$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/8e5abe26-35c1-3b16-9b96-323c165f8420.roa File: 8e5abe26-35c1-3b16-9b96-323c165f8420.roa (raw, json) Hash identifier: pikPNLIQr50ZGh/6DB7ciL2HKL93Reyg/l9qGqwzYog= Subject key identifier: 3E:3B:9D:35:2C:DF:E1:BE:6F:A8:52:47:8A:33:9F:00:E4:DF:A5:5E Certificate issuer: /CN=b2959336-6afe-411c-b979-dac0a693f8c4 Certificate serial: 010D0C9F4328584D24DFA4CBB3C761005B34D680 Authority key identifier: 1C:52:30:32:FE:EB:5B:92:6D:5A:2E:35:E5:7C:80:3B:15:E0:32:73 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/8e5abe26-35c1-3b16-9b96-323c165f8420.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 11870 IP address blocks: 167.23.96.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/b2959336-6afe-411c-b979-dac0a693f8c4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/b2959336-6afe-411c-b979-dac0a693f8c4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:df:a4:cb:b3:c7:61:00:5b:34:d6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2959336-6afe-411c-b979-dac0a693f8c4 Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=6411de23-1742-4e42-aacf-2a0403bfd1c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:9e:b8:27:79:66:49:2a:e9:57:bd:86:4d:1e: 18:31:fd:36:d2:8f:1d:4b:db:38:a5:d4:bf:28:c6: 1f:fe:19:8c:41:9b:3c:f8:99:50:73:7b:1f:1d:0e: 20:e5:2f:82:42:06:0d:42:89:7b:3f:2e:3a:8c:a6: ad:30:5f:49:6d:65:f7:0e:02:dd:91:04:5a:b3:27: 0f:19:07:81:75:dc:2b:7c:69:0d:7f:c9:cd:3e:1a: 43:4c:e8:23:2b:c0:56:e6:ca:3a:a1:25:59:4b:ac: ff:d5:36:fb:cd:e8:df:58:33:d5:27:ea:ae:39:22: ec:d5:5a:29:af:74:46:87:4c:0e:c5:a2:e3:6b:13: 03:3d:12:30:aa:6e:fe:d2:14:cd:68:b9:54:88:36: a2:90:ba:a4:f6:45:41:98:95:c4:3a:26:ff:83:d0: 85:5c:e2:5c:74:cf:be:84:08:1e:e3:67:5c:05:a4: 65:06:68:cc:32:65:d5:15:0e:01:8f:e3:36:dd:68: 61:de:f7:64:a0:f9:18:c2:df:f8:d6:ca:64:7f:94: dc:0f:7f:99:77:f7:46:ab:df:bb:12:c3:9c:87:24: 42:a3:19:d3:bc:cc:60:3d:24:fc:21:35:17:d4:4b: a1:a9:73:fb:1d:2c:05:5d:ba:5c:ed:8b:be:91:45: f0:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:3B:9D:35:2C:DF:E1:BE:6F:A8:52:47:8A:33:9F:00:E4:DF:A5:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/8e5abe26-35c1-3b16-9b96-323c165f8420.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4/b2959336-6afe-411c-b979-dac0a693f8c4.crl X509v3 Authority Key Identifier: keyid:1C:52:30:32:FE:EB:5B:92:6D:5A:2E:35:E5:7C:80:3B:15:E0:32:73 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b2959336-6afe-411c-b979-dac0a693f8c4.cer sbgp-ipAddrBlock: critical IPv4: 167.23.96.