$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fb7a90de-953c-3538-a71f-0cf60deca07c.roa File: fb7a90de-953c-3538-a71f-0cf60deca07c.roa (raw, json) Hash identifier: o72XEBWAR+pDdlefwsAn8x6pAv4fFTuaKxiEOjkdjf0= Subject key identifier: 0A:94:92:49:52:43:CC:B5:3E:FA:31:68:B8:72:97:D1:A0:F8:F1:58 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584CA5F732204377D7E2BDDC7300 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fb7a90de-953c-3538-a71f-0cf60deca07c.roa Signing time: Mon 26 Jan 2026 02:00:32 +0000 ROA not before: Mon 26 Jan 2026 02:00:32 +0000 ROA not after: Sun 26 Apr 2026 01:00:32 +0000 asID: 35994 IP address blocks: 23.2.12.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:a5:f7:32:20:43:77:d7:e2:bd:dc:73:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jan 26 02:00:32 2026 GMT Not After : Apr 26 01:00:32 2026 GMT Subject: CN=79c80d5f-6380-4af1-a34c-c1481b6e3529 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:2c:d8:a5:bf:b8:ec:89:f2:fc:b3:63:be:af: e2:c9:b1:d4:6b:f5:ff:0a:fb:d8:6a:39:f4:3c:8a: f9:bc:c7:d4:41:62:2a:3e:9e:ef:e6:72:c0:e8:ee: 43:b0:5b:9b:0c:a9:7d:79:05:2f:9b:9f:79:b5:1b: e8:9a:ae:09:af:c8:da:50:55:e8:57:dc:d1:1c:07: 55:ab:15:e7:a7:12:e5:07:86:d0:6a:c7:83:94:b2: 66:4b:31:fa:b9:c3:14:aa:fb:3a:9f:b6:96:da:00: 43:a3:df:f5:e9:c5:05:67:78:44:65:54:a1:38:3c: 1b:31:97:f9:d7:ec:c4:a7:41:d0:c1:d6:dc:a2:39: 92:80:c2:5e:7c:aa:7e:d0:0e:d6:f5:85:9c:65:99: de:3b:6a:c0:cd:e2:5b:0d:51:45:26:b1:6c:a8:b3: 71:b4:60:59:c7:50:83:5d:c7:33:a7:f6:aa:3f:cc: e7:66:55:86:b4:3a:f2:93:0f:29:b6:97:53:2e:7a: f7:2f:f9:3c:a4:59:a8:dd:dd:93:7b:08:17:4c:aa: f6:f2:13:2b:8c:15:a1:b5:35:56:75:59:69:b9:32: 7f:67:6b:e3:9b:29:82:f1:cd:fa:62:5e:9c:58:2a: c3:1b:1e:e2:f6:42:6f:67:93:a2:85:46:df:ea:52: 7e:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:94:92:49:52:43:CC:B5:3E:FA:31:68:B8:72:97:D1:A0:F8:F1:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/fb7a90de-953c-3538-a71f-0cf60deca07c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.2.12.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:f9:1e:fd:4b:31:c1:d2:ad:7f:77:70:68:0d:45:41:3a:a8: 40:6b:ee:65:a8:cb:34:12:7a:03:08:78:e0:99:bf:49:27:48: aa:e5:94:c8:12:41:9c:bd:2c:b8:1b:3b:58:c3:bb:54:06:8f: c4:56:44:17:97:c2:f3:32:7c:07:8c:f2:e8:af:e5:52:64:bd: df:b7:32:6f:fe:dd:62:e9:6b:d5:c4:da:f1:6f:63:3c:ce:d2: 31:bb:37:95:d0:53:4b:50:6e:42:4d:db:28:9d:f6:f9:7f:b7: 2a:27:ad:9f:ce:0d:d5:6a:4b:de:6d:b4:b3:cc:bc:29:d4:5c: 6d:55:25:b8:00:4a:dd:32:35:57:2c:3f:69:28:80:05:f1:58: 32:88:36:5a:ef:f1:cb:f5:a2:7f:cb:a8:f8:22:a5:83:02:60: e4:29:41:9c:cf:88:c8:5e:f0:7f:3e:23:e9:d6:e3:93:fa:d6: 8b:12:45:42:82:a2:a7:f5:30:87:8a:19:a6:d8:c1:c7:1a:67: b3:06:d7:d2:4d:97:0e:27:c7:6e:fc:ca:63:59:61:2c:9b:6d: 80:40:e6:c3:3c:3d:d2:0d:1f:26:a3:f7:30:85:35:0e:49:a7: 7e:ec:11:f1:e3:e9:5f:03:14:bf:98:b2:0d:16:e2:46:2c:29: 91:34:c4:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyl9zIgQ3fX4r3ccwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDEyNjAyMDAzMloXDTI2MDQyNjAxMDAzMlowLzEtMCsGA1UEAxMk NzljODBkNWYtNjM4MC00YWYxLWEzNGMtYzE0ODFiNmUzNTI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuSzYpb+47Iny/LNjvq/iybHUa/X/CvvYajn0 PIr5vMfUQWIqPp7v5nLA6O5DsFubDKl9eQUvm595tRvomq4Jr8jaUFXoV9zRHAdV qxXnpxLlB4bQaseDlLJmSzH6ucMUqvs6n7aW2gBDo9/16cUFZ3hEZVShODwbMZf5 1+zEp0HQwdbcojmSgMJefKp+0A7W9YWcZZneO2rAzeJbDVFFJrFsqLNxtGBZx1CD Xcczp/aqP8znZlWGtDrykw8ptpdTLnr3L/k8pFmo3d2TewgXTKr28hMrjBWhtTVW dVlpuTJ/Z2vjmymC8c36Yl6cWCrDGx7i9kJvZ5OihUbf6lJ+vwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAqUkklSQ8y1PvoxaLhyl9Gg+PFYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZmI3YTkwZGUtOTUzYy0z NTM4LWE3MWYtMGNmNjBkZWNhMDdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFwIMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFn5Hv1LMcHSrX93cGgNRUE6qEBr7mWoyzQSegMIeOCZv0knSKrllMgS QZy9LLgbO1jDu1QGj8RWRBeXwvMyfAeM8uiv5VJkvd+3Mm/+3WLpa9XE2vFvYzzO 0jG7N5XQU0tQbkJN2yid9vl/tyonrZ/ODdVqS95ttLPMvCnUXG1VJbgASt0yNVcs P2kogAXxWDKINlrv8cv1on/LqPgipYMCYOQpQZzPiMhe8H8+I+nW45P61osSRUKC oqf1MIeKGabYwccaZ7MG19JNlw4nx278ymNZYSybbYBA5sM8PdINHyaj9zCFNQ5J p37sEfHj6V8DFL+Ysg0W4kYsKZE0xFQ= -----END CERTIFICATE-----Generated at Mon Mar 2 00:39:13 2026 by rpki-client