$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1/8cfb401d-a235-3259-9fc3-160664b8029d.roa File: 8cfb401d-a235-3259-9fc3-160664b8029d.roa (raw, json) Hash identifier: Q7JyPdo5elQgVO9ti36Uzqi4kW9trH6sLiTvnJnsT0s= Subject key identifier: 8A:92:D7:C0:B8:97:76:6F:2E:C7:E1:96:E3:20:72:C0:FA:06:C4:51 Certificate issuer: /CN=ca3c740c-67d3-47ed-b43d-9bd91b31cdb1 Certificate serial: 010D0C9F4328584DFBD5EE58D4934C2837802940 Authority key identifier: 57:A2:47:DA:F5:84:83:97:0C:4D:55:A0:05:82:4E:3E:8C:AD:3C:28 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1/8cfb401d-a235-3259-9fc3-160664b8029d.roa Signing time: Thu 28 May 2026 13:00:12 +0000 ROA not before: Thu 28 May 2026 13:00:12 +0000 ROA not after: Wed 26 Aug 2026 13:00:12 +0000 asID: 18013 IP address blocks: 23.247.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 04 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:fb:d5:ee:58:d4:93:4c:28:37:80:29:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ca3c740c-67d3-47ed-b43d-9bd91b31cdb1 Validity Not Before: May 28 13:00:12 2026 GMT Not After : Aug 26 13:00:12 2026 GMT Subject: CN=38191ec6-ba07-422f-84f6-6fb3a0c16e66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:45:dc:39:3b:e7:01:4e:c6:7e:08:3c:38:9b: f2:25:f3:9e:2e:9c:d7:7c:c2:2a:2b:1e:12:3b:ba: 6e:20:7e:54:43:ea:fc:ef:2c:a0:6b:ab:21:4b:32: 5b:ef:11:a5:e7:f0:66:91:ce:4d:5f:99:49:39:c6: 33:3c:76:21:95:a3:33:e9:f9:f8:a3:26:c5:e7:0e: 13:f9:4d:ce:5a:49:0d:09:98:68:dc:50:b4:d1:66: e4:2e:df:fc:57:eb:20:00:7d:37:e1:05:68:e6:c0: 42:e7:4d:ae:34:b5:6e:1f:8a:82:59:5b:c3:ff:a9: d1:42:a1:cc:dc:e8:b0:d4:1c:8a:0c:bd:0d:0e:8c: f7:c1:79:71:5e:8d:43:1e:81:42:50:4c:77:9e:57: 15:0e:9a:69:62:93:f8:34:22:ed:fa:a3:9a:62:a8: c6:35:6b:2f:fc:91:fe:ea:fd:f7:49:00:2f:01:31: a2:f8:c9:75:5c:b3:51:0d:e5:d4:cc:65:54:d3:07: 96:48:f7:32:fd:6b:25:dc:7e:84:84:8f:db:e3:a1: 09:85:a2:46:53:5f:99:95:10:c0:33:ad:97:c4:42: 0c:bc:fd:d8:79:49:0a:c6:1c:ce:c7:e6:23:32:2b: 81:ef:49:71:9b:d3:89:26:0b:56:4c:48:3e:81:25: bd:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:92:D7:C0:B8:97:76:6F:2E:C7:E1:96:E3:20:72:C0:FA:06:C4:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1/8cfb401d-a235-3259-9fc3-160664b8029d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1.crl X509v3 Authority Key Identifier: keyid:57:A2:47:DA:F5:84:83:97:0C:4D:55:A0:05:82:4E:3E:8C:AD:3C:28 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ca3c740c-67d3-47ed-b43d-9bd91b31cdb1.cer sbgp-ipAddrBlock: critical IPv4: 23.247.131.