$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8e5b6975-a14a-49a5-bbe6-66396778d718/9c3fc31a-86bb-323c-9085-2e09b9e1d4a4.roa File: 9c3fc31a-86bb-323c-9085-2e09b9e1d4a4.roa (raw, json) Hash identifier: mq/W4ODpmYC+VWK1EkuvJgj4srOP+1a5r8ty4HpzDFw= Subject key identifier: 3A:8B:2A:74:90:E4:7C:7E:0F:C9:36:4C:DF:79:3C:7B:26:50:97:DA Certificate issuer: /CN=8e5b6975-a14a-49a5-bbe6-66396778d718 Certificate serial: 010D0C9F4328584D300A5376351C83CDEE771C40 Authority key identifier: 5C:C1:7D:61:BF:86:1A:A5:EF:54:15:7A:62:D8:0F:E8:61:83:39:DE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8e5b6975-a14a-49a5-bbe6-66396778d718.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8e5b6975-a14a-49a5-bbe6-66396778d718/9c3fc31a-86bb-323c-9085-2e09b9e1d4a4.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 401561 IP address blocks: 23.130.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8e5b6975-a14a-49a5-bbe6-66396778d718/8e5b6975-a14a-49a5-bbe6-66396778d718.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8e5b6975-a14a-49a5-bbe6-66396778d718/8e5b6975-a14a-49a5-bbe6-66396778d718.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8e5b6975-a14a-49a5-bbe6-66396778d718.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:53:76:35:1c:83:cd:ee:77:1c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e5b6975-a14a-49a5-bbe6-66396778d718 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=a1bd8279-e1f3-44f7-ac2a-582db1f4e70f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:38:e6:75:33:17:e5:18:7a:f8:01:2d:01:83: cc:32:37:d3:ed:43:27:f3:38:3e:28:29:d6:77:e3: 05:29:ed:b3:dd:22:ba:2f:f5:a7:6f:d3:6d:ea:0f: 59:5a:f1:84:13:56:1b:e4:d6:03:53:c5:8f:e5:0a: 73:85:f1:80:6d:8a:43:47:25:cc:c0:ed:80:57:55: c7:57:43:ce:e2:d3:8f:6f:d7:c1:ac:a2:7b:80:7b: d5:ce:6e:ac:46:a2:7a:0b:72:c3:e2:88:f0:c6:6c: db:fc:ba:95:af:f9:0c:13:4e:df:16:56:cf:d0:c2: 39:bf:67:2e:61:7b:1b:9d:7c:ba:ac:31:ff:2e:b7: 7b:36:1d:13:a4:37:d0:d8:53:45:d7:f3:a3:64:a6: ae:7f:4c:8c:70:fb:83:01:f0:39:fb:1d:bc:e0:5d: a5:aa:67:ef:26:9b:93:50:90:de:16:ac:5b:cb:2f: 8f:df:06:34:ba:34:c0:aa:c7:02:57:3b:77:84:55: 6d:00:10:cb:f8:56:75:01:b2:d8:98:24:1e:01:0f: 59:ba:b8:b1:cf:b5:e0:b0:ae:45:31:44:e9:59:d5: bb:01:38:8d:6d:67:04:ab:24:e7:37:af:c7:ee:a9: 11:6f:5a:9f:f4:4d:0a:b1:e0:c1:d1:06:f7:b7:64: 99:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:8B:2A:74:90:E4:7C:7E:0F:C9:36:4C:DF:79:3C:7B:26:50:97:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8e5b6975-a14a-49a5-bbe6-66396778d718/9c3fc31a-86bb-323c-9085-2e09b9e1d4a4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8e5b6975-a14a-49a5-bbe6-66396778d718/8e5b6975-a14a-49a5-bbe6-66396778d718.crl X509v3 Authority Key Identifier: keyid:5C:C1:7D:61:BF:86:1A:A5:EF:54:15:7A:62:D8:0F:E8:61:83:39:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/8e5b6975-a14a-49a5-bbe6-66396778d718.cer sbgp-ipAddrBlock: critical IPv4: 23.130.148.