$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2b54e030-771e-426d-9da1-303caa03d397/1d4d4e08-e65f-3f8e-940f-45549d30ca63.roa File: 1d4d4e08-e65f-3f8e-940f-45549d30ca63.roa (raw, json) Hash identifier: 3dK03+EQ+gsgiYX6MIF3hitUQibK297fVpbbjDtJKjw= Subject key identifier: DD:8A:0F:91:98:FE:70:D9:AF:AC:42:44:3E:79:2E:7D:DC:B7:C1:16 Certificate issuer: /CN=2b54e030-771e-426d-9da1-303caa03d397 Certificate serial: 010D0C9F4328584D2379F0023328A04BBFFFCF40 Authority key identifier: AF:D7:C6:CF:AC:B6:EE:36:20:7B:9A:92:B9:C4:12:48:FF:C7:24:C8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2b54e030-771e-426d-9da1-303caa03d397.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2b54e030-771e-426d-9da1-303caa03d397/1d4d4e08-e65f-3f8e-940f-45549d30ca63.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 401978 IP address blocks: 23.145.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2b54e030-771e-426d-9da1-303caa03d397/2b54e030-771e-426d-9da1-303caa03d397.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2b54e030-771e-426d-9da1-303caa03d397/2b54e030-771e-426d-9da1-303caa03d397.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2b54e030-771e-426d-9da1-303caa03d397.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:79:f0:02:33:28:a0:4b:bf:ff:cf:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b54e030-771e-426d-9da1-303caa03d397 Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=8b927b25-8f44-4bb8-acd2-206bc8436d1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:ee:75:3c:45:d2:8f:bd:71:06:89:43:28:7d: e3:5b:57:6a:a6:84:c5:48:4c:0a:a4:fc:8e:d1:70: 8e:e9:68:d6:0c:70:7e:20:a4:b7:a6:4a:6e:88:40: 52:df:8d:9a:1b:41:5f:20:ec:e1:ac:87:1e:91:85: f9:95:55:c5:30:5d:30:13:4b:3c:4c:48:d8:44:51: 8c:09:34:64:80:ac:52:af:f9:27:65:fe:ed:66:dd: 9a:18:bb:14:3d:26:7d:63:01:14:a3:86:c0:d1:a1: 7a:de:10:e3:a5:c1:cb:75:99:4c:e7:a6:5b:cf:98: c0:e0:b4:e0:ab:60:f4:43:c8:97:1e:ac:53:6d:f4: ef:f7:d3:f6:87:67:7e:7c:6f:6c:77:2b:e5:f7:95: 79:cc:6e:46:3a:de:fa:e7:9e:21:6e:f7:fc:58:99: 1a:0b:f8:d4:70:e8:37:5e:4b:bd:fa:9c:ad:88:33: 17:e5:c4:fe:6f:5d:56:ea:57:a2:ff:4b:98:e0:31: a9:2a:b7:4f:43:5b:da:7f:5f:7e:75:ef:2d:24:41: a3:89:36:a5:23:42:1b:55:21:93:d6:be:8e:4a:23: 63:d2:10:d9:ce:33:f3:c4:f7:04:51:c1:90:0f:a2: cf:03:c9:d7:9e:67:3a:e2:3c:2b:15:e0:53:fc:43: 00:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:8A:0F:91:98:FE:70:D9:AF:AC:42:44:3E:79:2E:7D:DC:B7:C1:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2b54e030-771e-426d-9da1-303caa03d397/1d4d4e08-e65f-3f8e-940f-45549d30ca63.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2b54e030-771e-426d-9da1-303caa03d397/2b54e030-771e-426d-9da1-303caa03d397.crl X509v3 Authority Key Identifier: keyid:AF:D7:C6:CF:AC:B6:EE:36:20:7B:9A:92:B9:C4:12:48:FF:C7:24:C8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2b54e030-771e-426d-9da1-303caa03d397.cer sbgp-ipAddrBlock: critical IPv4: 23.145.236.