$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/df6e2c46-7773-32ce-a7a8-1ceb0f999a35.roa File: df6e2c46-7773-32ce-a7a8-1ceb0f999a35.roa (raw, json) Hash identifier: P1Vn+kn9fYoGoraXcq5xkC29xT5WTDcQahmxeyXKauU= Subject key identifier: 14:3A:78:EF:1A:AE:81:8C:D7:4D:45:D1:BE:89:FF:5D:C5:84:FC:88 Certificate issuer: /CN=f8e7a246-465c-42e8-8be1-af167b20b04d Certificate serial: 010D0C9F4328584CC07C8D4E0D0D6DA763DAB040 Authority key identifier: 47:E2:47:E2:08:C3:82:0A:55:A4:99:5E:E0:10:DE:78:D2:94:F1:CE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/df6e2c46-7773-32ce-a7a8-1ceb0f999a35.roa Signing time: Wed 04 Feb 2026 14:00:39 +0000 ROA not before: Wed 04 Feb 2026 14:00:39 +0000 ROA not after: Tue 05 May 2026 13:00:39 +0000 asID: 3257 IP address blocks: 23.234.144.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f8e7a246-465c-42e8-8be1-af167b20b04d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f8e7a246-465c-42e8-8be1-af167b20b04d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:c0:7c:8d:4e:0d:0d:6d:a7:63:da:b0:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8e7a246-465c-42e8-8be1-af167b20b04d Validity Not Before: Feb 4 14:00:39 2026 GMT Not After : May 5 13:00:39 2026 GMT Subject: CN=e2408395-278c-42c7-b90c-c55690db4e75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:b9:ea:cb:66:31:3d:84:22:cb:7c:98:8d:ee: 17:da:a5:ed:0b:6e:76:ce:57:fd:b7:80:e1:f3:e2: cc:9a:54:e3:0d:3b:88:38:63:f8:9e:4a:2e:94:07: 78:ab:9d:98:f4:f1:8f:d1:53:08:9f:d8:25:5f:88: 55:1e:81:b8:ee:f7:61:a1:a0:7c:cc:9d:39:f5:86: dd:5d:b7:51:22:71:10:d7:de:09:f9:f4:13:5f:ba: 8a:ba:b6:f3:cc:dc:72:42:42:a8:3e:65:cc:01:4c: e7:b9:9b:f9:33:b6:ea:d9:6c:b4:2e:86:0a:a9:39: ec:90:af:b2:9a:c3:ea:74:e7:be:f3:dd:5e:28:1f: 3d:69:46:39:05:62:26:c6:7a:78:58:c3:87:89:66: ab:67:29:ff:50:57:ab:b6:6b:38:30:df:0b:04:69: 02:c8:04:8a:39:a6:55:cf:a9:77:a1:07:ed:5c:cb: d0:7d:5d:86:a1:54:e4:5d:c0:76:8d:b7:b4:4a:a6: 22:ef:36:45:cd:3d:49:27:26:bf:8a:26:2a:54:87: 74:7f:a3:ad:2a:0a:9d:b3:36:3a:e9:40:14:17:d4: 0d:29:1d:25:71:2f:93:c9:fb:80:8b:57:90:46:d6: 79:33:13:14:5b:d5:7e:94:01:fd:d9:fa:d0:74:d9: ed:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:3A:78:EF:1A:AE:81:8C:D7:4D:45:D1:BE:89:FF:5D:C5:84:FC:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/df6e2c46-7773-32ce-a7a8-1ceb0f999a35.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d/f8e7a246-465c-42e8-8be1-af167b20b04d.crl X509v3 Authority Key Identifier: keyid:47:E2:47:E2:08:C3:82:0A:55:A4:99:5E:E0:10:DE:78:D2:94:F1:CE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f8e7a246-465c-42e8-8be1-af167b20b04d.cer sbgp-ipAddrBlock: critical IPv4: 23.234.144.