$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/d4bae7d4-79c0-3570-86f8-0973a5218251.roa File: d4bae7d4-79c0-3570-86f8-0973a5218251.roa (raw, json) Hash identifier: ED8l4MBuyoISI2j3OHh69P2YL5UXudX5T7xunjJ4aGY= Subject key identifier: 42:30:35:31:82:D3:42:13:72:41:BA:C3:EC:19:57:45:D8:E8:00:74 Certificate issuer: /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Certificate serial: 010D0C9F4328584CB981BE06B624946ED24DCE00 Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/d4bae7d4-79c0-3570-86f8-0973a5218251.roa Signing time: Mon 02 Feb 2026 02:00:32 +0000 ROA not before: Mon 02 Feb 2026 02:00:32 +0000 ROA not after: Sun 03 May 2026 01:00:32 +0000 asID: 62904 IP address blocks: 173.232.236.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:b9:81:be:06:b6:24:94:6e:d2:4d:ce:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Validity Not Before: Feb 2 02:00:32 2026 GMT Not After : May 3 01:00:32 2026 GMT Subject: CN=205b2628-ba75-4f10-a0e1-a1dbe260504c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:08:74:0b:0f:75:a3:9d:3e:45:77:20:58:13: 1a:10:14:0f:17:f7:d9:8d:fa:d5:a4:b5:d1:04:ed: 15:d2:19:67:ba:03:e2:15:ef:a3:49:2d:3e:e9:38: 2f:35:30:15:be:4b:55:ec:d1:cf:07:7f:1a:be:51: 50:3f:70:c6:dc:62:c8:61:7d:6c:62:50:eb:9c:f0: a3:cb:5c:27:c9:ba:e1:6f:02:50:0e:31:ca:64:fe: c6:8b:a1:f9:35:f4:c5:14:4c:41:b3:f3:6c:e8:d4: 0c:33:fd:e4:d5:3a:29:79:72:29:d0:14:a0:a1:9b: eb:cc:01:e7:a4:f9:e8:49:82:ea:4e:e7:1e:fb:26: a0:14:37:f8:1b:62:13:15:fd:0d:d5:f8:ad:aa:e0: a2:2f:d1:d8:44:40:9c:2b:0f:21:c9:4f:1d:d6:77: 71:ef:6b:7f:2d:ae:38:19:6a:e8:04:c4:1a:08:e8: 50:54:6c:78:d6:42:40:21:87:3c:a2:c0:3a:1f:a7: 8c:1d:6e:2b:02:1a:d9:93:c4:05:42:47:e6:36:fd: 29:f1:93:22:a9:e0:9f:f3:7e:a7:ad:7c:b5:a3:db: f7:7f:42:ab:69:14:48:b3:3f:8d:df:81:de:99:a0: e2:5b:fd:26:90:1f:b4:19:ec:a0:52:b5:91:1f:ff: a5:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:30:35:31:82:D3:42:13:72:41:BA:C3:EC:19:57:45:D8:E8:00:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/d4bae7d4-79c0-3570-86f8-0973a5218251.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl X509v3 Authority Key Identifier: keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer sbgp-ipAddrBlock: critical IPv4: 173.232.236.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:b4:f0:13:48:db:9b:1f:63:5e:4c:22:df:c2:89:6b:cf:7f: 28:78:5c:12:d5:75:06:23:a2:9b:0d:df:2d:32:12:12:b4:4b: 4f:60:05:8d:68:b7:75:57:3a:73:aa:04:b8:cb:34:3e:51:07: f7:0a:c8:fc:0f:8c:bc:72:dd:e3:b7:4d:3f:2a:76:a3:73:84: d8:4d:88:27:17:8d:e4:ca:60:cd:31:14:ae:4e:26:4a:46:7f: 93:fa:fc:fa:09:42:a2:12:93:35:5d:c9:51:8e:eb:e0:4a:6e: bd:11:e3:00:95:af:87:e5:7c:2b:d6:dc:8a:16:44:64:ca:d5: 60:0f:1e:29:34:9a:f6:e7:94:d7:56:41:51:f4:98:0c:2a:6a: fa:19:7d:d6:b0:61:3c:58:15:5a:0f:6a:a8:3b:bc:a0:02:62: b6:60:f2:b9:8e:f4:fe:6c:ae:94:d3:b0:b6:13:5f:43:49:de: 3f:9d:d9:d7:d7:be:a9:9c:a5:c4:13:bb:14:69:b8:46:9d:63: fe:7c:03:1c:34:0f:0f:0b:f0:7e:56:1e:39:d3:02:99:a5:18: 45:49:24:41:4b:01:5f:40:ed:15:5c:28:fb:7c:95:52:b2:64: 5c:8d:17:28:6d:a1:b6:9a:ec:14:c0:41:9b:8c:c1:95:a1:fc: 29:fb:08:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEy5gb4GtiSUbtJNzgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZWYxMmUtODk1My00MzgwLWIxNmQtMjhiYTJhYTE1 YzE3MB4XDTI2MDIwMjAyMDAzMloXDTI2MDUwMzAxMDAzMlowLzEtMCsGA1UEAxMk MjA1YjI2MjgtYmE3NS00ZjEwLWEwZTEtYTFkYmUyNjA1MDRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvwh0Cw91o50+RXcgWBMaEBQPF/fZjfrVpLXR BO0V0hlnugPiFe+jSS0+6TgvNTAVvktV7NHPB38avlFQP3DG3GLIYX1sYlDrnPCj y1wnybrhbwJQDjHKZP7Gi6H5NfTFFExBs/Ns6NQMM/3k1TopeXIp0BSgoZvrzAHn pPnoSYLqTuce+yagFDf4G2ITFf0N1fitquCiL9HYRECcKw8hyU8d1ndx72t/La44 GWroBMQaCOhQVGx41kJAIYc8osA6H6eMHW4rAhrZk8QFQkfmNv0p8ZMiqeCf836n rXy1o9v3f0KraRRIsz+N34HemaDiW/0mkB+0GeygUrWRH/+lVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEIwNTGC00ITckG6w+wZV0XY6AB0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhl ZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJhMmFhMTVjMTcvZDRiYWU3ZDQtNzljMC0z NTcwLTg2ZjgtMDk3M2E1MjE4MjUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y4ZWYxMmUtODk1My00MzgwLWIx NmQtMjhiYTJhYTE1YzE3LzNmOGVmMTJlLTg5NTMtNDM4MC1iMTZkLTI4YmEyYWEx NWMxNy5jcmwwHwYDVR0jBBgwFoAURmDx/IALEkbguuKi0tarLtFQVHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhlZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJh MmFhMTVjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrejsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAES08BNI25sfY15MIt/CiWvPfyh4XBLVdQYjopsN3y0yEhK0S09gBY1o t3VXOnOqBLjLND5RB/cKyPwPjLxy3eO3TT8qdqNzhNhNiCcXjeTKYM0xFK5OJkpG f5P6/PoJQqISkzVdyVGO6+BKbr0R4wCVr4flfCvW3IoWRGTK1WAPHik0mvbnlNdW QVH0mAwqavoZfdawYTxYFVoPaqg7vKACYrZg8rmO9P5srpTTsLYTX0NJ3j+d2dfX vqmcpcQTuxRpuEadY/58Axw0Dw8L8H5WHjnTApmlGEVJJEFLAV9A7RVcKPt8lVKy ZFyNFyhtobaa7BTAQZuMwZWh/Cn7CJI= -----END CERTIFICATE-----Generated at Mon Mar 2 14:30:38 2026 by rpki-client