$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2c2d2b6e-86ad-42ce-9f37-1c1f69efa871/9cddb93c-d15f-368f-b4c7-9146332ae632.roa File: 9cddb93c-d15f-368f-b4c7-9146332ae632.roa (raw, json) Hash identifier: eGOstYVoWvqdM9a9ZYvIYxntuD0IX0r0OEdIfeCS9WU= Subject key identifier: C4:FE:12:36:EA:82:C8:67:C5:10:3F:67:4D:F3:9E:C4:75:C2:7A:0E Certificate issuer: /CN=2c2d2b6e-86ad-42ce-9f37-1c1f69efa871 Certificate serial: 010D0C9F4328584D2644D3F9428A3301A69DF2D0 Authority key identifier: 31:62:ED:F7:A2:34:9C:95:C9:82:09:B9:68:A6:96:16:A4:85:2A:87 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2c2d2b6e-86ad-42ce-9f37-1c1f69efa871.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2c2d2b6e-86ad-42ce-9f37-1c1f69efa871/9cddb93c-d15f-368f-b4c7-9146332ae632.roa Signing time: Fri 13 Mar 2026 01:00:31 +0000 ROA not before: Fri 13 Mar 2026 01:00:31 +0000 ROA not after: Thu 11 Jun 2026 01:00:31 +0000 asID: 401805 IP address blocks: 23.141.108.0/24 maxlen: 24 2602:f5f7::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2c2d2b6e-86ad-42ce-9f37-1c1f69efa871/2c2d2b6e-86ad-42ce-9f37-1c1f69efa871.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2c2d2b6e-86ad-42ce-9f37-1c1f69efa871/2c2d2b6e-86ad-42ce-9f37-1c1f69efa871.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2c2d2b6e-86ad-42ce-9f37-1c1f69efa871.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:26:44:d3:f9:42:8a:33:01:a6:9d:f2:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2c2d2b6e-86ad-42ce-9f37-1c1f69efa871 Validity Not Before: Mar 13 01:00:31 2026 GMT Not After : Jun 11 01:00:31 2026 GMT Subject: CN=c3cfee50-2f09-4084-91b1-b487ba2705ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:9a:61:b1:4b:5c:48:02:64:7c:75:81:cd:f6: 75:fe:be:f4:2b:24:ad:58:4f:68:43:07:5a:2d:ff: 33:05:e9:d7:e6:3a:f7:66:47:47:b3:bf:45:8b:2c: 98:c6:0b:7c:63:d1:d7:57:72:d0:2d:5c:f5:63:af: bf:f8:f8:9d:0b:a3:3b:1d:07:61:50:0f:3e:22:53: 94:b0:32:2d:be:ad:3b:8d:f5:cd:c0:ed:e6:ef:d3: 8b:57:4b:b9:f5:31:60:eb:71:cd:10:d6:44:6a:b3: 08:b5:e7:b4:16:b6:c8:e2:39:18:a9:2a:dd:f1:0d: 61:90:aa:cd:ec:a1:eb:4e:a8:23:f0:4b:d4:c5:ca: 88:72:38:32:28:9a:dd:db:22:4d:ca:29:e4:72:f8: dc:aa:61:95:03:1a:4a:be:23:47:31:18:77:42:2f: 56:86:35:39:1b:ea:83:68:64:bb:3f:a1:b5:70:af: 4e:a6:63:2a:6d:2c:22:9a:a7:e8:01:4b:c6:fc:e1: 29:1d:3e:97:20:17:78:e2:a2:4c:af:1b:1b:f3:58: 33:60:bf:e7:e2:b1:73:a5:7e:89:40:03:05:6b:4b: f1:b0:25:53:c0:f9:66:90:85:2e:52:e5:87:59:38: d3:34:7e:79:7f:88:2b:e9:93:90:57:84:4a:63:8b: 26:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:FE:12:36:EA:82:C8:67:C5:10:3F:67:4D:F3:9E:C4:75:C2:7A:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2c2d2b6e-86ad-42ce-9f37-1c1f69efa871/9cddb93c-d15f-368f-b4c7-9146332ae632.