$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/bcb3b598-8d83-4864-818b-f5833b7583e7/c898f788-f248-3ab7-974b-c5c6b7fc3406.roa File: c898f788-f248-3ab7-974b-c5c6b7fc3406.roa (raw, json) Hash identifier: A0fmN9Y5WGXNRKgX5q+GeeyDrOKILGEwh1ChFH3A4Sk= Subject key identifier: 0F:D4:7C:5A:4E:52:A7:9F:25:77:6E:96:DF:F4:FD:D8:24:3A:D4:36 Certificate issuer: /CN=bcb3b598-8d83-4864-818b-f5833b7583e7 Certificate serial: 010D0C9F4328584D20AF4C3D76F5E6B9B55054B0 Authority key identifier: 4F:01:F5:7A:26:9C:8E:91:A9:F4:28:0B:53:D7:2A:3C:49:78:43:A6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/bcb3b598-8d83-4864-818b-f5833b7583e7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/bcb3b598-8d83-4864-818b-f5833b7583e7/c898f788-f248-3ab7-974b-c5c6b7fc3406.roa Signing time: Wed 11 Mar 2026 01:00:32 +0000 ROA not before: Wed 11 Mar 2026 01:00:32 +0000 ROA not after: Tue 09 Jun 2026 01:00:32 +0000 asID: 17176 IP address blocks: 23.134.180.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/bcb3b598-8d83-4864-818b-f5833b7583e7/bcb3b598-8d83-4864-818b-f5833b7583e7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/bcb3b598-8d83-4864-818b-f5833b7583e7/bcb3b598-8d83-4864-818b-f5833b7583e7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/bcb3b598-8d83-4864-818b-f5833b7583e7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:20:af:4c:3d:76:f5:e6:b9:b5:50:54:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bcb3b598-8d83-4864-818b-f5833b7583e7 Validity Not Before: Mar 11 01:00:32 2026 GMT Not After : Jun 9 01:00:32 2026 GMT Subject: CN=1c2e9abb-109f-47f7-a438-2ce4a5ae681f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:9a:ba:98:a4:ee:01:c2:47:43:02:bf:89:0d: b8:06:1f:47:e1:c9:ae:8f:62:a9:61:53:dc:32:44: ef:34:7e:ba:6d:d4:53:67:ad:58:95:d5:ed:cf:5b: d8:cd:c1:49:78:f6:de:d3:87:6d:d5:cb:7c:33:a4: 2a:66:5b:48:da:2a:3f:bc:01:17:09:17:f5:09:9c: 05:38:99:a8:10:c3:1d:5c:ae:8e:eb:16:53:ae:4d: 18:b7:65:aa:b5:1c:64:81:66:ad:38:bc:87:a2:61: c9:de:da:93:f0:3f:2f:03:a2:30:71:d5:78:2d:11: 96:18:da:02:03:7e:24:43:4e:83:eb:91:6d:af:28: 4c:5e:fc:76:b3:69:29:eb:0f:8a:78:bb:40:b0:a3: e6:78:32:42:78:ee:1f:18:10:5c:d7:b9:87:54:c1: df:31:57:18:5d:95:d0:9b:9f:fb:47:c6:b1:79:e8: 84:42:f8:3d:57:1c:24:98:5d:22:d9:68:ee:bd:83: 22:e4:46:5d:03:5b:34:4f:56:62:0e:c4:90:99:a1: 50:74:ce:63:6e:d0:af:4f:b4:c1:8b:8f:09:2b:9b: 19:72:04:30:19:2e:d2:da:1b:50:5a:6b:7a:8b:96: c4:7e:9d:86:05:fe:8a:42:df:d7:a0:51:6b:f3:54: 01:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:D4:7C:5A:4E:52:A7:9F:25:77:6E:96:DF:F4:FD:D8:24:3A:D4:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/bcb3b598-8d83-4864-818b-f5833b7583e7/c898f788-f248-3ab7-974b-c5c6b7fc3406.