$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0d11eac1-cc02-42fc-822d-f4bbf31842d8/b2cbd41d-2dd3-3325-a83c-62c0941a2003.roa File: b2cbd41d-2dd3-3325-a83c-62c0941a2003.roa (raw, json) Hash identifier: IkGIgfahtnU3s2HsucC9Typwaurw6WE0BiTf/LcPFk4= Subject key identifier: F9:31:BE:11:80:96:D8:65:20:44:14:11:A1:95:92:13:A4:58:82:B0 Certificate issuer: /CN=0d11eac1-cc02-42fc-822d-f4bbf31842d8 Certificate serial: 010D0C9F4328584DADAAEE8C215E79E4E1942D40 Authority key identifier: BF:BE:8E:46:D3:0B:71:DF:06:A6:88:4E:23:16:8A:0E:7B:83:9C:5E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0d11eac1-cc02-42fc-822d-f4bbf31842d8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0d11eac1-cc02-42fc-822d-f4bbf31842d8/b2cbd41d-2dd3-3325-a83c-62c0941a2003.roa Signing time: Thu 30 Apr 2026 13:00:31 +0000 ROA not before: Thu 30 Apr 2026 13:00:31 +0000 ROA not after: Wed 29 Jul 2026 13:00:31 +0000 asID: 400619 IP address blocks: 23.153.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0d11eac1-cc02-42fc-822d-f4bbf31842d8/0d11eac1-cc02-42fc-822d-f4bbf31842d8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0d11eac1-cc02-42fc-822d-f4bbf31842d8/0d11eac1-cc02-42fc-822d-f4bbf31842d8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0d11eac1-cc02-42fc-822d-f4bbf31842d8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:ad:aa:ee:8c:21:5e:79:e4:e1:94:2d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d11eac1-cc02-42fc-822d-f4bbf31842d8 Validity Not Before: Apr 30 13:00:31 2026 GMT Not After : Jul 29 13:00:31 2026 GMT Subject: CN=92aaa428-78d0-416f-80fa-0ccd67ca87bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:80:88:59:f0:d7:41:b6:ed:6e:c2:0e:6f:ef: 48:93:c6:81:8b:51:54:37:82:4a:0b:99:83:82:4e: d3:04:07:66:eb:89:1a:c8:b3:aa:b0:98:fd:6d:2c: 74:90:10:f8:a2:4f:e1:64:cc:1d:74:79:16:78:73: be:3b:44:39:d2:4e:f4:f7:5a:b0:bb:55:13:c1:6e: 0d:ef:6a:17:ec:61:01:a7:00:94:57:75:f1:82:26: 9f:d1:01:8b:55:5c:38:3f:ca:ba:63:ba:68:ff:4a: ad:10:f0:b3:94:fc:1e:95:10:f4:f8:b8:1b:85:0c: 75:cb:d7:85:45:eb:52:14:5b:23:1e:4e:1c:2d:4b: 04:cc:4e:a1:2a:f7:11:f2:33:08:d8:d6:70:95:a6: cf:f0:43:46:d1:2a:f0:af:56:9e:6f:42:fa:13:2e: 34:3c:ee:1f:f3:f0:f6:8f:ce:b0:e4:17:9b:2a:d5: 86:cb:21:a4:0f:24:b3:18:ca:2c:86:00:95:7c:ec: 3c:9f:4e:ba:2a:c7:28:bb:a8:b5:18:35:3f:c1:63: be:9f:8b:43:fd:79:64:cd:96:81:4e:c6:f3:45:e0: b8:b9:36:75:bc:1b:49:bf:3b:a3:c4:ed:83:c7:3d: 9c:9b:e5:c6:91:01:a9:76:ec:8a:98:46:c0:19:fb: 44:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:31:BE:11:80:96:D8:65:20:44:14:11:A1:95:92:13:A4:58:82:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0d11eac1-cc02-42fc-822d-f4bbf31842d8/b2cbd41d-2dd3-3325-a83c-62c0941a2003.