$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d/2ca4a1da-2ce8-320f-950b-ff50074d56a7.roa File: 2ca4a1da-2ce8-320f-950b-ff50074d56a7.roa (raw, json) Hash identifier: hfEihuIEnrWPePUtT2yDXCYDZsxuklBq2C/+QDu0EbQ= Subject key identifier: D6:57:80:E7:4E:DB:DA:94:35:2C:72:A9:23:37:D9:6B:60:40:36:65 Certificate issuer: /CN=90a5fac0-b985-4c6c-ab51-6cdbd5e6651d Certificate serial: 010D0C9F4328584D62A07261C0170210E7C80E80 Authority key identifier: 93:16:D8:66:8E:B6:C3:BE:EA:45:CD:0D:D0:38:FA:A9:59:19:4E:7E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d/2ca4a1da-2ce8-320f-950b-ff50074d56a7.roa Signing time: Fri 03 Apr 2026 15:54:04 +0000 ROA not before: Fri 03 Apr 2026 15:54:04 +0000 ROA not after: Thu 02 Jul 2026 15:54:04 +0000 asID: 30399 IP address blocks: 23.131.184.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 Apr 2026 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:62:a0:72:61:c0:17:02:10:e7:c8:0e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=90a5fac0-b985-4c6c-ab51-6cdbd5e6651d Validity Not Before: Apr 3 15:54:04 2026 GMT Not After : Jul 2 15:54:04 2026 GMT Subject: CN=9fbd6a3c-861e-45b9-92cc-7d6b1c0ca4f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:ef:d0:c2:16:66:e0:0c:f4:e4:25:ca:8b:38: 16:27:7a:0f:9d:37:a7:b4:43:b3:52:53:52:38:1e: 78:4e:6b:25:64:27:b2:61:56:c5:5d:a4:e2:13:85: 9c:57:52:07:09:c1:88:76:29:3d:64:44:70:e5:30: fb:67:2b:31:c9:c6:fe:b5:5c:40:45:e4:6c:bc:ac: db:64:e9:b2:3c:1a:17:2e:38:84:d2:0d:a8:29:b2: 2b:04:7f:2f:62:a9:76:c1:6e:c0:2a:60:1f:6e:28: 0f:83:f2:04:5c:a8:6f:6a:8a:13:68:e2:9b:93:e1: 19:af:01:e0:da:3b:c5:f8:2b:d9:04:9b:73:2c:fe: bc:dd:34:7c:ad:d7:bc:83:26:bf:1e:7c:50:24:12: ff:d7:f9:30:d0:f4:ce:9c:ce:20:2c:a3:6d:9d:e2: e8:f2:d6:67:52:60:ae:e1:e7:29:82:0a:19:33:ea: 71:7c:be:b7:dd:90:17:be:3b:84:8f:bb:71:a4:c2: be:a5:0b:89:1a:70:5d:48:fd:32:e3:cc:da:58:d4: 2f:b4:a4:8a:79:ff:ea:d2:30:fd:4b:be:bf:89:cd: 55:02:c7:d1:d5:a7:c3:62:79:f7:8c:3a:2b:6d:7b: 1a:3d:0a:17:f3:fc:a5:70:5c:e4:a3:35:90:e3:f6: 34:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:57:80:E7:4E:DB:DA:94:35:2C:72:A9:23:37:D9:6B:60:40:36:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d/2ca4a1da-2ce8-320f-950b-ff50074d56a7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d.crl X509v3 Authority Key Identifier: keyid:93:16:D8:66:8E:B6:C3:BE:EA:45:CD:0D:D0:38:FA:A9:59:19:4E:7E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90a5fac0-b985-4c6c-ab51-6cdbd5e6651d.cer sbgp-ipAddrBlock: critical IPv4: 23.131.184.