$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7a12a63a-9232-4346-a38f-de5bc5c7bbc8/ffb6295a-6e48-338c-8cff-918305705e3a.roa File: ffb6295a-6e48-338c-8cff-918305705e3a.roa (raw, json) Hash identifier: zeaNp4Hvt8udInZv833zSeo3SdZ69QeY7xKQs4a3lZA= Subject key identifier: 49:13:F2:A9:4B:8D:E9:13:35:41:8D:D3:AE:4B:BB:64:2C:D0:CC:91 Certificate issuer: /CN=7a12a63a-9232-4346-a38f-de5bc5c7bbc8 Certificate serial: 010D0C9F4328584CBAE7326FC31AFD993B179B00 Authority key identifier: 80:AC:38:B5:C9:72:85:2F:C3:C3:2C:C5:DA:1A:C1:AC:01:C5:C2:D4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7a12a63a-9232-4346-a38f-de5bc5c7bbc8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7a12a63a-9232-4346-a38f-de5bc5c7bbc8/ffb6295a-6e48-338c-8cff-918305705e3a.roa Signing time: Mon 02 Feb 2026 14:00:40 +0000 ROA not before: Mon 02 Feb 2026 14:00:40 +0000 ROA not after: Sun 03 May 2026 13:00:40 +0000 asID: 152918 IP address blocks: 23.131.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7a12a63a-9232-4346-a38f-de5bc5c7bbc8/7a12a63a-9232-4346-a38f-de5bc5c7bbc8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7a12a63a-9232-4346-a38f-de5bc5c7bbc8/7a12a63a-9232-4346-a38f-de5bc5c7bbc8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7a12a63a-9232-4346-a38f-de5bc5c7bbc8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ba:e7:32:6f:c3:1a:fd:99:3b:17:9b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7a12a63a-9232-4346-a38f-de5bc5c7bbc8 Validity Not Before: Feb 2 14:00:40 2026 GMT Not After : May 3 13:00:40 2026 GMT Subject: CN=dd7fbd8f-2315-442c-aa13-0130a237334c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:15:8f:d2:a5:8a:65:a1:d3:2e:29:62:76:34: e1:e1:8e:89:0e:b0:fa:40:0f:43:1c:7d:74:74:4f: 51:aa:75:d3:9c:85:61:bc:ce:b2:34:00:88:7b:3e: 35:a9:01:dc:cd:c1:89:05:4f:5b:c8:27:41:a3:d9: 4a:4a:c0:e3:a5:45:dd:98:24:89:52:b3:81:30:5f: dc:fa:74:70:c1:d4:0c:11:c4:3f:0e:43:c9:d3:64: a6:f1:d8:4c:ff:64:4c:45:e2:ce:66:45:29:cd:25: a0:14:50:8e:77:83:a4:bd:b8:48:65:f9:a5:43:04: 63:82:1b:2a:31:8d:ff:b1:d6:bf:ee:f6:13:97:5d: f5:79:c2:47:e6:68:78:c8:5d:b7:31:af:43:1a:9f: 3e:2c:d4:94:4f:20:48:65:2a:a3:83:63:66:8d:4e: e5:af:38:c4:02:92:41:30:a4:bc:49:8d:e6:48:73: 1c:2b:7f:87:10:3c:77:01:2d:0c:7c:de:ae:38:5c: f1:ba:91:e3:56:8a:ed:f7:91:95:3c:7e:54:0d:d2: 2d:0d:8f:04:9b:6c:32:d9:fe:20:18:5c:84:21:1a: d9:09:1a:dd:65:82:42:1f:9f:55:d2:f3:6b:60:06: cf:26:a6:b3:0c:85:ae:39:3d:2f:43:56:43:af:12: a2:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:13:F2:A9:4B:8D:E9:13:35:41:8D:D3:AE:4B:BB:64:2C:D0:CC:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7a12a63a-9232-4346-a38f-de5bc5c7bbc8/ffb6295a-6e48-338c-8cff-918305705e3a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7a12a63a-9232-4346-a38f-de5bc5c7bbc8/7a12a63a-9232-4346-a38f-de5bc5c7bbc8.crl X509v3 Authority Key Identifier: keyid:80:AC:38:B5:C9:72:85:2F:C3:C3:2C:C5:DA:1A:C1:AC:01:C5:C2:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/7a12a63a-9232-4346-a38f-de5bc5c7bbc8.cer sbgp-ipAddrBlock: critical IPv4: 23.131.