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0d11eac1-cc02-42fc-822d-f4bbf31842d8/0d11eac1-cc02-42fc-822d-f4bbf31842d8.crl X509v3 Authority Key Identifier: keyid:BF:BE:8E:46:D3:0B:71:DF:06:A6:88:4E:23:16:8A:0E:7B:83:9C:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/0d11eac1-cc02-42fc-822d-f4bbf31842d8.cer sbgp-ipAddrBlock: critical IPv4: 23.153.36.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:d8:18:f6:e2:08:3c:14:44:b5:7b:59:13:5e:29:4b:aa:db: ff:9c:ea:cd:38:68:75:a9:db:8b:8b:29:39:ca:c3:6a:d9:3d: 2f:40:31:42:cc:70:9f:3d:6e:8f:08:1f:b4:96:88:70:c7:65: 66:60:d7:cc:a8:73:e9:c7:05:e1:ed:bb:ef:cf:4e:20:a2:0b: 75:1d:f1:3d:e0:ca:31:2f:50:1f:7d:ce:7b:9c:c8:f1:bb:86: d8:e2:02:04:b7:e6:e3:61:7e:b1:5d:aa:6f:f2:5d:09:b0:e6: b1:d9:b7:76:d2:e8:40:32:16:1c:90:9f:b1:e8:a0:bb:81:7b: fb:9a:58:12:3f:85:8e:0e:4a:b9:f4:c4:83:b8:43:c4:cb:cc: 08:a7:a0:ff:68:18:c5:af:f7:70:de:38:7b:66:7f:9c:21:2b: c9:b2:16:dc:b2:3e:04:d1:c4:b5:b9:0c:b8:e1:46:b2:fc:c6: 68:5d:ee:38:2b:09:5a:83:20:a8:5c:a0:84:15:2d:75:75:7b: af:a9:7c:f3:77:72:d3:f1:46:58:ee:ee:94:d6:ec:7b:43:12: b8:41:57:45:1d:57:48:71:42:9d:df:b2:2a:f3:46:70:33:40: 36:9c:40:7a:00:56:e0:21:b5:f5:f0:10:46:14:97:8d:1b:30: f8:5f:01:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2tqu6MIV555OGULUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGQxMWVhYzEtY2MwMi00MmZjLTgyMmQtZjRiYmYzMTg0 MmQ4MB4XDTI2MDQzMDEzMDAzMVoXDTI2MDcyOTEzMDAzMVowLzEtMCsGA1UEAxMk OTJhYWE0MjgtNzhkMC00MTZmLTgwZmEtMGNjZDY3Y2E4N2JjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn4CIWfDXQbbtbsIOb+9Ik8aBi1FUN4JKC5mD gk7TBAdm64kayLOqsJj9bSx0kBD4ok/hZMwddHkWeHO+O0Q50k7091qwu1UTwW4N 72oX7GEBpwCUV3Xxgiaf0QGLVVw4P8q6Y7po/0qtEPCzlPwelRD0+LgbhQx1y9eF RetSFFsjHk4cLUsEzE6hKvcR8jMI2NZwlabP8ENG0Srwr1aeb0L6Ey40PO4f8/D2 j86w5BebKtWGyyGkDySzGMoshgCVfOw8n066Kscou6i1GDU/wWO+n4tD/XlkzZaB TsbzReC4uTZ1vBtJvzujxO2Dxz2cm+XGkQGpduyKmEbAGftE1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPkxvhGAlthlIEQUEaGVkhOkWIKwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS8wZDEx ZWFjMS1jYzAyLTQyZmMtODIyZC1mNGJiZjMxODQyZDgvYjJjYmQ0MWQtMmRkMy0z MzI1LWE4M2MtNjJjMDk0MWEyMDAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvMGQxMWVhYzEtY2MwMi00MmZjLTgy MmQtZjRiYmYzMTg0MmQ4LzBkMTFlYWMxLWNjMDItNDJmYy04MjJkLWY0YmJmMzE4 NDJkOC5jcmwwHwYDVR0jBBgwFoAUv76ORtMLcd8GpohOIxaKDnuDnF4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS8wZDExZWFjMS1jYzAyLTQyZmMtODIyZC1mNGJi ZjMxODQyZDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5kkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAXYGPbiCDwURLV7WRNeKUuq2/+c6s04aHWp24uLKTnKw2rZPS9AMULM cJ89bo8IH7SWiHDHZWZg18yoc+nHBeHtu+/PTiCiC3Ud8T3gyjEvUB99znucyPG7 htjiAgS35uNhfrFdqm/yXQmw5rHZt3bS6EAyFhyQn7HooLuBe/uaWBI/hY4OSrn0 xIO4Q8TLzAinoP9oGMWv93DeOHtmf5whK8myFtyyPgTRxLW5DLjhRrL8xmhd7jgr CVqDIKhcoIQVLXV1e6+pfPN3ctPxRlju7pTW7HtDErhBV0UdV0hxQp3fsirzRnAz QDacQHoAVuAhtfXwEEYUl40bMPhfAVE= -----END CERTIFICATE-----Generated at Wed May 13 08:50:01 2026 by rpki-client