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:e5:3c:8b:60:a6:bc:60:5d:d8:86:f9:31:d2:00:59:39:19: 37:8f:3f:05:80:05:88:73:25:c6:95:7b:f4:dc:62:ae:2c:e6: 22:29:9c:fe:96:10:75:9f:ae:7e:ec:a6:28:84:19:55:56:65: 60:41:1e:c9:2e:9a:4f:21:5b:ef:7b:df:a5:4b:6c:5a:f1:de: 88:2e:c2:e5:c8:51:e2:66:a2:fb:49:23:2c:23:b2:fe:0c:cf: a5:b3:6a:ba:5e:7a:a0:25:79:65:5c:d5:5f:e2:67:cf:cb:e4: 0f:a1:32:10:f6:6c:b0:38:fe:a9:d0:2b:dd:df:4e:a1:09:9e: 7b:21:f3:78:89:0d:d0:9e:60:75:ea:c3:63:96:93:77:f9:65: ab:6d:59:50:06:d1:16:3b:3b:c8:54:49:ea:8d:17:0a:8e:e5: e9:6f:83:05:a6:e3:5d:a2:45:a0:86:eb:7f:c2:56:30:55:f0: 78:50:61:16:f8:3c:36:e5:1f:f1:37:57:77:d0:29:64:25:50: b2:ef:c9:3c:8d:b3:53:f1:21:c8:7c:f1:4a:07:5f:db:6c:70: 25:0f:a4:cb:26:2f:77:23:03:55:8b:db:cc:c4:54:90:ae:6f: e7:ec:5f:bd:a7:1e:1b:e1:92:54:35:1b:43:81:f7:2c:66:51: cf:a3:e6:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzAfI1ODQ1tp2PasEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjhlN2EyNDYtNDY1Yy00MmU4LThiZTEtYWYxNjdiMjBi MDRkMB4XDTI2MDIwNDE0MDAzOVoXDTI2MDUwNTEzMDAzOVowLzEtMCsGA1UEAxMk ZTI0MDgzOTUtMjc4Yy00MmM3LWI5MGMtYzU1NjkwZGI0ZTc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmbnqy2YxPYQiy3yYje4X2qXtC252zlf9t4Dh 8+LMmlTjDTuIOGP4nkoulAd4q52Y9PGP0VMIn9glX4hVHoG47vdhoaB8zJ059Ybd XbdRInEQ194J+fQTX7qKurbzzNxyQkKoPmXMAUznuZv5M7bq2Wy0LoYKqTnskK+y msPqdOe+891eKB89aUY5BWImxnp4WMOHiWarZyn/UFertms4MN8LBGkCyASKOaZV z6l3oQftXMvQfV2GoVTkXcB2jbe0SqYi7zZFzT1JJya/iiYqVId0f6OtKgqdszY6 6UAUF9QNKR0lcS+TyfuAi1eQRtZ5MxMUW9V+lAH92frQdNntmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBQ6eO8aroGM101F0b6J/13FhPyIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9mOGU3 YTI0Ni00NjVjLTQyZTgtOGJlMS1hZjE2N2IyMGIwNGQvZGY2ZTJjNDYtNzc3My0z MmNlLWE3YTgtMWNlYjBmOTk5YTM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZjhlN2EyNDYtNDY1Yy00MmU4LThi ZTEtYWYxNjdiMjBiMDRkL2Y4ZTdhMjQ2LTQ2NWMtNDJlOC04YmUxLWFmMTY3YjIw YjA0ZC5jcmwwHwYDVR0jBBgwFoAUR+JH4gjDggpVpJle4BDeeNKU8c4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9mOGU3YTI0Ni00NjVjLTQyZTgtOGJlMS1hZjE2 N2IyMGIwNGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF+qQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD7lPItgprxgXdiG+THSAFk5GTePPwWABYhzJcaVe/TcYq4s5iIpnP6W EHWfrn7spiiEGVVWZWBBHskumk8hW+9736VLbFrx3oguwuXIUeJmovtJIywjsv4M z6WzarpeeqAleWVc1V/iZ8/L5A+hMhD2bLA4/qnQK93fTqEJnnsh83iJDdCeYHXq w2OWk3f5ZattWVAG0RY7O8hUSeqNFwqO5elvgwWm412iRaCG63/CVjBV8HhQYRb4 PDblH/E3V3fQKWQlULLvyTyNs1PxIch88UoHX9tscCUPpMsmL3cjA1WL28zEVJCu b+fsX72nHhvhklQ1G0OB9yxmUc+j5ss= -----END CERTIFICATE-----Generated at Mon Mar 2 06:39:35 2026 by rpki-client