$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3b4a441f-5d0b-4813-836e-2aefd54b0ca1/10ce69d0-e9f7-39e7-b7c7-889e71bd1973.roa File: 10ce69d0-e9f7-39e7-b7c7-889e71bd1973.roa (raw, json) Hash identifier: ghebVbZnTmo/M2nzpq9DsnXSQdJO7zSGFF1Ev9zW40o= Subject key identifier: 81:84:67:76:97:D9:99:11:02:1C:E1:FF:86:A1:CD:65:A4:10:12:82 Certificate issuer: /CN=3b4a441f-5d0b-4813-836e-2aefd54b0ca1 Certificate serial: 010D0C9F4328584DCDC5CF1D2213CA452BB28580 Authority key identifier: 85:34:EB:7B:3B:7C:EB:37:2E:52:AB:90:8E:9F:CB:FD:3E:0A:16:9F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3b4a441f-5d0b-4813-836e-2aefd54b0ca1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3b4a441f-5d0b-4813-836e-2aefd54b0ca1/10ce69d0-e9f7-39e7-b7c7-889e71bd1973.roa Signing time: Tue 12 May 2026 01:00:24 +0000 ROA not before: Tue 12 May 2026 01:00:24 +0000 ROA not after: Mon 10 Aug 2026 01:00:24 +0000 asID: 211686 IP address blocks: 23.131.252.0/24 maxlen: 24 2602:f744::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3b4a441f-5d0b-4813-836e-2aefd54b0ca1/3b4a441f-5d0b-4813-836e-2aefd54b0ca1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3b4a441f-5d0b-4813-836e-2aefd54b0ca1/3b4a441f-5d0b-4813-836e-2aefd54b0ca1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3b4a441f-5d0b-4813-836e-2aefd54b0ca1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:cd:c5:cf:1d:22:13:ca:45:2b:b2:85:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b4a441f-5d0b-4813-836e-2aefd54b0ca1 Validity Not Before: May 12 01:00:24 2026 GMT Not After : Aug 10 01:00:24 2026 GMT Subject: CN=5f2489e5-8e3a-455d-a8ae-beaef26069fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:7a:17:06:83:19:50:95:7e:bf:0b:dc:9b:4a: 6a:85:77:10:72:b8:6e:de:ec:7a:fc:bf:60:62:ab: 99:09:6f:67:55:93:0b:65:13:2d:00:4e:a9:d3:32: 23:18:91:72:c6:79:fd:f5:82:72:1b:1e:be:1c:4d: f8:74:29:5a:69:24:ac:75:ca:99:3a:c4:3b:ec:4e: 23:94:42:5f:e5:eb:b4:0a:88:fd:c5:79:c7:03:d2: a4:61:b5:95:d1:d4:81:d5:14:77:54:f3:13:14:60: a4:7b:9a:a4:1e:49:ca:02:86:f3:de:c7:9b:07:89: 6a:56:33:ff:e1:4f:e6:89:d3:44:e0:91:3c:39:b2: 8a:70:a3:bd:d0:61:7b:f2:b4:36:55:7a:eb:e4:f9: 99:f5:88:7d:07:45:98:d5:06:26:fd:d1:23:0f:46: ed:9f:71:5d:09:91:53:73:b9:f4:01:f4:8b:95:e3: e2:e9:cc:20:90:7c:f0:3b:b7:c2:7b:b0:40:e1:e6: b2:d4:19:55:81:d9:4e:13:01:e8:31:e6:b8:14:31: c6:62:c0:e1:e5:f7:c7:c9:e3:c1:13:58:8f:12:94: e1:24:a7:51:2a:b3:7d:c4:c8:da:27:4b:d9:3a:f2: 9f:e2:db:c6:b2:9a:e0:68:3f:64:88:a3:4b:f4:01: e1:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:84:67:76:97:D9:99:11:02:1C:E1:FF:86:A1:CD:65:A4:10:12:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3b4a441f-5d0b-4813-836e-2aefd54b0ca1/10ce69d0-e9f7-39e7-b7c7-889e71bd1973.