$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cba86acd-9af7-450a-ac5c-6c872671a7a3/b7201278-097e-3b32-a4e1-96b53fb35fb0.roa File: b7201278-097e-3b32-a4e1-96b53fb35fb0.roa (raw, json) Hash identifier: ekrzFWrpkiZsQiMk30zePPSStskCL0S6isSeuEewHcM= Subject key identifier: EC:07:2C:27:0C:2C:D6:51:CC:82:6D:B7:11:74:33:0B:72:58:25:FC Certificate issuer: /CN=cba86acd-9af7-450a-ac5c-6c872671a7a3 Certificate serial: 010D0C9F4328584D2D3F7766CCEC92EDB43AF940 Authority key identifier: AE:34:8C:DA:F6:97:BA:1F:63:8D:6B:B6:67:AD:27:A3:25:6F:1E:22 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cba86acd-9af7-450a-ac5c-6c872671a7a3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cba86acd-9af7-450a-ac5c-6c872671a7a3/b7201278-097e-3b32-a4e1-96b53fb35fb0.roa Signing time: Sun 15 Mar 2026 13:00:41 +0000 ROA not before: Sun 15 Mar 2026 13:00:41 +0000 ROA not after: Sat 13 Jun 2026 13:00:41 +0000 asID: 36222 IP address blocks: 23.138.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cba86acd-9af7-450a-ac5c-6c872671a7a3/cba86acd-9af7-450a-ac5c-6c872671a7a3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cba86acd-9af7-450a-ac5c-6c872671a7a3/cba86acd-9af7-450a-ac5c-6c872671a7a3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cba86acd-9af7-450a-ac5c-6c872671a7a3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2d:3f:77:66:cc:ec:92:ed:b4:3a:f9:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cba86acd-9af7-450a-ac5c-6c872671a7a3 Validity Not Before: Mar 15 13:00:41 2026 GMT Not After : Jun 13 13:00:41 2026 GMT Subject: CN=5cc62452-8aaa-4e57-96da-1f39ef0b45b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:d8:01:a2:4a:ce:d2:97:6e:64:f8:04:4a:85: f2:18:cd:0d:15:a9:c4:87:5d:b9:1e:f3:88:6a:2b: 4d:42:4f:8b:0c:fe:30:30:03:e0:4e:85:36:18:27: 53:18:87:a7:56:b6:9d:43:86:70:e0:ac:15:e6:48: a8:51:28:a9:ba:d1:6e:9a:32:56:ba:28:a6:6e:c7: ac:b4:96:1c:a4:56:a9:1e:5a:f9:02:de:78:6c:a0: 36:ad:28:59:53:8e:2a:8b:be:24:59:bc:a5:08:97: e2:83:08:d9:dd:ff:67:a5:b6:84:bf:2b:b6:e8:69: 88:c2:56:6b:29:2d:d7:f6:49:cf:27:50:58:17:f8: 3d:8c:48:3d:b8:05:8f:48:c6:21:86:f0:26:2a:b2: 7b:f3:72:a2:4d:1c:8f:da:c2:46:9f:03:cd:66:59: 54:11:9e:8a:c7:14:4e:15:09:a0:e2:f8:b2:01:72: 50:ff:dc:66:71:c5:ac:4d:1d:ef:c6:fc:1a:df:71: ee:a0:20:96:3c:d0:7a:3a:b7:96:7b:4c:65:5a:cb: aa:f9:eb:e6:11:40:c1:20:c4:2f:da:02:ec:56:c2: 21:7a:fd:0e:d9:db:5d:4b:9a:d8:6d:40:ab:33:eb: b4:77:71:4f:d9:60:22:68:48:7b:c4:f8:95:04:cc: 72:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:07:2C:27:0C:2C:D6:51:CC:82:6D:B7:11:74:33:0B:72:58:25:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cba86acd-9af7-450a-ac5c-6c872671a7a3/b7201278-097e-3b32-a4e1-96b53fb35fb0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cba86acd-9af7-450a-ac5c-6c872671a7a3/cba86acd-9af7-450a-ac5c-6c872671a7a3.crl X509v3 Authority Key Identifier: keyid:AE:34:8C:DA:F6:97:BA:1F:63:8D:6B:B6:67:AD:27:A3:25:6F:1E:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cba86acd-9af7-450a-ac5c-6c872671a7a3.cer sbgp-ipAddrBlock: critical IPv4: 23.138.96.