$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3b8b33e0-517e-41cb-b3e3-00af3defc90b/31b65189-8eb2-3493-9618-10fee67e4d35.roa File: 31b65189-8eb2-3493-9618-10fee67e4d35.roa (raw, json) Hash identifier: Ay3t+rBAy6faZgN8lvwP/kVYu3n1bYkBA9R5UObiNRw= Subject key identifier: 53:13:17:03:8F:C0:B1:EA:A8:26:C3:8A:63:ED:F6:60:6F:94:E9:6E Certificate issuer: /CN=3b8b33e0-517e-41cb-b3e3-00af3defc90b Certificate serial: 010D0C9F4328584D4BF4ED643FEC13AE5BD24CC0 Authority key identifier: BC:32:2A:02:6C:EB:43:9C:43:AF:C1:25:62:9F:AC:CA:38:1B:D8:C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3b8b33e0-517e-41cb-b3e3-00af3defc90b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3b8b33e0-517e-41cb-b3e3-00af3defc90b/31b65189-8eb2-3493-9618-10fee67e4d35.roa Signing time: Thu 26 Mar 2026 13:00:41 +0000 ROA not before: Thu 26 Mar 2026 13:00:41 +0000 ROA not after: Wed 24 Jun 2026 13:00:41 +0000 asID: 214483 IP address blocks: 23.150.188.0/24 maxlen: 24 2602:f4af::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3b8b33e0-517e-41cb-b3e3-00af3defc90b/3b8b33e0-517e-41cb-b3e3-00af3defc90b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3b8b33e0-517e-41cb-b3e3-00af3defc90b/3b8b33e0-517e-41cb-b3e3-00af3defc90b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3b8b33e0-517e-41cb-b3e3-00af3defc90b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 15 Apr 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4b:f4:ed:64:3f:ec:13:ae:5b:d2:4c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b8b33e0-517e-41cb-b3e3-00af3defc90b Validity Not Before: Mar 26 13:00:41 2026 GMT Not After : Jun 24 13:00:41 2026 GMT Subject: CN=ec325f56-7191-4575-840f-bec9eadab43f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:cb:62:dc:d2:b4:87:14:24:af:bf:40:80:54: 5a:50:75:2d:1c:98:a4:91:8c:c9:92:b8:ae:d8:1c: 8c:25:d2:89:7e:48:64:9d:b3:05:ba:9f:de:e3:82: bc:3b:d9:0f:12:07:f8:28:42:5c:e1:09:a3:0f:6a: 93:4e:6c:b0:74:79:3e:64:29:f8:85:c8:de:29:1d: 34:8f:ae:99:2a:c6:d0:50:3e:44:ad:34:92:67:60: 9a:05:14:1a:02:99:1d:ec:3a:66:70:fd:35:73:f8: f0:56:85:b9:e0:cf:38:df:97:c2:80:7d:5b:dd:35: 1f:65:be:b0:a1:68:e7:d7:ff:cd:7c:dc:8d:41:2d: a9:06:d9:e2:6b:36:78:24:3a:68:b0:53:10:80:34: 84:c6:22:2e:8b:5f:26:c8:9c:f7:6a:65:a1:ae:52: 8e:ef:d2:de:71:fb:1e:f2:f9:e8:52:15:a3:a5:d3: 05:93:ad:07:b3:6f:09:0e:4c:51:70:10:a9:02:b3: d3:e0:f8:a8:dc:1c:62:39:51:e7:d3:12:28:7b:cb: 69:5b:c2:5d:39:93:97:7f:cc:64:37:ab:a6:c4:20: c1:6f:30:eb:4f:7e:3b:6c:e0:c2:07:45:4e:99:41: 1e:da:1c:65:9a:ab:e8:a5:40:ea:eb:30:11:22:8a: b9:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:13:17:03:8F:C0:B1:EA:A8:26:C3:8A:63:ED:F6:60:6F:94:E9:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3b8b33e0-517e-41cb-b3e3-00af3defc90b/31b65189-8eb2-3493-9618-10fee67e4d35.