$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ce34b3fb-f144-386b-8a2a-c9c1c4cd5c52.roa File: ce34b3fb-f144-386b-8a2a-c9c1c4cd5c52.roa (raw, json) Hash identifier: aA/luxKEfF/pdVuKluxcBvxbNMjPaMQri+Dyh5H+8kg= Subject key identifier: 6A:0F:55:FD:30:17:6C:F8:25:E4:AF:3D:1D:59:ED:F0:77:D9:CB:48 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584D24E0EF3E014E46468AAAB400 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ce34b3fb-f144-386b-8a2a-c9c1c4cd5c52.roa Signing time: Thu 12 Mar 2026 13:00:40 +0000 ROA not before: Thu 12 Mar 2026 13:00:40 +0000 ROA not after: Wed 10 Jun 2026 13:00:40 +0000 asID: 396982 IP address blocks: 23.236.59.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 20 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:24:e0:ef:3e:01:4e:46:46:8a:aa:b4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Mar 12 13:00:40 2026 GMT Not After : Jun 10 13:00:40 2026 GMT Subject: CN=6728d1e5-e2e6-40fa-84c7-ea21457b7248 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:56:c5:41:d6:9e:17:04:4e:ec:e2:d9:c9:d3: b3:fc:9c:dc:69:92:fa:d2:3e:55:c6:96:73:5c:4c: 86:1c:28:f9:a1:ea:b9:29:a6:e5:f9:e5:ea:4e:d5: 0c:05:ad:47:40:31:69:b0:d8:d7:66:4e:cd:d6:e8: 74:b0:6a:63:6a:bb:d0:8a:bb:45:98:b3:52:d7:93: 35:92:7b:89:1e:28:a0:0e:60:e9:2f:fb:80:51:b2: a6:fb:af:27:f0:dc:ee:0e:4c:9e:36:aa:5d:a2:a0: a6:fc:b1:5a:60:74:44:77:81:37:24:cf:ce:f6:58: 0b:28:bc:3d:48:f2:01:f5:02:fd:44:ac:6d:94:da: e9:33:74:45:7f:e6:d9:f0:b2:22:47:49:46:37:64: 04:24:70:08:34:b0:e8:bd:cc:fb:e6:d3:43:79:b7: 56:10:e2:e2:8c:7d:8e:58:d4:82:9b:ef:4a:1b:8b: 8d:7a:87:6b:36:4d:b8:bb:0a:14:b5:6e:d8:9e:e8: 2b:2e:54:d0:49:a3:35:57:e9:ba:39:34:50:f5:f8: af:37:2a:59:5b:d6:d5:0c:81:f1:e7:a1:c4:24:6e: 61:a0:9c:60:56:bf:3f:a6:7a:b7:2a:47:26:fc:db: 21:50:ec:38:f9:50:ca:27:b4:e1:ba:0b:40:eb:3f: a7:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:0F:55:FD:30:17:6C:F8:25:E4:AF:3D:1D:59:ED:F0:77:D9:CB:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/ce34b3fb-f144-386b-8a2a-c9c1c4cd5c52.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 23.236.59.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:ee:dc:8a:83:b2:2b:e4:19:9c:f6:14:f9:ca:5f:93:51:31: 1e:0e:b7:72:5e:ea:a4:66:57:9f:a9:42:02:86:9a:e6:c8:03: 7b:c5:c2:0b:48:99:8b:fd:50:8f:df:a1:4f:e7:85:9c:93:21: 78:22:8b:ad:f8:03:0c:30:a1:9a:29:bb:ef:d7:3c:e1:86:65: a3:28:8f:03:6d:96:27:ab:6d:71:cf:21:4c:2d:d6:e3:e1:c8: d3:45:19:25:61:07:52:65:f7:be:e3:dd:48:e8:70:ee:38:e0: 1b:34:7f:b0:7d:6b:83:50:d8:69:b2:6a:4d:f3:e7:29:4d:15: 5e:ea:56:90:38:3f:9a:58:e5:20:f9:4c:50:3d:fa:ff:0c:36: 4e:24:bd:f5:f0:0e:2b:87:9f:9a:54:66:ee:d1:09:a9:7f:7f: 87:c0:5c:41:e3:37:31:9e:93:a5:2f:bb:ec:97:8b:ea:4a:7d: 05:13:30:bb:11:9e:e4:88:49:47:93:d8:b8:5c:74:36:57:c3: 07:da:2d:10:0f:99:c5:4a:6e:31:6c:a4:29:ad:d5:3c:d0:75: 19:a6:d6:b6:2d:6a:9d:9c:80:fc:51:32:60:4c:a3:0a:e9:69: 0c:7f:4f:3e:43:e3:3b:90:df:08:2a:95:97:88:31:af:a0:c1: fe:30:68:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0k4O8+AU5GRoqqtAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk NjcyOGQxZTUtZTJlNi00MGZhLTg0YzctZWEyMTQ1N2I3MjQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1VbFQdaeFwRO7OLZydOz/JzcaZL60j5VxpZz XEyGHCj5oeq5Kabl+eXqTtUMBa1HQDFpsNjXZk7N1uh0sGpjarvQirtFmLNS15M1 knuJHiigDmDpL/uAUbKm+68n8NzuDkyeNqpdoqCm/LFaYHREd4E3JM/O9lgLKLw9 SPIB9QL9RKxtlNrpM3RFf+bZ8LIiR0lGN2QEJHAINLDovcz75tNDebdWEOLijH2O WNSCm+9KG4uNeodrNk24uwoUtW7YnugrLlTQSaM1V+m6OTRQ9fivNypZW9bVDIHx 56HEJG5hoJxgVr8/pnq3Kkcm/NshUOw4+VDKJ7ThugtA6z+nlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGoPVf0wF2z4JeSvPR1Z7fB32ctIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvY2UzNGIzZmItZjE0NC0z ODZiLThhMmEtYzljMWM0Y2Q1YzUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF+w7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHDu3IqDsivkGZz2FPnKX5NRMR4Ot3Je6qRmV5+pQgKGmubIA3vFwgtI mYv9UI/foU/nhZyTIXgii634AwwwoZopu+/XPOGGZaMojwNtlierbXHPIUwt1uPh yNNFGSVhB1Jl977j3UjocO444Bs0f7B9a4NQ2Gmyak3z5ylNFV7qVpA4P5pY5SD5 TFA9+v8MNk4kvfXwDiuHn5pUZu7RCal/f4fAXEHjNzGek6Uvu+yXi+pKfQUTMLsR nuSISUeT2LhcdDZXwwfaLRAPmcVKbjFspCmt1TzQdRmm1rYtap2cgPxRMmBMowrp aQx/Tz5D4zuQ3wgqlZeIMa+gwf4waAs= -----END CERTIFICATE-----Generated at Thu Mar 19 01:49:33 2026 by rpki-client