$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b9b87434-00de-4d2f-a45d-abe1efe5ecfd/14f63f23-4dd6-39b4-bee1-1cf1a112b843.roa File: 14f63f23-4dd6-39b4-bee1-1cf1a112b843.roa (raw, json) Hash identifier: a5lCpeSWrfdVzWw5jqWtp1VKXLYcR30rAk6RUYcGOaI= Subject key identifier: 5B:68:F8:C3:F9:87:2B:17:EB:54:D3:D2:31:AE:71:4B:CA:6D:DD:FF Certificate issuer: /CN=b9b87434-00de-4d2f-a45d-abe1efe5ecfd Certificate serial: 010D0C9F4328584C9C31B95233B7B4B15DECAA80 Authority key identifier: 67:BA:AB:82:D5:25:B6:AD:DE:AC:2E:FF:27:E5:85:9C:97:CE:3C:6B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b9b87434-00de-4d2f-a45d-abe1efe5ecfd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b9b87434-00de-4d2f-a45d-abe1efe5ecfd/14f63f23-4dd6-39b4-bee1-1cf1a112b843.roa Signing time: Thu 22 Jan 2026 14:00:37 +0000 ROA not before: Thu 22 Jan 2026 14:00:37 +0000 ROA not after: Wed 22 Apr 2026 13:00:37 +0000 asID: 40569 IP address blocks: 23.171.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b9b87434-00de-4d2f-a45d-abe1efe5ecfd/b9b87434-00de-4d2f-a45d-abe1efe5ecfd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b9b87434-00de-4d2f-a45d-abe1efe5ecfd/b9b87434-00de-4d2f-a45d-abe1efe5ecfd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b9b87434-00de-4d2f-a45d-abe1efe5ecfd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:9c:31:b9:52:33:b7:b4:b1:5d:ec:aa:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b9b87434-00de-4d2f-a45d-abe1efe5ecfd Validity Not Before: Jan 22 14:00:37 2026 GMT Not After : Apr 22 13:00:37 2026 GMT Subject: CN=0d0cb2af-0298-4268-b15b-c5952e40deb6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:8e:10:f9:c6:3e:c9:74:bd:2c:1d:7a:f7:3e: 07:3e:54:a6:7e:2e:b7:72:c4:1b:71:b1:f6:f6:9b: 04:65:c3:c1:f4:65:09:73:94:33:62:8c:db:e8:37: de:a5:41:81:26:ed:b8:93:8a:60:4a:71:9a:a7:34: c9:e3:e8:42:c6:a4:4d:2f:54:d5:4b:18:95:22:1f: 82:3a:30:d8:75:e1:08:81:23:a8:0f:f2:28:e8:e6: 05:5a:db:f5:4a:32:8c:c1:42:46:88:8c:bd:7d:e0: e7:8e:3d:5c:01:23:d3:1f:66:27:ae:e1:36:83:f1: 58:2e:be:c4:c7:cd:c2:9e:17:60:ec:db:53:36:ad: 39:91:ca:e7:9d:41:62:61:2e:0d:f0:98:12:f6:8b: d5:e6:3b:20:64:0e:ee:46:23:4f:ea:7b:89:f2:2d: 1a:84:8d:ed:9e:9a:27:06:f6:1c:08:c8:0c:80:dd: e7:9e:2e:ef:9b:1a:e4:42:d1:97:a1:85:35:52:d9: 01:cc:7d:d5:a3:1d:4e:f9:89:0e:7f:64:f1:ed:5c: 3a:41:65:e2:b9:a5:7a:69:b5:71:63:87:55:c7:3e: eb:62:68:cd:c1:75:5f:53:94:04:fb:39:75:2b:eb: 64:b4:b7:5b:6b:8c:19:c1:f1:da:e1:c8:68:25:f4: 22:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:68:F8:C3:F9:87:2B:17:EB:54:D3:D2:31:AE:71:4B:CA:6D:DD:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b9b87434-00de-4d2f-a45d-abe1efe5ecfd/14f63f23-4dd6-39b4-bee1-1cf1a112b843.