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:91:8c:67:59:5b:bc:84:1c:0a:7b:2a:24:95:c6:a0:b2:ea: d4:d3:94:fa:c9:43:32:8b:a4:46:eb:7d:4c:4d:79:c9:9b:e2: 97:ba:9b:bc:b7:e9:c4:d5:71:e0:5b:7b:13:67:94:7a:38:2e: db:02:9a:b5:7b:54:1e:b3:f1:7b:68:e4:6d:b7:6c:13:b0:61: 3a:71:e4:59:dd:84:6a:4a:af:93:3b:23:69:1e:af:85:d8:bc: 23:e4:c0:41:6c:25:1e:63:c6:98:21:0b:f2:5b:e4:a1:a3:df: 3f:a3:1d:84:06:46:9e:4c:a9:6b:62:6a:ee:b9:a4:75:99:37: 12:f6:b5:5b:be:bc:f6:95:c1:bf:d1:de:47:2c:83:f0:79:26: 54:ac:3d:ff:b9:64:3d:b2:8e:f3:6d:4e:7d:e4:f4:92:41:ba: cf:ee:1c:6a:f0:bc:83:f5:8f:f3:6a:82:6a:f6:70:f5:59:c1: b0:01:a9:cc:de:3a:6b:42:21:b4:cd:3a:3f:51:2d:16:3e:95: 2c:4e:e0:f8:f1:dd:b5:44:33:df:b0:3f:70:bf:c8:57:f3:1e: f0:4b:cc:50:0c:96:d1:06:70:d7:78:8b:1e:67:42:84:43:d9: 03:21:d8:29:90:c7:23:d7:c4:ff:55:30:59:a3:ac:4d:a8:90: 3d:04:fe:cc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1ioHJhwBcCEOfIDoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTBhNWZhYzAtYjk4NS00YzZjLWFiNTEtNmNkYmQ1ZTY2 NTFkMB4XDTI2MDQwMzE1NTQwNFoXDTI2MDcwMjE1NTQwNFowLzEtMCsGA1UEAxMk OWZiZDZhM2MtODYxZS00NWI5LTkyY2MtN2Q2YjFjMGNhNGY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgO/QwhZm4Az05CXKizgWJ3oPnTentEOzUlNS OB54TmslZCeyYVbFXaTiE4WcV1IHCcGIdik9ZERw5TD7Zysxycb+tVxAReRsvKzb ZOmyPBoXLjiE0g2oKbIrBH8vYql2wW7AKmAfbigPg/IEXKhvaooTaOKbk+EZrwHg 2jvF+CvZBJtzLP683TR8rde8gya/HnxQJBL/1/kw0PTOnM4gLKNtneLo8tZnUmCu 4ecpggoZM+pxfL633ZAXvjuEj7txpMK+pQuJGnBdSP0y48zaWNQvtKSKef/q0jD9 S76/ic1VAsfR1afDYnn3jDorbXsaPQoX8/ylcFzkozWQ4/Y0wwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNZXgOdO29qUNSxyqSM32WtgQDZlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy85MGE1 ZmFjMC1iOTg1LTRjNmMtYWI1MS02Y2RiZDVlNjY1MWQvMmNhNGExZGEtMmNlOC0z MjBmLTk1MGItZmY1MDA3NGQ1NmE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvOTBhNWZhYzAtYjk4NS00YzZjLWFi NTEtNmNkYmQ1ZTY2NTFkLzkwYTVmYWMwLWI5ODUtNGM2Yy1hYjUxLTZjZGJkNWU2 NjUxZC5jcmwwHwYDVR0jBBgwFoAUkxbYZo62w77qRc0N0Dj6qVkZTn4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy85MGE1ZmFjMC1iOTg1LTRjNmMtYWI1MS02Y2Ri ZDVlNjY1MWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4O4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHqRjGdZW7yEHAp7KiSVxqCy6tTTlPrJQzKLpEbrfUxNecmb4pe6m7y3 6cTVceBbexNnlHo4LtsCmrV7VB6z8Xto5G23bBOwYTpx5FndhGpKr5M7I2ker4XY vCPkwEFsJR5jxpghC/Jb5KGj3z+jHYQGRp5MqWtiau65pHWZNxL2tVu+vPaVwb/R 3kcsg/B5JlSsPf+5ZD2yjvNtTn3k9JJBus/uHGrwvIP1j/Nqgmr2cPVZwbABqcze OmtCIbTNOj9RLRY+lSxO4Pjx3bVEM9+wP3C/yFfzHvBLzFAMltEGcNd4ix5nQoRD 2QMh2CmQxyPXxP9VMFmjrE2okD0E/sw= -----END CERTIFICATE-----Generated at Fri Apr 17 14:38:55 2026 by rpki-client