$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5039f611-54f3-4a44-9153-55949e05704b/2e36694a-0cc3-3c04-a6d3-0e87942c2e7d.roa File: 2e36694a-0cc3-3c04-a6d3-0e87942c2e7d.roa (raw, json) Hash identifier: PiVyq2R9SNRcRwNd4mqCQT4e9Om2bD0HOc1tkzhnfTM= Subject key identifier: 57:8C:36:3B:9E:49:AF:12:A5:78:CC:3D:05:BE:AB:FE:93:1E:C4:42 Certificate issuer: /CN=5039f611-54f3-4a44-9153-55949e05704b Certificate serial: 010D0C9F4328584DF0AB3E324F80D722A5DC5C00 Authority key identifier: 9B:34:C7:F7:58:7F:83:60:63:65:B5:97:CA:CB:4E:71:56:F0:64:C1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5039f611-54f3-4a44-9153-55949e05704b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5039f611-54f3-4a44-9153-55949e05704b/2e36694a-0cc3-3c04-a6d3-0e87942c2e7d.roa Signing time: Sun 24 May 2026 13:00:30 +0000 ROA not before: Sun 24 May 2026 13:00:30 +0000 ROA not after: Sat 22 Aug 2026 13:00:30 +0000 asID: 11004 IP address blocks: 23.161.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5039f611-54f3-4a44-9153-55949e05704b/5039f611-54f3-4a44-9153-55949e05704b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5039f611-54f3-4a44-9153-55949e05704b/5039f611-54f3-4a44-9153-55949e05704b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5039f611-54f3-4a44-9153-55949e05704b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 15 Jun 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:f0:ab:3e:32:4f:80:d7:22:a5:dc:5c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5039f611-54f3-4a44-9153-55949e05704b Validity Not Before: May 24 13:00:30 2026 GMT Not After : Aug 22 13:00:30 2026 GMT Subject: CN=1135635f-2988-4de8-8e0f-70e2045f08c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:3b:25:3a:ad:49:f0:dd:39:14:2e:3a:0c:f1: a1:44:9f:d4:1b:89:e6:79:0a:fd:35:44:93:af:d1: 51:4f:f3:91:e9:bc:43:ed:f0:31:4c:84:23:54:54: 08:55:ba:ca:16:e1:e7:69:13:9c:38:0c:f1:26:be: ef:73:a8:14:a2:8c:58:58:37:d1:55:1b:75:7d:cc: bb:9b:2c:2d:8a:d2:be:75:db:13:23:1f:fd:1b:5b: 42:8b:bf:00:3e:95:5f:02:36:df:a6:55:5d:60:06: cd:92:63:3d:0a:8f:dd:a8:c9:0b:9f:f9:c5:ae:66: 74:60:81:0d:c4:f1:92:17:09:bc:f4:3b:f0:ed:61: 62:5c:0c:c6:74:29:76:e7:b9:97:98:16:64:77:06: f8:5e:e0:01:7a:37:be:de:45:ea:99:fc:13:4a:15: 1e:b8:8b:b7:f8:b1:1c:43:1e:2f:ca:ca:40:80:ad: 1a:4f:01:5a:9b:89:94:a1:41:1b:72:c6:3a:85:0b: 4f:93:1d:68:5b:e0:2c:56:e4:10:2d:51:96:21:37: 7b:7a:78:d7:52:99:aa:c5:2e:44:c5:de:dd:97:81: 9b:65:ab:10:5f:29:bf:13:22:5f:7f:a3:47:23:48: 09:0c:4f:59:10:6a:30:e4:65:5f:af:57:9e:ce:14: e4:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:8C:36:3B:9E:49:AF:12:A5:78:CC:3D:05:BE:AB:FE:93:1E:C4:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5039f611-54f3-4a44-9153-55949e05704b/2e36694a-0cc3-3c04-a6d3-0e87942c2e7d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5039f611-54f3-4a44-9153-55949e05704b/5039f611-54f3-4a44-9153-55949e05704b.crl X509v3 Authority Key Identifier: keyid:9B:34:C7:F7:58:7F:83:60:63:65:B5:97:CA:CB:4E:71:56:F0:64:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5039f611-54f3-4a44-9153-55949e05704b.cer sbgp-ipAddrBlock: critical IPv4: 23.161.