$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a08a8360-966b-4e4f-9006-479f72f36651/5c8612b7-ca90-3cff-8325-583b4fae37e4.roa File: 5c8612b7-ca90-3cff-8325-583b4fae37e4.roa (raw, json) Hash identifier: av7TikkHsKYozbTZIrP3zOiWy5TBqW/nN56YOTVwTD4= Subject key identifier: BF:FA:9A:97:99:F3:AE:4A:70:C0:EB:69:04:84:75:EF:52:97:ED:D8 Certificate issuer: /CN=a08a8360-966b-4e4f-9006-479f72f36651 Certificate serial: 010D0C9F4328584D2BD9FD4FDDCB848ABE0B9B00 Authority key identifier: 3B:6E:53:45:7D:66:F1:B4:28:14:0A:C6:34:36:B8:BB:97:19:D2:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a08a8360-966b-4e4f-9006-479f72f36651.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a08a8360-966b-4e4f-9006-479f72f36651/5c8612b7-ca90-3cff-8325-583b4fae37e4.roa Signing time: Sun 15 Mar 2026 01:00:32 +0000 ROA not before: Sun 15 Mar 2026 01:00:32 +0000 ROA not after: Sat 13 Jun 2026 01:00:32 +0000 asID: 400642 IP address blocks: 23.151.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a08a8360-966b-4e4f-9006-479f72f36651/a08a8360-966b-4e4f-9006-479f72f36651.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a08a8360-966b-4e4f-9006-479f72f36651/a08a8360-966b-4e4f-9006-479f72f36651.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a08a8360-966b-4e4f-9006-479f72f36651.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2b:d9:fd:4f:dd:cb:84:8a:be:0b:9b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a08a8360-966b-4e4f-9006-479f72f36651 Validity Not Before: Mar 15 01:00:32 2026 GMT Not After : Jun 13 01:00:32 2026 GMT Subject: CN=8af8a5da-cabf-4d50-8169-705bcb56dcb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:5b:99:43:24:28:6a:8c:f8:46:15:69:7b:52: ef:ba:ce:ab:d8:df:ca:10:1b:93:d1:f8:55:6d:63: 91:b5:59:55:7f:85:e2:4e:b2:8f:f3:7c:2e:18:66: 84:6b:4b:ef:b9:4a:d3:ae:d9:ff:f3:01:5b:04:5b: 1e:54:57:73:ad:f4:a7:2c:18:2c:fb:a9:b4:7f:ba: 3d:40:99:dc:c1:d1:dc:0e:7f:8f:e7:82:22:1c:b8: f6:71:f0:dc:98:d6:a1:e5:8a:45:e3:dd:16:16:96: 27:29:45:75:53:87:a2:ff:a0:17:1c:d6:b2:61:66: 1c:61:94:7e:38:8d:cb:af:de:02:a9:fe:6f:b2:82: 1c:58:57:54:cb:8c:30:cd:78:17:49:22:58:cf:37: 41:6b:cf:aa:f5:22:23:50:2d:bd:5b:d6:41:4c:69: a9:82:b5:ce:7c:ac:2e:bb:d1:b6:43:75:1d:f9:b4: bc:27:c5:f6:fb:95:58:e1:44:33:03:73:37:f7:91: 40:0f:fb:5c:cd:d9:4a:0e:6a:5e:e0:05:ed:45:79: f6:ae:29:e9:69:f6:7d:2e:7a:e1:1a:6f:c0:6b:87: b2:26:99:11:9f:6e:87:6e:8f:88:29:7c:c2:73:77: 49:9a:b1:60:93:e1:4a:0b:6f:bc:85:4f:5d:58:36: ef:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:FA:9A:97:99:F3:AE:4A:70:C0:EB:69:04:84:75:EF:52:97:ED:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a08a8360-966b-4e4f-9006-479f72f36651/5c8612b7-ca90-3cff-8325-583b4fae37e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a08a8360-966b-4e4f-9006-479f72f36651/a08a8360-966b-4e4f-9006-479f72f36651.crl X509v3 Authority Key Identifier: keyid:3B:6E:53:45:7D:66:F1:B4:28:14:0A:C6:34:36:B8:BB:97:19:D2:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a08a8360-966b-4e4f-9006-479f72f36651.cer sbgp-ipAddrBlock: critical IPv4: 23.151.212.