$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/2e9f4fa8-8ae6-3e4c-a027-e07f3e88ec4f.roa File: 2e9f4fa8-8ae6-3e4c-a027-e07f3e88ec4f.roa (raw, json) Hash identifier: zPItA+mIoX0RT73Cj1dPhfbMNllXR+EvVFd7989TjxI= Subject key identifier: 09:A8:0A:95:D3:C2:F8:57:45:DC:30:3B:75:06:5C:A0:9A:F5:6E:76 Certificate issuer: /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5 Certificate serial: 010D0C9F4328584D1B19F4BEB9251C9AD575C1D0 Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/2e9f4fa8-8ae6-3e4c-a027-e07f3e88ec4f.roa Signing time: Mon 09 Mar 2026 01:00:32 +0000 ROA not before: Mon 09 Mar 2026 01:00:32 +0000 ROA not after: Sun 07 Jun 2026 01:00:32 +0000 asID: 146813 IP address blocks: 23.236.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1b:19:f4:be:b9:25:1c:9a:d5:75:c1:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5 Validity Not Before: Mar 9 01:00:32 2026 GMT Not After : Jun 7 01:00:32 2026 GMT Subject: CN=c8b1f7be-6209-4c05-9e7f-aaf19d40bc87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:b1:e8:c6:6a:ba:d0:ea:aa:e6:10:b0:83:c8: c8:7d:81:ed:85:f1:bc:dc:54:04:fb:9e:2d:b6:61: d9:51:85:ce:b8:63:d5:86:42:b9:5c:35:2a:0d:df: 82:32:76:38:1e:47:11:d4:94:ba:48:55:5c:d9:b1: 4f:d3:d1:e6:6d:49:d4:dc:53:c9:05:ee:af:45:4b: 51:22:30:33:a2:a9:04:ab:17:5e:94:60:b5:21:30: 71:2c:c3:bd:57:9f:a7:ac:b5:e6:cc:10:a6:7d:02: 15:38:11:7f:79:92:26:9b:59:2c:c8:0b:9d:6e:10: a3:6a:86:78:3e:15:d3:f8:de:d5:0d:eb:e1:88:af: f6:66:49:a3:f8:3a:46:c8:9f:95:bb:8a:f4:ff:25: ee:5a:2b:e8:76:66:39:18:2c:83:a6:6e:0a:f8:4b: 24:38:8c:fd:ed:0f:93:79:e1:3d:60:89:36:c2:4e: fd:61:89:2d:10:b4:5b:10:ee:ca:35:ad:5a:c9:fa: 77:21:47:90:89:dc:d8:10:93:36:af:ab:cf:ae:b3: 60:b7:f0:53:73:a8:49:27:e1:89:af:fc:61:ae:97: 35:ac:a4:31:21:71:94:7f:23:2b:99:d7:08:b4:41: 5c:d8:8c:19:66:7e:63:15:09:07:e5:52:38:bb:95: ed:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:A8:0A:95:D3:C2:F8:57:45:DC:30:3B:75:06:5C:A0:9A:F5:6E:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/2e9f4fa8-8ae6-3e4c-a027-e07f3e88ec4f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl X509v3 Authority Key Identifier: keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer sbgp-ipAddrBlock: critical IPv4: 23.236.111.