$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b3642034-3a8a-4858-abb3-8e2b429a1376/86e89988-fc9f-36d3-be0b-651a22e02d05.roa File: 86e89988-fc9f-36d3-be0b-651a22e02d05.roa (raw, json) Hash identifier: /jsupO4G6fPFG4zuXhDSkj8Xzld80m92DKURy51/Drg= Subject key identifier: 52:43:C8:5B:7F:03:32:98:D9:22:A0:52:8F:4B:79:EB:0B:87:F5:6F Certificate issuer: /CN=b3642034-3a8a-4858-abb3-8e2b429a1376 Certificate serial: 010D0C9F4328584D04E2385F689FF0E8AD13A380 Authority key identifier: 35:82:A7:1E:56:7F:83:97:CC:41:D0:90:E0:C3:03:29:B9:29:09:9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b3642034-3a8a-4858-abb3-8e2b429a1376.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b3642034-3a8a-4858-abb3-8e2b429a1376/86e89988-fc9f-36d3-be0b-651a22e02d05.roa Signing time: Sun 01 Mar 2026 02:00:31 +0000 ROA not before: Sun 01 Mar 2026 02:00:31 +0000 ROA not after: Sat 30 May 2026 01:00:31 +0000 asID: 399861 IP address blocks: 23.131.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b3642034-3a8a-4858-abb3-8e2b429a1376/b3642034-3a8a-4858-abb3-8e2b429a1376.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b3642034-3a8a-4858-abb3-8e2b429a1376/b3642034-3a8a-4858-abb3-8e2b429a1376.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b3642034-3a8a-4858-abb3-8e2b429a1376.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:04:e2:38:5f:68:9f:f0:e8:ad:13:a3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b3642034-3a8a-4858-abb3-8e2b429a1376 Validity Not Before: Mar 1 02:00:31 2026 GMT Not After : May 30 01:00:31 2026 GMT Subject: CN=a60dc246-150a-4cbe-9e4b-131130ad3846 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:3b:3a:46:14:96:bf:0f:5e:99:b9:5b:80:5c: 7c:08:de:01:37:ee:8c:bf:c2:ec:22:39:cc:69:83: 6a:94:d6:cb:ea:d3:8b:4d:b3:df:71:8e:15:5d:00: d9:a0:e5:a9:d7:82:94:fe:72:de:88:bd:40:42:17: b7:fd:e2:05:3d:1f:d1:0a:8c:02:59:64:c8:4d:13: b8:e4:09:20:25:78:8a:8d:61:07:15:42:cd:b4:33: 9f:b6:bb:ab:ea:2e:57:60:39:47:82:80:51:c7:2a: ef:53:c6:a4:1c:32:ca:af:3b:80:9a:06:0c:f4:6d: ed:a8:12:38:c9:cc:f0:93:02:21:bc:a8:08:ed:18: 6e:93:27:9d:c3:27:85:94:12:d7:75:82:57:e0:05: fa:bc:42:83:aa:2e:ff:b0:02:6f:12:e2:58:52:18: c0:b9:f1:94:3a:f5:2f:db:9c:e3:a8:5b:ba:5f:49: 1f:f3:e8:c8:a5:ed:b5:e1:f5:5e:8f:44:0c:b2:df: 69:33:59:59:69:98:04:1b:3c:22:ba:0a:a9:92:1a: cb:af:47:b1:8e:09:f1:1f:eb:24:48:6e:98:0d:bc: 66:64:14:d5:d4:9c:f7:4d:f2:a4:a1:81:2a:87:75: 4e:5b:ff:c7:5d:8b:2b:f0:ba:c8:d3:32:29:0b:4b: cf:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:43:C8:5B:7F:03:32:98:D9:22:A0:52:8F:4B:79:EB:0B:87:F5:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b3642034-3a8a-4858-abb3-8e2b429a1376/86e89988-fc9f-36d3-be0b-651a22e02d05.