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:d1:9c:0d:12:61:06:3c:bc:57:28:d0:9e:40:d5:56:8d:8d: f6:c7:c5:83:ba:9d:14:9c:d3:e3:4b:f9:1d:0a:4f:35:f6:c2: 07:fb:7b:96:76:79:81:7e:80:a2:0d:fc:6a:a9:7d:9e:8b:70: 4f:0d:9f:f7:e9:cb:9d:f6:0b:e6:09:d7:72:59:43:7a:43:96: d7:ad:fe:fe:25:46:d6:b6:04:0d:8e:90:66:af:fb:ae:43:ab: 37:18:9e:b2:15:0a:81:ba:b4:7b:5f:d1:aa:ee:56:52:24:9d: b3:f5:ef:97:f1:f1:3a:0e:5f:b7:b9:a7:54:11:95:c3:35:77: 13:b9:f1:ba:3d:be:d8:e5:70:47:16:75:f9:99:ee:4c:4d:cc: 56:30:6b:bf:4c:df:06:cf:1e:b8:47:62:45:41:6f:24:31:35: cd:57:bb:52:89:6e:be:47:8a:4d:9d:75:68:df:e1:75:a1:d8: 03:ac:17:0e:6f:e4:b3:ab:6b:af:c0:5e:9d:04:d0:83:74:b4: 2d:af:f9:ed:44:16:ef:ba:87:d1:8a:85:bd:2e:61:13:6e:ad: 2e:f3:08:f4:7e:30:33:09:32:26:1c:65:b7:41:ef:96:ee:dc: d2:ef:b8:a9:a9:cc:0d:f4:55:05:51:1b:94:8b:1b:8d:7a:f3: 14:9c:5b:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0jefACMyigS7//z0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmI1NGUwMzAtNzcxZS00MjZkLTlkYTEtMzAzY2FhMDNk Mzk3MB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk OGI5MjdiMjUtOGY0NC00YmI4LWFjZDItMjA2YmM4NDM2ZDFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj+51PEXSj71xBolDKH3jW1dqpoTFSEwKpPyO 0XCO6WjWDHB+IKS3pkpuiEBS342aG0FfIOzhrIcekYX5lVXFMF0wE0s8TEjYRFGM CTRkgKxSr/knZf7tZt2aGLsUPSZ9YwEUo4bA0aF63hDjpcHLdZlM56Zbz5jA4LTg q2D0Q8iXHqxTbfTv99P2h2d+fG9sdyvl95V5zG5GOt76554hbvf8WJkaC/jUcOg3 Xku9+pytiDMX5cT+b11W6lei/0uY4DGpKrdPQ1vaf19+de8tJEGjiTalI0IbVSGT 1r6OSiNj0hDZzjPzxPcEUcGQD6LPA8nXnmc64jwrFeBT/EMA+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN2KD5GY/nDZr6xCRD55Ln3ct8EWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8yYjU0 ZTAzMC03NzFlLTQyNmQtOWRhMS0zMDNjYWEwM2QzOTcvMWQ0ZDRlMDgtZTY1Zi0z ZjhlLTk0MGYtNDU1NDlkMzBjYTYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMmI1NGUwMzAtNzcxZS00MjZkLTlk YTEtMzAzY2FhMDNkMzk3LzJiNTRlMDMwLTc3MWUtNDI2ZC05ZGExLTMwM2NhYTAz ZDM5Ny5jcmwwHwYDVR0jBBgwFoAUr9fGz6y27jYge5qSucQSSP/HJMgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8yYjU0ZTAzMC03NzFlLTQyNmQtOWRhMS0zMDNj YWEwM2QzOTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5HsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ7RnA0SYQY8vFco0J5A1VaNjfbHxYO6nRSc0+NL+R0KTzX2wgf7e5Z2 eYF+gKIN/GqpfZ6LcE8Nn/fpy532C+YJ13JZQ3pDltet/v4lRta2BA2OkGav+65D qzcYnrIVCoG6tHtf0aruVlIknbP175fx8ToOX7e5p1QRlcM1dxO58bo9vtjlcEcW dfmZ7kxNzFYwa79M3wbPHrhHYkVBbyQxNc1Xu1KJbr5Hik2ddWjf4XWh2AOsFw5v 5LOra6/AXp0E0IN0tC2v+e1EFu+6h9GKhb0uYRNurS7zCPR+MDMJMiYcZbdB75bu 3NLvuKmpzA30VQVRG5SLG4168xScW7Y= -----END CERTIFICATE-----Generated at Thu Mar 26 19:40:27 2026 by rpki-client