$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c9d8d2d7-c780-4688-bbc9-433d4b540641/3d9d4032-d200-3bf1-82c4-dcfbf607bed4.roa File: 3d9d4032-d200-3bf1-82c4-dcfbf607bed4.roa (raw, json) Hash identifier: JNI+bUrXrCL6xS6H9e3V6b1Roy9ZhUqLPCsUCAuTeT0= Subject key identifier: B9:E0:59:64:4C:F4:89:E9:45:44:01:D9:91:5C:FD:61:58:4A:60:AC Certificate issuer: /CN=c9d8d2d7-c780-4688-bbc9-433d4b540641 Certificate serial: 010D0C9F4328584D5F7FAF456C96BD4D113DFA00 Authority key identifier: FB:B4:43:43:74:73:89:35:FE:E9:E2:20:7C:C5:22:87:FE:03:31:E9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c9d8d2d7-c780-4688-bbc9-433d4b540641.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c9d8d2d7-c780-4688-bbc9-433d4b540641/3d9d4032-d200-3bf1-82c4-dcfbf607bed4.roa Signing time: Thu 02 Apr 2026 13:00:30 +0000 ROA not before: Thu 02 Apr 2026 13:00:30 +0000 ROA not after: Wed 01 Jul 2026 13:00:30 +0000 asID: 396313 IP address blocks: 23.171.128.0/24 maxlen: 24 199.250.60.0/22 maxlen: 24 2602:fef2::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c9d8d2d7-c780-4688-bbc9-433d4b540641/c9d8d2d7-c780-4688-bbc9-433d4b540641.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c9d8d2d7-c780-4688-bbc9-433d4b540641/c9d8d2d7-c780-4688-bbc9-433d4b540641.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c9d8d2d7-c780-4688-bbc9-433d4b540641.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 08 Apr 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5f:7f:af:45:6c:96:bd:4d:11:3d:fa:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c9d8d2d7-c780-4688-bbc9-433d4b540641 Validity Not Before: Apr 2 13:00:30 2026 GMT Not After : Jul 1 13:00:30 2026 GMT Subject: CN=cd5e78d0-df60-4f18-88d6-dc179abdedf2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:cf:76:5f:9d:57:6c:a5:12:14:50:38:13:9c: b2:f0:6f:f3:b8:ee:0f:5c:ec:81:3d:ef:d2:ec:10: 76:68:ed:fe:0a:80:ef:a5:5b:80:59:85:89:ad:8e: b6:ad:39:73:cd:44:c2:11:87:e8:e6:61:9e:d6:33: c5:8d:5c:59:c4:ee:39:1f:db:86:d3:49:f4:54:5d: b8:aa:14:a5:f1:61:d3:27:4c:c4:e9:3a:09:b1:8c: ba:d0:9a:e7:35:b5:d3:1a:cf:af:ff:32:dc:82:58: 26:ed:57:42:13:9e:1f:1c:67:a5:d1:c4:28:1f:d0: c2:a7:57:f7:c4:28:f4:5d:ab:96:f8:10:e6:9e:05: 42:e0:2e:5d:82:a5:2d:fb:49:b7:56:55:b7:b7:57: f6:ea:8c:aa:82:09:fa:52:61:df:2e:c4:a7:44:62: b0:1e:cc:6a:39:e8:9d:c9:a6:dc:05:3d:72:43:ca: c7:3b:bb:aa:5c:37:ba:a0:0f:8a:bd:84:65:88:f3: 19:f0:62:2d:0d:fd:24:23:07:85:c6:aa:d0:64:7c: b6:ba:bc:7c:9c:9d:98:f3:fd:bd:a7:3c:5f:06:15: 51:4f:72:49:4d:4b:44:25:4d:fc:1d:2a:bb:f2:a7: 0b:d2:79:7c:54:e6:d9:cf:9b:7c:e4:d7:5e:01:f2: fe:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:E0:59:64:4C:F4:89:E9:45:44:01:D9:91:5C:FD:61:58:4A:60:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c9d8d2d7-c780-4688-bbc9-433d4b540641/3d9d4032-d200-3bf1-82c4-dcfbf607bed4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c9d8d2d7-c780-4688-bbc9-433d4b540641/c9d8d2d7-c780-4688-bbc9-433d4b540641.crl