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:c4:ed:84:5b:1e:8d:00:93:70:70:a3:cc:06:a6:af:12:0d: 84:d1:d8:b8:e2:0b:5c:1d:0d:53:50:57:2a:a2:44:6a:a1:b6: c3:0a:ce:43:b5:4b:5e:fc:c3:92:41:46:27:28:8e:fd:83:3c: 9a:f4:cf:b0:b4:f5:59:97:ae:fe:0b:a1:19:ce:7c:5e:a6:c8: 9b:a4:b0:c3:94:34:78:dc:d2:fc:99:e5:be:6c:1f:c4:d3:92: 18:77:9f:7d:46:27:58:ad:61:f9:a2:0b:35:3e:ea:dd:29:cc: a5:75:22:9d:41:fe:93:c1:4a:3e:3d:e5:37:ae:44:a6:4d:aa: a3:f9:f7:05:4d:98:0a:0a:53:fe:bd:01:ea:44:ed:4a:ff:1f: ba:b1:37:5f:c0:83:4e:2b:da:d8:46:97:7c:3e:8c:a3:14:cf: 71:1f:98:dc:88:88:7d:43:8b:34:9c:0e:4f:56:ee:23:af:93: 54:b2:b4:01:a6:f8:bd:d8:f0:4f:52:75:0c:e5:f4:0d:f4:42: 0c:bd:f3:0c:ff:1d:1e:2f:86:c0:e4:6d:9a:96:95:20:97:53: 95:a9:25:7c:b7:c7:90:dd:42:9b:1a:d4:a6:11:eb:23:06:59: 77:0b:46:60:fb:1e:33:bb:f2:f4:29:84:cc:90:85:0a:bd:c3: 83:36:de:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3wqz4yT4DXIqXcXAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTAzOWY2MTEtNTRmMy00YTQ0LTkxNTMtNTU5NDllMDU3 MDRiMB4XDTI2MDUyNDEzMDAzMFoXDTI2MDgyMjEzMDAzMFowLzEtMCsGA1UEAxMk MTEzNTYzNWYtMjk4OC00ZGU4LThlMGYtNzBlMjA0NWYwOGM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiTslOq1J8N05FC46DPGhRJ/UG4nmeQr9NUST r9FRT/OR6bxD7fAxTIQjVFQIVbrKFuHnaROcOAzxJr7vc6gUooxYWDfRVRt1fcy7 mywtitK+ddsTIx/9G1tCi78APpVfAjbfplVdYAbNkmM9Co/dqMkLn/nFrmZ0YIEN xPGSFwm89Dvw7WFiXAzGdCl257mXmBZkdwb4XuABeje+3kXqmfwTShUeuIu3+LEc Qx4vyspAgK0aTwFam4mUoUEbcsY6hQtPkx1oW+AsVuQQLVGWITd7enjXUpmqxS5E xd7dl4GbZasQXym/EyJff6NHI0gJDE9ZEGow5GVfr1eezhTkYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFeMNjueSa8SpXjMPQW+q/6THsRCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81MDM5 ZjYxMS01NGYzLTRhNDQtOTE1My01NTk0OWUwNTcwNGIvMmUzNjY5NGEtMGNjMy0z YzA0LWE2ZDMtMGU4Nzk0MmMyZTdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNTAzOWY2MTEtNTRmMy00YTQ0LTkx NTMtNTU5NDllMDU3MDRiLzUwMzlmNjExLTU0ZjMtNGE0NC05MTUzLTU1OTQ5ZTA1 NzA0Yi5jcmwwHwYDVR0jBBgwFoAUmzTH91h/g2BjZbWXystOcVbwZMEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi81MDM5ZjYxMS01NGYzLTRhNDQtOTE1My01NTk0 OWUwNTcwNGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6F4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACrE7YRbHo0Ak3Bwo8wGpq8SDYTR2LjiC1wdDVNQVyqiRGqhtsMKzkO1 S178w5JBRicojv2DPJr0z7C09VmXrv4LoRnOfF6myJuksMOUNHjc0vyZ5b5sH8TT khh3n31GJ1itYfmiCzU+6t0pzKV1Ip1B/pPBSj495TeuRKZNqqP59wVNmAoKU/69 AepE7Ur/H7qxN1/Ag04r2thGl3w+jKMUz3EfmNyIiH1DizScDk9W7iOvk1SytAGm +L3Y8E9SdQzl9A30Qgy98wz/HR4vhsDkbZqWlSCXU5WpJXy3x5DdQpsa1KYR6yMG WXcLRmD7HjO78vQphMyQhQq9w4M23sE= -----END CERTIFICATE-----Generated at Sun Jun 14 02:13:53 2026 by rpki-client