$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c/ad4a1e02-1e75-3b5f-a3a4-5d5683b57228.roa File: ad4a1e02-1e75-3b5f-a3a4-5d5683b57228.roa (raw, json) Hash identifier: KEzncwgDHYZXEIxn3M+OaIZuRN6CV2NbwcgoSOqgC7s= Subject key identifier: CD:B7:89:CE:6A:1D:AF:4E:10:01:8F:7A:51:CA:F4:57:24:25:0B:AE Certificate issuer: /CN=09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c Certificate serial: 010D0C9F4328584D143D488E4D25093E89DB8A00 Authority key identifier: C4:52:EF:29:27:F2:EC:5A:51:3C:C1:72:D6:73:BD:1E:39:05:95:26 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c/ad4a1e02-1e75-3b5f-a3a4-5d5683b57228.roa Signing time: Fri 06 Mar 2026 14:00:40 +0000 ROA not before: Fri 06 Mar 2026 14:00:40 +0000 ROA not after: Thu 04 Jun 2026 13:00:40 +0000 asID: 7029 IP address blocks: 23.143.104.0/24 maxlen: 24 2607:340::/28 maxlen: 28 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:14:3d:48:8e:4d:25:09:3e:89:db:8a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c Validity Not Before: Mar 6 14:00:40 2026 GMT Not After : Jun 4 13:00:40 2026 GMT Subject: CN=a3e6bc7a-9c53-4ec0-84c6-30c58f24ab12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:fc:57:c0:96:ba:e3:33:00:38:89:4d:e4:61: c2:09:3c:63:a9:7c:66:2f:9e:1e:3f:4d:8d:91:58: 3b:b2:ad:aa:d3:6a:b8:36:fd:d0:4d:14:a0:76:e0: 41:80:21:ce:d0:93:fd:25:10:c8:c3:4b:48:3a:3d: 31:f5:3c:d1:40:4f:f8:0e:02:3e:77:75:e9:bc:ba: 40:2d:06:28:e2:08:db:ae:c4:0f:99:73:01:99:07: 6b:47:6a:c0:66:60:12:fa:a2:f4:c3:02:8c:c8:d3: 21:f8:55:b0:7d:0e:b2:2b:07:98:ed:aa:bf:e8:ab: e1:5c:fd:67:07:5e:09:bc:59:19:da:d7:02:25:0a: ef:3b:f4:8d:b1:65:73:a2:38:9f:2e:78:58:24:c6: 2e:d3:03:54:05:05:ee:26:fd:18:84:f1:fe:33:8c: 4c:75:24:74:e3:19:15:4c:96:90:f6:c5:5f:d6:b6: 40:18:9f:64:c1:40:46:45:56:be:e1:ac:44:c0:e6: 91:39:b8:28:23:d8:64:f9:76:11:ad:51:bf:da:1d: ab:19:bf:6d:74:12:81:cc:eb:de:0e:69:5d:72:79: 04:37:0a:0e:a7:cf:7b:87:c6:c5:2b:10:d1:60:b3: e6:52:e6:9b:95:56:d3:5f:42:94:d8:5a:fb:93:a8: 67:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:B7:89:CE:6A:1D:AF:4E:10:01:8F:7A:51:CA:F4:57:24:25:0B:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c/ad4a1e02-1e75-3b5f-a3a4-5d5683b57228.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c.crl X509v3 Authority Key Identifier: keyid:C4:52:EF:29:27:F2:EC:5A:51:3C:C1:72:D6:73:BD:1E:39:05:95:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c.cer sbgp-ipAddrBlock: critical IPv4: 23.143.104.0/24 IPv6: 2607:340::/28 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:e4:8c:7c:36:15:8a:47:19:02:dc:93:7a:e8:ce:9c:78:c8: