$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a1853cd3-3329-4b61-a321-f6705ea74197/19601375-8b5a-3c05-9dfe-bdc6f601106d.roa File: 19601375-8b5a-3c05-9dfe-bdc6f601106d.roa (raw, json) Hash identifier: 59j0JFpmmizggV3+IgmHahd6c4lMNQ3QJ8wIqe9QiP4= Subject key identifier: E3:8F:8F:0C:69:76:49:0C:4E:EE:48:40:58:89:18:EE:96:D1:0C:33 Certificate issuer: /CN=a1853cd3-3329-4b61-a321-f6705ea74197 Certificate serial: 010D0C9F4328584D95EFF136E515B993FD2AF780 Authority key identifier: 2D:1A:A6:F8:8B:DB:6D:1F:8D:7A:34:72:43:B1:F2:AD:6E:F9:CD:0E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a1853cd3-3329-4b61-a321-f6705ea74197.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a1853cd3-3329-4b61-a321-f6705ea74197/19601375-8b5a-3c05-9dfe-bdc6f601106d.roa Signing time: Wed 22 Apr 2026 01:00:23 +0000 ROA not before: Wed 22 Apr 2026 01:00:23 +0000 ROA not after: Tue 21 Jul 2026 01:00:23 +0000 asID: 400554 IP address blocks: 23.134.120.0/24 maxlen: 24 2602:fb9d::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a1853cd3-3329-4b61-a321-f6705ea74197/a1853cd3-3329-4b61-a321-f6705ea74197.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a1853cd3-3329-4b61-a321-f6705ea74197/a1853cd3-3329-4b61-a321-f6705ea74197.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a1853cd3-3329-4b61-a321-f6705ea74197.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:95:ef:f1:36:e5:15:b9:93:fd:2a:f7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a1853cd3-3329-4b61-a321-f6705ea74197 Validity Not Before: Apr 22 01:00:23 2026 GMT Not After : Jul 21 01:00:23 2026 GMT Subject: CN=a0e76cb0-8b05-4824-9b37-de831ff401ad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:ec:6a:3f:92:f2:f8:02:1a:a0:cc:bb:b4:35: 07:17:c6:fa:83:72:d9:f9:68:9a:66:05:45:87:90: 2d:30:21:1b:34:24:26:b8:08:be:17:3c:f2:6a:21: b2:e1:bc:30:bb:9a:8b:79:0c:fb:ae:39:b4:41:7e: 4c:2e:7a:71:92:33:a6:c5:26:92:46:4b:c3:19:c4: be:22:82:6b:80:93:08:f7:8a:92:01:21:9f:e6:2b: c7:d9:f2:07:f1:87:19:09:95:57:a1:2d:39:dc:78: 5c:97:63:5e:f1:60:1d:6f:cc:b0:0f:0f:f4:cc:19: e7:35:c7:1e:bf:48:67:37:25:09:c7:40:92:30:09: e1:37:51:dc:1e:c3:1b:c2:36:0e:6f:d3:6c:73:08: d8:72:35:73:cf:3c:b8:cf:8c:c0:ba:4a:b7:35:dc: da:27:63:69:14:c5:22:d8:32:94:95:b0:b5:13:ca: 94:8e:f0:5c:8d:41:c5:58:dc:19:4e:9e:4a:4c:84: 3b:1f:53:b4:a6:c5:d9:d5:20:d4:fb:c5:28:f7:60: 9b:eb:41:e0:5c:e7:ed:81:2d:0b:17:96:6a:d6:88: 9e:28:75:7a:ef:5e:5e:27:61:7a:5d:3f:1f:34:a4: 4d:a9:89:b0:a4:df:26:ba:f9:a5:ca:82:f1:8c:8e: 4c:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:8F:8F:0C:69:76:49:0C:4E:EE:48:40:58:89:18:EE:96:D1:0C:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a1853cd3-3329-4b61-a321-f6705ea74197/19601375-8b5a-3c05-9dfe-bdc6f601106d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a1853cd3-3329-4b61-a321-f6705ea74197/a1853cd3-3329-4b61-a321-f6705ea74197.crl X509v3 Authority Key