$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cdbe5dd4-b9fa-4021-87a1-3002f80cc449/38de40ee-de7d-3e52-915c-2c28b398f4ea.roa File: 38de40ee-de7d-3e52-915c-2c28b398f4ea.roa (raw, json) Hash identifier: c4eY2ZRrBlu8FSYtgRYWyz7khwv9M8P7N3APf4VUIlw= Subject key identifier: 1C:42:24:C9:8A:AE:BB:BF:8B:60:F0:0C:C9:30:86:79:47:09:7E:F7 Certificate issuer: /CN=cdbe5dd4-b9fa-4021-87a1-3002f80cc449 Certificate serial: 010D0C9F4328584E104F317622CC3F5019BD21B0 Authority key identifier: 8F:E0:86:0F:8B:FB:5A:AD:69:DE:14:F1:B7:49:0D:90:6A:61:C3:2B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cdbe5dd4-b9fa-4021-87a1-3002f80cc449.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cdbe5dd4-b9fa-4021-87a1-3002f80cc449/38de40ee-de7d-3e52-915c-2c28b398f4ea.roa Signing time: Thu 04 Jun 2026 21:00:12 +0000 ROA not before: Thu 04 Jun 2026 21:00:12 +0000 ROA not after: Wed 02 Sep 2026 21:00:12 +0000 asID: 3257 IP address blocks: 23.140.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cdbe5dd4-b9fa-4021-87a1-3002f80cc449/cdbe5dd4-b9fa-4021-87a1-3002f80cc449.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cdbe5dd4-b9fa-4021-87a1-3002f80cc449/cdbe5dd4-b9fa-4021-87a1-3002f80cc449.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cdbe5dd4-b9fa-4021-87a1-3002f80cc449.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:10:4f:31:76:22:cc:3f:50:19:bd:21:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cdbe5dd4-b9fa-4021-87a1-3002f80cc449 Validity Not Before: Jun 4 21:00:12 2026 GMT Not After : Sep 2 21:00:12 2026 GMT Subject: CN=2b3adfbf-cc57-455e-815e-fbc0ca7aa605 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:fd:9e:b1:40:e2:e9:7b:7a:70:08:24:80:87: 6b:33:63:e5:2d:a4:3b:21:20:55:ae:50:17:51:64: d6:fc:a4:6b:5b:78:39:bf:69:a8:26:3f:01:91:75: 89:d2:32:ff:61:41:34:12:9e:e6:06:8d:b7:6c:0f: 92:90:0f:db:92:29:11:2e:6a:b1:d7:60:b1:29:47: c4:12:d0:11:60:d6:50:67:27:3b:3d:0c:20:5e:8c: 1c:52:9f:3c:0c:90:f6:3d:31:22:8c:ae:d2:53:bc: e8:f6:56:43:0b:7d:cb:8b:99:87:8b:eb:b8:60:7a: f4:00:36:cd:6b:32:b2:fd:b0:d8:75:85:b1:6f:e0: ef:b3:b6:ad:a8:ac:cc:33:be:11:47:d4:43:fb:56: c1:4c:87:f8:34:5f:7f:25:49:ca:55:5d:8a:46:44: dc:40:c5:b8:5a:0d:4f:fe:a3:ea:e8:f6:61:d8:67: 5a:c5:02:77:6f:04:2b:38:6d:b8:bc:37:a7:00:98: 09:5b:ae:08:83:20:de:84:2f:62:5f:71:34:ae:26: ba:29:54:c4:27:0a:6c:c0:f0:b2:03:f4:ad:84:df: 77:9b:40:6f:d2:67:7b:21:2d:4e:45:b6:24:21:04: ea:8b:cc:e2:ff:1d:25:ad:e2:2c:78:9a:7c:72:5d: 47:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:42:24:C9:8A:AE:BB:BF:8B:60:F0:0C:C9:30:86:79:47:09:7E:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cdbe5dd4-b9fa-4021-87a1-3002f80cc449/38de40ee-de7d-3e52-915c-2c28b398f4ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cdbe5dd4-b9fa-4021-87a1-3002f80cc449/cdbe5dd4-b9fa-4021-87a1-3002f80cc449.crl X509v3 Authority Key Identifier: keyid:8F:E0:86:0F:8B:FB:5A:AD:69:DE:14:F1:B7:49:0D:90:6A:61:C3:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/cdbe5dd4-b9fa-4021-87a1-3002f80cc449.cer sbgp-ipAddrBlock: critical IPv4: 23.140.148.