$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fcd9964c-8d0c-4abf-9c00-6e0c3dd96c73/cd07b1d3-ee58-3299-8e5e-b690bd336dbc.roa File: cd07b1d3-ee58-3299-8e5e-b690bd336dbc.roa (raw, json) Hash identifier: XE96AXtPc5+szvAMi1GjczFpBeu44RzKsXnpgzUAasQ= Subject key identifier: F2:9F:CE:F6:B3:DA:C2:84:B7:18:E6:95:F0:D9:4C:2E:65:A4:D4:48 Certificate issuer: /CN=fcd9964c-8d0c-4abf-9c00-6e0c3dd96c73 Certificate serial: 010D0C9F4328584D5234F46C7B8A02759527C680 Authority key identifier: CE:20:58:04:19:B2:4B:B9:07:FB:67:00:E4:C5:81:94:9E:35:73:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fcd9964c-8d0c-4abf-9c00-6e0c3dd96c73.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fcd9964c-8d0c-4abf-9c00-6e0c3dd96c73/cd07b1d3-ee58-3299-8e5e-b690bd336dbc.roa Signing time: Sat 28 Mar 2026 18:44:33 +0000 ROA not before: Sat 28 Mar 2026 18:44:33 +0000 ROA not after: Fri 19 Jun 2026 13:00:39 +0000 asID: 400200 IP address blocks: 23.128.184.0/24 maxlen: 24 128.254.128.0/22 maxlen: 24 2602:80c:e000::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fcd9964c-8d0c-4abf-9c00-6e0c3dd96c73/fcd9964c-8d0c-4abf-9c00-6e0c3dd96c73.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fcd9964c-8d0c-4abf-9c00-6e0c3dd96c73/fcd9964c-8d0c-4abf-9c00-6e0c3dd96c73.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fcd9964c-8d0c-4abf-9c00-6e0c3dd96c73.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Apr 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:52:34:f4:6c:7b:8a:02:75:95:27:c6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fcd9964c-8d0c-4abf-9c00-6e0c3dd96c73 Validity Not Before: Mar 28 18:44:33 2026 GMT Not After : Jun 19 13:00:39 2026 GMT Subject: CN=fd97d3e3-d519-47c9-968c-64fb02bb705d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:ec:38:c2:cc:87:ad:a2:e8:7b:7b:1d:a4:37: 69:b0:4c:2f:fa:6b:e8:30:39:7d:b5:38:4c:90:18: 98:5f:4b:62:f4:01:f9:07:54:1a:3b:05:5e:5b:83: 87:58:f0:60:37:4c:7a:7a:2a:8f:da:bd:68:ef:92: c7:14:05:da:df:42:64:5a:63:93:63:51:8b:a0:79: ff:65:f8:b5:32:32:e4:e7:b3:8d:bd:7e:5a:42:fd: 5a:08:cb:69:64:4c:6c:37:a3:ab:e5:59:5c:3b:e4: 80:72:d4:c3:4d:4d:32:f6:a3:35:83:6a:a4:96:2b: cb:45:02:4b:45:17:78:01:e5:17:3a:2c:bd:e2:a1: 1a:5b:df:5f:c6:40:c1:b9:4d:f6:d1:45:d7:95:28: c7:10:9d:f0:30:f9:79:e7:fa:55:cf:cc:f9:80:dd: b7:2a:8a:7f:49:32:05:d1:9a:cd:b7:0b:89:0e:83: 72:95:19:89:1b:5e:73:36:a0:f6:59:25:92:dc:14: e7:41:bd:ea:0e:7a:ae:bf:46:7d:74:5b:ec:8e:7e: 64:8d:c5:44:ac:1d:9f:8d:29:87:85:e5:d5:2f:a0: c8:9a:93:6a:a2:6c:e9:45:16:6b:48:dd:b7:54:00: 32:95:e4:89:62:96:0f:72:4f:15:5a:a4:50:55:f4: 84:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:9F:CE:F6:B3:DA:C2:84:B7:18:E6:95:F0:D9:4C:2E:65:A4:D4:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fcd9964c-8d0c-4abf-9c00-6e0c3dd96c73/cd07b1d3-ee58-3299-8e5e-b690bd336dbc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fcd9964c-8d0c-4abf-9c00-6e0c3dd96c73/fcd9964c-8d0c-4abf-9c00-6e0c3dd96c73.crl