$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0b61db8b-51d6-464c-9de9-6e0a7b6a3f5e/ad20c86a-0cdb-3038-930f-35b57b1e5885.roa File: ad20c86a-0cdb-3038-930f-35b57b1e5885.roa (raw, json) Hash identifier: 6g26BCeOPviqy9wJKbPFXjLQjSW7kZk3j5t1Ytm/LMs= Subject key identifier: 6B:18:4A:F5:06:1D:3C:92:31:AF:10:CB:14:19:C0:0B:86:55:00:A9 Certificate issuer: /CN=0b61db8b-51d6-464c-9de9-6e0a7b6a3f5e Certificate serial: 010D0C9F4328584CCE935A3ED9EB9F99E7BF5C80 Authority key identifier: 75:2D:2A:A1:9B:59:55:05:98:0B:6E:05:8C:DD:34:F5:FA:FE:32:4F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0b61db8b-51d6-464c-9de9-6e0a7b6a3f5e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0b61db8b-51d6-464c-9de9-6e0a7b6a3f5e/ad20c86a-0cdb-3038-930f-35b57b1e5885.roa Signing time: Mon 09 Feb 2026 15:08:03 +0000 ROA not before: Mon 09 Feb 2026 15:08:03 +0000 ROA not after: Sun 10 May 2026 14:08:03 +0000 asID: 40581 IP address blocks: 23.144.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0b61db8b-51d6-464c-9de9-6e0a7b6a3f5e/0b61db8b-51d6-464c-9de9-6e0a7b6a3f5e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0b61db8b-51d6-464c-9de9-6e0a7b6a3f5e/0b61db8b-51d6-464c-9de9-6e0a7b6a3f5e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0b61db8b-51d6-464c-9de9-6e0a7b6a3f5e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ce:93:5a:3e:d9:eb:9f:99:e7:bf:5c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b61db8b-51d6-464c-9de9-6e0a7b6a3f5e Validity Not Before: Feb 9 15:08:03 2026 GMT Not After : May 10 14:08:03 2026 GMT Subject: CN=948cbd70-ed72-4ff0-909c-3807d283bc82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:90:9c:b7:13:18:48:67:c8:95:90:4b:95:84: af:06:28:ee:ca:74:81:16:e7:f1:c0:19:e0:15:ff: db:c6:06:21:16:3b:0d:81:ce:d3:c7:df:08:31:2e: 05:ff:9f:a3:66:3d:80:50:1b:cf:ed:a7:5e:a8:e7: 1f:62:a0:c8:08:15:f5:c8:33:71:5d:8d:e2:e3:85: f0:07:c4:bd:b6:5a:ff:9c:d1:18:3c:88:77:81:23: 4a:36:7e:65:a5:5b:91:3d:95:cf:f1:05:5d:7a:9a: 4e:98:91:27:93:f8:9a:3e:cd:a7:31:0a:22:59:8a: 93:fd:2a:f4:18:8c:e6:e3:1e:2e:49:8c:ab:f0:b9: 65:18:d1:9b:69:e6:0a:7a:27:59:75:61:87:f3:9b: a1:84:ff:b4:48:85:4c:e2:09:37:3a:e5:d3:b8:4c: e2:e0:5b:7e:9f:09:34:87:34:4a:d8:7b:86:9c:12: a2:82:96:b6:c2:8c:5b:bc:6f:38:d8:c0:cc:d1:16: 12:17:b0:e0:4a:38:42:7e:f6:12:dd:99:ea:64:30: 67:4c:8d:a5:15:a3:ec:65:30:03:ae:9b:a1:01:d0: be:44:5b:99:74:38:98:5a:a8:71:7f:70:92:ed:d0: 30:c5:95:ee:14:25:03:8f:5d:01:76:34:9c:76:6e: ad:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:18:4A:F5:06:1D:3C:92:31:AF:10:CB:14:19:C0:0B:86:55:00:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0b61db8b-51d6-464c-9de9-6e0a7b6a3f5e/ad20c86a-0cdb-3038-930f-35b57b1e5885.