$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d037641d-aa90-4eab-864e-a73e03e24cfa/a9d6e5c9-bec2-395f-af08-83ce47190965.roa File: a9d6e5c9-bec2-395f-af08-83ce47190965.roa (raw, json) Hash identifier: JOkJJdIwM+5IZCxQw3ukP7lsamf4d18i972Jnoa4wT0= Subject key identifier: B0:06:7B:78:39:F3:77:3D:78:B7:96:7A:0A:F3:41:D8:D4:7F:CF:12 Certificate issuer: /CN=d037641d-aa90-4eab-864e-a73e03e24cfa Certificate serial: 010D0C9F4328584D00B251D8C8C8236FB7D4EDC0 Authority key identifier: B7:BB:43:7E:D1:FE:FB:F4:08:65:EB:A6:E8:8F:3D:39:E5:86:48:1B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d037641d-aa90-4eab-864e-a73e03e24cfa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d037641d-aa90-4eab-864e-a73e03e24cfa/a9d6e5c9-bec2-395f-af08-83ce47190965.roa Signing time: Fri 27 Feb 2026 14:00:40 +0000 ROA not before: Fri 27 Feb 2026 14:00:40 +0000 ROA not after: Thu 28 May 2026 13:00:40 +0000 asID: 398759 IP address blocks: 23.165.120.0/24 maxlen: 24 2602:f9eb::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d037641d-aa90-4eab-864e-a73e03e24cfa/d037641d-aa90-4eab-864e-a73e03e24cfa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d037641d-aa90-4eab-864e-a73e03e24cfa/d037641d-aa90-4eab-864e-a73e03e24cfa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d037641d-aa90-4eab-864e-a73e03e24cfa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:00:b2:51:d8:c8:c8:23:6f:b7:d4:ed:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d037641d-aa90-4eab-864e-a73e03e24cfa Validity Not Before: Feb 27 14:00:40 2026 GMT Not After : May 28 13:00:40 2026 GMT Subject: CN=0caa9817-8c1e-4ce6-a6b4-59859684196d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:17:2b:2f:26:27:4c:9e:ec:f5:38:f9:46:bd: 98:e4:36:7f:ac:a0:c3:87:09:c5:2a:f0:ed:70:7b: 53:ea:e4:9f:df:5a:bc:af:54:95:ad:3f:04:b0:1f: 52:1e:2b:c4:b8:67:b9:7a:6a:ca:08:02:78:8d:87: 82:3b:c3:ae:c2:04:c7:aa:18:4f:e0:68:26:08:c4: cc:a9:48:23:82:ac:22:45:0a:27:d3:4f:1d:32:79: 96:ba:c0:d1:d9:f5:51:dd:62:15:50:c2:dd:9f:be: 81:16:3f:33:0c:9a:f5:46:58:41:a8:7a:ed:dd:41: 42:ef:5c:98:44:60:1b:e2:e0:f3:b7:40:c0:d9:9c: 23:d8:66:96:58:73:50:cc:6f:4d:33:9d:71:f7:60: 3f:7e:f6:ed:57:5f:58:46:34:e6:6c:88:5e:3b:27: d4:cd:44:25:84:87:d7:21:d8:ca:58:e1:d2:e1:d7: b6:69:92:57:c4:d0:bb:cf:4a:65:69:4e:f1:1f:30: d5:e3:84:73:61:5b:ee:86:ad:fe:2c:b5:96:7d:9f: 2d:d0:d4:64:aa:9a:71:f7:1b:c5:46:50:21:c9:9b: df:86:62:15:ee:66:a8:d4:9b:ad:90:c6:1f:23:88: 3d:c3:cd:d3:6f:9c:84:46:11:ab:e4:60:d9:da:0b: 42:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:06:7B:78:39:F3:77:3D:78:B7:96:7A:0A:F3:41:D8:D4:7F:CF:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d037641d-aa90-4eab-864e-a73e03e24cfa/a9d6e5c9-bec2-395f-af08-83ce47190965.