Identifier: keyid:2D:1A:A6:F8:8B:DB:6D:1F:8D:7A:34:72:43:B1:F2:AD:6E:F9:CD:0E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a1853cd3-3329-4b61-a321-f6705ea74197.cer sbgp-ipAddrBlock: critical IPv4: 23.134.120.0/24 IPv6: 2602:fb9d::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:6f:78:b6:a9:37:12:ca:df:88:f0:60:71:ea:e8:09:e8:67: df:8b:55:95:63:67:e2:e9:f3:bb:f5:30:54:67:4a:07:f5:d4: a2:13:a8:73:20:e8:68:3c:7c:93:ac:7b:a7:6a:7b:c1:96:6b: e8:61:2a:d3:3c:84:93:a8:c0:69:f3:fe:6f:e7:94:1c:85:2e: d0:c0:f6:cb:f4:78:eb:48:3c:62:21:bc:86:b1:6a:dd:64:1a: d8:e2:28:70:f9:88:3c:10:13:1c:4a:92:89:91:cf:8a:bc:b8: af:1f:a4:79:14:d3:e0:d4:05:c7:db:88:88:71:59:99:5e:2d: 3a:07:d8:7f:b2:b4:f8:99:c1:8f:99:1e:05:55:69:34:62:ac: 63:9f:26:8b:6a:ed:64:22:5b:12:23:5f:c3:0b:35:e3:f0:8c: b0:96:74:4e:24:1c:9e:23:69:b9:f3:60:46:f7:c2:b5:a9:88: 78:38:e7:23:ca:99:57:b4:98:3b:c5:06:38:19:1f:28:ca:7a: 32:f3:18:0e:1d:af:40:6f:32:d2:c5:ec:51:59:82:c1:c4:de: 40:c1:da:9c:13:3e:91:5c:71:dd:a7:39:c4:2e:8f:d1:0c:ea: 84:d1:2d:1d:0e:8d:02:30:0f:fd:1c:e4:d3:58:ed:bd:5a:10: 1a:f8:24:ec -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE2V7/E25RW5k/0q94AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTE4NTNjZDMtMzMyOS00YjYxLWEzMjEtZjY3MDVlYTc0 MTk3MB4XDTI2MDQyMjAxMDAyM1oXDTI2MDcyMTAxMDAyM1owLzEtMCsGA1UEAxMk YTBlNzZjYjAtOGIwNS00ODI0LTliMzctZGU4MzFmZjQwMWFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjuxqP5Ly+AIaoMy7tDUHF8b6g3LZ+WiaZgVF h5AtMCEbNCQmuAi+FzzyaiGy4bwwu5qLeQz7rjm0QX5MLnpxkjOmxSaSRkvDGcS+ IoJrgJMI94qSASGf5ivH2fIH8YcZCZVXoS053Hhcl2Ne8WAdb8ywDw/0zBnnNcce v0hnNyUJx0CSMAnhN1HcHsMbwjYOb9NscwjYcjVzzzy4z4zAukq3NdzaJ2NpFMUi 2DKUlbC1E8qUjvBcjUHFWNwZTp5KTIQ7H1O0psXZ1SDU+8Uo92Cb60HgXOftgS0L F5Zq1oieKHV6715eJ2F6XT8fNKRNqYmwpN8muvmlyoLxjI5MnQIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFOOPjwxpdkkMTu5IQFiJGO6W0QwzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hMTg1 M2NkMy0zMzI5LTRiNjEtYTMyMS1mNjcwNWVhNzQxOTcvMTk2MDEzNzUtOGI1YS0z YzA1LTlkZmUtYmRjNmY2MDExMDZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYTE4NTNjZDMtMzMyOS00YjYxLWEz MjEtZjY3MDVlYTc0MTk3L2ExODUzY2QzLTMzMjktNGI2MS1hMzIxLWY2NzA1ZWE3 NDE5Ny5jcmwwHwYDVR0jBBgwFoAULRqm+IvbbR+NejRyQ7HyrW75zQ4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hMTg1M2NkMy0zMzI5LTRiNjEtYTMyMS1mNjcw NWVhNzQxOTcuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF4Z4MA4E AgACMAgDBgAmAvudADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAzb3i2qTcSyt+I8GBx6ugJ6Gffi1WVY2fi 6fO79TBUZ0oH9dSiE6hzIOhoPHyTrHunanvBlmvoYSrTPISTqMBp8/5v55QchS7Q wPbL9HjrSDxiIbyGsWrdZBrY4ihw+Yg8EBMcSpKJkc+KvLivH6R5FNPg1AXH24iI cVmZXi06B9h/srT4mcGPmR4FVWk0YqxjnyaLau1kIlsSI1/DCzXj8IywlnROJBye I2m582BG98K1qYh4OOcjyplXtJg7xQY4GR8oynoy8xgOHa9AbzLSxexRWYLBxN5A wdqcEz6RXHHdpznELo/RDOqE0S0dDo0CMA/9HOTTWO29WhAa+CTs -----END CERTIFICATE-----Generated at Tue May 12 21:33:52 2026 by rpki-client