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:d7:7f:1e:b0:13:b2:a7:c2:03:17:78:c7:52:52:3c:47:66: 68:86:df:d2:19:79:c0:64:f9:cb:5b:8f:ce:bf:92:2d:9a:67: aa:fc:7b:a6:83:25:c0:95:cd:c1:88:a2:22:71:aa:a3:23:29: 0a:a9:7c:4c:c7:dd:dd:8a:51:6e:26:0a:8e:f7:50:b4:77:cd: bb:58:c3:16:31:e4:cc:d6:23:28:fd:d3:92:e5:6a:b3:49:b9: 10:31:8b:9f:66:80:37:e8:68:f6:6c:f1:a0:7d:bc:3b:ac:6a: 13:aa:45:c7:63:5a:00:4d:e2:c8:7d:31:20:d5:6c:97:49:c0: 29:7e:72:4d:86:de:fa:b4:74:35:3d:df:32:f5:33:61:1a:c3: 21:cf:46:72:77:00:5f:8f:8a:2c:f0:e7:6c:4f:0c:e1:e9:97: a5:7e:61:55:22:05:61:67:f2:6b:25:37:3b:05:eb:0c:8e:67: 07:eb:d0:69:0e:04:09:1f:e9:d6:2f:9b:22:ef:6a:2b:71:78: b6:60:ab:4f:0f:7d:3f:27:2c:c2:b8:1c:c0:f2:d6:61:69:66: cb:09:26:17:37:d6:3d:07:9b:2f:c3:a5:43:0a:2f:35:90:27: a0:67:d7:ec:a9:d2:ad:29:8e:70:cc:ce:87:cf:64:4b:61:15: 5e:47:69:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0wClN2NRyDze53HEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGU1YjY5NzUtYTE0YS00OWE1LWJiZTYtNjYzOTY3Nzhk NzE4MB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk YTFiZDgyNzktZTFmMy00NGY3LWFjMmEtNTgyZGIxZjRlNzBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnzjmdTMX5Rh6+AEtAYPMMjfT7UMn8zg+KCnW d+MFKe2z3SK6L/Wnb9Nt6g9ZWvGEE1Yb5NYDU8WP5QpzhfGAbYpDRyXMwO2AV1XH V0PO4tOPb9fBrKJ7gHvVzm6sRqJ6C3LD4ojwxmzb/LqVr/kME07fFlbP0MI5v2cu YXsbnXy6rDH/Lrd7Nh0TpDfQ2FNF1/OjZKauf0yMcPuDAfA5+x284F2lqmfvJpuT UJDeFqxbyy+P3wY0ujTAqscCVzt3hFVtABDL+FZ1AbLYmCQeAQ9Zurixz7XgsK5F MUTpWdW7ATiNbWcEqyTnN6/H7qkRb1qf9E0KseDB0Qb3t2SZUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDqLKnSQ5Hx+D8k2TN95PHsmUJfaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC84ZTVi Njk3NS1hMTRhLTQ5YTUtYmJlNi02NjM5Njc3OGQ3MTgvOWMzZmMzMWEtODZiYi0z MjNjLTkwODUtMmUwOWI5ZTFkNGE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvOGU1YjY5NzUtYTE0YS00OWE1LWJi ZTYtNjYzOTY3NzhkNzE4LzhlNWI2OTc1LWExNGEtNDlhNS1iYmU2LTY2Mzk2Nzc4 ZDcxOC5jcmwwHwYDVR0jBBgwFoAUXMF9Yb+GGqXvVBV6YtgP6GGDOd4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC84ZTViNjk3NS1hMTRhLTQ5YTUtYmJlNi02NjM5 Njc3OGQ3MTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4KUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAbXfx6wE7KnwgMXeMdSUjxHZmiG39IZecBk+ctbj86/ki2aZ6r8e6aD JcCVzcGIoiJxqqMjKQqpfEzH3d2KUW4mCo73ULR3zbtYwxYx5MzWIyj905LlarNJ uRAxi59mgDfoaPZs8aB9vDusahOqRcdjWgBN4sh9MSDVbJdJwCl+ck2G3vq0dDU9 3zL1M2EawyHPRnJ3AF+Piizw52xPDOHpl6V+YVUiBWFn8mslNzsF6wyOZwfr0GkO BAkf6dYvmyLvaitxeLZgq08PfT8nLMK4HMDy1mFpZssJJhc31j0Hmy/DpUMKLzWQ J6Bn1+yp0q0pjnDMzofPZEthFV5HaZo= -----END CERTIFICATE-----Generated at Thu Mar 26 07:31:25 2026 by rpki-client