X509v3 Authority Key Identifier: keyid:CE:20:58:04:19:B2:4B:B9:07:FB:67:00:E4:C5:81:94:9E:35:73:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/fcd9964c-8d0c-4abf-9c00-6e0c3dd96c73.cer sbgp-ipAddrBlock: critical IPv4: 23.128.184.0/24 128.254.128.0/22 IPv6: 2602:80c:e000::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b9:1d:64:3f:c0:92:e4:41:af:b6:ac:47:2a:ea:ea:41:5d:68: e4:3e:be:3b:db:77:76:64:8d:31:61:6e:e3:25:34:aa:5e:3c: 81:7a:55:e8:1c:e5:e3:0f:36:15:a0:f8:8e:f5:b3:bd:3c:91: 6b:da:49:ff:a3:43:9b:3f:4d:d2:4d:82:7e:d2:24:5d:51:4b: 47:ae:40:ea:ec:50:81:db:bf:8e:58:10:f7:ac:1c:a9:9c:bc: f0:54:ea:bb:46:9a:58:cd:2c:4d:2e:bb:15:d2:e6:35:83:c1: 77:c7:55:11:b3:f0:e1:53:58:22:ea:eb:3a:3d:b0:89:aa:6a: 45:b0:7d:2e:e7:52:87:f3:f4:04:66:59:48:74:94:c9:25:eb: b5:2e:d7:60:9e:a5:6e:8d:59:2f:ab:e2:14:29:11:5e:f3:0c: f7:a8:f3:5d:96:7e:46:b8:be:68:67:5a:33:2d:2c:82:b6:31: b0:84:a8:80:0f:76:d2:10:29:a4:13:7d:6e:c4:17:d5:e5:84: 03:00:cd:52:ca:78:19:cd:ba:41:75:ed:fc:ff:d0:3a:85:79: 6a:1c:39:a5:17:55:eb:c4:e2:e8:a6:57:3c:41:b7:ab:32:2d: e2:83:b2:46:e0:e5:79:12:63:64:62:12:ad:36:04:d3:fe:32: 88:ef:e5:36 -----BEGIN CERTIFICATE----- MIIGWTCCBUGgAwIBAgIUAQ0Mn0MoWE1SNPRse4oCdZUnxoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZmNkOTk2NGMtOGQwYy00YWJmLTljMDAtNmUwYzNkZDk2 YzczMB4XDTI2MDMyODE4NDQzM1oXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk ZmQ5N2QzZTMtZDUxOS00N2M5LTk2OGMtNjRmYjAyYmI3MDVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh+w4wsyHraLoe3sdpDdpsEwv+mvoMDl9tThM kBiYX0ti9AH5B1QaOwVeW4OHWPBgN0x6eiqP2r1o75LHFAXa30JkWmOTY1GLoHn/ Zfi1MjLk57ONvX5aQv1aCMtpZExsN6Or5VlcO+SActTDTU0y9qM1g2qklivLRQJL RRd4AeUXOiy94qEaW99fxkDBuU320UXXlSjHEJ3wMPl55/pVz8z5gN23Kop/STIF 0ZrNtwuJDoNylRmJG15zNqD2WSWS3BTnQb3qDnquv0Z9dFvsjn5kjcVErB2fjSmH heXVL6DImpNqomzpRRZrSN23VAAyleSJYpYPck8VWqRQVfSEewIDAQABo4IDazCC A2cwHQYDVR0OBBYEFPKfzvaz2sKEtxjmlfDZTC5lpNRIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mY2Q5 OTY0Yy04ZDBjLTRhYmYtOWMwMC02ZTBjM2RkOTZjNzMvY2QwN2IxZDMtZWU1OC0z Mjk5LThlNWUtYjY5MGJkMzM2ZGJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZmNkOTk2NGMtOGQwYy00YWJmLTlj MDAtNmUwYzNkZDk2YzczL2ZjZDk5NjRjLThkMGMtNGFiZi05YzAwLTZlMGMzZGQ5 NmM3My5jcmwwHwYDVR0jBBgwFoAUziBYBBmyS7kH+2cA5MWBlJ41c7YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9mY2Q5OTY0Yy04ZDBjLTRhYmYtOWMwMC02ZTBj M2RkOTZjNzMuY2VyMDUGCCsGAQUFBwEHAQH/BCYwJDASBAIAATAMAwQAF4C4AwQC gP6AMA4EAgACMAgDBgAmAggM4DBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQC5HWQ/wJLkQa+2rEcq6upBXWjk Pr4723d2ZI0xYW7jJTSqXjyBelXoHOXjDzYVoPiO9bO9PJFr2kn/o0ObP03STYJ+ 0iRdUUtHrkDq7FCB27+OWBD3rBypnLzwVOq7RppYzSxNLrsV0uY1g8F3x1URs/Dh U1gi6us6PbCJqmpFsH0u51KH8/QEZllIdJTJJeu1LtdgnqVujVkvq+IUKRFe8wz3 qPNdln5GuL5oZ1ozLSyCtjGwhKiAD3bSECmkE31uxBfV5YQDAM1SyngZzbpBde38 /9A6hXlqHDmlF1XrxOLoplc8QberMi3ig7JG4OV5EmNkYhKtNgTT/jKI7+U2 -----END CERTIFICATE-----Generated at Sun Apr 19 10:06:20 2026 by rpki-client