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3b4a441f-5d0b-4813-836e-2aefd54b0ca1/3b4a441f-5d0b-4813-836e-2aefd54b0ca1.crl X509v3 Authority Key Identifier: keyid:85:34:EB:7B:3B:7C:EB:37:2E:52:AB:90:8E:9F:CB:FD:3E:0A:16:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3b4a441f-5d0b-4813-836e-2aefd54b0ca1.cer sbgp-ipAddrBlock: critical IPv4: 23.131.252.0/24 IPv6: 2602:f744::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:dd:45:16:c0:17:fe:7b:57:18:1e:1a:a3:7a:51:2a:04:a0: 33:2c:36:d3:82:ec:c0:59:4b:17:73:cd:30:85:50:5a:d0:5e: c4:0a:f9:ab:d9:2b:19:0b:91:03:64:f5:c7:3b:d5:c6:df:e1: 28:38:9e:ba:43:6b:0c:fd:44:d6:42:28:c4:f9:71:d3:e0:e7: 75:ee:ce:9e:c6:bd:e4:38:48:33:6f:e2:4e:79:06:b3:6e:bf: 32:78:5c:68:2b:23:73:11:8f:06:a7:72:bb:ac:28:be:e8:2c: df:ca:3e:e8:a4:d7:f7:bd:da:63:66:a4:7e:c2:46:89:cf:26: a4:0a:da:a2:24:a7:95:cc:03:0c:be:7e:54:f0:c5:19:d7:15: 99:e9:21:6c:d7:ca:ef:86:73:b2:11:02:08:13:58:e4:a2:92: 17:e3:f8:2a:f3:c3:f4:2e:0a:f4:ed:f5:9f:10:11:04:17:52: 0d:9f:4f:99:9e:cc:71:52:2d:35:07:eb:33:20:df:d9:6e:0f: ea:ea:1b:a4:ca:f4:0d:ee:9d:d1:6a:27:87:9e:59:dd:e0:03: 42:b3:48:8b:c8:c4:0a:2b:a0:36:95:e6:8a:82:a4:9e:f2:94: 89:04:40:7a:34:16:84:c8:09:d9:48:42:f3:88:ee:d4:c9:bb: a9:35:83:37 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE3Nxc8dIhPKRSuyhYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2I0YTQ0MWYtNWQwYi00ODEzLTgzNmUtMmFlZmQ1NGIw Y2ExMB4XDTI2MDUxMjAxMDAyNFoXDTI2MDgxMDAxMDAyNFowLzEtMCsGA1UEAxMk NWYyNDg5ZTUtOGUzYS00NTVkLWE4YWUtYmVhZWYyNjA2OWZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmnoXBoMZUJV+vwvcm0pqhXcQcrhu3ux6/L9g YquZCW9nVZMLZRMtAE6p0zIjGJFyxnn99YJyGx6+HE34dClaaSSsdcqZOsQ77E4j lEJf5eu0Coj9xXnHA9KkYbWV0dSB1RR3VPMTFGCke5qkHknKAobz3sebB4lqVjP/ 4U/midNE4JE8ObKKcKO90GF78rQ2VXrr5PmZ9Yh9B0WY1QYm/dEjD0btn3FdCZFT c7n0AfSLlePi6cwgkHzwO7fCe7BA4eay1BlVgdlOEwHoMea4FDHGYsDh5ffHyePB E1iPEpThJKdRKrN9xMjaJ0vZOvKf4tvGsprgaD9kiKNL9AHhxwIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFIGEZ3aX2ZkRAhzh/4ahzWWkEBKCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8zYjRh NDQxZi01ZDBiLTQ4MTMtODM2ZS0yYWVmZDU0YjBjYTEvMTBjZTY5ZDAtZTlmNy0z OWU3LWI3YzctODg5ZTcxYmQxOTczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvM2I0YTQ0MWYtNWQwYi00ODEzLTgz NmUtMmFlZmQ1NGIwY2ExLzNiNGE0NDFmLTVkMGItNDgxMy04MzZlLTJhZWZkNTRi MGNhMS5jcmwwHwYDVR0jBBgwFoAUhTTrezt86zcuUquQjp/L/T4KFp8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8zYjRhNDQxZi01ZDBiLTQ4MTMtODM2ZS0yYWVm ZDU0YjBjYTEuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF4P8MA4E AgACMAgDBgAmAvdEADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBV3UUWwBf+e1cYHhqjelEqBKAzLDbTguzA WUsXc80whVBa0F7ECvmr2SsZC5EDZPXHO9XG3+EoOJ66Q2sM/UTWQijE+XHT4Od1 7s6exr3kOEgzb+JOeQazbr8yeFxoKyNzEY8Gp3K7rCi+6Czfyj7opNf3vdpjZqR+ wkaJzyakCtqiJKeVzAMMvn5U8MUZ1xWZ6SFs18rvhnOyEQIIE1jkopIX4/gq88P0 Lgr07fWfEBEEF1INn0+ZnsxxUi01B+szIN/Zbg/q6hukyvQN7p3RaieHnlnd4ANC s0iLyMQKK6A2leaKgqSe8pSJBEB6NBaEyAnZSELziO7UybupNYM3 -----END CERTIFICATE-----Generated at Wed May 13 03:36:20 2026 by rpki-client