$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/7989b37d-2112-3094-a13a-f52f755aa5a8.roa File: 7989b37d-2112-3094-a13a-f52f755aa5a8.roa (raw, json) Hash identifier: 9ZDlpwoFNYAqPYo8wp2t9icyoehHnGQjcec654lORf0= Subject key identifier: CE:EF:D6:6F:B1:F5:35:96:AF:F7:3C:BC:47:84:40:E8:5D:FB:DF:BE Certificate issuer: /CN=f2f0585e-a28e-4ead-9b1c-defd291ce54d Certificate serial: 010D0C9F4328584CEFF23E350AFA612AE8D5BC80 Authority key identifier: 7B:C6:78:77:88:93:19:53:E7:11:02:39:94:6D:8B:3D:13:7A:C2:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/7989b37d-2112-3094-a13a-f52f755aa5a8.roa Signing time: Sat 21 Feb 2026 14:00:41 +0000 ROA not before: Sat 21 Feb 2026 14:00:41 +0000 ROA not after: Fri 22 May 2026 13:00:41 +0000 asID: 23428 IP address blocks: 23.136.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/f2f0585e-a28e-4ead-9b1c-defd291ce54d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/f2f0585e-a28e-4ead-9b1c-defd291ce54d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ef:f2:3e:35:0a:fa:61:2a:e8:d5:bc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f2f0585e-a28e-4ead-9b1c-defd291ce54d Validity Not Before: Feb 21 14:00:41 2026 GMT Not After : May 22 13:00:41 2026 GMT Subject: CN=d254c4c5-f375-497d-8a3d-8c31c29b6959 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:4c:25:29:99:9c:95:ee:b7:8a:08:77:a1:03: 49:11:56:8b:16:51:f7:ff:e9:66:70:d2:c6:58:2a: 82:33:0d:c2:b2:80:58:64:25:1a:6e:44:80:87:a0: 58:69:f3:94:44:79:07:c9:f4:87:e2:fc:48:f4:6f: 25:dd:5b:3d:7b:30:aa:2e:60:92:a2:b1:fc:b0:a5: 5d:aa:14:df:95:25:65:a1:f5:d9:2a:8f:fd:5c:94: 86:6f:7f:00:55:fc:7a:c1:e5:bf:e4:b2:60:32:29: e9:a2:a4:46:8a:b8:f5:08:86:09:d2:bf:62:e3:de: 9d:43:00:aa:3f:3c:dd:55:3f:b4:38:9d:c3:14:ef: 2d:2c:b8:69:28:86:83:26:78:7f:b1:25:09:12:80: ac:25:e1:38:c5:9f:7a:0e:e0:b7:62:ef:3c:4f:44: 80:89:92:8a:5c:ba:3d:fa:d4:51:a7:e4:bb:34:09: 4e:5d:63:02:67:52:e0:87:a6:ed:f2:f7:74:23:0a: 2c:5d:24:90:17:0a:0d:75:0d:02:81:14:23:73:3e: 07:fe:dd:ae:b9:10:30:62:93:9e:ff:2b:ea:6a:b9: d8:94:e3:aa:75:39:3d:39:2c:88:38:00:14:2f:34: b9:db:7c:1f:e7:74:60:6a:50:b7:0c:0a:d8:0c:8f: c8:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:EF:D6:6F:B1:F5:35:96:AF:F7:3C:BC:47:84:40:E8:5D:FB:DF:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/7989b37d-2112-3094-a13a-f52f755aa5a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d/f2f0585e-a28e-4ead-9b1c-defd291ce54d.crl X509v3 Authority Key Identifier: keyid:7B:C6:78:77:88:93:19:53:E7:11:02:39:94:6D:8B:3D:13:7A:C2:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f2f0585e-a28e-4ead-9b1c-defd291ce54d.cer sbgp-ipAddrBlock: critical IPv4: 23.136.232.