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:86:66:63:cb:98:4c:49:48:19:4f:bf:50:15:13:39:de:b6: fe:c7:13:19:42:ad:c8:65:b7:ce:e2:36:4c:7b:56:ff:2c:b9: e7:4e:56:a7:ce:53:e2:2c:57:80:3d:a5:66:74:37:dd:b5:66: 9b:4a:5e:d1:0a:7e:ff:47:47:cd:e8:22:da:0c:0d:55:eb:89: 3b:cd:73:94:de:ed:9a:50:e2:2f:a6:d8:02:df:a1:1e:46:1c: 15:a7:e1:ae:9a:8b:e9:d2:5e:f5:21:e4:73:d8:05:cf:82:09: 84:df:c9:cb:ca:24:b9:5f:4a:cb:66:be:08:25:e7:5b:ce:86: b1:18:0f:64:67:ce:41:ac:1f:af:a1:0a:e0:51:76:b1:50:82: f3:2c:42:47:7e:f3:9e:69:02:50:9d:23:25:cd:bb:b2:9e:08: 18:07:a7:c4:b9:9a:96:43:d6:76:f9:93:8b:01:bd:52:06:7a: ce:0c:6c:76:7e:89:f6:25:4d:95:61:2f:9f:40:16:65:4e:df: 7c:f9:f9:d7:bc:21:3c:26:34:e3:c1:5d:9f:a5:2c:6d:7c:6b: 5b:44:80:82:f2:cc:db:7a:17:99:6f:7d:dd:ba:48:af:89:33: 99:70:0f:c9:74:c0:a0:f4:8d:b7:17:d9:35:67:39:8b:6b:d5: de:49:97:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0bGfS+uSUcmtV1wdAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGQ3MjI1MmMtZTAyNC00MmM1LTljNTctODlmYzRmMWFm M2E1MB4XDTI2MDMwOTAxMDAzMloXDTI2MDYwNzAxMDAzMlowLzEtMCsGA1UEAxMk YzhiMWY3YmUtNjIwOS00YzA1LTllN2YtYWFmMTlkNDBiYzg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvrHoxmq60Oqq5hCwg8jIfYHthfG83FQE+54t tmHZUYXOuGPVhkK5XDUqDd+CMnY4HkcR1JS6SFVc2bFP09HmbUnU3FPJBe6vRUtR IjAzoqkEqxdelGC1ITBxLMO9V5+nrLXmzBCmfQIVOBF/eZImm1ksyAudbhCjaoZ4 PhXT+N7VDevhiK/2Zkmj+DpGyJ+Vu4r0/yXuWivodmY5GCyDpm4K+EskOIz97Q+T eeE9YIk2wk79YYktELRbEO7KNa1ayfp3IUeQidzYEJM2r6vPrrNgt/BTc6hJJ+GJ r/xhrpc1rKQxIXGUfyMrmdcItEFc2IwZZn5jFQkH5VI4u5Xt5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAmoCpXTwvhXRdwwO3UGXKCa9W52MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wZDcy MjUyYy1lMDI0LTQyYzUtOWM1Ny04OWZjNGYxYWYzYTUvMmU5ZjRmYTgtOGFlNi0z ZTRjLWEwMjctZTA3ZjNlODhlYzRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMGQ3MjI1MmMtZTAyNC00MmM1LTlj NTctODlmYzRmMWFmM2E1LzBkNzIyNTJjLWUwMjQtNDJjNS05YzU3LTg5ZmM0ZjFh ZjNhNS5jcmwwHwYDVR0jBBgwFoAUgDkIx1kQPtrj7fdhAQpEfi2CyX4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8wZDcyMjUyYy1lMDI0LTQyYzUtOWM1Ny04OWZj NGYxYWYzYTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF+xvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHOGZmPLmExJSBlPv1AVEznetv7HExlCrchlt87iNkx7Vv8suedOVqfO U+IsV4A9pWZ0N921ZptKXtEKfv9HR83oItoMDVXriTvNc5Te7ZpQ4i+m2ALfoR5G HBWn4a6ai+nSXvUh5HPYBc+CCYTfycvKJLlfSstmvggl51vOhrEYD2RnzkGsH6+h CuBRdrFQgvMsQkd+855pAlCdIyXNu7KeCBgHp8S5mpZD1nb5k4sBvVIGes4MbHZ+ ifYlTZVhL59AFmVO33z5+de8ITwmNOPBXZ+lLG18a1tEgILyzNt6F5lvfd26SK+J M5lwD8l0wKD0jbcX2TVnOYtr1d5Jl+A= -----END CERTIFICATE-----Generated at Thu Mar 26 14:25:36 2026 by rpki-client