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b3642034-3a8a-4858-abb3-8e2b429a1376/b3642034-3a8a-4858-abb3-8e2b429a1376.crl X509v3 Authority Key Identifier: keyid:35:82:A7:1E:56:7F:83:97:CC:41:D0:90:E0:C3:03:29:B9:29:09:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b3642034-3a8a-4858-abb3-8e2b429a1376.cer sbgp-ipAddrBlock: critical IPv4: 23.131.4.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:0d:f8:fd:26:e1:2d:d3:aa:d7:46:91:92:9d:5e:c9:50:d3: fd:91:67:90:35:e4:4f:6c:4b:f9:8e:4a:31:13:da:7e:0f:e0: ea:2d:85:81:db:a3:78:71:ce:95:8c:5e:53:f6:bb:af:13:8f: 05:12:38:65:b5:c6:33:36:9b:dc:20:8a:6d:c8:ed:dc:58:5a: 00:35:cf:a6:08:ea:e6:f4:98:be:a7:d3:ca:1f:35:c5:1b:7c: b0:fd:3a:d5:56:52:d4:71:20:ad:2c:8c:09:8b:ed:5c:cd:5f: e1:90:e0:05:10:58:6b:5f:fb:0f:a1:9e:59:f1:f3:81:12:c5: 13:60:77:70:26:b2:4d:0f:36:75:76:ad:ec:18:97:5c:4e:19: ca:e7:e9:c9:b3:e6:a2:7f:f7:92:bd:3c:ee:12:65:da:6a:21: 4b:74:c4:6a:f2:09:cf:e3:aa:e6:6d:8a:13:09:a1:a4:1d:b7: cf:92:09:52:94:44:0f:a2:77:47:d1:ff:5e:4e:c8:34:8a:bf: 84:39:da:5c:f3:c5:ac:75:6d:1b:e0:18:f8:51:1a:ba:b6:d6: 36:ca:4e:8d:65:cf:93:35:1c:9c:22:f5:d7:d1:15:84:11:78: ab:cd:64:5b:ec:55:46:67:54:47:5c:7d:51:65:49:b1:a9:74: 9b:3f:93:45 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0E4jhfaJ/w6K0To4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjM2NDIwMzQtM2E4YS00ODU4LWFiYjMtOGUyYjQyOWEx Mzc2MB4XDTI2MDMwMTAyMDAzMVoXDTI2MDUzMDAxMDAzMVowLzEtMCsGA1UEAxMk YTYwZGMyNDYtMTUwYS00Y2JlLTllNGItMTMxMTMwYWQzODQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApTs6RhSWvw9emblbgFx8CN4BN+6Mv8LsIjnM aYNqlNbL6tOLTbPfcY4VXQDZoOWp14KU/nLeiL1AQhe3/eIFPR/RCowCWWTITRO4 5AkgJXiKjWEHFULNtDOftrur6i5XYDlHgoBRxyrvU8akHDLKrzuAmgYM9G3tqBI4 yczwkwIhvKgI7RhukyedwyeFlBLXdYJX4AX6vEKDqi7/sAJvEuJYUhjAufGUOvUv 25zjqFu6X0kf8+jIpe214fVej0QMst9pM1lZaZgEGzwiugqpkhrLr0exjgnxH+sk SG6YDbxmZBTV1Jz3TfKkoYEqh3VOW//HXYsr8LrI0zIpC0vPTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFJDyFt/AzKY2SKgUo9LeesLh/VvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9iMzY0 MjAzNC0zYThhLTQ4NTgtYWJiMy04ZTJiNDI5YTEzNzYvODZlODk5ODgtZmM5Zi0z NmQzLWJlMGItNjUxYTIyZTAyZDA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYjM2NDIwMzQtM2E4YS00ODU4LWFi YjMtOGUyYjQyOWExMzc2L2IzNjQyMDM0LTNhOGEtNDg1OC1hYmIzLThlMmI0Mjlh MTM3Ni5jcmwwHwYDVR0jBBgwFoAUNYKnHlZ/g5fMQdCQ4MMDKbkpCZ4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9iMzY0MjAzNC0zYThhLTQ4NTgtYWJiMy04ZTJi NDI5YTEzNzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4MEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD0N+P0m4S3TqtdGkZKdXslQ0/2RZ5A15E9sS/mOSjET2n4P4OothYHb o3hxzpWMXlP2u68TjwUSOGW1xjM2m9wgim3I7dxYWgA1z6YI6ub0mL6n08ofNcUb fLD9OtVWUtRxIK0sjAmL7VzNX+GQ4AUQWGtf+w+hnlnx84ESxRNgd3Amsk0PNnV2 rewYl1xOGcrn6cmz5qJ/95K9PO4SZdpqIUt0xGryCc/jquZtihMJoaQdt8+SCVKU RA+id0fR/15OyDSKv4Q52lzzxax1bRvgGPhRGrq21jbKTo1lz5M1HJwi9dfRFYQR eKvNZFvsVUZnVEdcfVFlSbGpdJs/k0U= -----END CERTIFICATE-----Generated at Mon Mar 2 12:42:46 2026 by rpki-client