$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cb00fdf5-e28b-4e9d-9620-9504972438e2/8e87b93f-f077-3393-9870-dbc62c961c83.roa File: 8e87b93f-f077-3393-9870-dbc62c961c83.roa (raw, json) Hash identifier: lIkk8i4+6OEo8gfesAfsXg3B0wZeai24b8iZzPyMkGI= Subject key identifier: D9:C7:C5:57:47:AF:DB:AB:AE:FD:E8:3F:8C:7E:54:DE:F7:C2:5A:1F Certificate issuer: /CN=cb00fdf5-e28b-4e9d-9620-9504972438e2 Certificate serial: 010D0C9F4328584D2A74E45D3A7899A9BECB6780 Authority key identifier: 49:08:38:C4:AD:B3:64:D0:A3:0D:D4:F7:B6:40:2F:C9:28:50:B8:8C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cb00fdf5-e28b-4e9d-9620-9504972438e2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cb00fdf5-e28b-4e9d-9620-9504972438e2/8e87b93f-f077-3393-9870-dbc62c961c83.roa Signing time: Sat 14 Mar 2026 13:00:40 +0000 ROA not before: Sat 14 Mar 2026 13:00:40 +0000 ROA not after: Fri 12 Jun 2026 13:00:40 +0000 asID: 54004 IP address blocks: 23.141.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cb00fdf5-e28b-4e9d-9620-9504972438e2/cb00fdf5-e28b-4e9d-9620-9504972438e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cb00fdf5-e28b-4e9d-9620-9504972438e2/cb00fdf5-e28b-4e9d-9620-9504972438e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cb00fdf5-e28b-4e9d-9620-9504972438e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2a:74:e4:5d:3a:78:99:a9:be:cb:67:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cb00fdf5-e28b-4e9d-9620-9504972438e2 Validity Not Before: Mar 14 13:00:40 2026 GMT Not After : Jun 12 13:00:40 2026 GMT Subject: CN=5f9ee152-6699-4fce-b2be-55118060b783 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:c7:6e:c8:e6:52:e0:cb:12:e2:e2:8b:ba:dc: 45:42:7a:ea:05:e2:46:b3:6e:13:e2:3a:69:65:55: 7a:b8:41:eb:ca:e9:7d:ca:d2:36:7a:e9:d4:b7:67: 21:b5:bd:cb:09:dc:a7:b1:9a:e3:f0:77:6c:d7:f0: 3c:80:79:24:1c:8c:4b:49:37:ab:73:dc:50:fa:4d: f8:2c:5a:7e:4a:3a:5c:dd:1c:74:7c:9b:2e:17:d1: 82:c7:5f:60:b0:cf:30:f7:0d:0c:99:ad:89:65:ce: 95:a7:20:68:82:7e:20:d7:8e:59:a6:f6:4f:93:a6: 2b:74:e4:a0:67:1f:fa:53:e0:4a:af:ce:00:f2:93: 3d:a1:ea:8d:91:2c:7f:ea:51:25:45:ec:4b:ba:9a: 7e:28:09:95:b7:90:0e:69:1e:df:40:72:e8:40:a1: bf:46:49:ab:a5:5f:2e:7b:8e:d2:e6:41:da:4c:71: 0b:86:2e:d0:5b:cf:ab:af:dc:19:8b:1b:2f:92:73: 99:25:0f:eb:a2:3c:a4:19:4d:dc:98:0a:9f:f1:81: a8:e2:85:61:46:23:74:7c:39:22:cd:af:dd:ff:21: 4a:6e:f7:36:fe:ae:ff:08:fc:66:98:46:1d:d1:d6: 7b:c2:e7:c7:20:fa:1e:8f:c6:cc:72:77:88:1d:86: 1f:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:C7:C5:57:47:AF:DB:AB:AE:FD:E8:3F:8C:7E:54:DE:F7:C2:5A:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cb00fdf5-e28b-4e9d-9620-9504972438e2/8e87b93f-f077-3393-9870-dbc62c961c83.