$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1cf4d4e0-24be-4d3b-9028-c14846f6b0f3/a6b049fa-8259-3d76-b4e5-45a1be88bdda.roa File: a6b049fa-8259-3d76-b4e5-45a1be88bdda.roa (raw, json) Hash identifier: cAtD/DtzL32bhc8e7Zg2ZyMjeVRyjZTPUY7FXZ0+Zf8= Subject key identifier: 3A:BD:7F:DD:D5:F4:78:79:E6:96:E5:75:53:D4:30:86:07:E7:3E:40 Certificate issuer: /CN=1cf4d4e0-24be-4d3b-9028-c14846f6b0f3 Certificate serial: 010D0C9F4328584CBF175495BED775AA65BB6D40 Authority key identifier: 91:8F:8A:57:12:0B:3C:A3:C2:E0:06:E1:41:57:10:31:67:EF:25:B6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1cf4d4e0-24be-4d3b-9028-c14846f6b0f3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1cf4d4e0-24be-4d3b-9028-c14846f6b0f3/a6b049fa-8259-3d76-b4e5-45a1be88bdda.roa Signing time: Wed 04 Feb 2026 02:00:31 +0000 ROA not before: Wed 04 Feb 2026 02:00:31 +0000 ROA not after: Tue 05 May 2026 01:00:31 +0000 asID: 6304 IP address blocks: 23.136.52.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1cf4d4e0-24be-4d3b-9028-c14846f6b0f3/1cf4d4e0-24be-4d3b-9028-c14846f6b0f3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1cf4d4e0-24be-4d3b-9028-c14846f6b0f3/1cf4d4e0-24be-4d3b-9028-c14846f6b0f3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1cf4d4e0-24be-4d3b-9028-c14846f6b0f3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:bf:17:54:95:be:d7:75:aa:65:bb:6d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1cf4d4e0-24be-4d3b-9028-c14846f6b0f3 Validity Not Before: Feb 4 02:00:31 2026 GMT Not After : May 5 01:00:31 2026 GMT Subject: CN=485e374a-0277-45f0-836b-8b2c79378eef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:5b:5a:5a:d3:d8:82:6c:45:19:50:3f:54:85: 98:2d:36:47:40:b7:2e:ff:49:6f:54:3b:01:64:79: ac:db:bd:c0:89:dc:ce:a7:a4:08:3c:60:af:8d:ac: 9e:3e:6f:ae:b6:cc:8b:21:db:93:dd:84:7a:0e:68: c3:3e:3e:3d:b0:2b:f2:c8:b4:8b:ff:6c:bd:b3:cf: 1f:e5:ad:94:ec:2d:be:d6:c5:b2:f1:e8:f3:f7:f6: 1d:4d:ed:e5:53:42:da:38:7e:2b:3b:e2:72:53:c4: da:a6:5d:a0:9b:7d:4d:e2:53:1f:38:2b:1a:70:40: 9d:13:59:eb:c7:98:5a:95:57:a7:33:6d:a0:7c:11: 6f:10:95:cb:c1:c6:64:e2:a0:ec:f1:3e:fe:70:f0: 8f:9f:ba:3d:6a:41:6e:0f:c6:c1:60:ca:1a:19:29: 4b:b7:4b:1b:02:43:50:43:cf:ff:69:16:a0:dd:29: 40:51:63:75:13:63:1d:6f:52:49:93:b3:bc:fe:44: 1d:34:38:8d:4a:0e:99:1b:9d:ce:9f:fc:c0:92:56: e1:18:a1:07:ed:99:a9:2b:b8:97:63:40:b0:5f:9f: 52:b4:f0:66:f6:d4:cd:be:a8:34:27:b7:cd:65:a1: 84:ef:ab:0f:11:c1:e0:3f:9a:58:97:d1:e2:63:4a: 54:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:BD:7F:DD:D5:F4:78:79:E6:96:E5:75:53:D4:30:86:07:E7:3E:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1cf4d4e0-24be-4d3b-9028-c14846f6b0f3/a6b049fa-8259-3d76-b4e5-45a1be88bdda.