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d037641d-aa90-4eab-864e-a73e03e24cfa/d037641d-aa90-4eab-864e-a73e03e24cfa.crl X509v3 Authority Key Identifier: keyid:B7:BB:43:7E:D1:FE:FB:F4:08:65:EB:A6:E8:8F:3D:39:E5:86:48:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/d037641d-aa90-4eab-864e-a73e03e24cfa.cer sbgp-ipAddrBlock: critical IPv4: 23.165.120.0/24 IPv6: 2602:f9eb::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:fd:0e:e2:63:f6:09:28:e5:64:21:40:24:4e:9a:3d:a4:83: 3d:09:ae:88:25:2a:a2:35:b3:46:c5:a5:e7:b2:a6:00:f0:9c: 6e:93:12:fb:bf:22:9a:02:b9:7b:10:c3:3f:7f:d6:31:e5:15: 2a:db:0b:b5:6a:c7:bb:78:5b:37:98:41:63:a5:c7:3f:94:c2: 59:5c:fe:b1:e1:26:59:c1:2e:3c:11:76:ee:55:f7:e8:7d:de: 7f:95:de:96:66:d4:9f:52:05:8b:d2:6d:e4:d2:be:74:3a:64: a1:d4:20:06:da:3c:8e:d6:98:a3:fe:99:78:b0:46:32:78:78: 21:b4:fd:f8:b1:59:50:d8:72:56:cf:36:64:14:ef:31:d2:e0: 4d:3e:95:0f:05:26:e2:e1:df:5a:b9:a7:59:03:8e:58:58:7d: 98:73:42:e8:3e:46:13:c5:46:1c:83:17:09:b7:3d:17:bd:55: 0b:d1:ee:2c:32:0b:ea:8b:c5:88:45:56:3c:0f:d7:7c:c8:b4: ef:ca:f3:b4:d6:0e:c9:a0:fd:bd:bb:51:8a:2a:39:ee:57:3c: 6f:fa:c6:26:5c:04:c4:b1:2a:0b:cd:06:55:a9:84:fb:c8:66: fc:79:83:07:0e:44:5a:68:bc:1c:9d:96:fe:82:fd:c3:9a:9f: 45:02:3d:33 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE0AslHYyMgjb7fU7cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDAzNzY0MWQtYWE5MC00ZWFiLTg2NGUtYTczZTAzZTI0 Y2ZhMB4XDTI2MDIyNzE0MDA0MFoXDTI2MDUyODEzMDA0MFowLzEtMCsGA1UEAxMk MGNhYTk4MTctOGMxZS00Y2U2LWE2YjQtNTk4NTk2ODQxOTZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgRcrLyYnTJ7s9Tj5Rr2Y5DZ/rKDDhwnFKvDt cHtT6uSf31q8r1SVrT8EsB9SHivEuGe5emrKCAJ4jYeCO8OuwgTHqhhP4GgmCMTM qUgjgqwiRQon008dMnmWusDR2fVR3WIVUMLdn76BFj8zDJr1RlhBqHrt3UFC71yY RGAb4uDzt0DA2Zwj2GaWWHNQzG9NM51x92A/fvbtV19YRjTmbIheOyfUzUQlhIfX IdjKWOHS4de2aZJXxNC7z0plaU7xHzDV44RzYVvuhq3+LLWWfZ8t0NRkqppx9xvF RlAhyZvfhmIV7mao1JutkMYfI4g9w83Tb5yERhGr5GDZ2gtCgwIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFLAGe3g583c9eLeWegrzQdjUf88SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9kMDM3 NjQxZC1hYTkwLTRlYWItODY0ZS1hNzNlMDNlMjRjZmEvYTlkNmU1YzktYmVjMi0z OTVmLWFmMDgtODNjZTQ3MTkwOTY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZDAzNzY0MWQtYWE5MC00ZWFiLTg2 NGUtYTczZTAzZTI0Y2ZhL2QwMzc2NDFkLWFhOTAtNGVhYi04NjRlLWE3M2UwM2Uy NGNmYS5jcmwwHwYDVR0jBBgwFoAUt7tDftH++/QIZeum6I89OeWGSBswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9kMDM3NjQxZC1hYTkwLTRlYWItODY0ZS1hNzNl MDNlMjRjZmEuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF6V4MA4E AgACMAgDBgQmAvnrADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAD/Q7iY/YJKOVkIUAkTpo9pIM9Ca6IJSqi NbNGxaXnsqYA8JxukxL7vyKaArl7EMM/f9Yx5RUq2wu1ase7eFs3mEFjpcc/lMJZ XP6x4SZZwS48EXbuVffofd5/ld6WZtSfUgWL0m3k0r50OmSh1CAG2jyO1pij/pl4 sEYyeHghtP34sVlQ2HJWzzZkFO8x0uBNPpUPBSbi4d9auadZA45YWH2Yc0LoPkYT xUYcgxcJtz0XvVUL0e4sMgvqi8WIRVY8D9d8yLTvyvO01g7JoP29u1GKKjnuVzxv +sYmXATEsSoLzQZVqYT7yGb8eYMHDkRaaLwcnZb+gv3Dmp9FAj0z -----END CERTIFICATE-----Generated at Mon Mar 2 12:00:11 2026 by rpki-client