$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e2e521d7-dbfb-433c-b301-ee863aee12cd/97809f3e-1adc-322e-a56f-ba22f7c77564.roa File: 97809f3e-1adc-322e-a56f-ba22f7c77564.roa (raw, json) Hash identifier: cSm86aeVOOXhWVIeE8FNkJYZLUcBn753L0ycSpuGRCo= Subject key identifier: 37:68:53:F2:7A:7A:FD:70:43:4A:1A:69:09:47:06:E5:91:E7:66:95 Certificate issuer: /CN=e2e521d7-dbfb-433c-b301-ee863aee12cd Certificate serial: 010D0C9F4328584D386A35FB3E1AF4B61A20B580 Authority key identifier: 5F:BA:B5:53:33:9D:DC:E6:30:1A:F3:9C:79:5A:BB:BC:A8:EB:0B:12 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e2e521d7-dbfb-433c-b301-ee863aee12cd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e2e521d7-dbfb-433c-b301-ee863aee12cd/97809f3e-1adc-322e-a56f-ba22f7c77564.roa Signing time: Thu 19 Mar 2026 13:00:41 +0000 ROA not before: Thu 19 Mar 2026 13:00:41 +0000 ROA not after: Wed 17 Jun 2026 13:00:41 +0000 asID: 401835 IP address blocks: 23.164.72.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e2e521d7-dbfb-433c-b301-ee863aee12cd/e2e521d7-dbfb-433c-b301-ee863aee12cd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e2e521d7-dbfb-433c-b301-ee863aee12cd/e2e521d7-dbfb-433c-b301-ee863aee12cd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e2e521d7-dbfb-433c-b301-ee863aee12cd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:38:6a:35:fb:3e:1a:f4:b6:1a:20:b5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e2e521d7-dbfb-433c-b301-ee863aee12cd Validity Not Before: Mar 19 13:00:41 2026 GMT Not After : Jun 17 13:00:41 2026 GMT Subject: CN=a54352db-7bb6-48a7-8e9f-5b7bda67d07c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:c3:44:cb:87:9c:1f:dc:2f:08:3a:3a:92:13: 01:f9:d0:32:b8:12:d4:f6:b6:c3:46:08:60:ac:a6: 89:85:4a:18:16:ec:7e:7d:41:08:44:e0:1c:bd:e5: ee:37:6c:73:16:c6:18:47:81:8c:37:71:d0:2b:c3: 30:5e:a0:11:a9:05:36:d0:b9:e1:da:ba:75:a7:93: 57:14:ef:65:ae:16:e1:7d:9c:51:da:4b:cc:e3:ba: f5:f4:3f:f8:f7:05:58:e3:a2:f0:e4:d9:46:66:3d: 28:91:47:20:2e:31:6e:d2:dd:e6:ed:32:82:42:3a: f4:81:db:4e:1e:03:a1:40:0b:15:f1:17:41:91:57: c8:82:08:49:29:18:dc:1a:3f:07:4c:c1:ff:93:a6: 99:df:f0:c1:df:46:07:fc:29:58:b6:80:f1:57:6e: 98:a9:75:72:5b:cb:75:f3:d8:64:7c:c2:4b:a0:27: 7d:8b:1d:f3:da:32:c4:ae:0f:ff:cd:e5:fa:de:4c: c9:3b:66:d7:33:06:8e:ad:86:76:9c:18:2f:dc:f6: b5:b7:2d:5d:11:d7:4f:4d:da:5f:f2:18:e1:12:cc: 4c:9a:fc:57:c2:c1:76:06:0f:63:2a:1e:a2:08:7e: c6:14:d6:5f:71:9b:4f:33:5a:06:8b:bd:aa:5f:07: 22:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:68:53:F2:7A:7A:FD:70:43:4A:1A:69:09:47:06:E5:91:E7:66:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e2e521d7-dbfb-433c-b301-ee863aee12cd/97809f3e-1adc-322e-a56f-ba22f7c77564.