$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1be7bcf5-0538-4a92-9aef-c460f15023b4/0bd8ae8c-926a-3326-b752-65b165f04694.roa File: 0bd8ae8c-926a-3326-b752-65b165f04694.roa (raw, json) Hash identifier: biAZaE/MhYY4OCFbboq90J3kfIyt+5QTKyF1AivJ4sE= Subject key identifier: 05:A2:D8:F3:8B:DF:42:2D:3F:25:30:26:1B:C6:E8:C0:F8:80:DE:4C Certificate issuer: /CN=1be7bcf5-0538-4a92-9aef-c460f15023b4 Certificate serial: 010D0C9F4328584D1F49FC5E641DFA0702CB9200 Authority key identifier: 45:94:2A:B5:6A:9D:7E:36:8F:49:09:AC:A5:80:7B:74:DE:0D:B7:67 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1be7bcf5-0538-4a92-9aef-c460f15023b4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1be7bcf5-0538-4a92-9aef-c460f15023b4/0bd8ae8c-926a-3326-b752-65b165f04694.roa Signing time: Tue 10 Mar 2026 13:00:41 +0000 ROA not before: Tue 10 Mar 2026 13:00:41 +0000 ROA not after: Mon 08 Jun 2026 13:00:41 +0000 asID: 46365 IP address blocks: 23.152.56.0/24 maxlen: 24 198.135.179.0/24 maxlen: 24 2602:2cd::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1be7bcf5-0538-4a92-9aef-c460f15023b4/1be7bcf5-0538-4a92-9aef-c460f15023b4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1be7bcf5-0538-4a92-9aef-c460f15023b4/1be7bcf5-0538-4a92-9aef-c460f15023b4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1be7bcf5-0538-4a92-9aef-c460f15023b4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1f:49:fc:5e:64:1d:fa:07:02:cb:92:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1be7bcf5-0538-4a92-9aef-c460f15023b4 Validity Not Before: Mar 10 13:00:41 2026 GMT Not After : Jun 8 13:00:41 2026 GMT Subject: CN=c351e804-6123-45e0-afe7-90b3b4c4a0f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:29:4a:f8:19:3d:b4:8a:c8:b0:b1:11:20:a2: 8a:e6:e0:ed:0c:15:6e:ac:53:76:e9:ea:0a:33:c7: 8a:fa:d8:b8:81:3a:da:c0:78:0c:c7:5a:ef:0d:f3: 97:69:8b:fe:28:37:6d:54:c4:02:80:7f:07:6b:4f: 5e:c0:97:a0:f0:3a:cb:ff:07:e0:9d:36:99:fb:60: f2:f1:37:20:94:3b:8f:78:fb:e1:6c:64:32:4b:0d: e7:c7:1d:6f:4f:b0:c5:1e:26:6b:3f:73:24:8e:73: 01:c2:92:04:98:d2:d1:f3:d3:c3:77:df:93:7a:2b: eb:eb:c2:f8:90:a1:9a:b1:df:eb:dd:54:e1:7c:ee: 2b:ae:28:80:b7:9c:04:ed:0a:63:51:cc:a9:dd:16: a5:4e:07:41:dd:94:e5:c9:ff:71:93:93:ac:c5:1f: 9b:eb:80:96:b4:e4:63:48:fa:69:90:2d:9f:e5:3e: 17:89:3d:a0:1a:62:16:cf:0e:49:90:b2:2f:ea:86: 8b:a8:65:72:9d:81:40:7f:41:06:8d:19:9e:e9:3a: de:24:be:01:5d:e0:c1:ee:ec:c4:c7:9d:d2:15:38: 11:53:5f:f8:8f:e9:e0:11:21:c5:1f:e8:d9:5e:60: 75:1e:95:33:2d:04:42:11:4c:38:42:b0:ac:22:61: 39:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:A2:D8:F3:8B:DF:42:2D:3F:25:30:26:1B:C6:E8:C0:F8:80:DE:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1be7bcf5-0538-4a92-9aef-c460f15023b4/0bd8ae8c-926a-3326-b752-65b165f04694.