$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3b4a441f-5d0b-4813-836e-2aefd54b0ca1/5130bef9-5e24-3975-9914-0892f8dec7d1.roa File: 5130bef9-5e24-3975-9914-0892f8dec7d1.roa (raw, json) Hash identifier: NzENoyqXua114QH3wsR8H5RK7Ag0crMQ6mul8+1qvbM= Subject key identifier: 4B:DB:58:15:F3:4F:66:6A:D2:19:31:DF:2D:4B:EA:66:6B:1A:C9:B4 Certificate issuer: /CN=3b4a441f-5d0b-4813-836e-2aefd54b0ca1 Certificate serial: 010D0C9F4328584DBD05A2D72040668AB2443F80 Authority key identifier: 85:34:EB:7B:3B:7C:EB:37:2E:52:AB:90:8E:9F:CB:FD:3E:0A:16:9F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3b4a441f-5d0b-4813-836e-2aefd54b0ca1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3b4a441f-5d0b-4813-836e-2aefd54b0ca1/5130bef9-5e24-3975-9914-0892f8dec7d1.roa Signing time: Wed 06 May 2026 01:00:24 +0000 ROA not before: Wed 06 May 2026 01:00:24 +0000 ROA not after: Tue 04 Aug 2026 01:00:24 +0000 asID: 401560 IP address blocks: 23.131.252.0/24 maxlen: 24 2602:f744::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3b4a441f-5d0b-4813-836e-2aefd54b0ca1/3b4a441f-5d0b-4813-836e-2aefd54b0ca1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3b4a441f-5d0b-4813-836e-2aefd54b0ca1/3b4a441f-5d0b-4813-836e-2aefd54b0ca1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3b4a441f-5d0b-4813-836e-2aefd54b0ca1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:bd:05:a2:d7:20:40:66:8a:b2:44:3f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b4a441f-5d0b-4813-836e-2aefd54b0ca1 Validity Not Before: May 6 01:00:24 2026 GMT Not After : Aug 4 01:00:24 2026 GMT Subject: CN=9ee97e7c-97e1-4424-aaf1-25fdf1e9728f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:f9:15:54:1c:f4:7e:14:e1:8e:44:cc:76:ba: 7c:ce:d5:ee:b9:45:4d:8b:a7:79:45:b3:13:56:27: 78:57:ae:64:8a:66:c4:4d:85:4b:77:3f:ab:eb:88: bb:0f:c2:79:c7:29:b0:a2:51:4f:7f:31:d2:cb:6f: 50:45:cc:41:dd:0a:d6:70:81:c5:21:38:b7:59:e8: 7d:fa:61:4c:d6:a5:74:99:0c:5d:ed:a6:b6:fb:79: 94:98:1f:27:a2:8d:76:78:99:8f:db:79:9c:72:87: e7:06:c9:c0:79:05:3b:a5:60:11:ab:bf:65:34:b0: 42:68:d7:85:1b:0b:9a:fa:6e:b0:eb:69:9c:01:cb: 09:7f:71:7b:c7:15:50:ed:10:e5:f7:f6:92:44:48: f8:5a:a2:ba:59:0a:25:8e:70:3e:c1:2e:6a:f4:29: 77:a3:ee:a3:1f:09:eb:c4:d0:0b:5c:69:20:4b:c9: 06:bf:48:4d:23:0d:7e:27:d5:32:77:ff:93:32:eb: 5c:52:d5:7d:08:bd:74:d9:dd:45:eb:fd:08:a2:67: a0:c3:00:e0:dc:fb:c2:5c:23:66:6d:b1:d2:b7:6c: e0:16:c0:7c:38:cb:8e:79:de:5d:b4:56:4c:98:f4: aa:d7:ca:b1:27:f3:f9:ab:ad:84:98:7f:33:79:cd: 6b:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:DB:58:15:F3:4F:66:6A:D2:19:31:DF:2D:4B:EA:66:6B:1A:C9:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3b4a441f-5d0b-4813-836e-2aefd54b0ca1/5130bef9-5e24-3975-9914-0892f8dec7d1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3b4a441f-5d0b-4813-836e-2aefd54b0ca1/3b4a441f-5d0b-4813-836e-2aefd54b0ca1.crl X509v3 Authority Key Identifier: keyid:85:34:EB:7B:3B:7C:EB:37:2E:52:AB:90:8E:9F:CB:FD:3E:0A:16:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3b4a441f-5d0b-4813-836e-2aefd54b0ca1.cer sbgp-ipAddrBlock: critical IPv4: 23.131.252.0/24 IPv6: 2602:f744::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:dc:2b:54:99:14:81:e6:6d:bd:b1:57:dc:fc:df:9e:a0:5c: 50:b5:ec:e0:a9:ba:52:f3:c7:d0:5e:48:08:9b:c3:a9:47:ff: 81:55:3e:50:ba:0e:51:d9:bb:85:d5:2d:ec:ec:17:cc:84:00: 85:0d:61:5b:23:ac:93:f7:5a:d1:a4:92:40:5e:0a:0e:2e:61: 1a:90:0d:63:c7:a0:36:a8:48:55:0a:e0:59:04:04:f5:80:30: 99:49:eb:87:9c:b5:ae:05:91:40:dd:ad:91:ef:09:0c:06:7f: f5:c6:e5:0c:75:ea:a6:b9:14:14:a0:55:73:84:39:96:b9:b9: ee:e8:85:10:87:28:c7:6d:d6:ee:45:b0:62:7d:07:58:29:49: ba:e4:83:13:e1:53:5d:9c:01:ad:8a:6c:0e:5d:0a:21:5c:a1: 00:13:f1:dc:d2:b3:8c:9c:79:49:4a:11:80:aa:df:5a:e3:f0: ff:72:e2:a4:cf:31:58:79:f3:52:af:44:cb:5f:99:4a:63:a7: e4:a6:d8:26:2c:04:4b:19:36:82:13:72:3d:57:f0:9e:09:02: 0f:b7:57:50:01:c9:e2:c4:36:f3:d8:72:66:04:35:27:e0:e0: 67:73:d6:86:27:b4:d9:e5:9c:2a:49:de:45:12:e9:04:76:e9: 84:75:07:ea -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE29BaLXIEBmirJEP4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2I0YTQ0MWYtNWQwYi00ODEzLTgzNmUtMmFlZmQ1NGIw Y2ExMB4XDTI2MDUwNjAxMDAyNFoXDTI2MDgwNDAxMDAyNFowLzEtMCsGA1UEAxMk OWVlOTdlN2MtOTdlMS00NDI0LWFhZjEtMjVmZGYxZTk3MjhmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAivkVVBz0fhThjkTMdrp8ztXuuUVNi6d5RbMT Vid4V65kimbETYVLdz+r64i7D8J5xymwolFPfzHSy29QRcxB3QrWcIHFITi3Weh9 +mFM1qV0mQxd7aa2+3mUmB8noo12eJmP23mccofnBsnAeQU7pWARq79lNLBCaNeF Gwua+m6w62mcAcsJf3F7xxVQ7RDl9/aSREj4WqK6WQoljnA+wS5q9Cl3o+6jHwnr xNALXGkgS8kGv0hNIw1+J9Uyd/+TMutcUtV9CL102d1F6/0IomegwwDg3PvCXCNm bbHSt2zgFsB8OMuOed5dtFZMmPSq18qxJ/P5q62EmH8zec1rjQIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFEvbWBXzT2Zq0hkx3y1L6mZrGsm0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8zYjRh NDQxZi01ZDBiLTQ4MTMtODM2ZS0yYWVmZDU0YjBjYTEvNTEzMGJlZjktNWUyNC0z OTc1LTk5MTQtMDg5MmY4ZGVjN2QxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvM2I0YTQ0MWYtNWQwYi00ODEzLTgz NmUtMmFlZmQ1NGIwY2ExLzNiNGE0NDFmLTVkMGItNDgxMy04MzZlLTJhZWZkNTRi MGNhMS5jcmwwHwYDVR0jBBgwFoAUhTTrezt86zcuUquQjp/L/T4KFp8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8zYjRhNDQxZi01ZDBiLTQ4MTMtODM2ZS0yYWVm ZDU0YjBjYTEuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF4P8MA4E AgACMAgDBgAmAvdEADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAS3CtUmRSB5m29sVfc/N+eoFxQtezgqbpS 88fQXkgIm8OpR/+BVT5Qug5R2buF1S3s7BfMhACFDWFbI6yT91rRpJJAXgoOLmEa kA1jx6A2qEhVCuBZBAT1gDCZSeuHnLWuBZFA3a2R7wkMBn/1xuUMdeqmuRQUoFVz hDmWubnu6IUQhyjHbdbuRbBifQdYKUm65IMT4VNdnAGtimwOXQohXKEAE/Hc0rOM nHlJShGAqt9a4/D/cuKkzzFYefNSr0TLX5lKY6fkptgmLARLGTaCE3I9V/CeCQIP t1dQAcnixDbz2HJmBDUn4OBnc9aGJ7TZ5ZwqSd5FEukEdumEdQfq -----END CERTIFICATE-----Generated at Wed May 13 03:18:31 2026 by rpki-client