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:d5:ac:65:75:2b:94:a1:69:ea:5d:33:b0:84:b7:86:80:0d: a5:ec:7e:55:b0:e7:b1:ab:52:91:0c:fb:8a:b1:db:40:d4:99: 58:ae:86:c2:9e:3e:c9:6c:9e:9f:3f:d4:b3:a7:82:76:14:ad: a5:d8:28:5e:bf:9c:a3:e7:4f:b7:b1:a1:5b:09:1a:ce:95:33: 9f:f2:e4:47:fa:6b:83:c4:ff:0f:29:9e:32:dc:99:b9:cd:26: 95:8e:3c:38:14:45:03:0d:a6:9a:f9:ce:90:85:d2:74:d5:4e: 7f:69:88:af:f9:c9:6a:e8:11:25:5c:3d:77:8e:5e:ab:72:38: e7:11:9e:3f:0d:df:30:d2:14:5b:ad:c7:f7:88:99:25:46:d8: 34:6c:9e:2d:d4:82:bc:27:3b:0c:71:ab:87:f9:6c:42:07:6a: 00:71:a8:f0:b4:a8:a6:68:de:ce:5a:83:40:df:2d:22:40:40: 87:34:40:ef:da:ad:a6:39:70:ed:15:a0:35:7c:7c:e9:0c:99: ac:60:e2:2f:73:f8:ad:92:e1:45:71:be:18:34:fc:b9:ad:f3: 29:fc:a4:b4:88:0f:b0:96:2d:98:99:e0:da:0d:c4:6e:9d:b8: 04:bc:ce:37:2d:e6:dd:cb:d4:ff:6d:ea:0c:27:b7:55:1d:a8: 19:08:6a:ca -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0tP3dmzOyS7bQ6+UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2JhODZhY2QtOWFmNy00NTBhLWFjNWMtNmM4NzI2NzFh N2EzMB4XDTI2MDMxNTEzMDA0MVoXDTI2MDYxMzEzMDA0MVowLzEtMCsGA1UEAxMk NWNjNjI0NTItOGFhYS00ZTU3LTk2ZGEtMWYzOWVmMGI0NWI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm9gBokrO0pduZPgESoXyGM0NFanEh125HvOI aitNQk+LDP4wMAPgToU2GCdTGIenVradQ4Zw4KwV5kioUSiputFumjJWuiimbses tJYcpFapHlr5At54bKA2rShZU44qi74kWbylCJfigwjZ3f9npbaEvyu26GmIwlZr KS3X9knPJ1BYF/g9jEg9uAWPSMYhhvAmKrJ783KiTRyP2sJGnwPNZllUEZ6KxxRO FQmg4viyAXJQ/9xmccWsTR3vxvwa33HuoCCWPNB6OreWe0xlWsuq+evmEUDBIMQv 2gLsVsIhev0O2dtdS5rYbUCrM+u0d3FP2WAiaEh7xPiVBMxyBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOwHLCcMLNZRzIJttxF0MwtyWCX8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jYmE4 NmFjZC05YWY3LTQ1MGEtYWM1Yy02Yzg3MjY3MWE3YTMvYjcyMDEyNzgtMDk3ZS0z YjMyLWE0ZTEtOTZiNTNmYjM1ZmIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvY2JhODZhY2QtOWFmNy00NTBhLWFj NWMtNmM4NzI2NzFhN2EzL2NiYTg2YWNkLTlhZjctNDUwYS1hYzVjLTZjODcyNjcx YTdhMy5jcmwwHwYDVR0jBBgwFoAUrjSM2vaXuh9jjWu2Z60noyVvHiIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9jYmE4NmFjZC05YWY3LTQ1MGEtYWM1Yy02Yzg3 MjY3MWE3YTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4pgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFbVrGV1K5ShaepdM7CEt4aADaXsflWw57GrUpEM+4qx20DUmViuhsKe Pslsnp8/1LOngnYUraXYKF6/nKPnT7exoVsJGs6VM5/y5Ef6a4PE/w8pnjLcmbnN JpWOPDgURQMNppr5zpCF0nTVTn9piK/5yWroESVcPXeOXqtyOOcRnj8N3zDSFFut x/eImSVG2DRsni3UgrwnOwxxq4f5bEIHagBxqPC0qKZo3s5ag0DfLSJAQIc0QO/a raY5cO0VoDV8fOkMmaxg4i9z+K2S4UVxvhg0/Lmt8yn8pLSID7CWLZiZ4NoNxG6d uAS8zjct5t3L1P9t6gwnt1UdqBkIaso= -----END CERTIFICATE-----Generated at Thu Mar 26 22:04:18 2026 by rpki-client