial: 010D0C9F4328584D40CA54321786294D00284280 Authority key identifier: F3:52:5D:C8:D4:AD:4B:3D:CE:6F:9A:85:FA:C4:51:53:61:27:FF:24 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8d958c47-c18f-46e2-a3c3-ed4ba29e1c99.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8d958c47-c18f-46e2-a3c3-ed4ba29e1c99/dc9340d4-1065-3b08-8328-cfc7a0f59eac.roa Signing time: Sun 22 Mar 2026 13:00:41 +0000 ROA not before: Sun 22 Mar 2026 13:00:41 +0000 ROA not after: Sat 20 Jun 2026 13:00:41 +0000 asID: 396935 IP address blocks: 23.135.48.0/24 maxlen: 24 2602:fdd9::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8d958c47-c18f-46e2-a3c3-ed4ba29e1c99/8d958c47-c18f-46e2-a3c3-ed4ba29e1c99.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8d958c47-c18f-46e2-a3c3-ed4ba29e1c99/8d958c47-c18f-46e2-a3c3-ed4ba29e1c99.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8d958c47-c18f-46e2-a3c3-ed4ba29e1c99.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:40:ca:54:32:17:86:29:4d:00:28:42:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d958c47-c18f-46e2-a3c3-ed4ba29e1c99 Validity Not Before: Mar 22 13:00:41 2026 GMT Not After : Jun 20 13:00:41 2026 GMT Subject: CN=42fca7c0-3ec1-4675-aa72-45f8a597342c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:a2:e3:17:c5:b6:64:46:23:dd:04:5d:e1:b3: c9:3c:aa:56:c4:5d:6e:2a:7b:b7:99:80:4c:42:30: 0b:9a:cb:79:b7:86:9a:b4:7b:b9:67:c7:90:c1:e2: 99:f2:34:4f:b6:0f:fe:43:4b:ee:eb:d9:f7:c7:3e: 0c:ac:16:09:2f:cf:f4:76:ea:5f:ea:ac:fe:06:5c: 39:c9:94:97:d3:ee:a2:24:7a:21:c8:83:81:fb:c4: 4d:21:7e:66:33:6a:c2:b0:5a:96:c8:1b:4f:34:0a: 49:a3:10:07:d5:d0:e6:1e:5f:b7:63:08:89:f6:a2: ca:63:e2:bd:de:50:85:72:f2:d9:da:1f:ce:f4:29: f1:07:f7:5c:f0:1f:56:67:f0:ce:15:b3:b5:a9:1d: f1:38:cb:f6:ec:a1:ff:bf:6b:56:66:ff:14:d1:63: 21:85:cc:ea:7b:ce:83:db:26:d7:22:fc:7a:a2:c4: ec:a1:53:c9:f5:11:85:9c:ee:a0:b1:98:8b:f4:57: 32:33:3f:18:78:1b:ba:65:0b:ac:88:36:2e:b3:20: 1b:43:c1:e7:e6:ce:5c:aa:5c:9c:71:14:dd:d8:de: 4c:d0:4f:4f:d0:1a:08:7a:63:6d:5c:f4:e1:80:d3: 2a:22:34:05:31:6d:4f:b8:fb:f1:f9:51:37:7d:25: 25:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:0E:3E:30:46:F7:FC:8A:AA:D7:57:4A:45:95:AC:42:B6:72:00:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8d958c47-c18f-46e2-a3c3-ed4ba29e1c99/dc9340d4-1065-3b08-8328-cfc7a0f59eac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8d958c47-c18f-46e2-a3c3-ed4ba29e1c99/8d958c47-c18f-46e2-a3c3-ed4ba29e1c99.crl X509v3 Authority Key Identifier: keyid:F3:52:5D:C8:D4:AD:4B:3D:CE:6F:9A:85:FA:C4:51:53:61:27:FF:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8d958c47-c18f-46e2-a3c3-ed4ba29e1c99.cer sbgp-ipAddrBlock: critical IPv4: 