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cb00fdf5-e28b-4e9d-9620-9504972438e2/cb00fdf5-e28b-4e9d-9620-9504972438e2.crl X509v3 Authority Key Identifier: keyid:49:08:38:C4:AD:B3:64:D0:A3:0D:D4:F7:B6:40:2F:C9:28:50:B8:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cb00fdf5-e28b-4e9d-9620-9504972438e2.cer sbgp-ipAddrBlock: critical IPv4: 23.141.132.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:2f:c7:c6:a2:5e:ef:28:c5:6b:a5:44:3c:26:c8:a2:42:74: 8f:fa:01:22:a7:36:d8:48:9a:74:f9:67:d3:db:15:7a:09:ba: ad:5f:69:c2:f7:b9:b6:94:7f:5c:a2:9c:ee:aa:43:75:bb:f4: a7:21:3c:af:98:40:37:be:5c:25:44:1c:56:0d:64:22:71:d6: f6:db:2e:75:b7:be:a0:c5:42:fe:08:c5:74:9b:f1:93:56:3f: fa:77:db:68:3a:2d:40:ad:b3:84:c7:d5:09:c3:4e:b3:eb:77: fe:05:fe:79:f2:e3:e2:23:8f:b5:03:d3:ab:c9:4b:6d:91:ce: 79:ba:b6:10:14:0a:ac:d1:c7:8a:12:e9:9e:ef:d6:e6:a8:f4: 8a:2b:3d:d8:ef:1c:9e:ea:d9:c7:b0:d6:8d:3d:9b:36:57:5e: 92:7c:d7:31:dc:dc:6a:08:75:8a:a5:92:f1:0f:2d:97:03:75: c0:90:18:f4:12:55:7d:2e:b2:f6:b5:5f:ec:99:7d:0f:2d:d2: 8b:3c:b3:5a:cc:ff:56:40:c3:08:e8:95:9f:7c:ca:dd:74:95: fe:23:8d:90:e3:c5:b0:35:21:07:aa:9e:f7:f0:64:e9:33:7e: 69:a9:cb:19:40:06:78:db:42:67:e9:98:e6:d6:00:b9:3a:be: 34:35:6a:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0qdORdOniZqb7LZ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2IwMGZkZjUtZTI4Yi00ZTlkLTk2MjAtOTUwNDk3MjQz OGUyMB4XDTI2MDMxNDEzMDA0MFoXDTI2MDYxMjEzMDA0MFowLzEtMCsGA1UEAxMk NWY5ZWUxNTItNjY5OS00ZmNlLWIyYmUtNTUxMTgwNjBiNzgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApcduyOZS4MsS4uKLutxFQnrqBeJGs24T4jpp ZVV6uEHryul9ytI2eunUt2chtb3LCdynsZrj8Hds1/A8gHkkHIxLSTerc9xQ+k34 LFp+Sjpc3Rx0fJsuF9GCx19gsM8w9w0Mma2JZc6VpyBogn4g145ZpvZPk6YrdOSg Zx/6U+BKr84A8pM9oeqNkSx/6lElRexLupp+KAmVt5AOaR7fQHLoQKG/RkmrpV8u e47S5kHaTHELhi7QW8+rr9wZixsvknOZJQ/rojykGU3cmAqf8YGo4oVhRiN0fDki za/d/yFKbvc2/q7/CPxmmEYd0dZ7wufHIPoej8bMcneIHYYfIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNnHxVdHr9urrv3oP4x+VN73wlofMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jYjAw ZmRmNS1lMjhiLTRlOWQtOTYyMC05NTA0OTcyNDM4ZTIvOGU4N2I5M2YtZjA3Ny0z MzkzLTk4NzAtZGJjNjJjOTYxYzgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvY2IwMGZkZjUtZTI4Yi00ZTlkLTk2 MjAtOTUwNDk3MjQzOGUyL2NiMDBmZGY1LWUyOGItNGU5ZC05NjIwLTk1MDQ5NzI0 MzhlMi5jcmwwHwYDVR0jBBgwFoAUSQg4xK2zZNCjDdT3tkAvyShQuIwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jYjAwZmRmNS1lMjhiLTRlOWQtOTYyMC05NTA0 OTcyNDM4ZTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF42EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABcvx8aiXu8oxWulRDwmyKJCdI/6ASKnNthImnT5Z9PbFXoJuq1facL3 ubaUf1yinO6qQ3W79KchPK+YQDe+XCVEHFYNZCJx1vbbLnW3vqDFQv4IxXSb8ZNW P/p322g6LUCts4TH1QnDTrPrd/4F/nny4+Ijj7UD06vJS22Rznm6thAUCqzRx4oS 6Z7v1uao9IorPdjvHJ7q2cew1o09mzZXXpJ81zHc3GoIdYqlkvEPLZcDdcCQGPQS VX0usva1X+yZfQ8t0os8s1rM/1ZAwwjolZ98yt10lf4jjZDjxbA1IQeqnvfwZOkz fmmpyxlABnjbQmfpmObWALk6vjQ1avI= -----END CERTIFICATE-----Generated at Thu Mar 26 05:44:12 2026 by rpki-client