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b9b87434-00de-4d2f-a45d-abe1efe5ecfd/b9b87434-00de-4d2f-a45d-abe1efe5ecfd.crl X509v3 Authority Key Identifier: keyid:67:BA:AB:82:D5:25:B6:AD:DE:AC:2E:FF:27:E5:85:9C:97:CE:3C:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b9b87434-00de-4d2f-a45d-abe1efe5ecfd.cer sbgp-ipAddrBlock: critical IPv4: 23.171.168.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:8e:14:f4:f2:43:06:a7:b5:de:ec:de:83:6e:64:41:af:dd: c3:de:9f:04:62:cc:e7:eb:58:7f:92:6f:cb:74:48:0b:f8:32: 6f:b8:da:7e:16:12:62:17:e2:67:7d:94:bb:28:92:b7:26:fc: 57:8b:86:a1:58:10:21:c9:f8:e9:98:5e:4e:cf:88:ea:7b:09: 05:06:0d:b9:46:c3:94:cc:9d:33:58:d1:fe:db:5d:a9:b5:d6: 13:0c:2a:0d:fc:dc:11:c8:3d:39:55:68:05:c1:89:cc:4b:dd: 57:e2:55:b1:7f:6e:f4:c8:c1:13:a7:97:5e:1d:1e:e5:3e:4e: 45:2a:b0:73:48:ce:0c:c3:76:3a:1f:19:c5:3c:b7:b1:cb:2d: 30:7d:aa:3e:4b:59:27:e5:9c:6d:be:a5:a2:53:7f:c3:61:14: a2:13:4d:1a:44:99:67:76:cb:83:91:c2:59:52:d5:2f:c5:7e: b6:61:0a:0f:a6:45:53:00:2b:9b:09:ef:16:54:87:b7:f1:09: 88:96:c9:80:7b:08:65:cd:7d:72:cd:20:e6:c0:58:10:58:27: 97:e9:be:0e:88:01:72:82:1d:c8:d7:ea:a3:d8:28:54:df:c5: b0:22:db:6e:2d:08:16:f6:b9:1d:a5:13:be:ec:e4:75:c8:ab: 01:47:69:a6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEycMblSM7e0sV3sqoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjliODc0MzQtMDBkZS00ZDJmLWE0NWQtYWJlMWVmZTVl Y2ZkMB4XDTI2MDEyMjE0MDAzN1oXDTI2MDQyMjEzMDAzN1owLzEtMCsGA1UEAxMk MGQwY2IyYWYtMDI5OC00MjY4LWIxNWItYzU5NTJlNDBkZWI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl44Q+cY+yXS9LB169z4HPlSmfi63csQbcbH2 9psEZcPB9GUJc5QzYozb6DfepUGBJu24k4pgSnGapzTJ4+hCxqRNL1TVSxiVIh+C OjDYdeEIgSOoD/Io6OYFWtv1SjKMwUJGiIy9feDnjj1cASPTH2YnruE2g/FYLr7E x83Cnhdg7NtTNq05kcrnnUFiYS4N8JgS9ovV5jsgZA7uRiNP6nuJ8i0ahI3tnpon BvYcCMgMgN3nni7vmxrkQtGXoYU1UtkBzH3Vox1O+YkOf2Tx7Vw6QWXiuaV6abVx Y4dVxz7rYmjNwXVfU5QE+zl1K+tktLdba4wZwfHa4choJfQiqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFto+MP5hysX61TT0jGucUvKbd3/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iOWI4 NzQzNC0wMGRlLTRkMmYtYTQ1ZC1hYmUxZWZlNWVjZmQvMTRmNjNmMjMtNGRkNi0z OWI0LWJlZTEtMWNmMWExMTJiODQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYjliODc0MzQtMDBkZS00ZDJmLWE0 NWQtYWJlMWVmZTVlY2ZkL2I5Yjg3NDM0LTAwZGUtNGQyZi1hNDVkLWFiZTFlZmU1 ZWNmZC5jcmwwHwYDVR0jBBgwFoAUZ7qrgtUltq3erC7/J+WFnJfOPGswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9iOWI4NzQzNC0wMGRlLTRkMmYtYTQ1ZC1hYmUx ZWZlNWVjZmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6uoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKiOFPTyQwantd7s3oNuZEGv3cPenwRizOfrWH+Sb8t0SAv4Mm+42n4W EmIX4md9lLsokrcm/FeLhqFYECHJ+OmYXk7PiOp7CQUGDblGw5TMnTNY0f7bXam1 1hMMKg383BHIPTlVaAXBicxL3VfiVbF/bvTIwROnl14dHuU+TkUqsHNIzgzDdjof GcU8t7HLLTB9qj5LWSflnG2+paJTf8NhFKITTRpEmWd2y4ORwllS1S/FfrZhCg+m RVMAK5sJ7xZUh7fxCYiWyYB7CGXNfXLNIObAWBBYJ5fpvg6IAXKCHcjX6qPYKFTf xbAi224tCBb2uR2lE77s5HXIqwFHaaY= -----END CERTIFICATE-----Generated at Mon Mar 2 05:50:45 2026 by rpki-client