$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df/3eb0f9a5-f83f-3f65-bd14-b98ebadaef8e.roa File: 3eb0f9a5-f83f-3f65-bd14-b98ebadaef8e.roa (raw, json) Hash identifier: DdBfqxgZ1WM58TmOlz98nXJvnpOYy/5W1YCbW4YbUeY= Subject key identifier: CD:BD:0A:A9:94:14:13:0C:B1:8C:E1:24:56:D9:0F:C4:DD:31:9E:88 Certificate issuer: /CN=39695c91-50ed-402c-b896-6056bbde88df Certificate serial: 010D0C9F4328584CED27BDCE7FB191FEC928AB00 Authority key identifier: FA:F5:3A:11:1E:00:5D:BC:9C:61:67:B1:97:6B:D5:0D:E9:1D:81:B4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df/3eb0f9a5-f83f-3f65-bd14-b98ebadaef8e.roa Signing time: Fri 20 Feb 2026 14:00:41 +0000 ROA not before: Fri 20 Feb 2026 14:00:41 +0000 ROA not after: Thu 21 May 2026 13:00:41 +0000 asID: 399448 IP address blocks: 23.170.241.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df/39695c91-50ed-402c-b896-6056bbde88df.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df/39695c91-50ed-402c-b896-6056bbde88df.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ed:27:bd:ce:7f:b1:91:fe:c9:28:ab:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=39695c91-50ed-402c-b896-6056bbde88df Validity Not Before: Feb 20 14:00:41 2026 GMT Not After : May 21 13:00:41 2026 GMT Subject: CN=70995b9e-abb8-4d35-a491-79c91219ed0c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:39:09:5f:81:73:c0:30:db:17:46:36:73:98: fe:e1:05:33:cc:e0:f2:bd:d2:0f:76:6d:e0:24:87: af:0c:03:a3:68:68:74:59:03:87:80:98:a9:c8:e8: 1a:03:d6:3f:f3:98:4c:66:02:bf:7f:a0:49:c4:74: 55:cb:9d:f7:5f:bb:2c:a4:06:36:f0:30:1d:aa:07: b8:da:57:ff:ce:c9:ac:e7:53:c5:9a:3f:9c:76:e9: be:af:0d:2d:0e:75:52:67:a2:dc:7b:d4:91:9f:47: 03:37:eb:af:af:eb:42:37:15:c8:ba:96:d1:7f:6e: cc:6c:50:2c:f8:3d:d9:21:12:9c:9d:1e:9a:ad:7c: d2:b8:a2:2c:84:a0:0b:3f:ac:67:5d:92:0e:1b:40: 7f:8a:0f:ef:bb:b6:3d:23:94:fc:89:6e:5a:9e:d2: 85:27:30:3a:0a:d6:74:cc:ca:58:f0:ad:c8:1e:d9: 0d:ee:1e:9b:6d:f9:ec:60:99:37:d9:d5:04:28:52: 6e:51:39:14:d4:a4:dd:79:17:ab:c9:27:2b:91:59: 09:4e:00:60:7d:38:e5:b9:56:f1:93:59:28:32:68: cc:19:28:be:01:d8:7d:f7:5f:25:bc:88:45:ab:2b: 05:77:04:7a:aa:67:6f:ee:bb:c3:45:7f:77:d9:0a: db:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:BD:0A:A9:94:14:13:0C:B1:8C:E1:24:56:D9:0F:C4:DD:31:9E:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df/3eb0f9a5-f83f-3f65-bd14-b98ebadaef8e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df/39695c91-50ed-402c-b896-6056bbde88df.crl X509v3 Authority Key Identifier: keyid:FA:F5:3A:11:1E:00:5D:BC:9C:61:67:B1:97:6B:D5:0D:E9:1D:81:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/39695c91-50ed-402c-b896-6056bbde88df.cer sbgp-ipAddrBlock: critical IPv4: 23.170.241.