$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a2b535b7-fbed-4c14-8ac0-7c5f32020c09/8b5e59d3-04c2-3d56-b6ee-6a6d5324a027.roa File: 8b5e59d3-04c2-3d56-b6ee-6a6d5324a027.roa (raw, json) Hash identifier: dudwdA/NtUv7n97qGNm/Y6zVrs4Bbrsg2FoRx7lphRQ= Subject key identifier: A4:DF:E7:AF:93:32:7E:AA:BF:28:E6:42:21:BD:8E:24:A3:85:56:1A Certificate issuer: /CN=a2b535b7-fbed-4c14-8ac0-7c5f32020c09 Certificate serial: 010D0C9F4328584CEA5CC595AB42DBA4EF43C840 Authority key identifier: 4C:9A:3C:37:5A:3C:37:6C:56:67:CF:06:66:93:00:59:D0:DE:F7:06 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a2b535b7-fbed-4c14-8ac0-7c5f32020c09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a2b535b7-fbed-4c14-8ac0-7c5f32020c09/8b5e59d3-04c2-3d56-b6ee-6a6d5324a027.roa Signing time: Thu 19 Feb 2026 14:00:40 +0000 ROA not before: Thu 19 Feb 2026 14:00:40 +0000 ROA not after: Wed 20 May 2026 13:00:40 +0000 asID: 60439 IP address blocks: 23.147.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a2b535b7-fbed-4c14-8ac0-7c5f32020c09/a2b535b7-fbed-4c14-8ac0-7c5f32020c09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a2b535b7-fbed-4c14-8ac0-7c5f32020c09/a2b535b7-fbed-4c14-8ac0-7c5f32020c09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a2b535b7-fbed-4c14-8ac0-7c5f32020c09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 03:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ea:5c:c5:95:ab:42:db:a4:ef:43:c8:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a2b535b7-fbed-4c14-8ac0-7c5f32020c09 Validity Not Before: Feb 19 14:00:40 2026 GMT Not After : May 20 13:00:40 2026 GMT Subject: CN=afe62989-5bff-4179-9f65-1f8707d6f6a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:ae:bc:9f:84:e8:a5:36:09:f7:8a:8a:45:e2: bd:0a:46:68:85:32:97:31:37:8b:3a:d2:62:cd:e1: 73:bb:b4:1b:29:89:68:54:e5:90:c3:cf:bb:7f:42: fb:d3:af:c9:c0:82:f6:f8:fb:17:46:ea:a0:44:64: 8f:0c:2a:73:a6:13:6a:cb:55:6c:61:a0:87:27:5e: 52:05:32:a3:95:81:b2:b1:04:e2:8a:31:18:76:fd: ea:d5:74:c9:d9:a2:da:57:df:6d:de:2d:a2:df:90: d1:02:57:b3:f2:7d:fc:a9:d7:89:fd:60:dc:a6:f9: 41:19:0c:67:cb:2b:9c:d6:c2:c6:89:cd:19:a5:39: 47:7a:5c:ef:2a:42:cb:d9:16:00:ef:54:ba:12:23: 81:58:07:cd:c5:a8:4b:51:1d:53:f9:e2:47:33:6c: 0c:be:38:b5:80:a1:11:67:74:5a:93:41:a9:85:ad: 65:b9:f3:f3:a0:d3:21:dc:26:dc:e3:74:e5:9c:e8: 4c:bf:bc:c4:ea:62:5b:7b:cd:ea:63:3a:b8:da:70: 09:52:cd:c9:94:04:3e:7f:2d:fa:70:5f:dc:53:2c: 99:6a:0f:84:87:fc:8f:af:97:c7:ea:10:da:58:22: 15:f9:72:d3:44:bd:90:83:3a:0c:fd:dc:1d:1b:79: b1:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:DF:E7:AF:93:32:7E:AA:BF:28:E6:42:21:BD:8E:24:A3:85:56:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a2b535b7-fbed-4c14-8ac0-7c5f32020c09/8b5e59d3-04c2-3d56-b6ee-6a6d5324a027.