$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/dff5b360-ef8a-3c09-86a2-776b00a5da37.roa File: dff5b360-ef8a-3c09-86a2-776b00a5da37.roa (raw, json) Hash identifier: ZePFhfs2th2TM4jYSw3qiBOFKMQtMr/jPin2MrBaPjg= Subject key identifier: C5:F9:67:19:2B:95:42:25:AF:5F:55:FF:D5:B8:A6:2B:A1:E5:63:60 Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf Certificate serial: 010D0C9F4328584D359FAB2167DAAF55AFD537C0 Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/dff5b360-ef8a-3c09-86a2-776b00a5da37.roa Signing time: Wed 18 Mar 2026 13:00:40 +0000 ROA not before: Wed 18 Mar 2026 13:00:40 +0000 ROA not after: Tue 16 Jun 2026 13:00:40 +0000 asID: 31898 IP address blocks: 23.239.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:35:9f:ab:21:67:da:af:55:af:d5:37:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf Validity Not Before: Mar 18 13:00:40 2026 GMT Not After : Jun 16 13:00:40 2026 GMT Subject: CN=5b2c134d-4a85-4d0b-84ac-30ad69ddb5f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:26:d4:50:86:64:42:70:d3:be:be:94:b1:95: 9a:8f:75:15:b6:38:82:2a:41:06:f8:42:a1:b2:e9: 54:db:d1:f3:77:85:65:f0:46:bf:a5:75:0b:ec:39: 35:93:c4:cb:7d:0c:2a:6c:a3:f9:16:e4:fe:81:ee: c0:b2:5a:bd:3b:ed:2a:61:3b:b9:96:c0:21:4f:fd: 50:88:59:ac:94:2a:8a:a7:44:dc:d0:d5:36:27:dc: 89:da:4c:8c:17:b3:93:44:f5:b3:81:79:e6:8e:ae: 8c:9b:c3:15:81:98:4d:c8:73:a1:f3:ec:bf:ac:a9: bb:9a:f7:d4:ba:16:78:55:2d:9a:ad:ae:7e:54:35: 57:3f:73:25:af:ac:62:af:15:bf:98:46:6f:4b:d3: 73:46:bd:dc:30:72:54:cd:11:a2:80:e0:93:e3:c6: 4a:15:ca:49:7c:1e:bb:dd:d5:1d:10:4d:80:b5:97: f3:d0:03:e7:fa:29:b3:d9:08:48:27:37:e5:b3:1c: 95:3e:61:62:17:48:f6:17:d8:89:22:1e:8b:cf:70: 3e:f8:97:c8:7f:df:51:cf:db:6f:46:98:b0:07:fe: bc:5c:03:2c:ed:f8:8b:cb:6a:ab:c7:c7:c0:2b:16: e4:6a:0d:62:d2:71:04:eb:e8:07:0b:64:c0:d9:a7: f9:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:F9:67:19:2B:95:42:25:AF:5F:55:FF:D5:B8:A6:2B:A1:E5:63:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/dff5b360-ef8a-3c09-86a2-776b00a5da37.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl X509v3 Authority Key Identifier: keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer sbgp-ipAddrBlock: critical IPv4: 23.239.250.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:07:46:55:2c:a0:79:74:0e:86:1d:1c:6e:24:b5:c4:99:92: 0d:ee:9e:16:5a:38:06:e7:8e:fe:f0:e0:34:90:b0:b6:57:4a: 0b:10:cd:35:38:2d:b3:5f:03:7c:03:24:f7:f2:3c:c3:ac:b6: 5d:23:15:53:4d:94:89:25:9a:af:fa:a0:86:fa:ad:2b:60:68: f2:13:2f:83:e1:64:5a:e4:fe:48:ae:03:ab:7b:1e:80:21:33: 9e:41:2d:ec:b6:2c:0b:a3:0f:b2:bb:d2:07:86:b8:db:42:8e: 28:cb:e4:f9:b2:8c:82:01:cf:0f:a2:f5:c6:54:67:89:79:56: d4:dd:87:5b:2f:7c:a6:99:14:87:c4:4e:17:5e:0a:48:13:16: ad:06:39:d6:7b:6b:c0:5b:fe:1c:bb:d4:2d:44:8f:ef:cb:00: f4:92:4b:ab:ea:88:f1:73:dd:4c:83:fa:07:93:31:87:dc:d5: 8b:90:cf:42:71:90:5d:38:28:2b:6c:9a:cd:1d:a9:d5:34:24: 27:9d:9f:2d:46:16:2a:21:67:13:e0:68:ca:c8:4e:fe:f7:f1: de:cd:17:34:6f:0b:97:73:ac:38:7d:64:2c:52:a1:3c:e4:8c: 0f:1c:ff:10:f2:86:36:8d:a0:43:d6:70:5b:c5:6d:00:da:b9: d9:97:02:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE01n6shZ9qvVa/VN8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy OWJmMB4XDTI2MDMxODEzMDA0MFoXDTI2MDYxNjEzMDA0MFowLzEtMCsGA1UEAxMk NWIyYzEzNGQtNGE4NS00ZDBiLTg0YWMtMzBhZDY5ZGRiNWY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiSbUUIZkQnDTvr6UsZWaj3UVtjiCKkEG+EKh sulU29Hzd4Vl8Ea/pXUL7Dk1k8TLfQwqbKP5FuT+ge7Aslq9O+0qYTu5lsAhT/1Q iFmslCqKp0Tc0NU2J9yJ2kyMF7OTRPWzgXnmjq6Mm8MVgZhNyHOh8+y/rKm7mvfU uhZ4VS2ara5+VDVXP3Mlr6xirxW/mEZvS9NzRr3cMHJUzRGigOCT48ZKFcpJfB67 3dUdEE2AtZfz0APn+imz2QhIJzflsxyVPmFiF0j2F9iJIh6Lz3A++JfIf99Rz9tv RpiwB/68XAMs7fiLy2qrx8fAKxbkag1i0nEE6+gHC2TA2af5YQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMX5ZxkrlUIlr19V/9W4piuh5WNgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2 ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvZGZmNWIzNjAtZWY4YS0z YzA5LTg2YTItNzc2YjAwYTVkYTM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4 MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx YzIxODI5YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF+/6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJoHRlUsoHl0DoYdHG4ktcSZkg3unhZaOAbnjv7w4DSQsLZXSgsQzTU4 LbNfA3wDJPfyPMOstl0jFVNNlIklmq/6oIb6rStgaPITL4PhZFrk/kiuA6t7HoAh M55BLey2LAujD7K70geGuNtCjijL5PmyjIIBzw+i9cZUZ4l5VtTdh1svfKaZFIfE ThdeCkgTFq0GOdZ7a8Bb/hy71C1Ej+/LAPSSS6vqiPFz3UyD+geTMYfc1YuQz0Jx kF04KCtsms0dqdU0JCedny1GFiohZxPgaMrITv738d7NFzRvC5dzrDh9ZCxSoTzk jA8c/xDyhjaNoEPWcFvFbQDaudmXAqA= -----END CERTIFICATE-----Generated at Thu Mar 26 08:41:58 2026 by rpki-client