$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0adb4d9a-9fc4-43f7-8cfb-95119c1dddf0/ae892fa7-18c4-35aa-8e6a-8145e45a6e8f.roa File: ae892fa7-18c4-35aa-8e6a-8145e45a6e8f.roa (raw, json) Hash identifier: kdtqk7JrxOIFfwvzr4CrDsBddjaXgmOvSdY/9FYMFXY= Subject key identifier: 2B:41:E7:E4:9E:0A:B6:33:40:2A:25:EF:EE:A6:6A:D8:1C:38:F6:C7 Certificate issuer: /CN=0adb4d9a-9fc4-43f7-8cfb-95119c1dddf0 Certificate serial: 010D0C9F4328584D2BDA077C1DF7C7660E149F80 Authority key identifier: 11:79:D4:A6:A6:31:48:56:5D:61:E7:8D:06:1F:79:A2:6D:0A:FF:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0adb4d9a-9fc4-43f7-8cfb-95119c1dddf0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0adb4d9a-9fc4-43f7-8cfb-95119c1dddf0/ae892fa7-18c4-35aa-8e6a-8145e45a6e8f.roa Signing time: Sun 15 Mar 2026 01:00:32 +0000 ROA not before: Sun 15 Mar 2026 01:00:32 +0000 ROA not after: Sat 13 Jun 2026 01:00:32 +0000 asID: 174 IP address blocks: 23.141.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0adb4d9a-9fc4-43f7-8cfb-95119c1dddf0/0adb4d9a-9fc4-43f7-8cfb-95119c1dddf0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0adb4d9a-9fc4-43f7-8cfb-95119c1dddf0/0adb4d9a-9fc4-43f7-8cfb-95119c1dddf0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0adb4d9a-9fc4-43f7-8cfb-95119c1dddf0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2b:da:07:7c:1d:f7:c7:66:0e:14:9f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0adb4d9a-9fc4-43f7-8cfb-95119c1dddf0 Validity Not Before: Mar 15 01:00:32 2026 GMT Not After : Jun 13 01:00:32 2026 GMT Subject: CN=af48c019-9925-4b6a-ba78-8c8dc7cbb1b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:36:e2:b1:af:81:fd:84:d8:87:b6:d1:88:79: c1:64:51:4d:b5:65:ea:a0:17:6a:52:03:63:c2:86: 70:90:1a:47:4d:d1:5a:71:94:f7:42:97:a4:32:ba: 15:25:dc:cc:fa:3a:3e:77:6f:1a:18:db:6c:0a:ec: 8c:02:6a:22:78:1b:1e:70:7f:67:1b:db:14:e9:49: 2d:5a:16:dd:4d:3a:11:65:7c:cc:c6:62:7a:5f:03: 83:c7:73:d5:86:7c:e9:a4:f2:73:4c:7f:08:fd:63: c5:56:9f:2e:28:68:ab:0d:22:7d:1d:04:d3:dd:f9: c9:c8:4d:8d:5b:aa:b0:84:e8:5a:2d:ee:c9:2b:a9: c0:e1:b0:96:b8:d8:95:ce:71:1f:c8:59:d2:35:7f: bd:dd:35:36:6d:ec:24:11:ca:5d:e2:30:4d:77:22: 83:69:11:9d:52:77:fc:5f:1f:97:83:54:1c:ed:35: ef:15:81:7e:a4:ff:af:67:08:43:f0:27:18:40:8d: ed:74:24:a1:5c:98:9d:3b:20:88:e1:29:6f:dc:bd: e0:1c:9f:5d:16:21:fc:92:98:5f:95:ed:b9:c7:5c: e8:1a:ce:bb:6f:0a:10:38:f4:69:c4:b5:73:1d:97: 49:3a:4f:f2:f4:6d:f5:45:cd:71:15:b9:23:27:5d: 1d:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:41:E7:E4:9E:0A:B6:33:40:2A:25:EF:EE:A6:6A:D8:1C:38:F6:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0adb4d9a-9fc4-43f7-8cfb-95119c1dddf0/ae892fa7-18c4-35aa-8e6a-8145e45a6e8f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0adb4d9a-9fc4-43f7-8cfb-95119c1dddf0/0adb4d9a-9fc4-43f7-8cfb-95119c1dddf0.crl X509v3 Authority Key Identifier: keyid:11:79:D4:A6:A6:31:48:56:5D:61:E7:8D:06:1F:79:A2:6D:0A:FF:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0adb4d9a-9fc4-43f7-8cfb-95119c1dddf0.cer sbgp-ipAddrBlock: critical IPv4: 23.141.204.