$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3dbd8306-91a8-46a2-828a-ece722fc4280/9d86f567-f312-3939-b61d-473fa6432bdb.roa File: 9d86f567-f312-3939-b61d-473fa6432bdb.roa (raw, json) Hash identifier: UE/ghKbFRdN/dCbBz9K4dZj3t5wQOUqvrRXGmqk+wNQ= Subject key identifier: B6:C2:FC:BD:30:8A:CD:D0:A9:42:CA:81:70:93:86:7C:52:4B:E9:72 Certificate issuer: /CN=3dbd8306-91a8-46a2-828a-ece722fc4280 Certificate serial: 010D0C9F4328584D1B1A1657B531AF46AD320E40 Authority key identifier: 1D:60:0E:40:9D:B0:4D:ED:CB:11:04:48:13:9C:45:13:5A:66:EE:64 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3dbd8306-91a8-46a2-828a-ece722fc4280.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3dbd8306-91a8-46a2-828a-ece722fc4280/9d86f567-f312-3939-b61d-473fa6432bdb.roa Signing time: Mon 09 Mar 2026 01:00:32 +0000 ROA not before: Mon 09 Mar 2026 01:00:32 +0000 ROA not after: Sun 07 Jun 2026 01:00:32 +0000 asID: 8796 IP address blocks: 23.165.40.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3dbd8306-91a8-46a2-828a-ece722fc4280/3dbd8306-91a8-46a2-828a-ece722fc4280.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3dbd8306-91a8-46a2-828a-ece722fc4280/3dbd8306-91a8-46a2-828a-ece722fc4280.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3dbd8306-91a8-46a2-828a-ece722fc4280.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1b:1a:16:57:b5:31:af:46:ad:32:0e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3dbd8306-91a8-46a2-828a-ece722fc4280 Validity Not Before: Mar 9 01:00:32 2026 GMT Not After : Jun 7 01:00:32 2026 GMT Subject: CN=a23b5837-adfc-4318-a625-1830e6753d5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:59:0c:8d:68:02:7e:61:7b:c7:64:45:f4:a8: 39:88:d3:cf:7f:7c:1d:09:51:f0:e3:d2:0a:42:c2: 39:bc:9d:a7:11:de:d5:4f:13:27:35:9c:d7:d0:13: 85:7d:8a:67:66:13:ad:fa:3e:e0:cb:d7:8b:d0:14: 3f:b6:da:98:22:27:fb:13:29:d7:42:4c:4c:bf:00: 5c:97:9f:dd:35:fe:f7:a0:e4:2a:81:74:78:bb:d0: 83:62:53:de:23:5b:ef:69:e2:42:d8:a5:dd:fe:64: a1:04:22:1f:42:f2:0d:06:d1:ba:b6:13:c8:cf:f3: f9:4e:53:d0:72:b7:c0:ca:63:a1:84:47:50:89:f4: c2:1c:b2:74:07:8f:29:32:25:f4:54:81:87:57:2a: 2f:5f:09:19:20:4e:8e:9b:cc:ce:cf:d4:9f:a2:aa: af:15:c6:46:e2:78:7f:15:c0:5b:e0:13:1c:3d:06: ac:ea:a8:f4:83:5d:22:ea:6e:64:0f:83:76:68:c9: d1:c2:ac:81:4f:af:67:fd:3f:17:55:6f:a4:f3:05: 35:8a:96:8f:7f:49:44:a5:74:75:e4:31:50:96:6a: 8f:0c:57:6d:a1:35:ea:a6:9d:ca:43:d3:8f:cc:ad: d9:01:f1:8b:15:22:45:2b:70:31:5c:29:7a:2c:90: 8b:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:C2:FC:BD:30:8A:CD:D0:A9:42:CA:81:70:93:86:7C:52:4B:E9:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3dbd8306-91a8-46a2-828a-ece722fc4280/9d86f567-f312-3939-b61d-473fa6432bdb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3dbd8306-91a8-46a2-828a-ece722fc4280/3dbd8306-91a8-46a2-828a-ece722fc4280.crl X509v3 Authority Key Identifier: keyid:1D:60:0E:40:9D:B0:4D:ED:CB:11:04:48:13:9C:45:13:5A:66:EE:64 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3dbd8306-91a8-46a2-828a-ece722fc4280.cer sbgp-ipAddrBlock: critical IPv4: 23.165.40.