$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cdbe5dd4-b9fa-4021-87a1-3002f80cc449/38de40ee-de7d-3e52-915c-2c28b398f4ea.roa File: 38de40ee-de7d-3e52-915c-2c28b398f4ea.roa (raw, json) Hash identifier: ALT78YPTlSluIUIgPhDtjMKYJUECAtcpuHAzh2OABA8= Subject key identifier: B6:DA:45:19:BF:AF:40:C5:46:69:82:43:44:9B:E1:66:FF:73:4A:55 Certificate issuer: /CN=cdbe5dd4-b9fa-4021-87a1-3002f80cc449 Certificate serial: 010D0C9F4328584D300AB2944E9394751672B080 Authority key identifier: 8F:E0:86:0F:8B:FB:5A:AD:69:DE:14:F1:B7:49:0D:90:6A:61:C3:2B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cdbe5dd4-b9fa-4021-87a1-3002f80cc449.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cdbe5dd4-b9fa-4021-87a1-3002f80cc449/38de40ee-de7d-3e52-915c-2c28b398f4ea.roa Signing time: Mon 16 Mar 2026 13:00:40 +0000 ROA not before: Mon 16 Mar 2026 13:00:40 +0000 ROA not after: Sun 14 Jun 2026 13:00:40 +0000 asID: 3257 IP address blocks: 23.140.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cdbe5dd4-b9fa-4021-87a1-3002f80cc449/cdbe5dd4-b9fa-4021-87a1-3002f80cc449.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cdbe5dd4-b9fa-4021-87a1-3002f80cc449/cdbe5dd4-b9fa-4021-87a1-3002f80cc449.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cdbe5dd4-b9fa-4021-87a1-3002f80cc449.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:30:0a:b2:94:4e:93:94:75:16:72:b0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cdbe5dd4-b9fa-4021-87a1-3002f80cc449 Validity Not Before: Mar 16 13:00:40 2026 GMT Not After : Jun 14 13:00:40 2026 GMT Subject: CN=d1a2533d-65ff-4e5a-a287-441b23f5dd47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:3e:0d:91:aa:dd:60:76:6b:ee:16:90:10:bd: 1e:37:20:fb:d7:eb:50:aa:23:3a:de:b4:a7:28:2c: cf:d7:0d:dc:4e:d7:f9:0f:06:04:b1:f4:5b:a5:8f: f1:3e:2e:c7:3a:93:fb:8f:ca:dc:6a:45:f5:11:33: 2b:cb:f8:e1:c9:38:08:1a:c0:0e:98:94:33:8f:fa: ec:94:c4:0f:5c:7f:7a:8c:41:14:38:6d:e1:41:5d: 65:37:ee:f1:bf:e0:05:d3:a3:fc:66:7e:3c:23:70: b3:91:99:76:79:29:75:fa:ed:0f:61:4d:51:22:2d: f3:ef:69:51:0e:0c:9d:87:53:c3:b6:87:5d:c1:88: 28:f5:60:23:aa:17:a4:ab:02:21:46:da:1b:3e:f6: 20:94:97:db:dc:87:cb:30:74:9e:11:be:cb:66:db: c6:e0:59:76:9c:79:ae:bc:0e:fa:01:e2:00:2b:48: 41:da:0f:f3:7a:99:44:0b:d1:93:92:fe:9c:c4:eb: 43:7f:c8:15:8d:54:26:cd:61:54:c4:47:57:ee:59: 3d:74:3c:ab:cf:91:b2:5b:e2:a2:6d:17:46:02:85: c3:4a:0a:93:b7:dd:5f:85:b1:64:0c:f1:77:7a:ec: 72:da:05:fb:fe:cc:ae:69:c0:b1:41:1a:9a:95:49: 00:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:DA:45:19:BF:AF:40:C5:46:69:82:43:44:9B:E1:66:FF:73:4A:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cdbe5dd4-b9fa-4021-87a1-3002f80cc449/38de40ee-de7d-3e52-915c-2c28b398f4ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cdbe5dd4-b9fa-4021-87a1-3002f80cc449/cdbe5dd4-b9fa-4021-87a1-3002f80cc449.crl X509v3 Authority Key Identifier: keyid:8F:E0:86:0F:8B:FB:5A:AD:69:DE:14:F1:B7:49:0D:90:6A:61:C3:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cdbe5dd4-b9fa-4021-87a1-3002f80cc449.cer sbgp-ipAddrBlock: critical IPv4: 23.140.148.