$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b35fc23a-e422-4c61-a25a-b73b0963b6f7/d68b1747-8766-30c7-9761-0368f3106f64.roa File: d68b1747-8766-30c7-9761-0368f3106f64.roa (raw, json) Hash identifier: 1jxpbjsDGk9cX6Kyir8xBRtIP9xVnc9ifdn1LaRsWZs= Subject key identifier: 87:B4:8A:F4:BF:80:D6:D5:7E:26:F2:79:AC:D1:DE:B3:CD:AE:1A:BE Certificate issuer: /CN=b35fc23a-e422-4c61-a25a-b73b0963b6f7 Certificate serial: 010D0C9F4328584CB287309D6C5844A1975E9D00 Authority key identifier: 8D:2F:5E:64:9C:37:77:AC:CC:4E:75:18:07:BF:9C:67:69:6A:1D:FE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b35fc23a-e422-4c61-a25a-b73b0963b6f7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b35fc23a-e422-4c61-a25a-b73b0963b6f7/d68b1747-8766-30c7-9761-0368f3106f64.roa Signing time: Fri 30 Jan 2026 14:00:40 +0000 ROA not before: Fri 30 Jan 2026 14:00:40 +0000 ROA not after: Thu 30 Apr 2026 13:00:40 +0000 asID: 30690 IP address blocks: 23.171.72.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b35fc23a-e422-4c61-a25a-b73b0963b6f7/b35fc23a-e422-4c61-a25a-b73b0963b6f7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b35fc23a-e422-4c61-a25a-b73b0963b6f7/b35fc23a-e422-4c61-a25a-b73b0963b6f7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b35fc23a-e422-4c61-a25a-b73b0963b6f7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:b2:87:30:9d:6c:58:44:a1:97:5e:9d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b35fc23a-e422-4c61-a25a-b73b0963b6f7 Validity Not Before: Jan 30 14:00:40 2026 GMT Not After : Apr 30 13:00:40 2026 GMT Subject: CN=ccc5f15f-3c9c-4239-a9ac-17862063e60a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:d8:1e:e2:91:22:b6:6c:ae:23:32:90:6d:e6: 96:95:37:bd:8b:31:38:6d:26:df:04:a8:2f:48:c7: 92:95:25:f7:05:83:4c:b5:81:d7:0c:63:4a:46:e0: 3b:a2:5f:ac:7b:3e:99:c9:db:fc:7a:d5:2c:52:22: 9f:62:e6:63:35:b1:7c:50:52:c0:b2:98:00:65:50: 86:99:38:b2:91:0e:cb:c7:59:60:76:56:e8:6a:76: 90:38:26:32:60:16:1f:1a:35:d5:3a:72:5c:08:b0: 60:aa:98:43:9d:d2:f5:16:20:84:be:1c:46:47:9e: 25:c5:c9:56:b3:e2:56:7c:9c:76:1c:ba:8a:f6:00: e9:39:38:e0:05:30:fa:ba:f6:aa:7d:39:91:67:71: f9:b3:d7:90:9e:6f:0d:51:df:c9:db:38:dc:1f:78: a4:52:b5:c4:27:f8:d0:e4:9f:e2:94:fc:c1:ae:d1: df:b3:90:ac:54:22:8e:06:ed:cb:fa:19:a5:b2:d0: a7:a9:55:ae:b1:90:92:9f:3e:25:4e:d1:1d:69:ba: 5a:2f:67:88:98:78:62:fe:46:39:73:25:83:a2:a4: d0:95:62:63:4d:aa:d2:ba:05:f3:c9:03:81:5c:02: 35:16:60:06:43:7d:94:0e:22:42:e5:a9:c7:77:f2: a0:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:B4:8A:F4:BF:80:D6:D5:7E:26:F2:79:AC:D1:DE:B3:CD:AE:1A:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b35fc23a-e422-4c61-a25a-b73b0963b6f7/d68b1747-8766-30c7-9761-0368f3106f64.