$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/caec0bfa-1434-4606-b19a-4a911d16534d/f83748be-c604-38fd-9db7-acbbef995831.roa File: f83748be-c604-38fd-9db7-acbbef995831.roa (raw, json) Hash identifier: NRWjXnNUIVjzOHMwsTFYt1mk1PnwnAQHXnakluYzn1w= Subject key identifier: 3F:EA:DC:98:61:FF:64:CA:D1:88:25:CB:4D:8A:E3:97:B1:2C:11:EB Certificate issuer: /CN=caec0bfa-1434-4606-b19a-4a911d16534d Certificate serial: 010D0C9F4328584CD6D20CC65D63A50D55461C00 Authority key identifier: 91:89:EF:A7:0A:9D:E8:41:6B:51:72:39:D0:33:81:AF:40:44:97:BE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/caec0bfa-1434-4606-b19a-4a911d16534d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/caec0bfa-1434-4606-b19a-4a911d16534d/f83748be-c604-38fd-9db7-acbbef995831.roa Signing time: Thu 12 Feb 2026 14:00:40 +0000 ROA not before: Thu 12 Feb 2026 14:00:40 +0000 ROA not after: Wed 13 May 2026 13:00:40 +0000 asID: 401566 IP address blocks: 23.131.236.0/24 maxlen: 24 2602:f745::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/caec0bfa-1434-4606-b19a-4a911d16534d/caec0bfa-1434-4606-b19a-4a911d16534d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/caec0bfa-1434-4606-b19a-4a911d16534d/caec0bfa-1434-4606-b19a-4a911d16534d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/caec0bfa-1434-4606-b19a-4a911d16534d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:d6:d2:0c:c6:5d:63:a5:0d:55:46:1c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=caec0bfa-1434-4606-b19a-4a911d16534d Validity Not Before: Feb 12 14:00:40 2026 GMT Not After : May 13 13:00:40 2026 GMT Subject: CN=108d4938-8f3a-4312-bca8-7eb532baa550 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:d2:a2:b1:aa:dd:2c:9a:b2:9e:7e:a3:2f:a1: 66:e2:bb:7a:d5:17:9c:71:6d:fe:ba:be:21:4c:9a: 37:89:e4:09:5a:13:74:53:83:83:f3:9f:c6:61:ac: 4c:79:d8:d8:96:70:82:b6:a8:d8:ba:2c:88:31:e8: c1:2a:84:9d:7a:14:ea:b4:d4:a2:d5:b2:70:82:68: 52:91:08:73:ba:d4:23:e7:bb:99:c1:6e:3b:1c:1f: ff:b7:4b:04:d3:74:c3:50:a3:72:7f:9a:a3:35:f2: cb:c3:8b:65:fc:2c:df:d5:81:d1:8f:79:36:0f:f6: 07:83:82:a3:f2:f0:d2:b3:86:da:3e:58:5d:6e:f6: 99:67:ca:c4:d1:8f:6e:3f:ce:f1:69:b3:43:65:b6: f8:f6:68:3c:b6:cc:30:44:cf:ee:68:f1:cb:2d:28: 4e:e3:07:74:c9:a4:90:74:1f:8a:a2:4a:a0:28:db: 69:78:df:c7:9a:35:f1:d7:42:ca:43:1a:a7:09:cd: 88:87:04:c7:6c:d9:23:d6:34:bd:c5:f8:51:fc:da: d1:cd:cb:0a:81:90:d8:5d:c2:a0:a3:27:34:43:ac: a5:b7:4f:2a:2d:8e:43:6d:8d:6b:ac:5f:a6:af:7e: e1:7e:e8:a4:ad:bc:cc:73:a0:74:0f:af:d0:b5:60: 09:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:EA:DC:98:61:FF:64:CA:D1:88:25:CB:4D:8A:E3:97:B1:2C:11:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/caec0bfa-1434-4606-b19a-4a911d16534d/f83748be-c604-38fd-9db7-acbbef995831.