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:51:3b:4c:68:48:03:58:b3:dc:9b:3e:dc:2d:12:b0:77:5c: 5a:09:5f:fa:62:47:45:d2:0c:5e:65:4d:75:b9:90:7b:0f:1a: b3:68:96:b7:e3:77:2d:e3:a5:f3:64:2b:2b:6f:2b:58:70:3b: 7b:2c:f3:10:d9:e3:c1:ba:4e:bf:14:07:31:52:5c:93:c8:0b: ec:2e:02:31:ec:cc:f3:75:de:83:c3:4d:d8:ea:b2:63:bd:79: 41:c2:0f:7d:e0:1c:bc:8c:0a:fb:34:1f:55:44:ac:f0:2d:ce: 83:b7:fb:33:14:46:14:2b:66:f3:72:e3:8f:b5:da:fd:68:f0: 55:66:e7:d4:48:63:bd:9a:c0:05:b0:97:3c:29:73:c2:54:f9: fc:60:c3:5f:37:5d:e1:fc:a8:da:2e:5c:e0:01:6c:91:f7:7a: d8:f2:ed:0a:31:f8:6e:f4:b7:51:cb:a5:5b:e0:7b:61:1b:c1: e4:01:a0:69:17:8c:b9:94:68:cd:6c:f4:3a:c9:6f:06:c1:73: b5:2f:d8:c8:fa:02:99:9b:5e:20:b8:aa:71:18:97:56:c3:88: 0c:ef:cc:56:d2:00:26:9a:27:50:9d:8b:81:51:bc:38:10:56: 7a:39:b5:66:84:59:ec:28:0b:95:23:c8:b8:a7:cd:7d:96:ce: b3:94:3e:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzv8j41CvphKujVvIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjJmMDU4NWUtYTI4ZS00ZWFkLTliMWMtZGVmZDI5MWNl NTRkMB4XDTI2MDIyMTE0MDA0MVoXDTI2MDUyMjEzMDA0MVowLzEtMCsGA1UEAxMk ZDI1NGM0YzUtZjM3NS00OTdkLThhM2QtOGMzMWMyOWI2OTU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs0wlKZmcle63igh3oQNJEVaLFlH3/+lmcNLG WCqCMw3CsoBYZCUabkSAh6BYafOURHkHyfSH4vxI9G8l3Vs9ezCqLmCSorH8sKVd qhTflSVlofXZKo/9XJSGb38AVfx6weW/5LJgMinpoqRGirj1CIYJ0r9i496dQwCq PzzdVT+0OJ3DFO8tLLhpKIaDJnh/sSUJEoCsJeE4xZ96DuC3Yu88T0SAiZKKXLo9 +tRRp+S7NAlOXWMCZ1Lgh6bt8vd0IwosXSSQFwoNdQ0CgRQjcz4H/t2uuRAwYpOe /yvqarnYlOOqdTk9OSyIOAAULzS523wf53RgalC3DArYDI/InQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM7v1m+x9TWWr/c8vEeEQOhd+9++MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mMmYw NTg1ZS1hMjhlLTRlYWQtOWIxYy1kZWZkMjkxY2U1NGQvNzk4OWIzN2QtMjExMi0z MDk0LWExM2EtZjUyZjc1NWFhNWE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZjJmMDU4NWUtYTI4ZS00ZWFkLTli MWMtZGVmZDI5MWNlNTRkL2YyZjA1ODVlLWEyOGUtNGVhZC05YjFjLWRlZmQyOTFj ZTU0ZC5jcmwwHwYDVR0jBBgwFoAUe8Z4d4iTGVPnEQI5lG2LPRN6wo8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9mMmYwNTg1ZS1hMjhlLTRlYWQtOWIxYy1kZWZk MjkxY2U1NGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4joMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB9RO0xoSANYs9ybPtwtErB3XFoJX/piR0XSDF5lTXW5kHsPGrNolrfj dy3jpfNkKytvK1hwO3ss8xDZ48G6Tr8UBzFSXJPIC+wuAjHszPN13oPDTdjqsmO9 eUHCD33gHLyMCvs0H1VErPAtzoO3+zMURhQrZvNy44+12v1o8FVm59RIY72awAWw lzwpc8JU+fxgw183XeH8qNouXOABbJH3etjy7Qox+G70t1HLpVvge2EbweQBoGkX jLmUaM1s9DrJbwbBc7Uv2Mj6ApmbXiC4qnEYl1bDiAzvzFbSACaaJ1Cdi4FRvDgQ Vno5tWaEWewoC5UjyLinzX2WzrOUPn0= -----END CERTIFICATE-----Generated at Mon Mar 2 16:10:17 2026 by rpki-client