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e2e521d7-dbfb-433c-b301-ee863aee12cd/e2e521d7-dbfb-433c-b301-ee863aee12cd.crl X509v3 Authority Key Identifier: keyid:5F:BA:B5:53:33:9D:DC:E6:30:1A:F3:9C:79:5A:BB:BC:A8:EB:0B:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e2e521d7-dbfb-433c-b301-ee863aee12cd.cer sbgp-ipAddrBlock: critical IPv4: 23.164.72.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:91:6a:ed:23:64:5c:5c:a2:2b:e0:5d:a8:16:a8:0f:19:52: 02:e1:9f:0a:21:95:71:dd:58:7b:52:e5:1c:b8:c8:6b:b9:e2: 15:66:0f:d0:ee:06:26:2b:18:6d:cd:a0:da:ff:66:1c:12:86: 41:50:8e:62:6e:29:53:6b:c1:7a:09:43:28:a1:92:a0:84:6b: 24:a1:50:98:1e:73:c2:b0:23:75:ef:43:a6:e1:ee:fb:72:aa: fe:e6:37:59:e4:37:f9:96:2b:5b:ff:7b:b7:f7:46:e9:73:07: 32:f3:80:d6:a9:b6:8b:07:91:40:0a:76:a2:29:d9:4e:c4:b3: 97:38:e2:e4:60:7d:4e:77:16:3f:38:ba:40:bc:23:81:2a:8f: 3f:50:35:57:58:59:c7:e9:90:f8:a4:31:b6:cd:28:c5:49:7e: a3:ee:64:e5:91:83:d7:e3:a3:38:ab:89:92:58:15:91:ac:01: 86:fc:69:ba:0a:87:18:8b:8c:b3:61:a2:70:db:96:35:24:67: a4:9e:d0:bb:e8:6a:b2:38:fa:36:30:5f:a6:a0:2b:54:64:5d: 8f:42:49:30:c4:ca:13:5c:23:f3:26:02:3a:43:cc:d5:8a:16: 20:fc:2b:44:9c:82:46:08:20:a4:57:ca:13:77:3b:a7:95:f6: ef:51:4b:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE04ajX7Phr0thogtYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTJlNTIxZDctZGJmYi00MzNjLWIzMDEtZWU4NjNhZWUx MmNkMB4XDTI2MDMxOTEzMDA0MVoXDTI2MDYxNzEzMDA0MVowLzEtMCsGA1UEAxMk YTU0MzUyZGItN2JiNi00OGE3LThlOWYtNWI3YmRhNjdkMDdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhcNEy4ecH9wvCDo6khMB+dAyuBLU9rbDRghg rKaJhUoYFux+fUEIROAcveXuN2xzFsYYR4GMN3HQK8MwXqARqQU20Lnh2rp1p5NX FO9lrhbhfZxR2kvM47r19D/49wVY46Lw5NlGZj0okUcgLjFu0t3m7TKCQjr0gdtO HgOhQAsV8RdBkVfIgghJKRjcGj8HTMH/k6aZ3/DB30YH/ClYtoDxV26YqXVyW8t1 89hkfMJLoCd9ix3z2jLErg//zeX63kzJO2bXMwaOrYZ2nBgv3Pa1ty1dEddPTdpf 8hjhEsxMmvxXwsF2Bg9jKh6iCH7GFNZfcZtPM1oGi72qXwciTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDdoU/J6ev1wQ0oaaQlHBuWR52aVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9lMmU1 MjFkNy1kYmZiLTQzM2MtYjMwMS1lZTg2M2FlZTEyY2QvOTc4MDlmM2UtMWFkYy0z MjJlLWE1NmYtYmEyMmY3Yzc3NTY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvZTJlNTIxZDctZGJmYi00MzNjLWIz MDEtZWU4NjNhZWUxMmNkL2UyZTUyMWQ3LWRiZmItNDMzYy1iMzAxLWVlODYzYWVl MTJjZC5jcmwwHwYDVR0jBBgwFoAUX7q1UzOd3OYwGvOceVq7vKjrCxIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9lMmU1MjFkNy1kYmZiLTQzM2MtYjMwMS1lZTg2 M2FlZTEyY2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6RIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEyRau0jZFxcoivgXagWqA8ZUgLhnwohlXHdWHtS5Ry4yGu54hVmD9Du BiYrGG3NoNr/ZhwShkFQjmJuKVNrwXoJQyihkqCEayShUJgec8KwI3XvQ6bh7vty qv7mN1nkN/mWK1v/e7f3RulzBzLzgNaptosHkUAKdqIp2U7Es5c44uRgfU53Fj84 ukC8I4Eqjz9QNVdYWcfpkPikMbbNKMVJfqPuZOWRg9fjoziriZJYFZGsAYb8aboK hxiLjLNhonDbljUkZ6Se0LvoarI4+jYwX6agK1RkXY9CSTDEyhNcI/MmAjpDzNWK FiD8K0ScgkYIIKRXyhN3O6eV9u9RSyk= -----END CERTIFICATE-----Generated at Thu Mar 26 08:56:45 2026 by rpki-client