$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/17ba49ac-37d6-4b90-b973-bee8a685e116/f80aa1f9-a6e2-3038-b512-57e988c3c123.roa File: f80aa1f9-a6e2-3038-b512-57e988c3c123.roa (raw, json) Hash identifier: sPClxbu+P06qaxZ4euXN12PsEDlXlIoKifLn/k66Vo4= Subject key identifier: 7A:5E:C1:1A:44:17:85:2E:59:03:43:7F:FE:27:B6:11:E6:CC:EE:C1 Certificate issuer: /CN=17ba49ac-37d6-4b90-b973-bee8a685e116 Certificate serial: 010D0C9F4328584D19B4D84F4BDEA6D73EF87000 Authority key identifier: 24:F8:90:91:66:EA:CD:1F:05:33:85:A2:E7:15:EA:8A:EF:FA:17:26 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/17ba49ac-37d6-4b90-b973-bee8a685e116.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/17ba49ac-37d6-4b90-b973-bee8a685e116/f80aa1f9-a6e2-3038-b512-57e988c3c123.roa Signing time: Sun 08 Mar 2026 13:00:40 +0000 ROA not before: Sun 08 Mar 2026 13:00:40 +0000 ROA not after: Sat 06 Jun 2026 13:00:40 +0000 asID: 402071 IP address blocks: 23.147.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/17ba49ac-37d6-4b90-b973-bee8a685e116/17ba49ac-37d6-4b90-b973-bee8a685e116.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/17ba49ac-37d6-4b90-b973-bee8a685e116/17ba49ac-37d6-4b90-b973-bee8a685e116.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/17ba49ac-37d6-4b90-b973-bee8a685e116.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:19:b4:d8:4f:4b:de:a6:d7:3e:f8:70:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=17ba49ac-37d6-4b90-b973-bee8a685e116 Validity Not Before: Mar 8 13:00:40 2026 GMT Not After : Jun 6 13:00:40 2026 GMT Subject: CN=46c67d15-2493-449c-8813-d945fce6856f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:15:70:ad:72:f5:d9:5d:af:55:72:59:1c:43: 06:50:f5:9b:32:42:3c:86:0b:eb:24:e4:7a:bd:d7: c8:4b:a4:b6:97:52:81:71:ee:b6:84:52:7c:25:88: 0d:24:05:c3:cd:03:1b:02:1f:f3:dc:d1:a4:c8:66: 25:e6:eb:61:d0:52:7c:40:29:fe:46:f4:77:cd:4e: a7:15:75:30:a7:30:f1:c6:d8:39:46:0d:c8:fa:e1: 51:a7:b3:55:45:2d:ec:4c:ce:25:4f:c8:3f:7a:f3: aa:cd:b0:aa:ed:50:b9:56:25:33:a0:bf:40:78:b3: 5e:4e:d6:bf:c0:b4:d0:8d:24:c5:69:d7:15:44:66: f0:30:82:a1:b6:85:4d:03:ca:0a:7d:ab:05:56:e4: 5c:af:c7:71:e9:18:cc:5e:ec:38:ad:86:48:1f:a7: 7b:97:25:dd:66:c6:c5:fc:2d:6e:0a:c7:bc:9e:78: 7f:3f:02:dc:3e:fc:b7:86:9d:31:d6:f2:7c:d3:21: 50:b9:79:02:5e:ba:21:17:ec:22:fe:fb:e2:b6:6f: b2:4e:38:50:de:6f:7b:37:35:9d:e5:32:4c:aa:b3: 34:22:12:33:f7:12:e3:22:f7:81:f1:31:2f:36:92: 3b:c3:3c:41:c6:27:b8:20:27:fd:1e:04:ef:cf:6e: be:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:5E:C1:1A:44:17:85:2E:59:03:43:7F:FE:27:B6:11:E6:CC:EE:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/17ba49ac-37d6-4b90-b973-bee8a685e116/f80aa1f9-a6e2-3038-b512-57e988c3c123.