23.135.48.0/24 IPv6: 2602:fdd9::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:1d:ae:1e:4e:bc:e1:e6:1c:d8:35:4b:af:b0:ed:29:40:01: d2:0d:cf:47:b6:8b:49:44:a9:a3:1e:69:6d:66:ce:c5:e2:ee: 3b:b7:ad:f7:74:50:45:48:56:01:57:54:e1:0a:46:57:89:d9: 9b:4d:bd:c0:fa:2b:db:bc:fd:03:c6:43:e0:c7:88:c3:c8:5d: b4:80:d0:80:bf:da:de:dd:9b:98:42:e7:02:bb:12:92:3a:33: ed:8c:62:19:67:51:b3:c4:db:2c:12:fe:4a:35:71:fa:0f:93: ac:ef:65:9f:2b:46:8a:10:04:94:6e:a2:59:33:54:5d:74:31: 97:35:8f:2e:47:5c:6b:ea:08:f3:66:27:f0:68:1f:e1:b2:33: a0:1c:72:2d:66:4e:6f:83:bc:8d:69:9e:d5:59:7b:16:ae:75: 4b:61:43:da:5c:bf:e1:61:e3:f2:61:97:c8:a6:c1:b1:25:34: fa:a1:7f:5d:97:8e:2e:82:4b:a5:6a:3e:75:35:04:32:ef:a1: 4e:14:95:1f:d4:df:ed:26:b1:17:6c:6a:68:48:41:8e:d2:6a: 58:86:65:f6:e9:12:29:7a:6f:e2:5f:2a:11:a0:5f:f2:a0:9c: 9d:c7:3c:7c:04:60:dc:36:94:42:2b:11:fd:22:53:2e:30:3e: 0e:4e:73:9e -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE1AylQyF4YpTQAoQoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGQ5NThjNDctYzE4Zi00NmUyLWEzYzMtZWQ0YmEyOWUx Yzk5MB4XDTI2MDMyMjEzMDA0MVoXDTI2MDYyMDEzMDA0MVowLzEtMCsGA1UEAxMk NDJmY2E3YzAtM2VjMS00Njc1LWFhNzItNDVmOGE1OTczNDJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0KLjF8W2ZEYj3QRd4bPJPKpWxF1uKnu3mYBM QjALmst5t4aatHu5Z8eQweKZ8jRPtg/+Q0vu69n3xz4MrBYJL8/0dupf6qz+Blw5 yZSX0+6iJHohyIOB+8RNIX5mM2rCsFqWyBtPNApJoxAH1dDmHl+3YwiJ9qLKY+K9 3lCFcvLZ2h/O9CnxB/dc8B9WZ/DOFbO1qR3xOMv27KH/v2tWZv8U0WMhhczqe86D 2ybXIvx6osTsoVPJ9RGFnO6gsZiL9FcyMz8YeBu6ZQusiDYusyAbQ8Hn5s5cqlyc cRTd2N5M0E9P0BoIemNtXPThgNMqIjQFMW1PuPvx+VE3fSUl9QIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFPQOPjBG9/yKqtdXSkWVrEK2cgC+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC84ZDk1 OGM0Ny1jMThmLTQ2ZTItYTNjMy1lZDRiYTI5ZTFjOTkvZGM5MzQwZDQtMTA2NS0z YjA4LTgzMjgtY2ZjN2EwZjU5ZWFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOGQ5NThjNDctYzE4Zi00NmUyLWEz YzMtZWQ0YmEyOWUxYzk5LzhkOTU4YzQ3LWMxOGYtNDZlMi1hM2MzLWVkNGJhMjll MWM5OS5jcmwwHwYDVR0jBBgwFoAU81JdyNStSz3Ob5qF+sRRU2En/yQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC84ZDk1OGM0Ny1jMThmLTQ2ZTItYTNjMy1lZDRi YTI5ZTFjOTkuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF4cwMA4E AgACMAgDBgQmAv3ZADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBWHa4eTrzh5hzYNUuvsO0pQAHSDc9HtotJ RKmjHmltZs7F4u47t633dFBFSFYBV1ThCkZXidmbTb3A+ivbvP0DxkPgx4jDyF20 gNCAv9re3ZuYQucCuxKSOjPtjGIZZ1GzxNssEv5KNXH6D5Os72WfK0aKEASUbqJZ M1RddDGXNY8uR1xr6gjzZifwaB/hsjOgHHItZk5vg7yNaZ7VWXsWrnVLYUPaXL/h YePyYZfIpsGxJTT6oX9dl44ugkulaj51NQQy76FOFJUf1N/tJrEXbGpoSEGO0mpY hmX26RIpem/iXyoRoF/yoJydxzx8BGDcNpRCKxH9IlMuMD4OTnOe -----END CERTIFICATE-----Generated at Thu Mar 26 07:01:46 2026 by rpki-client