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:75:11:1a:0d:d3:0f:03:81:df:61:87:9a:20:1a:29:16:f9: 48:9f:33:50:34:e1:5f:a2:9f:8e:62:6f:b0:61:e1:e7:bd:68: 5e:89:08:9d:da:c8:fe:e6:b2:d1:aa:e4:a8:f1:16:a4:f7:c3: 57:96:7b:9b:03:ec:fb:cb:7a:18:7f:c1:be:95:01:f4:90:59: 1c:93:77:a2:5c:f4:9e:e1:ac:da:e4:39:7a:5e:b5:e6:69:85: c2:ce:46:32:5c:90:ec:3b:84:29:84:f0:fb:73:f1:82:8a:c1: 23:bf:98:20:24:44:f5:fa:d9:b9:2c:a5:32:ac:ab:4e:d4:dd: 26:0d:43:56:76:75:54:de:e3:2d:0b:17:96:00:30:2d:1d:1f: 1a:e9:26:f8:2e:3d:f9:25:aa:11:1d:12:dc:3c:12:69:ac:97: 1c:1f:86:03:a5:f7:6e:a8:31:d6:43:4b:aa:b8:90:1e:02:5d: 19:fb:9c:91:da:1e:51:87:2b:9e:a9:b5:85:3c:0c:47:02:69: 00:df:4d:a8:28:fb:52:67:82:f8:22:35:89:28:3a:fc:34:d4: a0:85:fc:c7:06:44:3a:66:95:9c:7b:9e:a6:ee:40:0a:a9:7a: 9c:8a:6b:e4:e9:ed:02:f1:b1:3c:f9:84:a1:3c:a1:3d:33:9a: dc:29:9e:d5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEy65zJvwxr9mTsXmwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkN2ExMmE2M2EtOTIzMi00MzQ2LWEzOGYtZGU1YmM1Yzdi YmM4MB4XDTI2MDIwMjE0MDA0MFoXDTI2MDUwMzEzMDA0MFowLzEtMCsGA1UEAxMk ZGQ3ZmJkOGYtMjMxNS00NDJjLWFhMTMtMDEzMGEyMzczMzRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAphWP0qWKZaHTLilidjTh4Y6JDrD6QA9DHH10 dE9RqnXTnIVhvM6yNACIez41qQHczcGJBU9byCdBo9lKSsDjpUXdmCSJUrOBMF/c +nRwwdQMEcQ/DkPJ02Sm8dhM/2RMReLOZkUpzSWgFFCOd4OkvbhIZfmlQwRjghsq MY3/sda/7vYTl131ecJH5mh4yF23Ma9DGp8+LNSUTyBIZSqjg2NmjU7lrzjEApJB MKS8SY3mSHMcK3+HEDx3AS0MfN6uOFzxupHjVort95GVPH5UDdItDY8Em2wy2f4g GFyEIRrZCRrdZYJCH59V0vNrYAbPJqazDIWuOT0vQ1ZDrxKiewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEkT8qlLjekTNUGN065Lu2Qs0MyRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC83YTEy YTYzYS05MjMyLTQzNDYtYTM4Zi1kZTViYzVjN2JiYzgvZmZiNjI5NWEtNmU0OC0z MzhjLThjZmYtOTE4MzA1NzA1ZTNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvN2ExMmE2M2EtOTIzMi00MzQ2LWEz OGYtZGU1YmM1YzdiYmM4LzdhMTJhNjNhLTkyMzItNDM0Ni1hMzhmLWRlNWJjNWM3 YmJjOC5jcmwwHwYDVR0jBBgwFoAUgKw4tclyhS/DwyzF2hrBrAHFwtQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC83YTEyYTYzYS05MjMyLTQzNDYtYTM4Zi1kZTVi YzVjN2JiYzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4PcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI51ERoN0w8Dgd9hh5ogGikW+UifM1A04V+in45ib7Bh4ee9aF6JCJ3a yP7mstGq5KjxFqT3w1eWe5sD7PvLehh/wb6VAfSQWRyTd6Jc9J7hrNrkOXpeteZp hcLORjJckOw7hCmE8Ptz8YKKwSO/mCAkRPX62bkspTKsq07U3SYNQ1Z2dVTe4y0L F5YAMC0dHxrpJvguPfklqhEdEtw8EmmslxwfhgOl926oMdZDS6q4kB4CXRn7nJHa HlGHK56ptYU8DEcCaQDfTago+1JngvgiNYkoOvw01KCF/McGRDpmlZx7nqbuQAqp epyKa+Tp7QLxsTz5hKE8oT0zmtwpntU= -----END CERTIFICATE-----Generated at Mon Mar 2 04:44:18 2026 by rpki-client