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:1d:24:0c:9a:9a:37:a1:85:59:ad:c6:aa:2f:40:71:4d:18: ce:0f:3c:24:89:bf:c2:7d:53:7a:e2:83:d0:6d:c4:9a:d1:e7: 29:80:83:7c:d5:f0:f5:fb:d7:a0:9b:6b:f3:87:82:d3:27:bc: 2a:80:b6:54:5d:a6:2a:a6:76:b8:07:20:7c:bf:84:32:ac:82: 75:0a:88:05:52:90:a2:f9:b9:c9:88:75:0a:63:e3:9b:c5:ce: a5:ee:a5:fd:70:c9:af:77:dd:6d:ca:2e:d5:56:09:7b:bb:23: e2:07:7d:70:8f:4c:ae:0b:97:9b:de:a7:43:3e:54:57:5d:d4: e2:ba:ef:d2:3c:f5:9f:c9:37:1a:e6:18:8e:86:94:3c:48:cd: e9:36:e0:4d:67:4e:32:cd:60:81:99:34:9b:a8:65:92:5d:12: c0:82:c0:60:90:28:f8:8d:36:14:9e:16:1a:a0:24:4d:f5:4b: af:cb:4a:f4:fb:0f:0d:68:0b:fd:28:7d:0a:ba:89:0e:7b:c4: 78:a0:0f:7c:65:a6:e4:62:1a:01:4d:90:7b:e7:f7:6b:b6:80: b1:e4:5f:fd:6e:fd:0d:27:5c:d4:99:c3:f6:10:96:34:44:5a: 23:59:6d:a8:7d:67:b0:3b:18:2d:2e:82:df:f2:33:eb:88:a3: d7:f8:71:b5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0wCrKUTpOUdRZysIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2RiZTVkZDQtYjlmYS00MDIxLTg3YTEtMzAwMmY4MGNj NDQ5MB4XDTI2MDMxNjEzMDA0MFoXDTI2MDYxNDEzMDA0MFowLzEtMCsGA1UEAxMk ZDFhMjUzM2QtNjVmZi00ZTVhLWEyODctNDQxYjIzZjVkZDQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlj4NkardYHZr7haQEL0eNyD71+tQqiM63rSn KCzP1w3cTtf5DwYEsfRbpY/xPi7HOpP7j8rcakX1ETMry/jhyTgIGsAOmJQzj/rs lMQPXH96jEEUOG3hQV1lN+7xv+AF06P8Zn48I3CzkZl2eSl1+u0PYU1RIi3z72lR Dgydh1PDtoddwYgo9WAjqhekqwIhRtobPvYglJfb3IfLMHSeEb7LZtvG4Fl2nHmu vA76AeIAK0hB2g/zeplEC9GTkv6cxOtDf8gVjVQmzWFUxEdX7lk9dDyrz5GyW+Ki bRdGAoXDSgqTt91fhbFkDPF3euxy2gX7/syuacCxQRqalUkA4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLbaRRm/r0DFRmmCQ0Sb4Wb/c0pVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jZGJl NWRkNC1iOWZhLTQwMjEtODdhMS0zMDAyZjgwY2M0NDkvMzhkZTQwZWUtZGU3ZC0z ZTUyLTkxNWMtMmMyOGIzOThmNGVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvY2RiZTVkZDQtYjlmYS00MDIxLTg3 YTEtMzAwMmY4MGNjNDQ5L2NkYmU1ZGQ0LWI5ZmEtNDAyMS04N2ExLTMwMDJmODBj YzQ0OS5jcmwwHwYDVR0jBBgwFoAUj+CGD4v7Wq1p3hTxt0kNkGphwyswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jZGJlNWRkNC1iOWZhLTQwMjEtODdhMS0zMDAy ZjgwY2M0NDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4yUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIsdJAyamjehhVmtxqovQHFNGM4PPCSJv8J9U3rig9BtxJrR5ymAg3zV 8PX716Cba/OHgtMnvCqAtlRdpiqmdrgHIHy/hDKsgnUKiAVSkKL5ucmIdQpj45vF zqXupf1wya933W3KLtVWCXu7I+IHfXCPTK4Ll5vep0M+VFdd1OK679I89Z/JNxrm GI6GlDxIzek24E1nTjLNYIGZNJuoZZJdEsCCwGCQKPiNNhSeFhqgJE31S6/LSvT7 Dw1oC/0ofQq6iQ57xHigD3xlpuRiGgFNkHvn92u2gLHkX/1u/Q0nXNSZw/YQljRE WiNZbah9Z7A7GC0ugt/yM+uIo9f4cbU= -----END CERTIFICATE-----Generated at Thu Mar 26 09:22:26 2026 by rpki-client