$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410/13b05a95-55dd-33e8-baaf-bccdc0432a3c.roa File: 13b05a95-55dd-33e8-baaf-bccdc0432a3c.roa (raw, json) Hash identifier: rh3Gzu+w43hRMLxHgZryYx8ZLCWRtsZFYulBgS10N+g= Subject key identifier: 7D:7B:69:5B:12:4C:4F:A1:C5:92:88:6F:31:1C:BF:5D:FF:F7:A0:34 Certificate issuer: /CN=0c2b76fb-0555-4bed-b79b-20ec56b8d410 Certificate serial: 010D0C9F4328584D2D3F71A671031D23C4267F48 Authority key identifier: 78:DC:B5:3E:20:18:87:C3:D3:39:7E:69:F4:72:64:AB:F1:7B:B0:D4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410/13b05a95-55dd-33e8-baaf-bccdc0432a3c.roa Signing time: Sun 15 Mar 2026 13:00:41 +0000 ROA not before: Sun 15 Mar 2026 13:00:41 +0000 ROA not after: Sat 13 Jun 2026 13:00:41 +0000 asID: 53388 IP address blocks: 23.128.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410/0c2b76fb-0555-4bed-b79b-20ec56b8d410.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410/0c2b76fb-0555-4bed-b79b-20ec56b8d410.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2d:3f:71:a6:71:03:1d:23:c4:26:7f:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c2b76fb-0555-4bed-b79b-20ec56b8d410 Validity Not Before: Mar 15 13:00:41 2026 GMT Not After : Jun 13 13:00:41 2026 GMT Subject: CN=31ef70bf-3b28-41bf-bb14-b3ef81a1118d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:09:84:e8:de:95:d2:d4:b2:b0:19:31:ce:76: b1:69:b7:d6:e5:92:08:50:06:d5:53:a1:a6:d5:51: 74:c7:89:dd:f5:ee:42:48:61:45:20:eb:3a:26:42: df:03:2c:1e:3a:6a:95:c6:1e:0a:3e:28:03:40:19: eb:6d:43:45:c8:20:e1:cd:f3:87:75:62:7b:c2:41: 2e:ff:aa:8c:ba:1f:84:02:3a:65:33:4f:2b:d4:c2: 24:42:44:0f:b0:4b:00:66:66:9f:c7:61:d4:8c:93: c5:e7:5d:bd:5e:b1:f1:bf:4c:09:56:6d:e0:e9:7c: 6e:2a:5c:32:39:87:91:32:ff:c1:9d:94:37:a3:7e: 40:35:1d:ee:92:91:d9:91:60:75:d8:8c:6a:69:ef: 45:2d:51:c7:4d:d3:10:60:2d:71:22:39:a8:9d:f1: a0:a9:12:76:98:55:f7:10:35:84:4c:21:3a:c4:0f: b1:2f:e9:94:81:0e:2e:e0:85:88:30:66:4b:59:f9: 9c:ce:ad:30:40:07:cf:a6:c0:b8:e3:c7:73:3f:84: 41:1f:e5:f1:23:a2:93:1a:f4:3d:54:c9:ac:fb:c6: 8b:c5:71:fa:b5:50:aa:ab:52:a3:ee:25:da:18:39: 6c:83:6c:12:6e:8b:52:ee:36:8a:d5:64:26:92:8b: 54:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:7B:69:5B:12:4C:4F:A1:C5:92:88:6F:31:1C:BF:5D:FF:F7:A0:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410/13b05a95-55dd-33e8-baaf-bccdc0432a3c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410/0c2b76fb-0555-4bed-b79b-20ec56b8d410.crl X509v3 Authority Key Identifier: keyid:78:DC:B5:3E:20:18:87:C3:D3:39:7E:69:F4:72:64:AB:F1:7B:B0:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410.cer sbgp-ipAddrBlock: critical IPv4: 23.128.236.