$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0fa8e3f-67e9-4e8f-9d18-6211dd613073/7f2249f6-4bb2-31b7-9f14-aa3ee4d4a343.roa File: 7f2249f6-4bb2-31b7-9f14-aa3ee4d4a343.roa (raw, json) Hash identifier: 5rszN/ykeExlic6wXEYI7ZhkLjETSuW9mup7yWZGZxc= Subject key identifier: 90:D0:97:94:D5:BC:61:DA:BC:41:E3:CD:E8:8C:53:0B:18:30:29:E2 Certificate issuer: /CN=d0fa8e3f-67e9-4e8f-9d18-6211dd613073 Certificate serial: 010D0C9F4328584D1B1A0AC2FD319CD447A10D00 Authority key identifier: 2B:B4:63:CE:67:00:19:DA:3A:DE:BC:3B:E5:62:36:DD:BB:4D:C2:9E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0fa8e3f-67e9-4e8f-9d18-6211dd613073.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0fa8e3f-67e9-4e8f-9d18-6211dd613073/7f2249f6-4bb2-31b7-9f14-aa3ee4d4a343.roa Signing time: Mon 09 Mar 2026 01:00:32 +0000 ROA not before: Mon 09 Mar 2026 01:00:32 +0000 ROA not after: Sun 07 Jun 2026 01:00:32 +0000 asID: 3356 IP address blocks: 23.156.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0fa8e3f-67e9-4e8f-9d18-6211dd613073/d0fa8e3f-67e9-4e8f-9d18-6211dd613073.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0fa8e3f-67e9-4e8f-9d18-6211dd613073/d0fa8e3f-67e9-4e8f-9d18-6211dd613073.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0fa8e3f-67e9-4e8f-9d18-6211dd613073.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 11 Mar 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:1b:1a:0a:c2:fd:31:9c:d4:47:a1:0d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d0fa8e3f-67e9-4e8f-9d18-6211dd613073 Validity Not Before: Mar 9 01:00:32 2026 GMT Not After : Jun 7 01:00:32 2026 GMT Subject: CN=10f88789-008f-406b-b966-3d496cc90584 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:f5:3d:a3:f2:b2:e2:8e:bc:fe:6e:d0:fd:eb: 28:4f:3f:10:19:cc:45:33:e7:fc:b7:8c:af:cc:be: fe:1a:de:b3:6c:aa:31:7f:84:14:b9:56:b0:72:bd: b0:5f:78:04:62:d1:e2:88:bd:f7:4b:83:1c:0c:d0: bf:2d:1f:fa:d0:21:4b:08:fd:41:b9:a5:1f:b3:25: 9c:a7:5f:fe:ae:77:78:e3:a2:ef:a7:2a:ef:e5:1d: 10:41:64:83:d9:47:be:a1:50:df:4a:58:9b:2a:db: f3:66:ab:f2:8a:e0:8a:c5:3f:9d:86:e2:ca:36:93: 6e:82:c7:c6:31:ce:05:92:bc:1d:ad:8e:aa:e8:aa: 4b:94:87:6a:ed:a3:57:4c:ad:e5:b0:25:52:5a:ea: bd:d3:01:25:d0:91:ec:66:41:b4:8b:06:e6:dd:11: a3:03:25:80:1f:07:0a:f0:3f:87:d1:e1:06:90:23: b2:0e:84:e4:fa:69:3e:48:37:77:b9:2c:50:b3:16: db:83:4c:31:14:31:40:59:0b:28:f7:33:bb:b4:8c: 20:56:38:ce:eb:16:9c:f0:b6:68:d1:63:07:eb:b6: e0:19:14:2c:97:e6:2e:54:77:d8:a1:d7:af:ad:bf: 18:d6:a3:ab:47:d4:6e:a7:c6:5a:3c:18:7b:dd:7a: 54:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:D0:97:94:D5:BC:61:DA:BC:41:E3:CD:E8:8C:53:0B:18:30:29:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0fa8e3f-67e9-4e8f-9d18-6211dd613073/7f2249f6-4bb2-31b7-9f14-aa3ee4d4a343.