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a2b535b7-fbed-4c14-8ac0-7c5f32020c09/a2b535b7-fbed-4c14-8ac0-7c5f32020c09.crl X509v3 Authority Key Identifier: keyid:4C:9A:3C:37:5A:3C:37:6C:56:67:CF:06:66:93:00:59:D0:DE:F7:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/a2b535b7-fbed-4c14-8ac0-7c5f32020c09.cer sbgp-ipAddrBlock: critical IPv4: 23.147.236.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:13:fb:fd:b5:6a:05:78:96:ea:3d:da:93:09:fe:1b:ce:ef: 0a:d1:a8:2d:a2:20:43:f6:7c:45:89:c2:7e:3a:68:eb:6d:2c: a2:8a:8b:86:40:1f:3b:6c:6d:72:18:6a:3a:63:4f:31:7f:cc: eb:1a:4c:17:fb:23:b9:45:db:23:d9:01:d5:73:3f:14:8c:d2: ca:45:b3:c8:3e:5b:4c:91:5a:12:bc:4d:3c:6a:cc:6b:bb:66: c7:d8:d5:65:c0:e4:f7:f2:87:5a:cf:34:7f:00:f5:8e:f3:39: f1:20:75:6c:e7:45:1f:1b:42:78:87:18:43:d9:d2:5f:21:3e: 6b:d0:19:65:09:1d:be:b8:70:1f:8d:ee:f4:cc:e9:c6:16:3f: 8f:36:99:02:ff:bd:c1:06:1c:3e:6a:57:97:b0:b7:e0:b3:85: 48:ce:28:66:88:73:2d:8c:61:06:4b:6b:b5:87:ce:a0:5d:90: 69:dd:95:55:d8:de:02:7a:bd:31:d3:93:4c:0c:ee:d9:bf:a5: 20:d1:d9:de:ed:3b:f5:02:b9:20:bb:ee:14:77:f4:60:cb:b7: 58:aa:43:4e:e5:e1:96:b9:a1:08:36:eb:9b:92:58:d6:66:75: a6:f5:8d:e1:5c:1c:ed:6f:be:a6:1a:4f:4f:9b:62:80:f2:9c: 99:57:57:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzqXMWVq0LbpO9DyEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTJiNTM1YjctZmJlZC00YzE0LThhYzAtN2M1ZjMyMDIw YzA5MB4XDTI2MDIxOTE0MDA0MFoXDTI2MDUyMDEzMDA0MFowLzEtMCsGA1UEAxMk YWZlNjI5ODktNWJmZi00MTc5LTlmNjUtMWY4NzA3ZDZmNmE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlq68n4TopTYJ94qKReK9CkZohTKXMTeLOtJi zeFzu7QbKYloVOWQw8+7f0L706/JwIL2+PsXRuqgRGSPDCpzphNqy1VsYaCHJ15S BTKjlYGysQTiijEYdv3q1XTJ2aLaV99t3i2i35DRAlez8n38qdeJ/WDcpvlBGQxn yyuc1sLGic0ZpTlHelzvKkLL2RYA71S6EiOBWAfNxahLUR1T+eJHM2wMvji1gKER Z3Rak0Gpha1lufPzoNMh3Cbc43TlnOhMv7zE6mJbe83qYzq42nAJUs3JlAQ+fy36 cF/cUyyZag+Eh/yPr5fH6hDaWCIV+XLTRL2QgzoM/dwdG3mx0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKTf56+TMn6qvyjmQiG9jiSjhVYaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9hMmI1 MzViNy1mYmVkLTRjMTQtOGFjMC03YzVmMzIwMjBjMDkvOGI1ZTU5ZDMtMDRjMi0z ZDU2LWI2ZWUtNmE2ZDUzMjRhMDI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvYTJiNTM1YjctZmJlZC00YzE0LThh YzAtN2M1ZjMyMDIwYzA5L2EyYjUzNWI3LWZiZWQtNGMxNC04YWMwLTdjNWYzMjAy MGMwOS5jcmwwHwYDVR0jBBgwFoAUTJo8N1o8N2xWZ88GZpMAWdDe9wYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi9hMmI1MzViNy1mYmVkLTRjMTQtOGFjMC03YzVm MzIwMjBjMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5PsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACET+/21agV4luo92pMJ/hvO7wrRqC2iIEP2fEWJwn46aOttLKKKi4ZA HztsbXIYajpjTzF/zOsaTBf7I7lF2yPZAdVzPxSM0spFs8g+W0yRWhK8TTxqzGu7 ZsfY1WXA5Pfyh1rPNH8A9Y7zOfEgdWznRR8bQniHGEPZ0l8hPmvQGWUJHb64cB+N 7vTM6cYWP482mQL/vcEGHD5qV5ewt+CzhUjOKGaIcy2MYQZLa7WHzqBdkGndlVXY 3gJ6vTHTk0wM7tm/pSDR2d7tO/UCuSC77hR39GDLt1iqQ07l4Za5oQg265uSWNZm dab1jeFcHO1vvqYaT0+bYoDynJlXV3I= -----END CERTIFICATE-----Generated at Mon Mar 2 13:49:09 2026 by rpki-client