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/caec0bfa-1434-4606-b19a-4a911d16534d/caec0bfa-1434-4606-b19a-4a911d16534d.crl X509v3 Authority Key Identifier: keyid:91:89:EF:A7:0A:9D:E8:41:6B:51:72:39:D0:33:81:AF:40:44:97:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/caec0bfa-1434-4606-b19a-4a911d16534d.cer sbgp-ipAddrBlock: critical IPv4: 23.131.236.0/24 IPv6: 2602:f745::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:2e:a6:3c:22:bd:64:19:9a:e0:ff:99:f8:4a:1b:32:0f:a0: 28:aa:f7:17:04:42:89:84:a6:6f:15:2f:ae:0e:31:ba:8f:21: 6f:41:09:b5:0a:91:8e:1e:7c:03:7f:20:74:52:bc:26:c7:2f: 9d:4e:a5:04:7f:8f:a0:ab:37:fd:51:43:9c:4d:1e:1a:27:04: dd:b1:1a:88:f9:64:28:6c:b8:c2:92:76:50:9e:43:17:8e:72: c7:c2:6c:6b:de:44:3b:16:3c:bd:07:bb:90:14:47:08:bf:97: 22:25:7e:0e:4b:42:6f:72:bd:7f:cf:5d:ae:05:31:b6:9a:20: b4:79:bb:29:43:3b:66:57:d8:53:ce:73:c0:d2:db:da:de:6a: 98:f8:e2:69:34:73:a4:27:b5:4c:9d:eb:47:0d:37:2a:88:f5: cb:28:15:2a:ea:f0:79:46:43:e0:a1:5a:59:2e:f0:61:87:05: 7d:e9:1f:b6:5f:6a:d1:44:01:e9:8f:8b:e9:ee:f3:3f:6c:14: d8:4d:c5:21:da:85:fe:92:36:7e:da:b0:51:f9:3a:e4:d1:7b: ce:39:d9:e1:5e:ef:d0:36:93:ed:13:c0:e3:39:a8:a7:ae:34: b9:0d:6d:9e:f1:f9:d3:29:0c:78:8a:ee:4e:9d:22:d8:0e:a2: b8:e5:0c:d6 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEzW0gzGXWOlDVVGHAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2FlYzBiZmEtMTQzNC00NjA2LWIxOWEtNGE5MTFkMTY1 MzRkMB4XDTI2MDIxMjE0MDA0MFoXDTI2MDUxMzEzMDA0MFowLzEtMCsGA1UEAxMk MTA4ZDQ5MzgtOGYzYS00MzEyLWJjYTgtN2ViNTMyYmFhNTUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiNKisardLJqynn6jL6Fm4rt61ReccW3+ur4h TJo3ieQJWhN0U4OD85/GYaxMedjYlnCCtqjYuiyIMejBKoSdehTqtNSi1bJwgmhS kQhzutQj57uZwW47HB//t0sE03TDUKNyf5qjNfLLw4tl/Czf1YHRj3k2D/YHg4Kj 8vDSs4baPlhdbvaZZ8rE0Y9uP87xabNDZbb49mg8tswwRM/uaPHLLShO4wd0yaSQ dB+KokqgKNtpeN/HmjXx10LKQxqnCc2IhwTHbNkj1jS9xfhR/NrRzcsKgZDYXcKg oyc0Q6ylt08qLY5DbY1rrF+mr37hfuikrbzMc6B0D6/QtWAJUwIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFD/q3Jhh/2TK0Ygly02K45exLBHrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9jYWVj MGJmYS0xNDM0LTQ2MDYtYjE5YS00YTkxMWQxNjUzNGQvZjgzNzQ4YmUtYzYwNC0z OGZkLTlkYjctYWNiYmVmOTk1ODMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvY2FlYzBiZmEtMTQzNC00NjA2LWIx OWEtNGE5MTFkMTY1MzRkL2NhZWMwYmZhLTE0MzQtNDYwNi1iMTlhLTRhOTExZDE2 NTM0ZC5jcmwwHwYDVR0jBBgwFoAUkYnvpwqd6EFrUXI50DOBr0BEl74wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9jYWVjMGJmYS0xNDM0LTQ2MDYtYjE5YS00YTkx MWQxNjUzNGQuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF4PsMA4E AgACMAgDBgQmAvdFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQADLqY8Ir1kGZrg/5n4ShsyD6AoqvcXBEKJ hKZvFS+uDjG6jyFvQQm1CpGOHnwDfyB0Urwmxy+dTqUEf4+gqzf9UUOcTR4aJwTd sRqI+WQobLjCknZQnkMXjnLHwmxr3kQ7Fjy9B7uQFEcIv5ciJX4OS0Jvcr1/z12u BTG2miC0ebspQztmV9hTznPA0tva3mqY+OJpNHOkJ7VMnetHDTcqiPXLKBUq6vB5 RkPgoVpZLvBhhwV96R+2X2rRRAHpj4vp7vM/bBTYTcUh2oX+kjZ+2rBR+Trk0XvO OdnhXu/QNpPtE8DjOainrjS5DW2e8fnTKQx4iu5OnSLYDqK45QzW -----END CERTIFICATE-----Generated at Mon Mar 2 12:37:53 2026 by rpki-client