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0fa8e3f-67e9-4e8f-9d18-6211dd613073/d0fa8e3f-67e9-4e8f-9d18-6211dd613073.crl X509v3 Authority Key Identifier: keyid:2B:B4:63:CE:67:00:19:DA:3A:DE:BC:3B:E5:62:36:DD:BB:4D:C2:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0fa8e3f-67e9-4e8f-9d18-6211dd613073.cer sbgp-ipAddrBlock: critical IPv4: 23.156.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:72:d3:fe:81:08:7b:d7:fa:09:61:39:4a:fc:10:df:ae:cf: 41:37:b8:60:77:41:c1:bf:de:b8:cc:51:77:e9:1e:62:8d:52: 62:10:96:be:f2:81:d4:fd:63:5d:0c:94:82:4b:20:f1:69:40: 2c:c9:1f:66:0b:ea:5c:a4:8e:8f:0d:15:33:a0:18:1c:14:e5: 90:aa:fa:7a:c9:7f:7a:41:29:8b:c5:d4:1d:c0:9f:75:35:c7: 0f:a5:fb:d7:4c:cb:07:41:79:c3:c8:84:40:f3:a4:06:96:8c: d5:59:6c:69:e3:4f:01:28:9f:fd:07:72:33:26:5e:05:36:da: 73:73:44:87:2c:ea:df:ad:67:61:6c:8d:da:55:d3:76:f3:d3: 5c:e1:16:c7:52:5b:cf:ac:ab:c8:40:73:1e:08:9d:15:5f:83: fa:8c:37:13:7d:55:fb:78:0c:b1:6c:bc:d2:77:7a:aa:7e:b4: d2:d4:fa:6d:56:5a:80:8a:dd:bc:15:77:f4:d2:f4:d3:ae:c7: ff:cb:54:51:d4:68:f9:c4:40:5e:7e:f0:5c:a4:2b:72:b7:c2: 98:97:6c:08:7c:2b:e2:17:2a:01:b5:1a:93:3d:fe:7b:72:dc: 84:98:bb:91:02:94:a1:11:67:9f:06:d7:31:51:67:22:72:bc: f0:20:0d:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0bGgrC/TGc1EehDQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDBmYThlM2YtNjdlOS00ZThmLTlkMTgtNjIxMWRkNjEz MDczMB4XDTI2MDMwOTAxMDAzMloXDTI2MDYwNzAxMDAzMlowLzEtMCsGA1UEAxMk MTBmODg3ODktMDA4Zi00MDZiLWI5NjYtM2Q0OTZjYzkwNTg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhfU9o/Ky4o68/m7Q/esoTz8QGcxFM+f8t4yv zL7+Gt6zbKoxf4QUuVawcr2wX3gEYtHiiL33S4McDNC/LR/60CFLCP1BuaUfsyWc p1/+rnd446Lvpyrv5R0QQWSD2Ue+oVDfSlibKtvzZqvyiuCKxT+dhuLKNpNugsfG Mc4FkrwdrY6q6KpLlIdq7aNXTK3lsCVSWuq90wEl0JHsZkG0iwbm3RGjAyWAHwcK 8D+H0eEGkCOyDoTk+mk+SDd3uSxQsxbbg0wxFDFAWQso9zO7tIwgVjjO6xac8LZo 0WMH67bgGRQsl+YuVHfYodevrb8Y1qOrR9Rup8ZaPBh73XpUwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJDQl5TVvGHavEHjzeiMUwsYMCniMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9kMGZh OGUzZi02N2U5LTRlOGYtOWQxOC02MjExZGQ2MTMwNzMvN2YyMjQ5ZjYtNGJiMi0z MWI3LTlmMTQtYWEzZWU0ZDRhMzQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZDBmYThlM2YtNjdlOS00ZThmLTlk MTgtNjIxMWRkNjEzMDczL2QwZmE4ZTNmLTY3ZTktNGU4Zi05ZDE4LTYyMTFkZDYx MzA3My5jcmwwHwYDVR0jBBgwFoAUK7RjzmcAGdo63rw75WI23btNwp4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi9kMGZhOGUzZi02N2U5LTRlOGYtOWQxOC02MjEx ZGQ2MTMwNzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5x4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEVy0/6BCHvX+glhOUr8EN+uz0E3uGB3QcG/3rjMUXfpHmKNUmIQlr7y gdT9Y10MlIJLIPFpQCzJH2YL6lykjo8NFTOgGBwU5ZCq+nrJf3pBKYvF1B3An3U1 xw+l+9dMywdBecPIhEDzpAaWjNVZbGnjTwEon/0HcjMmXgU22nNzRIcs6t+tZ2Fs jdpV03bz01zhFsdSW8+sq8hAcx4InRVfg/qMNxN9Vft4DLFsvNJ3eqp+tNLU+m1W WoCK3bwVd/TS9NOux//LVFHUaPnEQF5+8FykK3K3wpiXbAh8K+IXKgG1GpM9/nty 3ISYu5EClKERZ58G1zFRZyJyvPAgDSc= -----END CERTIFICATE-----Generated at Tue Mar 10 05:36:07 2026 by rpki-client