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/17ba49ac-37d6-4b90-b973-bee8a685e116/17ba49ac-37d6-4b90-b973-bee8a685e116.crl X509v3 Authority Key Identifier: keyid:24:F8:90:91:66:EA:CD:1F:05:33:85:A2:E7:15:EA:8A:EF:FA:17:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/17ba49ac-37d6-4b90-b973-bee8a685e116.cer sbgp-ipAddrBlock: critical IPv4: 23.147.28.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:8e:18:a6:af:66:98:77:ab:d3:34:16:32:b2:b7:f3:cc:47: b2:bd:2e:12:fb:7a:7c:64:eb:83:84:b0:3d:29:7c:64:6c:a7: e3:74:75:d6:2e:20:f5:46:7d:5a:56:79:7e:02:1d:1f:5e:01: d0:9a:bc:54:e9:39:60:b1:a4:48:13:ad:62:9b:5c:eb:ff:4d: 1b:dd:87:7b:36:be:f8:32:a9:18:cd:45:bf:05:fd:a0:38:40: 28:c8:d4:ab:55:ab:83:13:e2:1e:a9:73:33:0e:a2:07:e6:03: 6d:d3:96:3a:20:9d:5a:3e:8d:da:4c:24:8e:d0:b7:95:7c:fc: 50:66:91:a6:00:e8:ce:9a:b4:3a:35:7a:2f:8d:32:49:9f:47: 06:fc:ce:57:7d:41:3e:eb:74:e6:83:c5:b2:e9:30:81:12:05: 14:37:11:52:d8:43:92:53:d2:b2:bb:34:3f:2e:52:ef:69:e1: 1d:2b:40:db:f3:e4:d5:22:c5:46:e2:3c:97:f3:a3:50:35:30: 4a:b3:de:06:95:cd:cd:ce:b8:7f:79:a2:05:fe:1f:cc:e5:8d: a6:90:dc:ea:28:09:c9:40:cc:e9:77:96:92:5b:b3:30:79:0a: d8:aa:51:03:f1:35:51:2a:c1:33:b6:54:13:17:e3:8b:49:2e: 85:ae:61:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0ZtNhPS96m1z74cAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTdiYTQ5YWMtMzdkNi00YjkwLWI5NzMtYmVlOGE2ODVl MTE2MB4XDTI2MDMwODEzMDA0MFoXDTI2MDYwNjEzMDA0MFowLzEtMCsGA1UEAxMk NDZjNjdkMTUtMjQ5My00NDljLTg4MTMtZDk0NWZjZTY4NTZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkxVwrXL12V2vVXJZHEMGUPWbMkI8hgvrJOR6 vdfIS6S2l1KBce62hFJ8JYgNJAXDzQMbAh/z3NGkyGYl5uth0FJ8QCn+RvR3zU6n FXUwpzDxxtg5Rg3I+uFRp7NVRS3sTM4lT8g/evOqzbCq7VC5ViUzoL9AeLNeTta/ wLTQjSTFadcVRGbwMIKhtoVNA8oKfasFVuRcr8dx6RjMXuw4rYZIH6d7lyXdZsbF /C1uCse8nnh/PwLcPvy3hp0x1vJ80yFQuXkCXrohF+wi/vvitm+yTjhQ3m97NzWd 5TJMqrM0IhIz9xLjIveB8TEvNpI7wzxBxie4ICf9HgTvz26+TwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHpewRpEF4UuWQNDf/4nthHmzO7BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8xN2Jh NDlhYy0zN2Q2LTRiOTAtYjk3My1iZWU4YTY4NWUxMTYvZjgwYWExZjktYTZlMi0z MDM4LWI1MTItNTdlOTg4YzNjMTIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvMTdiYTQ5YWMtMzdkNi00YjkwLWI5 NzMtYmVlOGE2ODVlMTE2LzE3YmE0OWFjLTM3ZDYtNGI5MC1iOTczLWJlZThhNjg1 ZTExNi5jcmwwHwYDVR0jBBgwFoAUJPiQkWbqzR8FM4Wi5xXqiu/6FyYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi8xN2JhNDlhYy0zN2Q2LTRiOTAtYjk3My1iZWU4 YTY4NWUxMTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5McMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADSOGKavZph3q9M0FjKyt/PMR7K9LhL7enxk64OEsD0pfGRsp+N0ddYu IPVGfVpWeX4CHR9eAdCavFTpOWCxpEgTrWKbXOv/TRvdh3s2vvgyqRjNRb8F/aA4 QCjI1KtVq4MT4h6pczMOogfmA23TljognVo+jdpMJI7Qt5V8/FBmkaYA6M6atDo1 ei+NMkmfRwb8zld9QT7rdOaDxbLpMIESBRQ3EVLYQ5JT0rK7ND8uUu9p4R0rQNvz 5NUixUbiPJfzo1A1MEqz3gaVzc3OuH95ogX+H8zljaaQ3OooCclAzOl3lpJbszB5 CtiqUQPxNVEqwTO2VBMX44tJLoWuYbY= -----END CERTIFICATE-----Generated at Thu Mar 26 11:33:16 2026 by rpki-client