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b35fc23a-e422-4c61-a25a-b73b0963b6f7/b35fc23a-e422-4c61-a25a-b73b0963b6f7.crl X509v3 Authority Key Identifier: keyid:8D:2F:5E:64:9C:37:77:AC:CC:4E:75:18:07:BF:9C:67:69:6A:1D:FE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b35fc23a-e422-4c61-a25a-b73b0963b6f7.cer sbgp-ipAddrBlock: critical IPv4: 23.171.72.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ad:8c:85:47:d5:30:62:2d:ef:07:3a:d0:65:89:89:23:1a:72: 4c:a7:89:73:17:c0:49:10:c9:01:cd:0f:2f:b0:67:1b:c6:4d: 42:b9:fb:16:49:02:66:11:b2:7a:04:82:2e:a4:ef:df:e0:51: c2:c9:27:eb:d1:15:41:0e:e0:82:2c:3e:b8:d2:e1:c3:f1:91: 1e:00:b4:4c:9e:4a:23:3b:63:96:d4:da:1b:f3:2d:44:43:0d: db:c5:5e:0a:7e:20:02:03:7d:03:f1:23:3a:29:8c:2d:9a:2d: 56:dc:fb:fa:ad:7c:d3:71:e8:eb:af:8a:c7:5e:5e:30:ad:6d: 83:d2:6a:98:d2:e2:42:4f:7c:06:60:6b:9d:cf:50:71:25:4d: eb:05:79:0e:66:58:c7:cc:6d:c0:3d:9f:da:60:61:f8:d5:d8: 12:94:8b:07:75:76:b8:85:26:fc:f7:38:89:39:be:f5:77:b8: 3b:a2:17:65:98:7a:41:7d:16:17:79:46:98:fc:8c:f3:ec:73: 4a:10:2d:22:a5:91:b6:ff:46:7a:33:85:1d:e0:b8:43:bc:dc: be:16:7a:0e:44:95:2c:d4:f4:a3:ba:1e:c7:23:4c:b1:b6:9f: 14:da:20:2a:e9:7b:2a:4a:18:88:9b:c2:c7:80:97:d5:a6:21: bd:6a:75:aa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyyhzCdbFhEoZdenQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjM1ZmMyM2EtZTQyMi00YzYxLWEyNWEtYjczYjA5NjNi NmY3MB4XDTI2MDEzMDE0MDA0MFoXDTI2MDQzMDEzMDA0MFowLzEtMCsGA1UEAxMk Y2NjNWYxNWYtM2M5Yy00MjM5LWE5YWMtMTc4NjIwNjNlNjBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgtge4pEitmyuIzKQbeaWlTe9izE4bSbfBKgv SMeSlSX3BYNMtYHXDGNKRuA7ol+sez6Zydv8etUsUiKfYuZjNbF8UFLAspgAZVCG mTiykQ7Lx1lgdlboanaQOCYyYBYfGjXVOnJcCLBgqphDndL1FiCEvhxGR54lxclW s+JWfJx2HLqK9gDpOTjgBTD6uvaqfTmRZ3H5s9eQnm8NUd/J2zjcH3ikUrXEJ/jQ 5J/ilPzBrtHfs5CsVCKOBu3L+hmlstCnqVWusZCSnz4lTtEdabpaL2eImHhi/kY5 cyWDoqTQlWJjTarSugXzyQOBXAI1FmAGQ32UDiJC5anHd/KgSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIe0ivS/gNbVfibyeazR3rPNrhq+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iMzVm YzIzYS1lNDIyLTRjNjEtYTI1YS1iNzNiMDk2M2I2ZjcvZDY4YjE3NDctODc2Ni0z MGM3LTk3NjEtMDM2OGYzMTA2ZjY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYjM1ZmMyM2EtZTQyMi00YzYxLWEy NWEtYjczYjA5NjNiNmY3L2IzNWZjMjNhLWU0MjItNGM2MS1hMjVhLWI3M2IwOTYz YjZmNy5jcmwwHwYDVR0jBBgwFoAUjS9eZJw3d6zMTnUYB7+cZ2lqHf4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9iMzVmYzIzYS1lNDIyLTRjNjEtYTI1YS1iNzNi MDk2M2I2ZjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6tIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK2MhUfVMGIt7wc60GWJiSMackyniXMXwEkQyQHNDy+wZxvGTUK5+xZJ AmYRsnoEgi6k79/gUcLJJ+vRFUEO4IIsPrjS4cPxkR4AtEyeSiM7Y5bU2hvzLURD DdvFXgp+IAIDfQPxIzopjC2aLVbc+/qtfNNx6OuvisdeXjCtbYPSapjS4kJPfAZg a53PUHElTesFeQ5mWMfMbcA9n9pgYfjV2BKUiwd1driFJvz3OIk5vvV3uDuiF2WY ekF9Fhd5Rpj8jPPsc0oQLSKlkbb/RnozhR3guEO83L4Weg5ElSzU9KO6HscjTLG2 nxTaICrpeypKGIibwseAl9WmIb1qdao= -----END CERTIFICATE-----Generated at Tue Mar 3 05:41:35 2026 by rpki-client