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:57:5a:92:52:96:bd:3e:4c:4f:37:72:68:49:cd:7e:bf:89: 87:59:0f:31:e7:8f:09:56:0a:40:6c:78:26:3e:16:23:c7:b0: aa:1c:ab:12:b1:44:d7:a6:00:cf:8a:72:27:87:56:22:c4:52: 93:f2:b3:32:2b:19:5b:ba:c0:8a:15:f4:fd:73:5a:6b:99:5b: 67:9d:0e:03:2f:16:40:c3:e0:5f:26:91:6c:10:46:89:a1:84: 23:79:94:17:c0:28:ba:5c:d0:20:11:37:80:f4:f7:0b:4b:df: 2b:32:bb:a3:9d:ce:1d:2d:c0:db:ad:a0:11:35:3c:1b:4f:99: 10:29:6c:75:c7:36:de:64:ea:80:e6:a2:e3:66:c2:83:3c:3a: 35:a4:7f:91:44:e3:86:26:ea:2c:7b:b6:e9:bd:14:2a:af:d7: 43:b6:6f:77:8a:14:dc:38:af:38:35:d1:ef:61:b0:5f:96:47: 83:97:3c:4f:73:49:9e:87:53:7a:b5:92:61:1f:bd:44:85:8e: 53:91:98:2d:a1:7a:31:8c:4c:68:fe:c9:f8:76:3f:f3:40:c2: 6b:be:2f:8c:c0:a1:ca:3c:7c:ca:4c:3e:a3:52:79:fe:67:de: fc:30:a0:46:ca:1c:bd:5f:5c:f4:e2:38:01:3d:17:51:cf:a1: 4b:e8:3a:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0tP3GmcQMdI8Qmf0gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGMyYjc2ZmItMDU1NS00YmVkLWI3OWItMjBlYzU2Yjhk NDEwMB4XDTI2MDMxNTEzMDA0MVoXDTI2MDYxMzEzMDA0MVowLzEtMCsGA1UEAxMk MzFlZjcwYmYtM2IyOC00MWJmLWJiMTQtYjNlZjgxYTExMThkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApQmE6N6V0tSysBkxznaxabfW5ZIIUAbVU6Gm 1VF0x4nd9e5CSGFFIOs6JkLfAyweOmqVxh4KPigDQBnrbUNFyCDhzfOHdWJ7wkEu /6qMuh+EAjplM08r1MIkQkQPsEsAZmafx2HUjJPF5129XrHxv0wJVm3g6XxuKlwy OYeRMv/BnZQ3o35ANR3ukpHZkWB12Ixqae9FLVHHTdMQYC1xIjmonfGgqRJ2mFX3 EDWETCE6xA+xL+mUgQ4u4IWIMGZLWfmczq0wQAfPpsC448dzP4RBH+XxI6KTGvQ9 VMms+8aLxXH6tVCqq1Kj7iXaGDlsg2wSbotS7jaK1WQmkotUAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH17aVsSTE+hxZKIbzEcv13/96A0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8wYzJi NzZmYi0wNTU1LTRiZWQtYjc5Yi0yMGVjNTZiOGQ0MTAvMTNiMDVhOTUtNTVkZC0z M2U4LWJhYWYtYmNjZGMwNDMyYTNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMGMyYjc2ZmItMDU1NS00YmVkLWI3 OWItMjBlYzU2YjhkNDEwLzBjMmI3NmZiLTA1NTUtNGJlZC1iNzliLTIwZWM1NmI4 ZDQxMC5jcmwwHwYDVR0jBBgwFoAUeNy1PiAYh8PTOX5p9HJkq/F7sNQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8wYzJiNzZmYi0wNTU1LTRiZWQtYjc5Yi0yMGVj NTZiOGQ0MTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4DsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIhXWpJSlr0+TE83cmhJzX6/iYdZDzHnjwlWCkBseCY+FiPHsKocqxKx RNemAM+KcieHViLEUpPyszIrGVu6wIoV9P1zWmuZW2edDgMvFkDD4F8mkWwQRomh hCN5lBfAKLpc0CARN4D09wtL3ysyu6Odzh0twNutoBE1PBtPmRApbHXHNt5k6oDm ouNmwoM8OjWkf5FE44Ym6ix7tum9FCqv10O2b3eKFNw4rzg10e9hsF+WR4OXPE9z SZ6HU3q1kmEfvUSFjlORmC2hejGMTGj+yfh2P/NAwmu+L4zAoco8fMpMPqNSef5n 3vwwoEbKHL1fXPTiOAE9F1HPoUvoOkc= -----END CERTIFICATE-----Generated at Thu Mar 26 02:37:45 2026 by rpki-client