$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c/bda139a8-8afc-3912-9a45-3703bbfa8a28.roa File: bda139a8-8afc-3912-9a45-3703bbfa8a28.roa (raw, json) Hash identifier: wIo2pX/C+MmRl4LiD8GIR/J/gM5JuksjUtbxowdBENI= Subject key identifier: D7:89:92:12:05:69:BA:A7:6B:F4:AC:87:F1:18:E4:56:96:B5:7C:0C Certificate issuer: /CN=09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c Certificate serial: 010D0C9F4328584D143D48A02BACD97EE6BDFA00 Authority key identifier: C4:52:EF:29:27:F2:EC:5A:51:3C:C1:72:D6:73:BD:1E:39:05:95:26 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c/bda139a8-8afc-3912-9a45-3703bbfa8a28.roa Signing time: Fri 06 Mar 2026 14:00:40 +0000 ROA not before: Fri 06 Mar 2026 14:00:40 +0000 ROA not after: Thu 04 Jun 2026 13:00:40 +0000 asID: 7018 IP address blocks: 23.143.104.0/24 maxlen: 24 2607:340::/28 maxlen: 28 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:14:3d:48:a0:2b:ac:d9:7e:e6:bd:fa:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c Validity Not Before: Mar 6 14:00:40 2026 GMT Not After : Jun 4 13:00:40 2026 GMT Subject: CN=d24020eb-6212-47df-8d60-231119b702d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:be:72:8c:a6:ef:30:6f:b2:17:cf:a9:86:3b: 4c:95:38:97:ba:96:ba:5e:df:c0:da:1d:26:b2:63: 41:7a:15:16:69:26:f1:55:57:00:42:a3:f9:dd:6f: 2b:b0:5c:52:4e:8d:cf:82:c8:75:e8:cb:a6:fb:d8: f4:06:e0:9c:a2:d3:cd:42:ed:32:f6:ed:30:25:50: cb:c3:3a:04:7b:ce:26:69:67:fe:29:73:bc:d8:df: 67:fa:c0:2e:ec:a0:18:52:af:b2:7c:21:04:4d:57: c4:d7:ea:16:51:99:c1:0f:7c:c2:bd:b4:6f:6f:db: 2e:98:27:c7:ec:03:ed:bd:e7:30:fd:56:9e:6d:6c: cd:d3:92:03:44:f0:4d:cd:ba:da:ff:59:d3:8a:1b: 3a:c2:65:99:25:63:36:ea:12:05:d2:53:d7:4b:f9: 7c:fa:99:09:11:28:40:b0:94:50:c4:43:3f:c7:73: 26:6c:b9:f1:41:5c:b0:3b:ba:5f:71:6b:2a:18:55: 33:1c:a7:2f:5b:3a:8e:55:6c:69:c7:68:59:fd:55: f7:b0:d8:61:7b:09:d8:99:ea:96:8b:24:64:04:64: 98:79:09:bd:e7:76:84:0b:cf:13:f7:f6:ac:b0:01: 7c:af:27:7e:a4:19:7a:8f:b6:af:77:f5:1b:48:9b: 11:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:89:92:12:05:69:BA:A7:6B:F4:AC:87:F1:18:E4:56:96:B5:7C:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c/bda139a8-8afc-3912-9a45-3703bbfa8a28.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c.crl X509v3 Authority Key Identifier: keyid:C4:52:EF:29:27:F2:EC:5A:51:3C:C1:72:D6:73:BD:1E:39:05:95:26 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/09a3b8ba-ac7e-4e0e-891c-aa20e5fe442c.cer sbgp-ipAddrBlock: critical IPv4: 23.143.104.0/24 IPv6: 2607:340::/28 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:8b:eb:c5:89:43:28:cd:66:e7:78:ee:2d:2a:78:cc:32:0b: ea:73:76:bf:d9:be:d3:6c:f0:15:1d:3a:60:3f:88:be:7a:17: e8:c3:2f:42:57:d4:ab:96:88:68:3e:42:fd:1e:f6:a0:a5:e2: eb:3c:da:66:10:47:01:86:d0:fc:27:1a:a6:57:dc:55:4b:74: 50:8e:d5:bb:c2:6d:a2:24:3d:70:a6:f0:90:87:1b:fd:7e:ef: fc:85:7c:9e:88:f1:ba:d9:f7:0b:cc:f9:73:c5:18:ee:ea:f3: ff:40:29:bb:e6:6c:99:7f:89:45:2f:8a:4b:5d:c5:27:39:5b: 30:61:15:78:6a:0f:d0:58:b7:2e:75:29:05:bf:58:fe:df:e4: be:d1:38:fa:9d:54:c6:a9:22:88:51:bb:e5:89:0d:10:45:b4: ba:44:6d:59:94:e3:5e:ea:d5:16:fb:bb:bb:5b:a3:bc:6d:49: 9d:fd:97:59:54:be:e7:14:55:df:50:b1:b4:93:b6:b5:4a:b1: 71:10:66:11:2b:0f:cf:90:28:90:11:1f:c9:90:4b:92:df:0e: 5f:96:49:fa:b7:0d:fd:34:99:fe:23:71:d7:e7:06:c1:07:34: 12:2f:ff:bf:1d:0a:d5:14:f0:7a:3e:f5:c8:8d:da:3f:39:66: dc:40:f5:77 -----BEGIN CERTIFICATE----- MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWE0UPUigK6zZfua9+gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMDlhM2I4YmEtYWM3ZS00ZTBlLTg5MWMtYWEyMGU1ZmU0 NDJjMB4XDTI2MDMwNjE0MDA0MFoXDTI2MDYwNDEzMDA0MFowLzEtMCsGA1UEAxMk ZDI0MDIwZWItNjIxMi00N2RmLThkNjAtMjMxMTE5YjcwMmQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu75yjKbvMG+yF8+phjtMlTiXupa6Xt/A2h0m smNBehUWaSbxVVcAQqP53W8rsFxSTo3Pgsh16Mum+9j0BuCcotPNQu0y9u0wJVDL wzoEe84maWf+KXO82N9n+sAu7KAYUq+yfCEETVfE1+oWUZnBD3zCvbRvb9sumCfH 7APtvecw/VaebWzN05IDRPBNzbra/1nTihs6wmWZJWM26hIF0lPXS/l8+pkJEShA sJRQxEM/x3MmbLnxQVywO7pfcWsqGFUzHKcvWzqOVWxpx2hZ/VX3sNhhewnYmeqW iyRkBGSYeQm953aEC88T9/assAF8ryd+pBl6j7avd/UbSJsR3QIDAQABo4IDZDCC A2AwHQYDVR0OBBYEFNeJkhIFabqna/Ssh/EY5FaWtXwMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wOWEz YjhiYS1hYzdlLTRlMGUtODkxYy1hYTIwZTVmZTQ0MmMvYmRhMTM5YTgtOGFmYy0z OTEyLTlhNDUtMzcwM2JiZmE4YTI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDlhM2I4YmEtYWM3ZS00ZTBlLTg5 MWMtYWEyMGU1ZmU0NDJjLzA5YTNiOGJhLWFjN2UtNGUwZS04OTFjLWFhMjBlNWZl NDQyYy5jcmwwHwYDVR0jBBgwFoAUxFLvKSfy7FpRPMFy1nO9HjkFlSYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8wOWEzYjhiYS1hYzdlLTRlMGUtODkxYy1hYTIw ZTVmZTQ0MmMuY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAF49oMA0E AgACMAcDBQQmBwNAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0 bWwwDQYJKoZIhvcNAQELBQADggEBAEaL68WJQyjNZud47i0qeMwyC+pzdr/ZvtNs 8BUdOmA/iL56F+jDL0JX1KuWiGg+Qv0e9qCl4us82mYQRwGG0PwnGqZX3FVLdFCO 1bvCbaIkPXCm8JCHG/1+7/yFfJ6I8brZ9wvM+XPFGO7q8/9AKbvmbJl/iUUviktd xSc5WzBhFXhqD9BYty51KQW/WP7f5L7ROPqdVMapIohRu+WJDRBFtLpEbVmU417q 1Rb7u7tbo7xtSZ39l1lUvucUVd9QsbSTtrVKsXEQZhErD8+QKJARH8mQS5LfDl+W Sfq3Df00mf4jcdfnBsEHNBIv/78dCtUU8Ho+9ciN2j85ZtxA9Xc= -----END CERTIFICATE-----Generated at Thu Mar 26 11:37:03 2026 by rpki-client