$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18e2648e-8869-4afd-a0bd-a1ac7c1f23db/358c0fd2-f2dc-357c-8822-31ed52d1d684.roa File: 358c0fd2-f2dc-357c-8822-31ed52d1d684.roa (raw, json) Hash identifier: kI/QyTlS+ASZRTM31uXx4N1krPnySs/l8KmLWBA94UY= Subject key identifier: 65:C7:33:4D:31:31:AD:96:00:9D:55:35:6B:DE:71:C0:0A:81:1A:58 Certificate issuer: /CN=18e2648e-8869-4afd-a0bd-a1ac7c1f23db Certificate serial: 010D0C9F4328584D59EA4F8AFC23A10C75C6E180 Authority key identifier: 03:D0:8D:85:AF:D5:60:ED:61:FB:2A:B9:A9:8A:92:4E:FE:BC:FE:B0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18e2648e-8869-4afd-a0bd-a1ac7c1f23db.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18e2648e-8869-4afd-a0bd-a1ac7c1f23db/358c0fd2-f2dc-357c-8822-31ed52d1d684.roa Signing time: Tue 31 Mar 2026 13:00:30 +0000 ROA not before: Tue 31 Mar 2026 13:00:30 +0000 ROA not after: Mon 29 Jun 2026 13:00:30 +0000 asID: 398960 IP address blocks: 23.168.144.0/24 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18e2648e-8869-4afd-a0bd-a1ac7c1f23db/18e2648e-8869-4afd-a0bd-a1ac7c1f23db.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18e2648e-8869-4afd-a0bd-a1ac7c1f23db/18e2648e-8869-4afd-a0bd-a1ac7c1f23db.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18e2648e-8869-4afd-a0bd-a1ac7c1f23db.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 08 Apr 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:59:ea:4f:8a:fc:23:a1:0c:75:c6:e1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=18e2648e-8869-4afd-a0bd-a1ac7c1f23db Validity Not Before: Mar 31 13:00:30 2026 GMT Not After : Jun 29 13:00:30 2026 GMT Subject: CN=f3989521-e341-4364-aa85-4617c6f00325 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:7a:61:38:6c:ce:db:16:61:d9:04:22:3c:6b: 51:57:f5:0f:d3:44:1d:ed:35:b9:fc:59:90:da:65: 6a:4f:26:80:fb:a5:f3:17:55:f6:17:8f:43:8d:83: 4d:de:58:f9:14:b1:37:ea:4d:ac:6c:b8:a4:89:5d: a1:85:83:d0:57:ff:83:9e:46:80:f3:5e:c1:5a:60: ff:9c:41:6d:e9:c8:0b:ef:67:8c:ea:51:14:df:c7: f5:14:3d:29:e7:d1:45:f9:9c:6b:6e:3e:d6:a5:53: 1d:60:84:1f:0a:7a:c8:e4:e1:29:11:9f:df:ef:d5: 80:b0:de:5f:ca:c7:7f:6c:4e:b6:69:80:01:33:bc: 61:3d:77:6d:08:78:2a:09:c8:64:08:76:d8:55:c6: 32:c5:18:b1:0a:ea:d4:ae:e1:8d:34:ad:b5:12:15: 37:2d:ce:07:81:12:45:ed:91:f1:ac:5c:fd:87:1b: b5:8c:97:fb:6c:42:70:78:c9:74:c0:80:b6:9d:1c: 92:bc:51:a4:d6:3a:49:f9:c3:b3:ee:e6:8d:d5:ee: 08:b4:31:99:ad:7a:4e:bb:8c:11:b1:9f:27:fb:ca: cf:b0:ea:cb:5a:15:bb:ef:40:ca:72:60:98:d2:fa: 66:91:36:36:a0:89:1e:5c:30:9f:2d:be:32:97:79: 07:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:C7:33:4D:31:31:AD:96:00:9D:55:35:6B:DE:71:C0:0A:81:1A:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18e2648e-8869-4afd-a0bd-a1ac7c1f23db/358c0fd2-f2dc-357c-8822-31ed52d1d684.