$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/efb87759-36c4-4e5a-9c2b-34e00c0fbc30/dd4749e6-6f03-39ee-869f-ab12d3cb43e4.roa File: dd4749e6-6f03-39ee-869f-ab12d3cb43e4.roa (raw, json) Hash identifier: oQq1NA8AMRG9OTHF53w5604PeGd/vzYckCHcZrPJOGE= Subject key identifier: C3:87:27:2F:C0:3F:4A:1A:42:24:30:7B:08:0A:35:11:AD:C2:8D:69 Certificate issuer: /CN=efb87759-36c4-4e5a-9c2b-34e00c0fbc30 Certificate serial: 010D0C9F4328584CD6D21954FE8529FAE89E82C0 Authority key identifier: 78:B3:DD:12:3A:8A:DC:D5:D0:BE:67:7F:27:F9:41:B9:1E:A1:86:2A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/efb87759-36c4-4e5a-9c2b-34e00c0fbc30.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/efb87759-36c4-4e5a-9c2b-34e00c0fbc30/dd4749e6-6f03-39ee-869f-ab12d3cb43e4.roa Signing time: Thu 12 Feb 2026 14:00:40 +0000 ROA not before: Thu 12 Feb 2026 14:00:40 +0000 ROA not after: Wed 13 May 2026 13:00:40 +0000 asID: 11832 IP address blocks: 23.136.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/efb87759-36c4-4e5a-9c2b-34e00c0fbc30/efb87759-36c4-4e5a-9c2b-34e00c0fbc30.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/efb87759-36c4-4e5a-9c2b-34e00c0fbc30/efb87759-36c4-4e5a-9c2b-34e00c0fbc30.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/efb87759-36c4-4e5a-9c2b-34e00c0fbc30.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:d6:d2:19:54:fe:85:29:fa:e8:9e:82:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=efb87759-36c4-4e5a-9c2b-34e00c0fbc30 Validity Not Before: Feb 12 14:00:40 2026 GMT Not After : May 13 13:00:40 2026 GMT Subject: CN=41bf0f09-7b83-4fa6-b8f1-004d7659170f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:fb:af:52:a4:47:b6:f3:35:14:e9:0f:9b:c1: de:91:30:cc:27:80:8a:02:a2:0d:bf:bc:46:57:ee: 42:54:c6:5a:6f:bc:62:eb:fd:4c:94:9e:9b:5b:da: 25:a2:eb:8d:14:08:cc:4e:9f:2d:38:b9:75:c3:21: f6:bd:d1:84:61:7a:14:1e:ad:72:b0:34:6f:c0:ab: 04:b9:33:76:6b:2a:4f:33:67:fa:e2:e2:29:7d:6e: 95:34:33:be:c7:3e:5e:ac:a4:9a:b6:85:5f:f5:6f: d2:c8:27:8b:24:5e:64:1f:6e:ef:31:f7:6c:76:ed: 09:cb:0a:52:84:b8:c0:31:fa:d8:7d:e2:dd:c3:12: fe:48:e7:83:36:f5:07:55:99:be:d0:bd:37:35:5a: db:74:7c:34:3e:ec:dd:45:6d:83:67:a3:d4:f9:bc: bc:fd:22:d2:9c:33:28:e3:fa:b3:6b:08:17:d7:e0: 93:ca:b7:21:a5:cc:d6:ff:d5:18:5b:87:55:64:e7: 2e:9c:7a:59:9d:05:b4:b8:3f:64:39:35:83:f6:e3: b9:4c:38:57:92:08:e2:71:e5:ff:1e:b5:cf:7d:73: 4d:ab:a6:b4:23:1e:cc:cd:e8:c4:9c:69:bb:ca:c4: 56:1d:8f:c4:d9:e7:1b:c0:d7:68:5a:fb:72:e3:43: 7e:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:87:27:2F:C0:3F:4A:1A:42:24:30:7B:08:0A:35:11:AD:C2:8D:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/efb87759-36c4-4e5a-9c2b-34e00c0fbc30/dd4749e6-6f03-39ee-869f-ab12d3cb43e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/efb87759-36c4-4e5a-9c2b-34e00c0fbc30/efb87759-36c4-4e5a-9c2b-34e00c0fbc30.crl X509v3 Authority Key Identifier: keyid:78:B3:DD:12:3A:8A:DC:D5:D0:BE:67:7F:27:F9:41:B9:1E:A1:86:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/efb87759-36c4-4e5a-9c2b-34e00c0fbc30.cer sbgp-ipAddrBlock: critical IPv4: 23.136.140.