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2c2d2b6e-86ad-42ce-9f37-1c1f69efa871/2c2d2b6e-86ad-42ce-9f37-1c1f69efa871.crl X509v3 Authority Key Identifier: keyid:31:62:ED:F7:A2:34:9C:95:C9:82:09:B9:68:A6:96:16:A4:85:2A:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/2c2d2b6e-86ad-42ce-9f37-1c1f69efa871.cer sbgp-ipAddrBlock: critical IPv4: 23.141.108.0/24 IPv6: 2602:f5f7::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:dd:10:d4:63:b1:2a:70:52:c7:bc:c4:21:bf:68:45:4b:30: 79:08:4f:61:c7:e3:7a:b7:fe:c9:cb:39:d9:9b:55:13:ce:53: 27:10:86:9c:d6:cb:37:3b:11:cb:8f:92:45:b8:35:cf:95:09: 3d:fe:ec:42:4c:7a:09:53:93:65:cb:b7:bd:1b:02:39:00:f2: cc:05:bc:f2:a1:52:2e:c6:85:a7:36:6d:86:5d:9c:54:42:dc: 93:7f:dc:ef:ac:4c:04:a6:53:47:a9:34:36:69:83:2b:40:95: 99:15:a5:d9:f0:91:74:25:8e:94:40:c8:6a:dc:13:6b:bb:5a: 21:7a:69:0f:14:90:85:34:7d:2a:db:1c:e2:6a:64:b8:d3:5d: e7:49:a4:58:2d:3b:f7:af:9a:e7:6a:b3:0d:3d:fe:2b:36:56: a1:a8:6f:e9:38:39:f1:4b:ea:d6:10:c5:9e:f4:12:e5:28:6c: 86:a1:86:23:a9:26:65:e7:5b:ca:c0:cc:bc:ed:ee:e1:69:8c: 38:11:c0:f8:6f:20:70:f7:24:09:ff:48:8e:9e:2a:41:04:af: 46:87:54:8b:ea:8a:32:25:75:f2:93:43:0d:d9:74:f0:44:aa: 9a:c9:59:56:1e:af:be:b9:24:b3:fe:ee:86:e0:2c:18:73:ac: d6:27:b9:da -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE0mRNP5QoozAaad8tAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmMyZDJiNmUtODZhZC00MmNlLTlmMzctMWMxZjY5ZWZh ODcxMB4XDTI2MDMxMzAxMDAzMVoXDTI2MDYxMTAxMDAzMVowLzEtMCsGA1UEAxMk YzNjZmVlNTAtMmYwOS00MDg0LTkxYjEtYjQ4N2JhMjcwNWFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg5phsUtcSAJkfHWBzfZ1/r70KyStWE9oQwda Lf8zBenX5jr3ZkdHs79FiyyYxgt8Y9HXV3LQLVz1Y6+/+PidC6M7HQdhUA8+IlOU sDItvq07jfXNwO3m79OLV0u59TFg63HNENZEarMItee0FrbI4jkYqSrd8Q1hkKrN 7KHrTqgj8EvUxcqIcjgyKJrd2yJNyinkcvjcqmGVAxpKviNHMRh3Qi9WhjU5G+qD aGS7P6G1cK9OpmMqbSwimqfoAUvG/OEpHT6XIBd44qJMrxsb81gzYL/n4rFzpX6J QAMFa0vxsCVTwPlmkIUuUuWHWTjTNH55f4gr6ZOQV4RKY4sm1QIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFMT+EjbqgshnxRA/Z03znsR1wnoOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8yYzJk MmI2ZS04NmFkLTQyY2UtOWYzNy0xYzFmNjllZmE4NzEvOWNkZGI5M2MtZDE1Zi0z NjhmLWI0YzctOTE0NjMzMmFlNjMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMmMyZDJiNmUtODZhZC00MmNlLTlm MzctMWMxZjY5ZWZhODcxLzJjMmQyYjZlLTg2YWQtNDJjZS05ZjM3LTFjMWY2OWVm YTg3MS5jcmwwHwYDVR0jBBgwFoAUMWLt96I0nJXJggm5aKaWFqSFKocwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8yYzJkMmI2ZS04NmFkLTQyY2UtOWYzNy0xYzFm NjllZmE4NzEuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF41sMA4E AgACMAgDBgAmAvX3ADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBB3RDUY7EqcFLHvMQhv2hFSzB5CE9hx+N6 t/7JyznZm1UTzlMnEIac1ss3OxHLj5JFuDXPlQk9/uxCTHoJU5Nly7e9GwI5APLM BbzyoVIuxoWnNm2GXZxUQtyTf9zvrEwEplNHqTQ2aYMrQJWZFaXZ8JF0JY6UQMhq 3BNru1ohemkPFJCFNH0q2xziamS4013nSaRYLTv3r5rnarMNPf4rNlahqG/pODnx S+rWEMWe9BLlKGyGoYYjqSZl51vKwMy87e7haYw4EcD4byBw9yQJ/0iOnipBBK9G h1SL6ooyJXXyk0MN2XTwRKqayVlWHq++uSSz/u6G4CwYc6zWJ7na -----END CERTIFICATE-----Generated at Thu Mar 26 04:25:18 2026 by rpki-client