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18e2648e-8869-4afd-a0bd-a1ac7c1f23db/18e2648e-8869-4afd-a0bd-a1ac7c1f23db.crl X509v3 Authority Key Identifier: keyid:03:D0:8D:85:AF:D5:60:ED:61:FB:2A:B9:A9:8A:92:4E:FE:BC:FE:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18e2648e-8869-4afd-a0bd-a1ac7c1f23db.cer sbgp-ipAddrBlock: critical IPv4: 23.168.144.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:4b:46:56:40:92:af:bd:f5:02:77:9a:c5:f8:f3:01:b8:13: af:d2:45:4b:5f:57:d2:ce:6d:1f:59:f0:27:eb:eb:36:1d:91: 69:32:e8:43:10:3a:e3:63:2e:79:d4:9d:d6:38:2b:51:2b:1b: 5d:71:84:e4:67:69:01:3f:84:d5:c5:fa:45:48:ed:7e:aa:93: 0d:e4:1f:6f:9a:37:7e:e6:38:14:85:3e:fc:d5:9f:1d:f7:aa: 6d:7c:06:3f:f2:0a:ec:6a:20:0b:c3:21:1d:3c:11:95:e4:7c: 55:cf:53:9f:a1:7d:02:aa:c4:d4:91:66:53:26:98:c8:a9:6d: 36:45:41:24:48:e3:6a:0f:2e:b0:5d:84:eb:3a:77:d7:02:9f: b4:b1:fb:c2:a2:8d:72:4d:70:a9:bc:11:0a:2a:b2:57:44:14: 72:5e:a7:42:0e:0c:fa:a2:bb:a6:19:c4:1a:07:75:b2:6f:78: 4c:55:f0:4d:33:53:9e:58:c1:40:c7:01:a5:c5:ad:53:e3:4f: 66:3e:a1:51:6a:24:bd:ec:f5:ae:38:f2:7f:84:44:5f:1e:64: b9:f7:ed:bf:0d:52:46:fe:4b:d7:24:da:81:94:f4:59:80:ca: d1:ee:96:df:84:4f:06:c6:e9:16:c9:9a:ad:5f:4c:39:34:07: 6d:cb:e2:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Z6k+K/COhDHXG4YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMThlMjY0OGUtODg2OS00YWZkLWEwYmQtYTFhYzdjMWYy M2RiMB4XDTI2MDMzMTEzMDAzMFoXDTI2MDYyOTEzMDAzMFowLzEtMCsGA1UEAxMk ZjM5ODk1MjEtZTM0MS00MzY0LWFhODUtNDYxN2M2ZjAwMzI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5HphOGzO2xZh2QQiPGtRV/UP00Qd7TW5/FmQ 2mVqTyaA+6XzF1X2F49DjYNN3lj5FLE36k2sbLikiV2hhYPQV/+DnkaA817BWmD/ nEFt6cgL72eM6lEU38f1FD0p59FF+Zxrbj7WpVMdYIQfCnrI5OEpEZ/f79WAsN5f ysd/bE62aYABM7xhPXdtCHgqCchkCHbYVcYyxRixCurUruGNNK21EhU3Lc4HgRJF 7ZHxrFz9hxu1jJf7bEJweMl0wIC2nRySvFGk1jpJ+cOz7uaN1e4ItDGZrXpOu4wR sZ8n+8rPsOrLWhW770DKcmCY0vpmkTY2oIkeXDCfLb4yl3kHTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGXHM00xMa2WAJ1VNWveccAKgRpYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xOGUy NjQ4ZS04ODY5LTRhZmQtYTBiZC1hMWFjN2MxZjIzZGIvMzU4YzBmZDItZjJkYy0z NTdjLTg4MjItMzFlZDUyZDFkNjg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMThlMjY0OGUtODg2OS00YWZkLWEw YmQtYTFhYzdjMWYyM2RiLzE4ZTI2NDhlLTg4NjktNGFmZC1hMGJkLWExYWM3YzFm MjNkYi5jcmwwHwYDVR0jBBgwFoAUA9CNha/VYO1h+yq5qYqSTv68/rAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xOGUyNjQ4ZS04ODY5LTRhZmQtYTBiZC1hMWFj N2MxZjIzZGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6iQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC9LRlZAkq+99QJ3msX48wG4E6/SRUtfV9LObR9Z8Cfr6zYdkWky6EMQ OuNjLnnUndY4K1ErG11xhORnaQE/hNXF+kVI7X6qkw3kH2+aN37mOBSFPvzVnx33 qm18Bj/yCuxqIAvDIR08EZXkfFXPU5+hfQKqxNSRZlMmmMipbTZFQSRI42oPLrBd hOs6d9cCn7Sx+8KijXJNcKm8EQoqsldEFHJep0IODPqiu6YZxBoHdbJveExV8E0z U55YwUDHAaXFrVPjT2Y+oVFqJL3s9a448n+ERF8eZLn37b8NUkb+S9ck2oGU9FmA ytHult+ETwbG6RbJmq1fTDk0B23L4kk= -----END CERTIFICATE-----Generated at Tue Apr 7 13:32:32 2026 by rpki-client