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:d0:b1:e3:a3:d7:79:49:51:a1:d5:75:bf:76:39:22:57:7d: e8:29:65:85:0f:43:48:cb:89:0e:96:4e:fb:24:7a:bb:d8:a3: e4:f2:a4:ac:1c:b4:71:8b:64:d1:a7:e4:c1:15:4e:62:b9:be: 0b:bd:52:99:8d:4d:f9:43:b8:73:9c:6f:7f:a8:86:b8:c6:c0: b6:40:9b:fe:e4:30:7a:63:b5:13:f7:ad:29:f8:2f:35:0f:0e: 85:6f:bf:2c:6d:cb:24:05:8d:77:c8:e4:b3:10:56:61:54:dc: 43:41:62:56:ea:1b:d6:39:74:b4:25:9c:08:32:c0:67:18:a3: 85:35:e4:e8:85:7e:01:8a:ba:f8:51:d3:8b:8a:1b:10:59:86: 62:29:13:30:56:56:0b:2c:c9:bf:39:26:2c:43:ae:ba:63:5a: 8e:8f:52:0c:5b:b6:7d:3f:19:1b:ec:be:4f:3e:99:70:0a:29: 49:87:22:5a:db:6f:2e:04:2a:d4:35:b7:1a:3c:e3:36:14:1b: b3:ed:49:c8:1b:bd:4e:41:bb:ff:47:3d:74:34:b9:59:2f:d7: 4d:0f:e4:27:0e:b3:d5:6b:23:71:6a:45:64:b1:48:8c:aa:40: 76:b9:6f:0b:04:3a:03:4d:22:70:66:fb:6e:19:e3:78:ef:84: b6:5a:ec:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0r2gd8HffHZg4Un4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGFkYjRkOWEtOWZjNC00M2Y3LThjZmItOTUxMTljMWRk ZGYwMB4XDTI2MDMxNTAxMDAzMloXDTI2MDYxMzAxMDAzMlowLzEtMCsGA1UEAxMk YWY0OGMwMTktOTkyNS00YjZhLWJhNzgtOGM4ZGM3Y2JiMWI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkDbisa+B/YTYh7bRiHnBZFFNtWXqoBdqUgNj woZwkBpHTdFacZT3QpekMroVJdzM+jo+d28aGNtsCuyMAmoieBsecH9nG9sU6Ukt WhbdTToRZXzMxmJ6XwODx3PVhnzppPJzTH8I/WPFVp8uKGirDSJ9HQTT3fnJyE2N W6qwhOhaLe7JK6nA4bCWuNiVznEfyFnSNX+93TU2bewkEcpd4jBNdyKDaRGdUnf8 Xx+Xg1Qc7TXvFYF+pP+vZwhD8CcYQI3tdCShXJidOyCI4Slv3L3gHJ9dFiH8kphf le25x1zoGs67bwoQOPRpxLVzHZdJOk/y9G31Rc1xFbkjJ10d+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCtB5+SeCrYzQCol7+6matgcOPbHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8wYWRi NGQ5YS05ZmM0LTQzZjctOGNmYi05NTExOWMxZGRkZjAvYWU4OTJmYTctMThjNC0z NWFhLThlNmEtODE0NWU0NWE2ZThmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMGFkYjRkOWEtOWZjNC00M2Y3LThj ZmItOTUxMTljMWRkZGYwLzBhZGI0ZDlhLTlmYzQtNDNmNy04Y2ZiLTk1MTE5YzFk ZGRmMC5jcmwwHwYDVR0jBBgwFoAUEXnUpqYxSFZdYeeNBh95om0K/4kwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8wYWRiNGQ5YS05ZmM0LTQzZjctOGNmYi05NTEx OWMxZGRkZjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF43MMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHDQseOj13lJUaHVdb92OSJXfegpZYUPQ0jLiQ6WTvskervYo+TypKwc tHGLZNGn5MEVTmK5vgu9UpmNTflDuHOcb3+ohrjGwLZAm/7kMHpjtRP3rSn4LzUP DoVvvyxtyyQFjXfI5LMQVmFU3ENBYlbqG9Y5dLQlnAgywGcYo4U15OiFfgGKuvhR 04uKGxBZhmIpEzBWVgssyb85JixDrrpjWo6PUgxbtn0/GRvsvk8+mXAKKUmHIlrb by4EKtQ1txo84zYUG7PtScgbvU5Bu/9HPXQ0uVkv100P5CcOs9VrI3FqRWSxSIyq QHa5bwsEOgNNInBm+24Z43jvhLZa7IQ= -----END CERTIFICATE-----Generated at Wed Mar 25 23:24:55 2026 by rpki-client