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1be7bcf5-0538-4a92-9aef-c460f15023b4/1be7bcf5-0538-4a92-9aef-c460f15023b4.crl X509v3 Authority Key Identifier: keyid:45:94:2A:B5:6A:9D:7E:36:8F:49:09:AC:A5:80:7B:74:DE:0D:B7:67 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1be7bcf5-0538-4a92-9aef-c460f15023b4.cer sbgp-ipAddrBlock: critical IPv4: 23.152.56.0/24 198.135.179.0/24 IPv6: 2602:2cd::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:05:b4:ef:44:0f:ce:30:ed:c3:d4:c0:f6:0b:33:ff:f9:83: 42:a8:fd:22:52:1c:8b:f6:18:1c:5c:2b:41:86:11:b8:44:8e: 73:7e:96:41:87:e6:b0:95:4b:c1:50:2a:dd:bf:26:99:53:bb: 7c:d5:ad:2f:0e:4d:93:97:31:ae:63:6d:dc:bc:be:b7:cb:f5: fd:a6:6c:9b:41:6a:ec:9e:da:11:6b:48:5c:91:21:d5:87:ad: e8:9f:ad:d3:19:e7:59:c7:06:70:77:5e:a2:38:86:60:42:b6: ba:bc:cd:24:99:ae:ba:b0:17:c5:14:76:1f:1d:1c:be:0b:3f: 8d:08:b3:66:40:4c:14:9b:7f:f1:69:26:64:9f:1e:bf:e9:f9: 1e:25:41:06:2e:a6:a8:c7:0f:4b:40:07:3a:3d:49:23:28:34: 39:dc:c1:db:b7:83:a7:84:fc:1f:21:ac:df:2f:f6:e1:d2:e2: d2:3b:cb:ef:24:d8:94:66:e0:bd:45:da:99:83:c0:4c:a4:86: 2a:ac:80:7a:fc:e2:2c:3b:f3:9e:fd:9a:10:ae:c1:38:43:64: 22:34:b5:5c:c8:43:6f:dc:6e:4e:30:3b:79:4e:ee:a4:ef:8b: 3c:d0:af:00:c5:e5:a4:d5:18:89:90:09:48:1f:c2:3c:44:12: cb:a0:06:bc -----BEGIN CERTIFICATE----- MIIGWTCCBUGgAwIBAgIUAQ0Mn0MoWE0fSfxeZB36BwLLkgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWJlN2JjZjUtMDUzOC00YTkyLTlhZWYtYzQ2MGYxNTAy M2I0MB4XDTI2MDMxMDEzMDA0MVoXDTI2MDYwODEzMDA0MVowLzEtMCsGA1UEAxMk YzM1MWU4MDQtNjEyMy00NWUwLWFmZTctOTBiM2I0YzRhMGY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0SlK+Bk9tIrIsLERIKKK5uDtDBVurFN26eoK M8eK+ti4gTrawHgMx1rvDfOXaYv+KDdtVMQCgH8Ha09ewJeg8DrL/wfgnTaZ+2Dy 8TcglDuPePvhbGQySw3nxx1vT7DFHiZrP3MkjnMBwpIEmNLR89PDd9+Teivr68L4 kKGasd/r3VThfO4rriiAt5wE7QpjUcyp3RalTgdB3ZTlyf9xk5OsxR+b64CWtORj SPppkC2f5T4XiT2gGmIWzw5JkLIv6oaLqGVynYFAf0EGjRme6TreJL4BXeDB7uzE x53SFTgRU1/4j+ngESHFH+jZXmB1HpUzLQRCEUw4QrCsImE5fwIDAQABo4IDazCC A2cwHQYDVR0OBBYEFAWi2POL30ItPyUwJhvG6MD4gN5MMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8xYmU3 YmNmNS0wNTM4LTRhOTItOWFlZi1jNDYwZjE1MDIzYjQvMGJkOGFlOGMtOTI2YS0z MzI2LWI3NTItNjViMTY1ZjA0Njk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMWJlN2JjZjUtMDUzOC00YTkyLTlh ZWYtYzQ2MGYxNTAyM2I0LzFiZTdiY2Y1LTA1MzgtNGE5Mi05YWVmLWM0NjBmMTUw MjNiNC5jcmwwHwYDVR0jBBgwFoAURZQqtWqdfjaPSQmspYB7dN4Nt2cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8xYmU3YmNmNS0wNTM4LTRhOTItOWFlZi1jNDYw ZjE1MDIzYjQuY2VyMDUGCCsGAQUFBwEHAQH/BCYwJDASBAIAATAMAwQAF5g4AwQA xoezMA4EAgACMAgDBgQmAgLNADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA5BbTvRA/OMO3D1MD2CzP/+YNC qP0iUhyL9hgcXCtBhhG4RI5zfpZBh+awlUvBUCrdvyaZU7t81a0vDk2TlzGuY23c vL63y/X9pmybQWrsntoRa0hckSHVh63on63TGedZxwZwd16iOIZgQra6vM0kma66 sBfFFHYfHRy+Cz+NCLNmQEwUm3/xaSZknx6/6fkeJUEGLqaoxw9LQAc6PUkjKDQ5 3MHbt4OnhPwfIazfL/bh0uLSO8vvJNiUZuC9RdqZg8BMpIYqrIB6/OIsO/Oe/ZoQ rsE4Q2QiNLVcyENv3G5OMDt5Tu6k74s80K8AxeWk1RiJkAlIH8I8RBLLoAa8 -----END CERTIFICATE-----Generated at Thu Mar 26 19:27:30 2026 by rpki-client