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:64:af:d6:9d:a7:39:dc:d4:bf:99:5f:29:b2:5b:11:51:86: b1:d8:6c:a7:0f:ea:e1:0d:e3:21:b6:16:d0:fd:51:a4:2b:b0: 64:41:a5:77:c1:be:83:10:06:85:60:41:dd:3d:1e:89:f6:c4: 8d:a8:0f:11:83:54:84:9d:45:36:6a:c2:28:08:bf:51:a4:cd: b2:42:1d:7c:14:7a:a7:0e:34:45:1d:cf:bf:16:c4:37:fd:fa: fe:d0:7f:da:6f:cd:c6:49:53:74:7b:d7:94:b2:ac:97:f6:4e: 9b:49:d8:e2:ca:78:e4:29:9a:d4:23:78:ff:86:64:b8:08:8e: 3b:84:5f:63:75:a2:42:35:61:f8:30:89:61:db:38:af:e3:fb: 7b:2a:33:4e:a2:4c:20:dd:0b:82:a6:b8:f3:99:89:d6:33:04: 77:13:ee:e0:f0:3e:68:2b:aa:7d:69:25:20:79:99:be:81:98: 7f:b8:ea:bd:99:f7:a3:5e:0c:0d:8b:66:79:77:46:e6:e7:31: 1b:ef:56:67:37:a4:49:75:68:02:88:40:f8:db:30:b5:58:d0: 59:8f:b6:5c:85:5b:11:e5:f2:72:56:72:62:fb:1b:cd:79:23: f3:d2:70:7f:5b:b2:6b:aa:91:07:1f:a5:fa:0f:73:e2:0f:42: ce:4a:0a:e1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k36TLs8dhAFs01oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjI5NTkzMzYtNmFmZS00MTFjLWI5NzktZGFjMGE2OTNm OGM0MB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk NjQxMWRlMjMtMTc0Mi00ZTQyLWFhY2YtMmEwNDAzYmZkMWMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk564J3lmSSrpV72GTR4YMf020o8dS9s4pdS/ KMYf/hmMQZs8+JlQc3sfHQ4g5S+CQgYNQol7Py46jKatMF9JbWX3DgLdkQRasycP GQeBddwrfGkNf8nNPhpDTOgjK8BW5so6oSVZS6z/1Tb7zejfWDPVJ+quOSLs1Vop r3RGh0wOxaLjaxMDPRIwqm7+0hTNaLlUiDaikLqk9kVBmJXEOib/g9CFXOJcdM++ hAge42dcBaRlBmjMMmXVFQ4Bj+M23Whh3vdkoPkYwt/41spkf5TcD3+Zd/dGq9+7 EsOchyRCoxnTvMxgPST8ITUX1EuhqXP7HSwFXbpc7Yu+kUXwwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD47nTUs3+G+b6hSR4oznwDk36VeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iMjk1 OTMzNi02YWZlLTQxMWMtYjk3OS1kYWMwYTY5M2Y4YzQvOGU1YWJlMjYtMzVjMS0z YjE2LTliOTYtMzIzYzE2NWY4NDIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYjI5NTkzMzYtNmFmZS00MTFjLWI5 NzktZGFjMGE2OTNmOGM0L2IyOTU5MzM2LTZhZmUtNDExYy1iOTc5LWRhYzBhNjkz ZjhjNC5jcmwwHwYDVR0jBBgwFoAUHFIwMv7rW5JtWi415XyAOxXgMnMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9iMjk1OTMzNi02YWZlLTQxMWMtYjk3OS1kYWMw YTY5M2Y4YzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBpxdgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGJkr9adpznc1L+ZXymyWxFRhrHYbKcP6uEN4yG2FtD9UaQrsGRBpXfB voMQBoVgQd09Hon2xI2oDxGDVISdRTZqwigIv1GkzbJCHXwUeqcONEUdz78WxDf9 +v7Qf9pvzcZJU3R715SyrJf2TptJ2OLKeOQpmtQjeP+GZLgIjjuEX2N1okI1Yfgw iWHbOK/j+3sqM06iTCDdC4KmuPOZidYzBHcT7uDwPmgrqn1pJSB5mb6BmH+46r2Z 96NeDA2LZnl3RubnMRvvVmc3pEl1aAKIQPjbMLVY0FmPtlyFWxHl8nJWcmL7G815 I/PScH9bsmuqkQcfpfoPc+IPQs5KCuE= -----END CERTIFICATE-----Generated at Fri Mar 27 04:35:00 2026 by rpki-client