$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/87c0eaa5-97ec-4efa-8555-88298630efbb/9cdc6445-0758-3b3c-9285-69a25ee1c123.roa File: 9cdc6445-0758-3b3c-9285-69a25ee1c123.roa (raw, json) Hash identifier: 114rpACV/2XnmyKrg2Wh4WbsqSOXjaH+mjA4NCMbwiQ= Subject key identifier: 45:23:C4:B9:73:6F:6F:ED:B3:A3:46:80:E5:99:A2:2C:90:F4:17:21 Certificate issuer: /CN=87c0eaa5-97ec-4efa-8555-88298630efbb Certificate serial: 010D0C9F4328584D286FF20863F1615F85E50878 Authority key identifier: 50:7C:D9:E5:87:8E:EC:9D:B6:85:25:60:AE:A5:93:A1:B9:03:DA:C8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/87c0eaa5-97ec-4efa-8555-88298630efbb.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/87c0eaa5-97ec-4efa-8555-88298630efbb/9cdc6445-0758-3b3c-9285-69a25ee1c123.roa Signing time: Fri 13 Mar 2026 19:39:28 +0000 ROA not before: Fri 13 Mar 2026 19:39:28 +0000 ROA not after: Thu 11 Jun 2026 19:39:28 +0000 asID: 402291 IP address blocks: 23.154.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/87c0eaa5-97ec-4efa-8555-88298630efbb/87c0eaa5-97ec-4efa-8555-88298630efbb.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/87c0eaa5-97ec-4efa-8555-88298630efbb/87c0eaa5-97ec-4efa-8555-88298630efbb.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/87c0eaa5-97ec-4efa-8555-88298630efbb.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:28:6f:f2:08:63:f1:61:5f:85:e5:08:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87c0eaa5-97ec-4efa-8555-88298630efbb Validity Not Before: Mar 13 19:39:28 2026 GMT Not After : Jun 11 19:39:28 2026 GMT Subject: CN=1ecc747d-baf1-4752-bc63-d6c3f2953e84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:45:0e:c0:31:c6:6c:e6:b4:77:0a:3a:20:f0: 13:22:ac:a2:c5:52:fd:29:db:62:10:11:14:f4:7a: e1:55:7c:3d:6a:5a:29:90:f8:88:70:2f:59:40:15: 9d:26:ca:48:bc:75:8b:00:9c:f8:4e:d3:b8:b2:13: 57:8a:ca:16:f0:36:24:21:01:b4:32:2f:99:9c:8c: 01:10:0c:4a:73:b9:ea:70:9d:4e:fd:ed:8a:6e:ae: fd:68:f5:34:ea:ec:2d:50:78:d8:eb:89:f2:ad:c8: 7a:5d:25:6b:5b:ee:14:07:0a:e9:f7:95:d6:1f:cf: 6a:14:d3:15:54:d0:db:a4:6e:f0:85:0d:bc:15:7d: 07:df:7d:82:89:13:85:e5:b3:66:49:5b:1c:6e:0a: 12:2a:2a:ac:d9:00:ae:e1:e8:c6:ab:24:4e:5f:63: 0e:37:a6:ca:45:c7:64:4b:80:59:15:1a:c5:fc:eb: 28:7a:e8:00:62:fb:0f:d0:d6:95:46:6f:c6:9f:b5: a8:3d:cd:06:05:97:03:f4:a3:65:e5:8f:cf:45:1f: be:95:43:70:02:cb:2f:a8:5a:4f:d3:79:00:a8:43: af:8c:70:16:96:85:d6:49:c2:15:d1:e3:b7:f9:10: 4d:16:76:cf:b4:e0:d0:d5:2a:79:a9:65:2e:af:97: 09:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:23:C4:B9:73:6F:6F:ED:B3:A3:46:80:E5:99:A2:2C:90:F4:17:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/87c0eaa5-97ec-4efa-8555-88298630efbb/9cdc6445-0758-3b3c-9285-69a25ee1c123.