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3b8b33e0-517e-41cb-b3e3-00af3defc90b/3b8b33e0-517e-41cb-b3e3-00af3defc90b.crl X509v3 Authority Key Identifier: keyid:BC:32:2A:02:6C:EB:43:9C:43:AF:C1:25:62:9F:AC:CA:38:1B:D8:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/3b8b33e0-517e-41cb-b3e3-00af3defc90b.cer sbgp-ipAddrBlock: critical IPv4: 23.150.188.0/24 IPv6: 2602:f4af::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:c4:e7:86:30:84:07:57:ca:32:c6:66:b9:f7:55:5e:0e:2c: 03:18:76:0d:1a:db:ae:90:67:d5:9d:89:be:52:61:e3:5c:78: b3:bc:21:0a:40:a5:55:a4:9f:c4:02:d9:64:34:0f:ba:e7:13: 94:21:a8:f0:17:e8:42:fe:ec:29:95:8d:d1:51:57:99:1a:81: 25:c8:28:c5:f6:c1:62:f0:58:27:f8:a1:a9:55:c3:62:6f:25: 20:30:d8:7c:96:f7:66:09:da:81:2d:46:ae:fe:9c:b2:cd:05: a6:6b:3b:1c:3c:f1:b0:45:fe:14:3e:01:0a:f5:67:c9:ba:3c: 14:c6:e3:8a:ef:4d:ed:31:93:3e:2b:20:ba:2d:08:a2:c1:56: 94:47:56:16:9b:af:e6:20:a5:e8:02:03:ae:47:13:1c:9c:dc: 49:fa:c8:ed:bb:4b:a2:ff:bc:06:9b:91:70:39:9c:85:15:11: fd:29:85:6f:e1:d8:77:a9:05:f4:7d:89:c0:0e:53:f1:07:3c: 47:2c:29:12:b9:c5:4a:b4:19:4f:94:eb:50:50:44:a1:f9:71: d3:9b:79:c6:11:f1:0f:62:c3:4d:39:f7:75:f4:8f:0b:29:0c: 24:e5:c2:99:23:91:bf:88:f2:ef:b7:4a:b4:5c:b0:3b:18:11: 9d:83:9b:4c -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE1L9O1kP+wTrlvSTMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2I4YjMzZTAtNTE3ZS00MWNiLWIzZTMtMDBhZjNkZWZj OTBiMB4XDTI2MDMyNjEzMDA0MVoXDTI2MDYyNDEzMDA0MVowLzEtMCsGA1UEAxMk ZWMzMjVmNTYtNzE5MS00NTc1LTg0MGYtYmVjOWVhZGFiNDNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhcti3NK0hxQkr79AgFRaUHUtHJikkYzJkriu 2ByMJdKJfkhknbMFup/e44K8O9kPEgf4KEJc4QmjD2qTTmywdHk+ZCn4hcjeKR00 j66ZKsbQUD5ErTSSZ2CaBRQaApkd7DpmcP01c/jwVoW54M8435fCgH1b3TUfZb6w oWjn1//NfNyNQS2pBtniazZ4JDposFMQgDSExiIui18myJz3amWhrlKO79Lecfse 8vnoUhWjpdMFk60Hs28JDkxRcBCpArPT4Pio3BxiOVHn0xIoe8tpW8JdOZOXf8xk N6umxCDBbzDrT347bODCB0VOmUEe2hxlmqvopUDq6zARIoq5fwIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFFMTFwOPwLHqqCbDimPt9mBvlOluMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8zYjhi MzNlMC01MTdlLTQxY2ItYjNlMy0wMGFmM2RlZmM5MGIvMzFiNjUxODktOGViMi0z NDkzLTk2MTgtMTBmZWU2N2U0ZDM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvM2I4YjMzZTAtNTE3ZS00MWNiLWIz ZTMtMDBhZjNkZWZjOTBiLzNiOGIzM2UwLTUxN2UtNDFjYi1iM2UzLTAwYWYzZGVm YzkwYi5jcmwwHwYDVR0jBBgwFoAUvDIqAmzrQ5xDr8ElYp+syjgb2MkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi8zYjhiMzNlMC01MTdlLTQxY2ItYjNlMy0wMGFm M2RlZmM5MGIuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF5a8MA4E AgACMAgDBgAmAvSvADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAmxOeGMIQHV8oyxma591VeDiwDGHYNGtuu kGfVnYm+UmHjXHizvCEKQKVVpJ/EAtlkNA+65xOUIajwF+hC/uwplY3RUVeZGoEl yCjF9sFi8Fgn+KGpVcNibyUgMNh8lvdmCdqBLUau/pyyzQWmazscPPGwRf4UPgEK 9WfJujwUxuOK703tMZM+KyC6LQiiwVaUR1YWm6/mIKXoAgOuRxMcnNxJ+sjtu0ui /7wGm5FwOZyFFRH9KYVv4dh3qQX0fYnADlPxBzxHLCkSucVKtBlPlOtQUESh+XHT m3nGEfEPYsNNOfd19I8LKQwk5cKZI5G/iPLvt0q0XLA7GBGdg5tM -----END CERTIFICATE-----Generated at Mon Apr 13 12:06:16 2026 by rpki-client