$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4009d93a-d9e7-4eb7-94cd-ffec0618c3ec/394d8786-185c-3bfb-9e5a-2a4a57146ab1.roa File: 394d8786-185c-3bfb-9e5a-2a4a57146ab1.roa (raw, json) Hash identifier: p92d3cZCd6+jlqc38sHakyqHisU3J1yRZhzFpnmGUyU= Subject key identifier: AD:2B:FB:FC:E1:2F:E6:FE:3B:E6:69:97:0B:A6:0F:BD:2D:E1:3E:EE Certificate issuer: /CN=4009d93a-d9e7-4eb7-94cd-ffec0618c3ec Certificate serial: 010D0C9F4328584D65151AAFB5F50E1AA143BA80 Authority key identifier: D9:29:B8:E6:CC:D4:23:43:46:47:89:33:97:4A:24:76:99:8C:AB:72 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4009d93a-d9e7-4eb7-94cd-ffec0618c3ec.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4009d93a-d9e7-4eb7-94cd-ffec0618c3ec/394d8786-185c-3bfb-9e5a-2a4a57146ab1.roa Signing time: Sat 04 Apr 2026 13:00:29 +0000 ROA not before: Sat 04 Apr 2026 13:00:29 +0000 ROA not after: Fri 03 Jul 2026 13:00:29 +0000 asID: 63072 IP address blocks: 23.135.176.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4009d93a-d9e7-4eb7-94cd-ffec0618c3ec/4009d93a-d9e7-4eb7-94cd-ffec0618c3ec.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4009d93a-d9e7-4eb7-94cd-ffec0618c3ec/4009d93a-d9e7-4eb7-94cd-ffec0618c3ec.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4009d93a-d9e7-4eb7-94cd-ffec0618c3ec.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:65:15:1a:af:b5:f5:0e:1a:a1:43:ba:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4009d93a-d9e7-4eb7-94cd-ffec0618c3ec Validity Not Before: Apr 4 13:00:29 2026 GMT Not After : Jul 3 13:00:29 2026 GMT Subject: CN=729c5dc5-b104-48dd-91e3-2840629fc4e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:3b:2b:3f:36:e3:2a:81:32:84:9a:6b:82:b4: 05:4e:ec:95:49:f5:e3:a3:ea:7f:6f:58:ae:83:35: a0:3a:22:43:b3:90:bb:36:ec:9b:92:29:c3:d2:79: 3c:97:13:15:b2:5c:48:91:a7:62:79:fa:80:65:d5: 99:e1:64:5d:81:59:f3:7f:89:82:0b:5c:83:0d:d6: 1d:e5:86:8d:38:44:85:95:f4:69:9a:09:ba:b7:cb: 52:99:b8:c4:e9:7c:8a:f8:8b:37:83:2e:72:58:07: b3:95:f8:3c:f6:39:b8:21:8f:49:75:c7:c6:36:18: 12:8c:31:26:74:54:0a:b7:c7:91:0e:43:9e:10:22: 0b:bf:b8:06:76:47:ff:b7:9c:f8:5b:0f:9f:5d:52: 59:40:89:2b:73:0e:31:42:c2:39:2d:ab:e8:cf:52: a8:de:85:2d:f0:02:1b:b9:0e:82:b1:55:6d:8a:cf: 48:e9:58:50:15:d9:fd:18:d5:35:fe:63:86:f6:ad: c2:66:58:dc:f8:bc:aa:b6:0b:c8:84:fe:c5:39:32: c8:ef:62:46:36:71:bf:9d:11:e9:aa:c1:47:bc:dd: 48:ce:04:31:38:af:b0:6a:6f:0b:bc:fe:eb:34:f0: 4e:c0:ea:1b:56:ad:03:ac:85:59:62:25:9b:68:f7: 43:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:2B:FB:FC:E1:2F:E6:FE:3B:E6:69:97:0B:A6:0F:BD:2D:E1:3E:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4009d93a-d9e7-4eb7-94cd-ffec0618c3ec/394d8786-185c-3bfb-9e5a-2a4a57146ab1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4009d93a-d9e7-4eb7-94cd-ffec0618c3ec/4009d93a-d9e7-4eb7-94cd-ffec0618c3ec.crl X509v3 Authority Key Identifier: keyid:D9:29:B8:E6:CC:D4:23:43:46:47:89:33:97:4A:24:76:99:8C:AB:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4009d93a-d9e7-4eb7-94cd-ffec0618c3ec.cer sbgp-ipAddrBlock: critical IPv4: 23.135.176.