$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ad39bc90-e9cf-4125-abe6-f75d99b1ca1c/636d67a7-5af2-301a-920c-7545dcd47635.roa File: 636d67a7-5af2-301a-920c-7545dcd47635.roa (raw, json) Hash identifier: WxyjaVBldvemhD5HfC3oFOFbJJz+qNOhClEaIz535kE= Subject key identifier: 3B:B0:B6:63:0C:DF:68:B5:DC:FE:72:21:DE:1B:DD:86:3B:05:16:BB Certificate issuer: /CN=ad39bc90-e9cf-4125-abe6-f75d99b1ca1c Certificate serial: 010D0C9F4328584D386A60072E7F95FC94704B20 Authority key identifier: 67:E1:A5:81:53:3B:4A:F3:41:9C:6C:CD:B6:19:CD:F3:1E:9D:5F:A1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ad39bc90-e9cf-4125-abe6-f75d99b1ca1c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ad39bc90-e9cf-4125-abe6-f75d99b1ca1c/636d67a7-5af2-301a-920c-7545dcd47635.roa Signing time: Thu 19 Mar 2026 13:00:41 +0000 ROA not before: Thu 19 Mar 2026 13:00:41 +0000 ROA not after: Wed 17 Jun 2026 13:00:41 +0000 asID: 401277 IP address blocks: 23.143.68.0/24 maxlen: 24 2602:f5c8::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ad39bc90-e9cf-4125-abe6-f75d99b1ca1c/ad39bc90-e9cf-4125-abe6-f75d99b1ca1c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ad39bc90-e9cf-4125-abe6-f75d99b1ca1c/ad39bc90-e9cf-4125-abe6-f75d99b1ca1c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ad39bc90-e9cf-4125-abe6-f75d99b1ca1c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:38:6a:60:07:2e:7f:95:fc:94:70:4b:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ad39bc90-e9cf-4125-abe6-f75d99b1ca1c Validity Not Before: Mar 19 13:00:41 2026 GMT Not After : Jun 17 13:00:41 2026 GMT Subject: CN=c36989c9-6ec9-4da2-a186-5cacdd04eecd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:94:d1:96:49:c0:58:f3:bd:25:4f:41:12:c2: 0d:23:c7:ee:d6:38:7e:8a:3a:18:53:42:ec:e6:1f: 77:d7:67:44:bb:45:dc:53:8d:d2:b2:81:a1:b7:dc: e0:06:91:24:a5:a5:54:5c:2a:63:1f:d0:98:a2:a1: a6:97:11:a3:00:fc:09:70:e2:9c:0b:c4:ff:be:6d: 80:3d:cf:4b:6c:06:79:62:4f:14:95:05:a0:24:54: 77:dd:20:90:0a:c9:bc:5e:bb:97:e2:b0:f7:c4:ea: 02:87:ba:40:f9:da:76:47:1e:11:45:75:e3:3d:3e: d7:5b:ff:6a:dc:db:d1:cd:a4:5f:d0:3e:ff:f1:20: 61:27:df:6d:35:d1:a8:db:23:14:aa:29:09:34:55: 62:d9:b1:13:c5:40:c2:61:b3:9e:b7:9a:4e:41:97: f2:cf:e5:bc:df:1f:98:b9:82:ab:37:e6:34:b2:e6: 4f:25:c8:00:e0:c3:12:95:6b:f1:5c:39:73:5a:c5: d7:15:1e:c5:cd:94:cf:67:cf:95:6c:92:9c:6f:1b: 2d:02:d3:5f:13:1a:b5:ff:ff:60:87:6d:70:79:24: 26:2d:bc:6a:a3:6b:22:a1:2b:3e:a8:ea:cd:da:f8: 8d:0b:6c:36:b6:a8:f2:4c:de:ad:e5:b9:1f:97:ea: 99:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:B0:B6:63:0C:DF:68:B5:DC:FE:72:21:DE:1B:DD:86:3B:05:16:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ad39bc90-e9cf-4125-abe6-f75d99b1ca1c/636d67a7-5af2-301a-920c-7545dcd47635.