d3:52:2b:5b:03:a4:dd:ef:86:1e:96:b7:58:fe:dd:21:58:09: 22:8f:8e:91:b0:bc:44:b9:62:f6:27:9f:a7:bb:96:3c:f3:24: 6c:e2:90:33:ec:98:48:19:ba:67:90:2a:f1:2b:11:20:0a:3c: 39:ab:09:b9:6c:6e:f3:38:2d:cc:fc:c9:8b:87:65:f3:6c:50: 2d:8b:5e:a8:bd:4b:35:ee:8a:c1:21:f9:b4:bd:e2:b8:e0:b0: eb:d4:97:9b:bf:1b:08:d0:05:81:02:d6:76:04:20:8b:5b:ca: e8:d6:e0:a0:64:7e:c1:bc:af:28:20:ac:5b:95:34:b2:8c:9e: 5c:6c:68:94:d3:94:a1:ab:18:2a:2b:ef:ea:17:e7:bf:ac:dc: e4:f8:ab:2e:4a:83:27:fa:6d:4a:fb:08:b6:12:32:fb:db:aa: 4d:cf:e3:25:09:b5:f3:2f:a4:d3:f1:e4:dd:02:56:40:df:03: 1c:89:6f:7d:5b:41:32:b9:1a:09:72:06:14:cb:e6:93:b1:75: d7:7e:37:80:70:b6:99:dc:49:e7:bf:a9:74:7d:27:a3:44:b4: 72:96:48:45:c2:b3:5e:cd:21:1d:bc:27:fd:6f:22:16:08:ac: 13:8a:be:5e -----BEGIN CERTIFICATE----- MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWE0UPUiOTSUJPonbigAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDlhM2I4YmEtYWM3ZS00ZTBlLTg5MWMtYWEyMGU1ZmU0 NDJjMB4XDTI2MDMwNjE0MDA0MFoXDTI2MDYwNDEzMDA0MFowLzEtMCsGA1UEAxMk YTNlNmJjN2EtOWM1My00ZWMwLTg0YzYtMzBjNThmMjRhYjEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzPxXwJa64zMAOIlN5GHCCTxjqXxmL54eP02N kVg7sq2q02q4Nv3QTRSgduBBgCHO0JP9JRDIw0tIOj0x9TzRQE/4DgI+d3XpvLpA LQYo4gjbrsQPmXMBmQdrR2rAZmAS+qL0wwKMyNMh+FWwfQ6yKweY7aq/6KvhXP1n B14JvFkZ2tcCJQrvO/SNsWVzojifLnhYJMYu0wNUBQXuJv0YhPH+M4xMdSR04xkV TJaQ9sVf1rZAGJ9kwUBGRVa+4axEwOaRObgoI9hk+XYRrVG/2h2rGb9tdBKBzOve DmldcnkENwoOp897h8bFKxDRYLPmUuablVbTX0KU2Fr7k6hngQIDAQABo4IDZDCC A2AwHQYDVR0OBBYEFM23ic5qHa9OEAGPelHK9FckJQuuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wOWEz YjhiYS1hYzdlLTRlMGUtODkxYy1hYTIwZTVmZTQ0MmMvYWQ0YTFlMDItMWU3NS0z YjVmLWEzYTQtNWQ1NjgzYjU3MjI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDlhM2I4YmEtYWM3ZS00ZTBlLTg5 MWMtYWEyMGU1ZmU0NDJjLzA5YTNiOGJhLWFjN2UtNGUwZS04OTFjLWFhMjBlNWZl NDQyYy5jcmwwHwYDVR0jBBgwFoAUxFLvKSfy7FpRPMFy1nO9HjkFlSYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8wOWEzYjhiYS1hYzdlLTRlMGUtODkxYy1hYTIw ZTVmZTQ0MmMuY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAF49oMA0E AgACMAcDBQQmBwNAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0 bWwwDQYJKoZIhvcNAQELBQADggEBAF/kjHw2FYpHGQLck3rozpx4yNNSK1sDpN3v hh6Wt1j+3SFYCSKPjpGwvES5YvYnn6e7ljzzJGzikDPsmEgZumeQKvErESAKPDmr CblsbvM4Lcz8yYuHZfNsUC2LXqi9SzXuisEh+bS94rjgsOvUl5u/GwjQBYEC1nYE IItbyujW4KBkfsG8ryggrFuVNLKMnlxsaJTTlKGrGCor7+oX57+s3OT4qy5Kgyf6 bUr7CLYSMvvbqk3P4yUJtfMvpNPx5N0CVkDfAxyJb31bQTK5GglyBhTL5pOxddd+ N4BwtpncSee/qXR9J6NEtHKWSEXCs17NIR28J/1vIhYIrBOKvl4= -----END CERTIFICATE-----Generated at Thu Mar 26 13:05:44 2026 by rpki-client