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:34:f0:e0:00:29:52:19:fd:3c:1d:01:3a:0d:d1:ae:29:05: 95:b0:9e:75:c7:3a:44:46:20:8f:17:d6:b3:80:16:d7:ff:c8: fe:4f:61:dd:7a:e9:b5:87:db:04:ba:f9:79:6b:77:47:23:7d: cc:3a:7b:a6:ab:ce:74:d4:57:66:36:e0:b6:8e:12:f0:17:8b: 9c:87:69:4d:1c:b7:72:cd:aa:24:9a:98:95:91:c2:cb:74:cf: 66:fb:3a:b8:d8:ea:6a:6d:7b:5b:6e:34:e3:61:b4:cf:bf:64: 72:a3:c8:b5:45:35:d7:2a:a9:7b:72:56:30:3a:33:4e:be:b7: c2:68:cd:cf:33:90:85:2a:b2:1b:c4:34:ed:5c:e4:28:8c:29: ed:f0:35:07:c9:55:63:71:21:97:c3:1c:62:ec:eb:8c:d7:97: 62:e0:64:36:b6:ee:29:b0:dc:4a:fd:e6:11:8d:30:94:3e:73: e6:09:b4:41:9f:a8:ff:c1:58:2f:8d:5f:95:fc:67:25:50:87: 49:fa:33:44:f5:30:18:26:62:a3:51:13:f7:b8:f3:f8:55:47: 67:96:cd:4d:ad:40:4f:b5:25:46:b7:89:dd:7a:b9:01:7f:a4: e1:4b:0c:e6:c8:0f:23:99:24:45:f7:ae:3d:ef:83:96:a7:b5: 5b:a3:90:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzW0hlU/oUp+uiegsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWZiODc3NTktMzZjNC00ZTVhLTljMmItMzRlMDBjMGZi YzMwMB4XDTI2MDIxMjE0MDA0MFoXDTI2MDUxMzEzMDA0MFowLzEtMCsGA1UEAxMk NDFiZjBmMDktN2I4My00ZmE2LWI4ZjEtMDA0ZDc2NTkxNzBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhvuvUqRHtvM1FOkPm8HekTDMJ4CKAqINv7xG V+5CVMZab7xi6/1MlJ6bW9olouuNFAjMTp8tOLl1wyH2vdGEYXoUHq1ysDRvwKsE uTN2aypPM2f64uIpfW6VNDO+xz5erKSatoVf9W/SyCeLJF5kH27vMfdsdu0JywpS hLjAMfrYfeLdwxL+SOeDNvUHVZm+0L03NVrbdHw0PuzdRW2DZ6PU+by8/SLSnDMo 4/qzawgX1+CTyrchpczW/9UYW4dVZOcunHpZnQW0uD9kOTWD9uO5TDhXkgjiceX/ HrXPfXNNq6a0Ix7MzejEnGm7ysRWHY/E2ecbwNdoWvty40N+NQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMOHJy/AP0oaQiQwewgKNRGtwo1pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9lZmI4 Nzc1OS0zNmM0LTRlNWEtOWMyYi0zNGUwMGMwZmJjMzAvZGQ0NzQ5ZTYtNmYwMy0z OWVlLTg2OWYtYWIxMmQzY2I0M2U0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZWZiODc3NTktMzZjNC00ZTVhLTlj MmItMzRlMDBjMGZiYzMwL2VmYjg3NzU5LTM2YzQtNGU1YS05YzJiLTM0ZTAwYzBm YmMzMC5jcmwwHwYDVR0jBBgwFoAUeLPdEjqK3NXQvmd/J/lBuR6hhiowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9lZmI4Nzc1OS0zNmM0LTRlNWEtOWMyYi0zNGUw MGMwZmJjMzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4iMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFY08OAAKVIZ/TwdAToN0a4pBZWwnnXHOkRGII8X1rOAFtf/yP5PYd16 6bWH2wS6+Xlrd0cjfcw6e6arznTUV2Y24LaOEvAXi5yHaU0ct3LNqiSamJWRwst0 z2b7OrjY6mpte1tuNONhtM+/ZHKjyLVFNdcqqXtyVjA6M06+t8Jozc8zkIUqshvE NO1c5CiMKe3wNQfJVWNxIZfDHGLs64zXl2LgZDa27imw3Er95hGNMJQ+c+YJtEGf qP/BWC+NX5X8ZyVQh0n6M0T1MBgmYqNRE/e48/hVR2eWzU2tQE+1JUa3id16uQF/ pOFLDObIDyOZJEX3rj3vg5antVujkOQ= -----END CERTIFICATE-----Generated at Mon Mar 2 19:42:00 2026 by rpki-client