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ad39bc90-e9cf-4125-abe6-f75d99b1ca1c/ad39bc90-e9cf-4125-abe6-f75d99b1ca1c.crl X509v3 Authority Key Identifier: keyid:67:E1:A5:81:53:3B:4A:F3:41:9C:6C:CD:B6:19:CD:F3:1E:9D:5F:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/ad39bc90-e9cf-4125-abe6-f75d99b1ca1c.cer sbgp-ipAddrBlock: critical IPv4: 23.143.68.0/24 IPv6: 2602:f5c8::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 63:50:84:02:5e:dc:3d:d4:99:ed:33:17:d5:a2:7a:14:49:a5: 05:b7:48:b1:a0:9a:62:ac:1b:68:f8:ee:49:29:e5:83:b9:f4: df:d0:98:8f:9d:0b:6c:9a:96:13:d9:dd:9f:a7:08:0e:ba:bf: 8e:54:f3:bd:13:4b:05:90:5c:e6:41:89:89:39:5b:86:90:28: 87:ea:63:9e:17:c2:94:14:8f:b5:9b:12:fa:d2:e8:33:29:05: 7b:78:34:42:ba:0b:44:b4:de:cb:89:48:5a:4a:de:a8:17:6c: ce:40:93:dd:e1:43:b4:3a:81:57:07:12:f3:b7:9c:df:4e:f0: 4b:80:5a:83:ee:73:9a:c5:4c:d1:a0:27:b9:f5:46:f7:91:da: 8e:9c:35:2e:52:75:5c:9a:c7:4e:5f:2a:8e:e0:e5:24:8b:c6: 1b:f3:74:40:cd:37:fc:77:d7:54:84:a2:e2:a0:3f:5a:a3:f3: f8:5b:53:94:bf:1a:39:7e:22:5a:91:e7:69:26:8f:4f:4a:8a: 39:8f:e5:c3:ab:14:45:8b:86:7a:98:0c:45:56:82:f5:ae:4a: f1:fa:8c:fc:65:ac:a4:6d:c9:42:6e:61:c4:1b:5a:00:53:67: 01:8c:e7:3e:54:ab:34:f1:84:ed:5b:35:bc:17:44:3d:01:ee: 1f:03:0f:5d -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE04amAHLn+V/JRwSyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWQzOWJjOTAtZTljZi00MTI1LWFiZTYtZjc1ZDk5YjFj YTFjMB4XDTI2MDMxOTEzMDA0MVoXDTI2MDYxNzEzMDA0MVowLzEtMCsGA1UEAxMk YzM2OTg5YzktNmVjOS00ZGEyLWExODYtNWNhY2RkMDRlZWNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx5TRlknAWPO9JU9BEsINI8fu1jh+ijoYU0Ls 5h9312dEu0XcU43SsoGht9zgBpEkpaVUXCpjH9CYoqGmlxGjAPwJcOKcC8T/vm2A Pc9LbAZ5Yk8UlQWgJFR33SCQCsm8XruX4rD3xOoCh7pA+dp2Rx4RRXXjPT7XW/9q 3NvRzaRf0D7/8SBhJ99tNdGo2yMUqikJNFVi2bETxUDCYbOet5pOQZfyz+W83x+Y uYKrN+Y0suZPJcgA4MMSlWvxXDlzWsXXFR7FzZTPZ8+VbJKcbxstAtNfExq1//9g h21weSQmLbxqo2sioSs+qOrN2viNC2w2tqjyTN6t5bkfl+qZYQIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFDuwtmMM32i13P5yId4b3YY7BRa7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9hZDM5 YmM5MC1lOWNmLTQxMjUtYWJlNi1mNzVkOTliMWNhMWMvNjM2ZDY3YTctNWFmMi0z MDFhLTkyMGMtNzU0NWRjZDQ3NjM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYWQzOWJjOTAtZTljZi00MTI1LWFi ZTYtZjc1ZDk5YjFjYTFjL2FkMzliYzkwLWU5Y2YtNDEyNS1hYmU2LWY3NWQ5OWIx Y2ExYy5jcmwwHwYDVR0jBBgwFoAUZ+GlgVM7SvNBnGzNthnN8x6dX6EwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9hZDM5YmM5MC1lOWNmLTQxMjUtYWJlNi1mNzVk OTliMWNhMWMuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF49EMA4E AgACMAgDBgAmAvXIADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBjUIQCXtw91JntMxfVonoUSaUFt0ixoJpi rBto+O5JKeWDufTf0JiPnQtsmpYT2d2fpwgOur+OVPO9E0sFkFzmQYmJOVuGkCiH 6mOeF8KUFI+1mxL60ugzKQV7eDRCugtEtN7LiUhaSt6oF2zOQJPd4UO0OoFXBxLz t5zfTvBLgFqD7nOaxUzRoCe59Ub3kdqOnDUuUnVcmsdOXyqO4OUki8Yb83RAzTf8 d9dUhKLioD9ao/P4W1OUvxo5fiJakedpJo9PSoo5j+XDqxRFi4Z6mAxFVoL1rkrx +oz8ZaykbclCbmHEG1oAU2cBjOc+VKs08YTtWzW8F0Q9Ae4fAw9d -----END CERTIFICATE-----Generated at Thu Mar 26 17:58:16 2026 by rpki-client