$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/90084646-f74e-42c1-9557-3764d36b8bb6/33989c52-a42f-3bd1-9235-3c4ff7255c3f.roa File: 33989c52-a42f-3bd1-9235-3c4ff7255c3f.roa (raw, json) Hash identifier: DV1t481neDgipTbBmEGY8Yelp0Xx+VS1IU+tzcGTMKw= Subject key identifier: EC:69:82:CE:07:B8:33:AA:C4:4E:C7:B5:91:CC:9F:3C:55:F0:2B:0F Certificate issuer: /CN=90084646-f74e-42c1-9557-3764d36b8bb6 Certificate serial: 010D0C9F4328584D359FD7AC7C2CBC7A974D1860 Authority key identifier: 31:62:95:A9:A8:FD:F7:CA:B2:C2:89:BC:47:64:7D:FC:1E:A0:7D:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/90084646-f74e-42c1-9557-3764d36b8bb6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/90084646-f74e-42c1-9557-3764d36b8bb6/33989c52-a42f-3bd1-9235-3c4ff7255c3f.roa Signing time: Wed 18 Mar 2026 13:00:40 +0000 ROA not before: Wed 18 Mar 2026 13:00:40 +0000 ROA not after: Tue 16 Jun 2026 13:00:40 +0000 asID: 396238 IP address blocks: 23.187.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/90084646-f74e-42c1-9557-3764d36b8bb6/90084646-f74e-42c1-9557-3764d36b8bb6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/90084646-f74e-42c1-9557-3764d36b8bb6/90084646-f74e-42c1-9557-3764d36b8bb6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/90084646-f74e-42c1-9557-3764d36b8bb6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:35:9f:d7:ac:7c:2c:bc:7a:97:4d:18:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90084646-f74e-42c1-9557-3764d36b8bb6 Validity Not Before: Mar 18 13:00:40 2026 GMT Not After : Jun 16 13:00:40 2026 GMT Subject: CN=4d96d121-3b21-45ab-85be-644f7f5f366e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:89:ea:a4:b6:b6:b7:b4:23:c9:8e:77:17:7b: 17:af:ae:d4:b5:e9:6c:7d:72:f8:5c:e3:ef:17:71: 35:1d:81:0b:93:e7:0e:bb:2b:06:90:20:16:b6:b6: 08:77:c3:97:06:6c:55:f7:19:58:bc:cd:66:8f:8a: b7:2f:81:10:39:4f:f9:18:fd:70:0e:02:7a:35:38: 56:83:f4:21:19:47:ce:0b:ac:ae:e2:35:3c:7f:4c: 5d:39:58:d0:dd:e3:5c:86:17:13:c7:28:50:06:d7: 5f:59:2a:2d:6f:7b:12:0f:58:37:31:a3:66:98:fe: df:ff:d2:78:6f:96:1c:f9:4e:91:17:a2:a5:d0:e2: 77:1f:24:3d:f1:41:34:5b:25:b6:8f:06:a9:db:86: c3:db:2a:f6:4b:3f:a3:8d:4a:f3:01:20:47:81:2f: f5:31:ea:62:02:c3:44:a0:49:63:1d:f4:84:7c:de: ed:a1:4f:07:ed:a7:9b:72:ff:88:94:fc:c5:aa:08: 1f:8e:66:91:ea:57:94:77:72:b2:5d:73:61:89:81: 87:38:6e:f0:9d:cf:13:21:8d:3a:11:3f:62:82:2a: 87:1e:d9:79:a5:6b:5f:16:42:43:c5:6d:15:c6:6f: f0:c3:af:eb:b7:cb:81:fa:be:61:60:87:fa:8d:1c: a4:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:69:82:CE:07:B8:33:AA:C4:4E:C7:B5:91:CC:9F:3C:55:F0:2B:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/90084646-f74e-42c1-9557-3764d36b8bb6/33989c52-a42f-3bd1-9235-3c4ff7255c3f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/90084646-f74e-42c1-9557-3764d36b8bb6/90084646-f74e-42c1-9557-3764d36b8bb6.crl X509v3 Authority Key Identifier: keyid:31:62:95:A9:A8:FD:F7:CA:B2:C2:89:BC:47:64:7D:FC:1E:A0:7D:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/90084646-f74e-42c1-9557-3764d36b8bb6.cer sbgp-ipAddrBlock: critical IPv4: 23.187.