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1cf4d4e0-24be-4d3b-9028-c14846f6b0f3/1cf4d4e0-24be-4d3b-9028-c14846f6b0f3.crl X509v3 Authority Key Identifier: keyid:91:8F:8A:57:12:0B:3C:A3:C2:E0:06:E1:41:57:10:31:67:EF:25:B6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/1cf4d4e0-24be-4d3b-9028-c14846f6b0f3.cer sbgp-ipAddrBlock: critical IPv4: 23.136.52.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:da:8c:da:4f:db:d2:0c:a4:88:d8:d4:48:09:d9:59:4a:a3: 2c:72:d9:7c:42:c4:33:e8:4c:7a:f2:1a:38:cb:59:80:50:50: 39:0d:d1:f0:45:2c:1f:f9:f1:62:07:20:c3:95:ab:01:6b:86: c4:2e:db:57:7e:c8:77:83:bf:1b:7b:7f:ed:5f:a5:ed:a2:f2: c3:09:9c:15:94:61:0f:df:9a:fa:87:d4:2f:c7:d3:f5:d5:34: 56:71:55:6f:20:43:0a:ca:bc:13:9a:30:84:05:2f:f2:a7:6d: a3:53:4a:36:b8:48:41:b5:d6:81:c1:9f:b6:03:8e:5c:b4:02: 3c:d4:dc:50:ca:b6:8c:b7:84:bd:42:ef:10:18:40:4d:91:ca: f9:9e:f7:90:a3:7c:8a:f8:84:26:97:4b:6b:29:1e:d1:48:74: bf:fa:4e:9b:81:8d:ba:a9:a4:2b:9c:8d:05:30:af:f5:ae:20: 04:0f:26:5f:7a:1e:a6:76:6f:a2:a1:32:9e:09:64:c5:69:34: 11:a1:36:2a:6f:28:d4:f6:11:82:99:6b:cf:c3:16:63:e3:a5: 8a:ff:7f:07:72:e4:5a:52:b7:db:a9:60:9d:53:9d:5d:df:bd: f2:85:50:59:19:0e:e7:e9:fc:93:97:fe:2b:d4:0d:01:cd:25: 50:87:42:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEy/F1SVvtd1qmW7bUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMWNmNGQ0ZTAtMjRiZS00ZDNiLTkwMjgtYzE0ODQ2ZjZi MGYzMB4XDTI2MDIwNDAyMDAzMVoXDTI2MDUwNTAxMDAzMVowLzEtMCsGA1UEAxMk NDg1ZTM3NGEtMDI3Ny00NWYwLTgzNmItOGIyYzc5Mzc4ZWVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv1taWtPYgmxFGVA/VIWYLTZHQLcu/0lvVDsB ZHms273AidzOp6QIPGCvjayePm+utsyLIduT3YR6DmjDPj49sCvyyLSL/2y9s88f 5a2U7C2+1sWy8ejz9/YdTe3lU0LaOH4rO+JyU8Tapl2gm31N4lMfOCsacECdE1nr x5halVenM22gfBFvEJXLwcZk4qDs8T7+cPCPn7o9akFuD8bBYMoaGSlLt0sbAkNQ Q8//aRag3SlAUWN1E2Mdb1JJk7O8/kQdNDiNSg6ZG53On/zAklbhGKEH7ZmpK7iX Y0CwX59StPBm9tTNvqg0J7fNZaGE76sPEcHgP5pYl9HiY0pUCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDq9f93V9Hh55pbldVPUMIYH5z5AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8xY2Y0 ZDRlMC0yNGJlLTRkM2ItOTAyOC1jMTQ4NDZmNmIwZjMvYTZiMDQ5ZmEtODI1OS0z ZDc2LWI0ZTUtNDVhMWJlODhiZGRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMWNmNGQ0ZTAtMjRiZS00ZDNiLTkw MjgtYzE0ODQ2ZjZiMGYzLzFjZjRkNGUwLTI0YmUtNGQzYi05MDI4LWMxNDg0NmY2 YjBmMy5jcmwwHwYDVR0jBBgwFoAUkY+KVxILPKPC4AbhQVcQMWfvJbYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8xY2Y0ZDRlMC0yNGJlLTRkM2ItOTAyOC1jMTQ4 NDZmNmIwZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4g0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFPajNpP29IMpIjY1EgJ2VlKoyxy2XxCxDPoTHryGjjLWYBQUDkN0fBF LB/58WIHIMOVqwFrhsQu21d+yHeDvxt7f+1fpe2i8sMJnBWUYQ/fmvqH1C/H0/XV NFZxVW8gQwrKvBOaMIQFL/KnbaNTSja4SEG11oHBn7YDjly0AjzU3FDKtoy3hL1C 7xAYQE2Ryvme95CjfIr4hCaXS2spHtFIdL/6TpuBjbqppCucjQUwr/WuIAQPJl96 HqZ2b6KhMp4JZMVpNBGhNipvKNT2EYKZa8/DFmPjpYr/fwdy5FpSt9upYJ1TnV3f vfKFUFkZDufp/JOX/ivUDQHNJVCHQlM= -----END CERTIFICATE-----Generated at Mon Mar 2 09:14:19 2026 by rpki-client