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:b1:c4:f0:c6:47:1f:c0:c6:0c:12:e2:db:23:a7:46:a6:3f: 99:0d:49:62:ca:7e:21:03:99:26:02:9b:76:cf:a0:3a:6e:bd: 7b:2e:0c:fb:6f:23:a9:52:51:26:5b:42:7e:42:9b:f7:7b:92: 1a:03:47:41:52:28:a5:e8:26:43:8c:b7:d8:d6:33:83:43:23: a4:ad:d3:af:a4:4c:5c:6e:a7:ec:55:09:1c:21:bd:94:01:57: 16:cb:00:61:fd:36:71:24:87:0c:8e:56:c2:f7:a0:91:61:9c: 1e:73:9a:dc:09:fc:e7:f1:17:7b:a1:a8:96:80:55:a9:b7:3d: 87:d8:53:b2:19:7f:f1:f5:5b:48:ea:a8:09:2b:a3:32:a5:0e: f6:f5:c8:45:c3:78:43:15:81:af:c5:b5:52:32:b4:91:0e:37: 80:57:b9:70:66:38:f3:16:ad:54:da:e1:d7:15:5d:f9:38:6d: 55:8b:34:37:9f:47:3a:32:5d:95:c8:1f:26:75:e9:90:54:11: 57:a8:dd:35:4b:8f:85:5d:05:65:62:c1:03:96:2a:64:b5:21: 0b:fc:b4:74:c2:52:8b:b8:3a:e1:01:ab:59:e1:d7:51:0d:7c: 52:39:9f:0c:0a:c0:dc:e1:2e:00:ac:5b:65:58:bc:fd:2e:6f: 83:89:1c:b5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0r2f1P3cuEir4LmwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTA4YTgzNjAtOTY2Yi00ZTRmLTkwMDYtNDc5ZjcyZjM2 NjUxMB4XDTI2MDMxNTAxMDAzMloXDTI2MDYxMzAxMDAzMlowLzEtMCsGA1UEAxMk OGFmOGE1ZGEtY2FiZi00ZDUwLTgxNjktNzA1YmNiNTZkY2I3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkVuZQyQoaoz4RhVpe1Lvus6r2N/KEBuT0fhV bWORtVlVf4XiTrKP83wuGGaEa0vvuUrTrtn/8wFbBFseVFdzrfSnLBgs+6m0f7o9 QJncwdHcDn+P54IiHLj2cfDcmNah5YpF490WFpYnKUV1U4ei/6AXHNayYWYcYZR+ OI3Lr94Cqf5vsoIcWFdUy4wwzXgXSSJYzzdBa8+q9SIjUC29W9ZBTGmpgrXOfKwu u9G2Q3Ud+bS8J8X2+5VY4UQzA3M395FAD/tczdlKDmpe4AXtRXn2rinpafZ9Lnrh Gm/Aa4eyJpkRn26Hbo+IKXzCc3dJmrFgk+FKC2+8hU9dWDbv6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL/6mpeZ865KcMDraQSEde9Sl+3YMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9hMDhh ODM2MC05NjZiLTRlNGYtOTAwNi00NzlmNzJmMzY2NTEvNWM4NjEyYjctY2E5MC0z Y2ZmLTgzMjUtNTgzYjRmYWUzN2U0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYTA4YTgzNjAtOTY2Yi00ZTRmLTkw MDYtNDc5ZjcyZjM2NjUxL2EwOGE4MzYwLTk2NmItNGU0Zi05MDA2LTQ3OWY3MmYz NjY1MS5jcmwwHwYDVR0jBBgwFoAUO25TRX1m8bQoFArGNDa4u5cZ0oEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9hMDhhODM2MC05NjZiLTRlNGYtOTAwNi00Nzlm NzJmMzY2NTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5fUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEixxPDGRx/AxgwS4tsjp0amP5kNSWLKfiEDmSYCm3bPoDpuvXsuDPtv I6lSUSZbQn5Cm/d7khoDR0FSKKXoJkOMt9jWM4NDI6St06+kTFxup+xVCRwhvZQB VxbLAGH9NnEkhwyOVsL3oJFhnB5zmtwJ/OfxF3uhqJaAVam3PYfYU7IZf/H1W0jq qAkrozKlDvb1yEXDeEMVga/FtVIytJEON4BXuXBmOPMWrVTa4dcVXfk4bVWLNDef RzoyXZXIHyZ16ZBUEVeo3TVLj4VdBWViwQOWKmS1IQv8tHTCUou4OuEBq1nh11EN fFI5nwwKwNzhLgCsW2VYvP0ub4OJHLU= -----END CERTIFICATE-----Generated at Fri Mar 27 07:09:16 2026 by rpki-client