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption cf:86:10:c1:27:da:39:90:28:b9:ce:82:1c:7a:bc:09:6e:7b: 23:a3:8b:7f:f0:43:7e:a0:2e:b2:f4:5a:5e:f0:64:bc:51:9f: 34:bf:cb:78:cc:29:f2:c4:66:28:e3:75:7b:90:d7:aa:44:46: 9e:a5:d5:8c:90:69:12:60:31:db:c1:1b:97:6b:a7:f1:29:43: 99:c9:c3:3e:44:ff:40:34:77:f7:94:f6:13:26:dc:ad:f6:33: 4b:77:5f:7d:96:2d:33:fe:58:c2:33:f4:86:9d:4d:79:7b:6b: 19:95:5f:a1:01:c1:57:c3:48:44:f0:2d:98:b1:9a:dc:50:3d: ce:4c:95:d3:90:c7:d1:ef:c5:a5:b6:10:90:a2:63:e4:ed:57: 78:36:d8:85:29:b8:0d:cb:5c:e7:75:c0:c4:30:9b:22:5c:28: d5:4e:ef:8d:74:6f:24:65:1a:18:30:d4:8d:2c:96:74:13:c6: c1:d4:1d:b6:f7:c8:44:0b:fa:7a:51:19:37:63:e7:dc:d3:4a: 5e:41:f2:09:b0:df:da:3c:6f:c7:6e:5d:d2:c7:4d:e9:35:9e: 16:8f:76:2c:a0:d6:04:f1:18:e7:c1:28:50:75:46:d6:c7:f6: 65:55:37:b8:f4:36:8b:0b:25:8b:e5:89:2f:53:d4:20:6c:64: 69:f3:35:d6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE01n9esfCy8epdNGGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTAwODQ2NDYtZjc0ZS00MmMxLTk1NTctMzc2NGQzNmI4 YmI2MB4XDTI2MDMxODEzMDA0MFoXDTI2MDYxNjEzMDA0MFowLzEtMCsGA1UEAxMk NGQ5NmQxMjEtM2IyMS00NWFiLTg1YmUtNjQ0ZjdmNWYzNjZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjonqpLa2t7QjyY53F3sXr67UtelsfXL4XOPv F3E1HYELk+cOuysGkCAWtrYId8OXBmxV9xlYvM1mj4q3L4EQOU/5GP1wDgJ6NThW g/QhGUfOC6yu4jU8f0xdOVjQ3eNchhcTxyhQBtdfWSotb3sSD1g3MaNmmP7f/9J4 b5Yc+U6RF6Kl0OJ3HyQ98UE0WyW2jwap24bD2yr2Sz+jjUrzASBHgS/1MepiAsNE oEljHfSEfN7toU8H7aebcv+IlPzFqggfjmaR6leUd3KyXXNhiYGHOG7wnc8TIY06 ET9igiqHHtl5pWtfFkJDxW0Vxm/ww6/rt8uB+r5hYIf6jRyk2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOxpgs4HuDOqxE7HtZHMnzxV8CsPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85MDA4 NDY0Ni1mNzRlLTQyYzEtOTU1Ny0zNzY0ZDM2YjhiYjYvMzM5ODljNTItYTQyZi0z YmQxLTkyMzUtM2M0ZmY3MjU1YzNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOTAwODQ2NDYtZjc0ZS00MmMxLTk1 NTctMzc2NGQzNmI4YmI2LzkwMDg0NjQ2LWY3NGUtNDJjMS05NTU3LTM3NjRkMzZi OGJiNi5jcmwwHwYDVR0jBBgwFoAUMWKVqaj998qywom8R2R9/B6gfZYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS85MDA4NDY0Ni1mNzRlLTQyYzEtOTU1Ny0zNzY0 ZDM2YjhiYjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF7t4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAM+GEMEn2jmQKLnOghx6vAlueyOji3/wQ36gLrL0Wl7wZLxRnzS/y3jM KfLEZijjdXuQ16pERp6l1YyQaRJgMdvBG5drp/EpQ5nJwz5E/0A0d/eU9hMm3K32 M0t3X32WLTP+WMIz9IadTXl7axmVX6EBwVfDSETwLZixmtxQPc5MldOQx9HvxaW2 EJCiY+TtV3g22IUpuA3LXOd1wMQwmyJcKNVO7410byRlGhgw1I0slnQTxsHUHbb3 yEQL+npRGTdj59zTSl5B8gmw39o8b8duXdLHTek1nhaPdiyg1gTxGOfBKFB1RtbH 9mVVN7j0NosLJYvliS9T1CBsZGnzNdY= -----END CERTIFICATE-----Generated at Thu Mar 26 23:04:05 2026 by rpki-client