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:4f:db:2c:17:1d:cd:a6:d7:70:d3:be:b0:0a:67:fa:b9:82: b0:0d:a9:c2:a2:26:02:5e:8f:14:b3:ba:d6:41:d2:e8:4b:c9: 19:b9:48:ae:3b:ff:8b:85:be:ee:87:4b:0e:a1:97:09:d2:3f: 0c:24:1a:6c:4d:40:51:4d:9d:c1:4f:36:a5:e7:ee:b1:d4:ae: 39:67:ea:19:3a:fc:3a:38:38:30:e4:01:43:1d:73:81:b0:bf: cd:3f:7f:3e:77:2d:c3:9c:9c:1a:49:f6:dd:35:66:da:8c:ab: 0d:19:fc:f8:22:07:3e:84:96:7d:53:8c:be:28:55:53:7e:1b: f0:37:ec:9e:11:1d:6b:4c:3f:0c:7b:ca:e7:c9:fe:49:f2:9d: 5d:38:fe:33:e0:6e:83:5a:f5:a4:32:39:c4:22:fc:74:e8:aa: a5:3b:fa:14:c5:82:9b:f2:45:ca:d0:92:c1:0d:d2:fe:d1:7b: c7:7d:8f:6d:5e:f1:e0:81:af:3a:57:83:90:ab:5d:85:0b:11: 52:96:23:56:95:55:f2:36:3f:76:5b:3a:95:b6:61:0c:7b:39: fc:42:9b:cf:65:30:8a:62:c7:5b:2b:ec:ba:63:cc:86:a3:60: 1c:08:e7:50:87:2e:c8:53:48:f6:b4:94:3a:f8:ed:74:89:fc: a3:e6:8e:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0bGhZXtTGvRq0yDkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2RiZDgzMDYtOTFhOC00NmEyLTgyOGEtZWNlNzIyZmM0 MjgwMB4XDTI2MDMwOTAxMDAzMloXDTI2MDYwNzAxMDAzMlowLzEtMCsGA1UEAxMk YTIzYjU4MzctYWRmYy00MzE4LWE2MjUtMTgzMGU2NzUzZDVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl1kMjWgCfmF7x2RF9Kg5iNPPf3wdCVHw49IK QsI5vJ2nEd7VTxMnNZzX0BOFfYpnZhOt+j7gy9eL0BQ/ttqYIif7EynXQkxMvwBc l5/dNf73oOQqgXR4u9CDYlPeI1vvaeJC2KXd/mShBCIfQvINBtG6thPIz/P5TlPQ crfAymOhhEdQifTCHLJ0B48pMiX0VIGHVyovXwkZIE6Om8zOz9SfoqqvFcZG4nh/ FcBb4BMcPQas6qj0g10i6m5kD4N2aMnRwqyBT69n/T8XVW+k8wU1ipaPf0lEpXR1 5DFQlmqPDFdtoTXqpp3KQ9OPzK3ZAfGLFSJFK3AxXCl6LJCLiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLbC/L0wis3QqULKgXCThnxSS+lyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8zZGJk ODMwNi05MWE4LTQ2YTItODI4YS1lY2U3MjJmYzQyODAvOWQ4NmY1NjctZjMxMi0z OTM5LWI2MWQtNDczZmE2NDMyYmRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvM2RiZDgzMDYtOTFhOC00NmEyLTgy OGEtZWNlNzIyZmM0MjgwLzNkYmQ4MzA2LTkxYTgtNDZhMi04MjhhLWVjZTcyMmZj NDI4MC5jcmwwHwYDVR0jBBgwFoAUHWAOQJ2wTe3LEQRIE5xFE1pm7mQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy8zZGJkODMwNi05MWE4LTQ2YTItODI4YS1lY2U3 MjJmYzQyODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6UoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAhP2ywXHc2m13DTvrAKZ/q5grANqcKiJgJejxSzutZB0uhLyRm5SK47 /4uFvu6HSw6hlwnSPwwkGmxNQFFNncFPNqXn7rHUrjln6hk6/Do4ODDkAUMdc4Gw v80/fz53LcOcnBpJ9t01ZtqMqw0Z/PgiBz6Eln1TjL4oVVN+G/A37J4RHWtMPwx7 yufJ/knynV04/jPgboNa9aQyOcQi/HToqqU7+hTFgpvyRcrQksEN0v7Re8d9j21e 8eCBrzpXg5CrXYULEVKWI1aVVfI2P3ZbOpW2YQx7OfxCm89lMIpix1sr7LpjzIaj YBwI51CHLshTSPa0lDr47XSJ/KPmjlk= -----END CERTIFICATE-----Generated at Thu Mar 26 17:39:11 2026 by rpki-client