X509v3 Authority Key Identifier: keyid:FB:B4:43:43:74:73:89:35:FE:E9:E2:20:7C:C5:22:87:FE:03:31:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c9d8d2d7-c780-4688-bbc9-433d4b540641.cer sbgp-ipAddrBlock: critical IPv4: 23.171.128.0/24 199.250.60.0/22 IPv6: 2602:fef2::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:50:da:1e:75:8b:cf:f7:10:a9:fa:e1:9e:51:51:0e:8c:cd: a5:6e:99:5b:11:ad:43:15:c5:27:a3:cd:2d:f3:fa:c1:8e:70: 96:fb:f1:43:f3:61:1d:63:82:4b:db:24:b9:fd:24:35:4a:e8: 48:ed:e8:59:03:e2:12:64:ca:bd:78:ba:7e:c8:b2:fa:89:09: 38:02:22:84:b1:71:d1:6d:99:27:1c:5f:78:c5:ba:7c:5f:09: 76:ae:3f:4d:45:7a:92:5d:e5:0c:9b:60:f3:a6:68:17:8b:1f: 23:6d:f3:3c:35:67:37:ad:43:32:5f:b1:33:e0:36:cc:6b:b0: 2e:84:0c:d7:0f:7b:0b:35:0a:0a:bb:2a:bd:af:a9:fb:fc:ee: 09:62:be:14:6e:1d:2e:9d:0e:91:09:07:8c:ce:2e:8f:fc:24: 98:b8:a5:01:8f:7a:e2:16:90:d3:3b:b8:fa:4b:b4:3c:c3:54: d4:9e:2f:62:e3:10:fd:56:ea:34:54:42:c7:49:19:2f:57:8d: 38:cf:d8:ef:74:b2:1f:bd:69:4e:e2:3f:ec:34:b2:32:8e:34: 7f:95:8e:d1:42:fd:d3:c6:8f:e6:f0:8d:db:10:1a:a7:a4:bd: 6c:bb:ac:fb:47:d3:02:de:24:c0:52:f3:cf:36:ae:56:41:f4: 50:6a:fd:8a -----BEGIN CERTIFICATE----- MIIGWTCCBUGgAwIBAgIUAQ0Mn0MoWE1ff69FbJa9TRE9+gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzlkOGQyZDctYzc4MC00Njg4LWJiYzktNDMzZDRiNTQw NjQxMB4XDTI2MDQwMjEzMDAzMFoXDTI2MDcwMTEzMDAzMFowLzEtMCsGA1UEAxMk Y2Q1ZTc4ZDAtZGY2MC00ZjE4LTg4ZDYtZGMxNzlhYmRlZGYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk892X51XbKUSFFA4E5yy8G/zuO4PXOyBPe/S 7BB2aO3+CoDvpVuAWYWJrY62rTlzzUTCEYfo5mGe1jPFjVxZxO45H9uG00n0VF24 qhSl8WHTJ0zE6ToJsYy60JrnNbXTGs+v/zLcglgm7VdCE54fHGel0cQoH9DCp1f3 xCj0XauW+BDmngVC4C5dgqUt+0m3VlW3t1f26oyqggn6UmHfLsSnRGKwHsxqOeid yabcBT1yQ8rHO7uqXDe6oA+KvYRliPMZ8GItDf0kIweFxqrQZHy2urx8nJ2Y8/29 pzxfBhVRT3JJTUtEJU38HSq78qcL0nl8VObZz5t85NdeAfL+cQIDAQABo4IDazCC A2cwHQYDVR0OBBYEFLngWWRM9InpRUQB2ZFc/WFYSmCsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jOWQ4 ZDJkNy1jNzgwLTQ2ODgtYmJjOS00MzNkNGI1NDA2NDEvM2Q5ZDQwMzItZDIwMC0z YmYxLTgyYzQtZGNmYmY2MDdiZWQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzlkOGQyZDctYzc4MC00Njg4LWJi YzktNDMzZDRiNTQwNjQxL2M5ZDhkMmQ3LWM3ODAtNDY4OC1iYmM5LTQzM2Q0YjU0 MDY0MS5jcmwwHwYDVR0jBBgwFoAU+7RDQ3RziTX+6eIgfMUih/4DMekwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jOWQ4ZDJkNy1jNzgwLTQ2ODgtYmJjOS00MzNk NGI1NDA2NDEuY2VyMDUGCCsGAQUFBwEHAQH/BCYwJDASBAIAATAMAwQAF6uAAwQC x/o8MA4EAgACMAgDBgQmAv7yADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBvUNoedYvP9xCp+uGeUVEOjM2l bplbEa1DFcUno80t8/rBjnCW+/FD82EdY4JL2yS5/SQ1SuhI7ehZA+ISZMq9eLp+ yLL6iQk4AiKEsXHRbZknHF94xbp8Xwl2rj9NRXqSXeUMm2DzpmgXix8jbfM8NWc3 rUMyX7Ez4DbMa7AuhAzXD3sLNQoKuyq9r6n7/O4JYr4Ubh0unQ6RCQeMzi6P/CSY uKUBj3riFpDTO7j6S7Q8w1TUni9i4xD9Vuo0VELHSRkvV404z9jvdLIfvWlO4j/s NLIyjjR/lY7RQv3Txo/m8I3bEBqnpL1su6z7R9MC3iTAUvPPNq5WQfRQav2K -----END CERTIFICATE-----Generated at Tue Apr 7 16:36:57 2026 by rpki-client