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:7a:4a:70:7b:b5:80:fa:90:fc:0f:d8:8e:e6:55:db:da:eb: c4:1a:d2:7e:05:41:47:c5:47:54:c7:17:f2:c2:73:96:fe:11: 05:74:1b:37:2b:27:15:06:fb:fc:40:9a:16:0b:b5:01:2f:48: 63:c4:e5:ac:76:4b:04:99:c9:49:c8:78:d8:65:85:68:4b:8f: cd:05:75:e1:7e:9c:f1:dc:65:47:bd:ef:5f:f1:c7:f0:36:8e: 0d:6b:43:0a:a2:35:99:fe:1e:35:81:6a:a2:53:32:bc:62:39: ec:3f:da:da:97:2a:87:f2:ac:02:9a:a3:21:b1:71:0f:c3:35: d6:3b:6f:a5:0b:87:3f:77:ee:cd:d6:cf:5e:57:00:83:65:55: ba:24:48:9b:a5:2e:aa:4f:ac:e2:63:9f:e0:97:57:ea:80:9e: db:64:a7:ad:6b:78:ad:d2:13:2e:76:45:61:63:d5:bc:e4:2c: 33:1d:2f:0c:53:e1:19:87:ec:ce:03:ed:77:8f:05:fb:32:f9: d7:91:44:a1:10:e0:da:b2:58:42:c4:73:dd:f8:94:c5:1c:aa: 17:d7:5a:ca:4c:e1:10:64:19:05:a2:52:5f:af:38:cb:30:a2: 99:12:4c:40:c6:f0:8d:5b:c3:84:85:e1:5b:3a:60:67:63:6b: 42:13:9d:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4QTzF2Isw/UBm9IbAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2RiZTVkZDQtYjlmYS00MDIxLTg3YTEtMzAwMmY4MGNj NDQ5MB4XDTI2MDYwNDIxMDAxMloXDTI2MDkwMjIxMDAxMlowLzEtMCsGA1UEAxMk MmIzYWRmYmYtY2M1Ny00NTVlLTgxNWUtZmJjMGNhN2FhNjA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsP2esUDi6Xt6cAgkgIdrM2PlLaQ7ISBVrlAX UWTW/KRrW3g5v2moJj8BkXWJ0jL/YUE0Ep7mBo23bA+SkA/bkikRLmqx12CxKUfE EtARYNZQZyc7PQwgXowcUp88DJD2PTEijK7SU7zo9lZDC33Li5mHi+u4YHr0ADbN azKy/bDYdYWxb+Dvs7atqKzMM74RR9RD+1bBTIf4NF9/JUnKVV2KRkTcQMW4Wg1P /qPq6PZh2GdaxQJ3bwQrOG24vDenAJgJW64IgyDehC9iX3E0ria6KVTEJwpswPCy A/SthN93m0Bv0md7IS1ORbYkIQTqi8zi/x0lreIseJp8cl1HCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBxCJMmKrru/i2DwDMkwhnlHCX73MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jZGJl NWRkNC1iOWZhLTQwMjEtODdhMS0zMDAyZjgwY2M0NDkvMzhkZTQwZWUtZGU3ZC0z ZTUyLTkxNWMtMmMyOGIzOThmNGVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvY2RiZTVkZDQtYjlmYS00MDIxLTg3 YTEtMzAwMmY4MGNjNDQ5L2NkYmU1ZGQ0LWI5ZmEtNDAyMS04N2ExLTMwMDJmODBj YzQ0OS5jcmwwHwYDVR0jBBgwFoAUj+CGD4v7Wq1p3hTxt0kNkGphwyswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jZGJlNWRkNC1iOWZhLTQwMjEtODdhMS0zMDAy ZjgwY2M0NDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4yUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACp6SnB7tYD6kPwP2I7mVdva68Qa0n4FQUfFR1THF/LCc5b+EQV0Gzcr JxUG+/xAmhYLtQEvSGPE5ax2SwSZyUnIeNhlhWhLj80FdeF+nPHcZUe971/xx/A2 jg1rQwqiNZn+HjWBaqJTMrxiOew/2tqXKofyrAKaoyGxcQ/DNdY7b6ULhz937s3W z15XAINlVbokSJulLqpPrOJjn+CXV+qAnttkp61reK3SEy52RWFj1bzkLDMdLwxT 4RmH7M4D7XePBfsy+deRRKEQ4NqyWELEc934lMUcqhfXWspM4RBkGQWiUl+vOMsw opkSTEDG8I1bw4SF4Vs6YGdja0ITnZc= -----END CERTIFICATE-----Generated at Sat Jun 13 09:40:12 2026 by rpki-client