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:57:88:41:ce:87:0d:49:45:30:0d:31:21:74:4c:f2:9f:04: 0d:e9:cc:5f:6f:c4:46:51:a7:1b:1d:87:5e:5a:fc:e4:57:8a: 2f:dc:4b:b8:b8:d8:32:7a:94:54:0f:ab:cf:84:b4:99:af:4d: c1:05:5c:66:4f:e1:93:6d:cf:bd:16:03:ac:75:95:3b:95:a0: e4:d0:bd:52:e2:a4:fd:5b:02:81:c5:48:63:c2:c0:1c:d5:e6: a2:f2:46:93:96:c4:43:1b:bb:9b:ef:93:19:89:9b:33:37:3a: f0:98:3e:40:43:fc:35:25:1c:3c:52:e3:11:b2:f6:b0:e1:8a: 33:2e:63:b3:2f:ab:88:7f:93:d1:af:db:3d:7f:d1:31:f0:c6: c3:18:3c:e4:5e:5b:ba:24:eb:2b:00:94:21:50:8b:db:09:b1: 75:c5:01:15:5b:41:0f:b3:ba:5e:85:b8:80:03:65:d0:ae:96: 28:c2:95:43:e9:ef:58:22:29:4c:10:c0:46:b7:1f:e5:a6:75: 49:06:11:35:bd:3c:b7:b7:97:cf:2e:75:03:82:ca:c4:75:3c: ad:28:b8:f9:d3:f5:36:2c:76:b6:a9:88:bc:3d:c4:9b:4b:8a: 8e:40:93:92:8c:28:4c:3e:25:3c:26:e4:ea:98:33:11:cb:45: da:c9:6c:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE371e5Y1JNMKDeAKUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2EzYzc0MGMtNjdkMy00N2VkLWI0M2QtOWJkOTFiMzFj ZGIxMB4XDTI2MDUyODEzMDAxMloXDTI2MDgyNjEzMDAxMlowLzEtMCsGA1UEAxMk MzgxOTFlYzYtYmEwNy00MjJmLTg0ZjYtNmZiM2EwYzE2ZTY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzEXcOTvnAU7Gfgg8OJvyJfOeLpzXfMIqKx4S O7puIH5UQ+r87yyga6shSzJb7xGl5/Bmkc5NX5lJOcYzPHYhlaMz6fn4oybF5w4T +U3OWkkNCZho3FC00WbkLt/8V+sgAH034QVo5sBC502uNLVuH4qCWVvD/6nRQqHM 3Oiw1ByKDL0NDoz3wXlxXo1DHoFCUEx3nlcVDpppYpP4NCLt+qOaYqjGNWsv/JH+ 6v33SQAvATGi+Ml1XLNRDeXUzGVU0weWSPcy/Wsl3H6EhI/b46EJhaJGU1+ZlRDA M62XxEIMvP3YeUkKxhzOx+YjMiuB70lxm9OJJgtWTEg+gSW9DQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIqS18C4l3ZvLsfhluMgcsD6BsRRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9jYTNj NzQwYy02N2QzLTQ3ZWQtYjQzZC05YmQ5MWIzMWNkYjEvOGNmYjQwMWQtYTIzNS0z MjU5LTlmYzMtMTYwNjY0YjgwMjlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvY2EzYzc0MGMtNjdkMy00N2VkLWI0 M2QtOWJkOTFiMzFjZGIxL2NhM2M3NDBjLTY3ZDMtNDdlZC1iNDNkLTliZDkxYjMx Y2RiMS5jcmwwHwYDVR0jBBgwFoAUV6JH2vWEg5cMTVWgBYJOPoytPCgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy My1iMzllLWEzYzdkYWI5N2MyNS9jYTNjNzQwYy02N2QzLTQ3ZWQtYjQzZC05YmQ5 MWIzMWNkYjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF/eDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJBXiEHOhw1JRTANMSF0TPKfBA3pzF9vxEZRpxsdh15a/ORXii/cS7i4 2DJ6lFQPq8+EtJmvTcEFXGZP4ZNtz70WA6x1lTuVoOTQvVLipP1bAoHFSGPCwBzV 5qLyRpOWxEMbu5vvkxmJmzM3OvCYPkBD/DUlHDxS4xGy9rDhijMuY7Mvq4h/k9Gv 2z1/0THwxsMYPOReW7ok6ysAlCFQi9sJsXXFARVbQQ+zul6FuIADZdCulijClUPp 71giKUwQwEa3H+WmdUkGETW9PLe3l88udQOCysR1PK0ouPnT9TYsdrapiLw9xJtL io5Ak5KMKEw+JTwm5OqYMxHLRdrJbMM= -----END CERTIFICATE-----Generated at Tue Jun 2 21:51:54 2026 by rpki-client