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/87c0eaa5-97ec-4efa-8555-88298630efbb/87c0eaa5-97ec-4efa-8555-88298630efbb.crl X509v3 Authority Key Identifier: keyid:50:7C:D9:E5:87:8E:EC:9D:B6:85:25:60:AE:A5:93:A1:B9:03:DA:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/87c0eaa5-97ec-4efa-8555-88298630efbb.cer sbgp-ipAddrBlock: critical IPv4: 23.154.156.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:4a:a0:2c:eb:a4:07:3d:36:8b:1e:0d:c9:1e:7f:2c:7b:1c: 3d:cb:a4:ce:91:eb:72:94:63:56:ca:ba:be:bd:46:16:7a:73: f8:51:ee:84:52:76:27:ad:bc:c6:28:e7:32:fd:d1:18:68:71: ca:13:c6:47:93:82:f8:9f:48:a2:c1:91:e4:2e:81:6c:c2:be: 3f:1b:40:43:5b:0c:8a:f1:02:e1:91:26:83:d6:6a:ca:de:6a: dc:08:a3:b5:75:9a:23:dd:5f:d0:7d:dd:2d:bd:dc:f6:8e:28: 4a:42:4b:25:75:54:74:ba:40:0d:b4:5b:d9:7e:f5:e0:14:a0: 57:d2:eb:96:29:07:50:50:79:25:3b:94:f5:c5:90:be:dd:22: e2:4c:96:52:76:f5:c5:70:34:20:0a:4c:a5:1f:7a:93:5f:1b: d9:10:0d:f7:1e:9d:2c:44:5e:e5:0a:43:80:41:63:5b:23:1f: e7:4e:92:2a:bb:66:72:45:ee:df:50:5c:ca:55:c9:f7:d7:b5: 28:88:9a:ac:c9:f2:b1:09:63:84:4f:44:48:29:cb:04:86:6b: 37:d6:76:c8:8c:c7:ea:80:01:fe:b2:a6:f2:c2:37:5e:d2:7e: c0:7f:a2:b5:a7:ca:22:23:6a:82:24:f9:2b:0b:f7:0d:1a:f3: 8b:2b:83:9b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0ob/IIY/FhX4XlCHgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODdjMGVhYTUtOTdlYy00ZWZhLTg1NTUtODgyOTg2MzBl ZmJiMB4XDTI2MDMxMzE5MzkyOFoXDTI2MDYxMTE5MzkyOFowLzEtMCsGA1UEAxMk MWVjYzc0N2QtYmFmMS00NzUyLWJjNjMtZDZjM2YyOTUzZTg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm0UOwDHGbOa0dwo6IPATIqyixVL9KdtiEBEU 9HrhVXw9alopkPiIcC9ZQBWdJspIvHWLAJz4TtO4shNXisoW8DYkIQG0Mi+ZnIwB EAxKc7nqcJ1O/e2Kbq79aPU06uwtUHjY64nyrch6XSVrW+4UBwrp95XWH89qFNMV VNDbpG7whQ28FX0H332CiROF5bNmSVscbgoSKiqs2QCu4ejGqyROX2MON6bKRcdk S4BZFRrF/OsoeugAYvsP0NaVRm/Gn7WoPc0GBZcD9KNl5Y/PRR++lUNwAssvqFpP 03kAqEOvjHAWloXWScIV0eO3+RBNFnbPtODQ1Sp5qWUur5cJWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEUjxLlzb2/ts6NGgOWZoiyQ9BchMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS84N2Mw ZWFhNS05N2VjLTRlZmEtODU1NS04ODI5ODYzMGVmYmIvOWNkYzY0NDUtMDc1OC0z YjNjLTkyODUtNjlhMjVlZTFjMTIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvODdjMGVhYTUtOTdlYy00ZWZhLTg1 NTUtODgyOTg2MzBlZmJiLzg3YzBlYWE1LTk3ZWMtNGVmYS04NTU1LTg4Mjk4NjMw ZWZiYi5jcmwwHwYDVR0jBBgwFoAUUHzZ5YeO7J22hSVgrqWTobkD2sgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw ZS1hZTdkLWU2Y2IxMGFmYTEyNS84N2MwZWFhNS05N2VjLTRlZmEtODU1NS04ODI5 ODYzMGVmYmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5qcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHZKoCzrpAc9NoseDckefyx7HD3LpM6R63KUY1bKur69RhZ6c/hR7oRS dietvMYo5zL90RhoccoTxkeTgvifSKLBkeQugWzCvj8bQENbDIrxAuGRJoPWasre atwIo7V1miPdX9B93S293PaOKEpCSyV1VHS6QA20W9l+9eAUoFfS65YpB1BQeSU7 lPXFkL7dIuJMllJ29cVwNCAKTKUfepNfG9kQDfcenSxEXuUKQ4BBY1sjH+dOkiq7 ZnJF7t9QXMpVyffXtSiImqzJ8rEJY4RPREgpywSGazfWdsiMx+qAAf6ypvLCN17S fsB/orWnyiIjaoIk+SsL9w0a84srg5s= -----END CERTIFICATE-----Generated at Thu Mar 26 01:58:02 2026 by rpki-client