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:ae:01:f9:16:2d:69:01:e1:a3:15:f9:52:d7:ac:09:65:22: 5b:69:c6:f3:49:e2:38:d8:25:8b:9e:a5:97:c8:dc:39:66:c4: e9:f2:9d:2e:28:f5:15:bb:cc:4d:ab:38:2d:9f:8a:fe:2e:b7: 70:38:87:6a:4f:03:fe:c5:db:36:ac:2b:7c:bd:e7:81:31:b2: 76:e1:75:42:c2:8d:50:89:ef:47:06:d9:b8:a3:be:1e:15:00: 2b:55:d9:76:82:94:bf:37:ba:a6:f6:03:e7:37:dd:0f:09:c4: a0:90:90:7d:ab:86:87:25:52:05:0d:d2:93:16:eb:41:18:52: 98:f8:0a:8f:21:8f:66:99:6c:f4:a5:8c:9b:0a:cc:84:43:ae: 75:8b:e1:99:51:2a:18:e3:7a:36:75:07:e1:d3:c8:d3:c7:0a: c1:1c:40:0f:63:81:3c:fa:6a:aa:b5:b1:15:d4:57:41:62:1f: 00:80:a5:d9:0a:80:ec:76:ea:00:3c:91:49:8f:cd:b1:e0:9f: a9:52:e4:8c:17:60:d1:e0:8b:4e:cb:28:0a:72:7e:2c:22:d9: 4e:91:55:ba:d0:a9:f8:bb:2e:4b:eb:1d:87:e4:95:9f:9d:09: 36:09:b8:b2:7a:79:e4:d3:6f:da:9a:25:1c:e9:21:0b:dc:d9: fd:4e:97:6d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1lFRqvtfUOGqFDuoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDAwOWQ5M2EtZDllNy00ZWI3LTk0Y2QtZmZlYzA2MThj M2VjMB4XDTI2MDQwNDEzMDAyOVoXDTI2MDcwMzEzMDAyOVowLzEtMCsGA1UEAxMk NzI5YzVkYzUtYjEwNC00OGRkLTkxZTMtMjg0MDYyOWZjNGUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7zsrPzbjKoEyhJprgrQFTuyVSfXjo+p/b1iu gzWgOiJDs5C7NuybkinD0nk8lxMVslxIkadiefqAZdWZ4WRdgVnzf4mCC1yDDdYd 5YaNOESFlfRpmgm6t8tSmbjE6XyK+Is3gy5yWAezlfg89jm4IY9JdcfGNhgSjDEm dFQKt8eRDkOeECILv7gGdkf/t5z4Ww+fXVJZQIkrcw4xQsI5Lavoz1Ko3oUt8AIb uQ6CsVVtis9I6VhQFdn9GNU1/mOG9q3CZljc+LyqtgvIhP7FOTLI72JGNnG/nRHp qsFHvN1IzgQxOK+wam8LvP7rNPBOwOobVq0DrIVZYiWbaPdD0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK0r+/zhL+b+O+ZplwumD70t4T7uMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80MDA5 ZDkzYS1kOWU3LTRlYjctOTRjZC1mZmVjMDYxOGMzZWMvMzk0ZDg3ODYtMTg1Yy0z YmZiLTllNWEtMmE0YTU3MTQ2YWIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNDAwOWQ5M2EtZDllNy00ZWI3LTk0 Y2QtZmZlYzA2MThjM2VjLzQwMDlkOTNhLWQ5ZTctNGViNy05NGNkLWZmZWMwNjE4 YzNlYy5jcmwwHwYDVR0jBBgwFoAU2Sm45szUI0NGR4kzl0okdpmMq3IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS80MDA5ZDkzYS1kOWU3LTRlYjctOTRjZC1mZmVj MDYxOGMzZWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4ewMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFyuAfkWLWkB4aMV+VLXrAllIltpxvNJ4jjYJYuepZfI3DlmxOnynS4o 9RW7zE2rOC2fiv4ut3A4h2pPA/7F2zasK3y954ExsnbhdULCjVCJ70cG2bijvh4V ACtV2XaClL83uqb2A+c33Q8JxKCQkH2rhoclUgUN0pMW60EYUpj4Co8hj2aZbPSl jJsKzIRDrnWL4ZlRKhjjejZ1B+HTyNPHCsEcQA9jgTz6aqq1sRXUV0FiHwCApdkK gOx26gA8kUmPzbHgn6lS5IwXYNHgi07LKApyfiwi2U6RVbrQqfi7LkvrHYfklZ+d CTYJuLJ6eeTTb9qaJRzpIQvc2f1Ol20= -----END CERTIFICATE-----Generated at Thu Apr 9 02:27:16 2026 by rpki-client