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:cb:83:0c:70:e5:f9:59:6d:d4:d2:1a:53:45:35:ee:5c:68: a6:e4:a6:ab:6c:37:b4:19:e1:16:bc:b2:a4:6b:4d:4b:3a:5b: 84:55:3f:05:ce:d1:90:fb:66:69:2a:05:6b:fc:60:07:a0:e1: 2e:fc:c0:f6:09:03:e8:f3:03:91:06:e8:f9:eb:48:c7:fe:63: e9:d2:4b:eb:bb:08:1a:16:a5:98:0b:56:b9:c9:e2:0a:e8:7a: 37:7d:9c:17:18:7c:6d:9a:f4:c6:04:59:8e:bb:71:7d:16:50: d6:46:02:cb:45:9a:5e:79:b6:a4:19:79:60:78:c0:90:13:f3: 45:2f:7b:24:c7:33:bc:7a:69:56:52:45:38:c7:69:a6:01:43: 0b:e8:e7:cc:ce:c4:f3:b6:5f:21:e7:f5:ba:b5:0f:63:a5:43: 52:21:45:f2:56:a9:d1:42:81:bb:e0:a3:f4:f2:5c:09:47:21: 3a:0a:15:5a:61:2d:29:2c:58:e7:32:73:0e:08:71:bd:3a:fa: 07:09:76:3b:20:6c:63:31:44:0d:89:69:d4:2c:6d:5d:41:09: 78:a2:d0:6e:7e:14:fc:64:d7:4b:1e:d2:d7:5c:28:b2:09:4e: 87:a1:0e:de:bf:0e:6f:99:94:ad:a4:9b:fc:03:9b:36:1d:0e: 49:ef:46:95 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEztJ73Of7GR/skoqwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzk2OTVjOTEtNTBlZC00MDJjLWI4OTYtNjA1NmJiZGU4 OGRmMB4XDTI2MDIyMDE0MDA0MVoXDTI2MDUyMTEzMDA0MVowLzEtMCsGA1UEAxMk NzA5OTViOWUtYWJiOC00ZDM1LWE0OTEtNzljOTEyMTllZDBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAozkJX4FzwDDbF0Y2c5j+4QUzzODyvdIPdm3g JIevDAOjaGh0WQOHgJipyOgaA9Y/85hMZgK/f6BJxHRVy533X7sspAY28DAdqge4 2lf/zsms51PFmj+cdum+rw0tDnVSZ6Lce9SRn0cDN+uvr+tCNxXIupbRf27MbFAs +D3ZIRKcnR6arXzSuKIshKALP6xnXZIOG0B/ig/vu7Y9I5T8iW5antKFJzA6CtZ0 zMpY8K3IHtkN7h6bbfnsYJk32dUEKFJuUTkU1KTdeReryScrkVkJTgBgfTjluVbx k1koMmjMGSi+Adh9918lvIhFqysFdwR6qmdv7rvDRX932QrbFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM29CqmUFBMMsYzhJFbZD8TdMZ6IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zOTY5 NWM5MS01MGVkLTQwMmMtYjg5Ni02MDU2YmJkZTg4ZGYvM2ViMGY5YTUtZjgzZi0z ZjY1LWJkMTQtYjk4ZWJhZGFlZjhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMzk2OTVjOTEtNTBlZC00MDJjLWI4 OTYtNjA1NmJiZGU4OGRmLzM5Njk1YzkxLTUwZWQtNDAyYy1iODk2LTYwNTZiYmRl ODhkZi5jcmwwHwYDVR0jBBgwFoAU+vU6ER4AXbycYWexl2vVDekdgbQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS8zOTY5NWM5MS01MGVkLTQwMmMtYjg5Ni02MDU2 YmJkZTg4ZGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6rxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG3Lgwxw5flZbdTSGlNFNe5caKbkpqtsN7QZ4Ra8sqRrTUs6W4RVPwXO 0ZD7ZmkqBWv8YAeg4S78wPYJA+jzA5EG6PnrSMf+Y+nSS+u7CBoWpZgLVrnJ4gro ejd9nBcYfG2a9MYEWY67cX0WUNZGAstFml55tqQZeWB4wJAT80UveyTHM7x6aVZS RTjHaaYBQwvo58zOxPO2XyHn9bq1D2OlQ1IhRfJWqdFCgbvgo/TyXAlHIToKFVph LSksWOcycw4Icb06+gcJdjsgbGMxRA2JadQsbV1BCXii0G5+FPxk10se0tdcKLIJ ToehDt6/Dm+ZlK2km/wDmzYdDknvRpU= -----END CERTIFICATE-----Generated at Mon Mar 2 12:42:48 2026 by rpki-client