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0b61db8b-51d6-464c-9de9-6e0a7b6a3f5e/0b61db8b-51d6-464c-9de9-6e0a7b6a3f5e.crl X509v3 Authority Key Identifier: keyid:75:2D:2A:A1:9B:59:55:05:98:0B:6E:05:8C:DD:34:F5:FA:FE:32:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0b61db8b-51d6-464c-9de9-6e0a7b6a3f5e.cer sbgp-ipAddrBlock: critical IPv4: 23.144.148.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:ef:a5:ee:17:13:9f:b8:a3:52:bb:16:78:cc:6c:c0:7e:4c: 71:9d:e2:b1:28:bf:31:52:67:62:44:29:b3:52:85:16:ba:bb: 75:51:4c:df:e7:52:0b:a3:27:ee:61:20:78:50:4a:d9:bb:b6: 15:03:be:51:89:f1:0e:4a:90:49:e7:c4:50:5a:95:96:ff:60: 84:f3:23:d3:ee:23:07:69:a4:af:0b:ad:12:87:5f:58:6c:a1: 40:d6:5d:ae:81:06:26:bb:d8:d0:c3:5d:58:40:e2:eb:29:3f: 3d:6f:ce:1a:13:d0:ae:e6:40:64:a6:fc:23:f5:cd:4a:7a:73: e8:f5:3d:fd:18:a5:f7:c6:3f:46:13:29:87:b6:5e:47:1a:c3: 07:84:d3:bd:7e:27:52:b5:69:ad:9d:db:69:74:b0:f7:44:13: b3:f0:19:bf:d3:49:73:06:a3:61:9e:e7:19:7c:a7:cb:93:df: 90:16:37:8d:c0:31:b9:a2:23:3d:b2:05:93:87:7c:5e:01:5d: 8e:1e:ca:6d:3c:63:8c:8f:cd:e5:e1:c1:06:f7:19:12:81:cd: dd:9d:40:bc:81:6f:ba:2b:28:71:e1:4e:4b:ca:9c:fd:d7:f9: f5:6e:d0:42:2e:f7:4d:e8:c8:40:61:1e:cc:67:c4:f6:ec:7b: 31:99:a6:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzOk1o+2eufmee/XIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGI2MWRiOGItNTFkNi00NjRjLTlkZTktNmUwYTdiNmEz ZjVlMB4XDTI2MDIwOTE1MDgwM1oXDTI2MDUxMDE0MDgwM1owLzEtMCsGA1UEAxMk OTQ4Y2JkNzAtZWQ3Mi00ZmYwLTkwOWMtMzgwN2QyODNiYzgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlJCctxMYSGfIlZBLlYSvBijuynSBFufxwBng Ff/bxgYhFjsNgc7Tx98IMS4F/5+jZj2AUBvP7adeqOcfYqDICBX1yDNxXY3i44Xw B8S9tlr/nNEYPIh3gSNKNn5lpVuRPZXP8QVdeppOmJEnk/iaPs2nMQoiWYqT/Sr0 GIzm4x4uSYyr8LllGNGbaeYKeidZdWGH85uhhP+0SIVM4gk3OuXTuEzi4Ft+nwk0 hzRK2HuGnBKigpa2woxbvG842MDM0RYSF7DgSjhCfvYS3ZnqZDBnTI2lFaPsZTAD rpuhAdC+RFuZdDiYWqhxf3CS7dAwxZXuFCUDj10BdjScdm6tNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGsYSvUGHTySMa8QyxQZwAuGVQCpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8wYjYx ZGI4Yi01MWQ2LTQ2NGMtOWRlOS02ZTBhN2I2YTNmNWUvYWQyMGM4NmEtMGNkYi0z MDM4LTkzMGYtMzViNTdiMWU1ODg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMGI2MWRiOGItNTFkNi00NjRjLTlk ZTktNmUwYTdiNmEzZjVlLzBiNjFkYjhiLTUxZDYtNDY0Yy05ZGU5LTZlMGE3YjZh M2Y1ZS5jcmwwHwYDVR0jBBgwFoAUdS0qoZtZVQWYC24FjN009fr+Mk8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8wYjYxZGI4Yi01MWQ2LTQ2NGMtOWRlOS02ZTBh N2I2YTNmNWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5CUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADXvpe4XE5+4o1K7FnjMbMB+THGd4rEovzFSZ2JEKbNShRa6u3VRTN/n UgujJ+5hIHhQStm7thUDvlGJ8Q5KkEnnxFBalZb/YITzI9PuIwdppK8LrRKHX1hs oUDWXa6BBia72NDDXVhA4uspPz1vzhoT0K7mQGSm/CP1zUp6c+j1Pf0YpffGP0YT KYe2XkcawweE071+J1K1aa2d22l0sPdEE7PwGb/TSXMGo2Ge5xl8p8uT35AWN43A MbmiIz2yBZOHfF4BXY4eym08Y4yPzeXhwQb3GRKBzd2dQLyBb7orKHHhTkvKnP3X +fVu0EIu903oyEBhHsxnxPbsezGZpuA= -----END CERTIFICATE-----Generated at Mon Mar 2 03:08:49 2026 by rpki-client