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/bcb3b598-8d83-4864-818b-f5833b7583e7/bcb3b598-8d83-4864-818b-f5833b7583e7.crl X509v3 Authority Key Identifier: keyid:4F:01:F5:7A:26:9C:8E:91:A9:F4:28:0B:53:D7:2A:3C:49:78:43:A6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/bcb3b598-8d83-4864-818b-f5833b7583e7.cer sbgp-ipAddrBlock: critical IPv4: 23.134.180.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:7f:f4:f7:4c:a0:b9:cb:7c:6a:3f:7e:bf:82:57:ba:40:c7: e9:34:13:ac:7a:ff:74:06:42:f7:a2:ab:c7:21:ea:70:ca:0f: d8:b8:cc:c7:bd:c6:10:9c:69:5b:53:20:a0:b7:c2:9a:ef:5c: 9b:a5:06:dc:fe:e2:b6:23:c5:41:38:6c:55:da:06:95:ca:6a: 48:ef:85:d7:25:f0:fc:f6:cc:f2:51:59:48:88:bc:da:61:d7: e5:dd:d9:15:e1:b9:79:a3:b9:ec:a7:d1:93:43:ea:87:11:4d: d6:d0:f0:88:41:e8:7a:9c:a5:6b:05:20:cd:93:17:c0:d5:f0: 65:40:a5:ac:95:64:23:ac:60:22:18:83:8d:fb:03:b9:8d:27: ce:aa:b5:8c:64:9c:29:a2:52:7f:fb:e5:a2:43:07:8a:96:ee: 9b:97:0a:5e:0e:9a:c8:a5:2b:c8:06:49:ce:f5:7f:18:02:5c: a4:70:32:b6:1d:2e:00:ea:f9:9d:ff:a7:3d:1f:01:1a:9c:d1: 79:ea:c3:15:df:b4:d8:ba:18:61:28:d3:82:14:93:93:31:e2: 36:d4:bf:5d:16:d7:fb:35:a7:12:f8:bb:ea:59:45:c6:5d:aa: 0e:10:fa:83:83:cb:6e:a1:b2:ad:c6:24:da:1c:e2:6f:e1:18: 04:a6:6c:d4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0gr0w9dvXmubVQVLAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmNiM2I1OTgtOGQ4My00ODY0LTgxOGItZjU4MzNiNzU4 M2U3MB4XDTI2MDMxMTAxMDAzMloXDTI2MDYwOTAxMDAzMlowLzEtMCsGA1UEAxMk MWMyZTlhYmItMTA5Zi00N2Y3LWE0MzgtMmNlNGE1YWU2ODFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq5q6mKTuAcJHQwK/iQ24Bh9H4cmuj2KpYVPc MkTvNH66bdRTZ61YldXtz1vYzcFJePbe04dt1ct8M6QqZltI2io/vAEXCRf1CZwF OJmoEMMdXK6O6xZTrk0Yt2WqtRxkgWatOLyHomHJ3tqT8D8vA6IwcdV4LRGWGNoC A34kQ06D65FtryhMXvx2s2kp6w+KeLtAsKPmeDJCeO4fGBBc17mHVMHfMVcYXZXQ m5/7R8axeeiEQvg9VxwkmF0i2WjuvYMi5EZdA1s0T1ZiDsSQmaFQdM5jbtCvT7TB i48JK5sZcgQwGS7S2htQWmt6i5bEfp2GBf6KQt/XoFFr81QBpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA/UfFpOUqefJXdult/0/dgkOtQ2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9iY2Iz YjU5OC04ZDgzLTQ4NjQtODE4Yi1mNTgzM2I3NTgzZTcvYzg5OGY3ODgtZjI0OC0z YWI3LTk3NGItYzVjNmI3ZmMzNDA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYmNiM2I1OTgtOGQ4My00ODY0LTgx OGItZjU4MzNiNzU4M2U3L2JjYjNiNTk4LThkODMtNDg2NC04MThiLWY1ODMzYjc1 ODNlNy5jcmwwHwYDVR0jBBgwFoAUTwH1eiacjpGp9CgLU9cqPEl4Q6YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9iY2IzYjU5OC04ZDgzLTQ4NjQtODE4Yi1mNTgz M2I3NTgzZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4a0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADl/9PdMoLnLfGo/fr+CV7pAx+k0E6x6/3QGQveiq8ch6nDKD9i4zMe9 xhCcaVtTIKC3wprvXJulBtz+4rYjxUE4bFXaBpXKakjvhdcl8Pz2zPJRWUiIvNph 1+Xd2RXhuXmjueyn0ZND6ocRTdbQ8IhB6HqcpWsFIM2TF8DV8GVApayVZCOsYCIY g437A7mNJ86qtYxknCmiUn/75aJDB4qW7puXCl4OmsilK8gGSc71fxgCXKRwMrYd LgDq+Z3/pz0fARqc0XnqwxXftNi6GGEo04IUk5Mx4jbUv10W1/s1pxL4u+pZRcZd qg4Q+oODy26hsq3GJNoc4m/hGASmbNQ= -----END CERTIFICATE-----Generated at Thu Mar 26 17:55:08 2026 by rpki-client