$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/650afc4b-a3fd-482c-9b5f-6e8c732568ab/b4acf39b-529d-3507-b6a7-c216868daffb.roa File: b4acf39b-529d-3507-b6a7-c216868daffb.roa (raw, json) Hash identifier: nzCTYEeqhkmWqhYd3Q60PUbggs595jgBxPXLAc+zfDQ= Subject key identifier: 0B:4C:5C:71:37:0E:E4:F2:6E:72:71:96:A1:3B:4F:65:E4:73:1A:EE Certificate issuer: /CN=650afc4b-a3fd-482c-9b5f-6e8c732568ab Certificate serial: 010D0C9F4328584D2BDA2668675914F4C1CB9D40 Authority key identifier: E8:7A:F1:C7:EC:C2:87:49:8F:CA:84:8F:EA:DB:1F:CB:05:B1:1D:F8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/650afc4b-a3fd-482c-9b5f-6e8c732568ab.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/650afc4b-a3fd-482c-9b5f-6e8c732568ab/b4acf39b-529d-3507-b6a7-c216868daffb.roa Signing time: Sun 15 Mar 2026 01:00:32 +0000 ROA not before: Sun 15 Mar 2026 01:00:32 +0000 ROA not after: Sat 13 Jun 2026 01:00:32 +0000 asID: 400540 IP address blocks: 23.154.124.0/24 maxlen: 24 2602:f857::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/650afc4b-a3fd-482c-9b5f-6e8c732568ab/650afc4b-a3fd-482c-9b5f-6e8c732568ab.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/650afc4b-a3fd-482c-9b5f-6e8c732568ab/650afc4b-a3fd-482c-9b5f-6e8c732568ab.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/650afc4b-a3fd-482c-9b5f-6e8c732568ab.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 24 Mar 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:2b:da:26:68:67:59:14:f4:c1:cb:9d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=650afc4b-a3fd-482c-9b5f-6e8c732568ab Validity Not Before: Mar 15 01:00:32 2026 GMT Not After : Jun 13 01:00:32 2026 GMT Subject: CN=a339b667-b6d5-42fe-b67e-a6efc17238c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:e0:ab:50:8a:50:72:0b:b9:fe:8d:26:66:06: fb:e0:7d:1a:83:1e:07:3e:ab:9d:42:c1:05:3a:60: d8:ab:18:44:79:5d:7a:01:74:a7:05:c4:ed:60:51: fe:06:00:b0:9c:03:b9:e8:58:db:78:ff:f1:1b:eb: c8:19:59:9d:15:0c:5e:5b:1d:b3:0d:6d:d5:67:48: 05:25:3e:6e:c1:ba:ea:c5:c4:a9:87:17:20:94:e4: 99:ef:10:56:6d:20:14:1e:ee:bd:74:6f:55:78:9a: 05:84:cb:52:15:19:b3:45:78:f0:79:20:a7:9a:c1: d3:c8:68:5d:60:7f:fe:52:b7:0a:99:b2:10:43:4b: b0:44:7c:01:a1:b1:91:6b:5f:8d:43:1d:74:82:28: 6e:ca:16:c5:85:73:cb:d7:e6:e3:af:35:19:d9:f3: cc:7a:75:bc:27:91:ce:f6:9b:f4:0f:59:27:f1:f9: 58:b2:77:74:10:de:91:c5:2f:a0:6b:18:1c:88:41: ff:f9:d4:28:55:83:ea:07:1b:3d:3e:17:3d:c5:8a: e0:d9:1d:16:aa:11:be:36:42:ab:bd:6f:90:4d:3c: 92:ec:07:ea:08:03:fc:02:94:bd:d4:ec:91:96:45: c0:99:67:ad:a2:90:f1:8f:24:fa:21:bc:60:df:de: 2c:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:4C:5C:71:37:0E:E4:F2:6E:72:71:96:A1:3B:4F:65:E4:73:1A:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/650afc4b-a3fd-482c-9b5f-6e8c732568ab/b4acf39b-529d-3507-b6a7-c216868daffb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/650afc4b-a3fd-482c-9b5f-6e8c732568ab/650afc4b-a3fd-482c-9b5f-6e8c732568ab.crl X509v3 Authority Key Identifier: keyid:E8:7A:F1:C7:EC:C2:87:49:8F:CA:84:8F:EA:DB:1F:CB:05:B1:1D:F8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/650afc4b-a3fd-482c-9b5f-6e8c732568ab.cer sbgp-ipAddrBlock: critical IPv4: 23.154.124.0/24 IPv6: 2602:f857::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:6e:d5:1e:0e:2f:11:5a:56:9a:fe:18:94:3f:63:c9:54:f3: ef:8f:1b:cc:19:be:d5:60:2f:18:b2:5f:6e:30:2d:da:f7:2e: a5:36:85:74:8a:fd:1f:a0:35:33:1a:75:22:ce:bb:53:c6:fc: 9a:5f:ac:75:c4:6e:b3:ed:c7:9f:73:01:20:5c:18:c8:65:ae: dd:72:aa:d1:e0:f6:36:9b:d0:4c:47:7e:18:a6:e6:bd:25:52: 6d:9e:26:c9:28:10:cb:5f:4c:55:7d:ac:51:35:10:d1:c0:b6: a5:17:b0:30:17:55:8f:9f:4e:2c:ea:a8:14:2a:b4:08:8c:93: 0c:78:f9:be:d1:96:36:58:f3:8f:9d:3c:fc:51:94:e0:2c:9f: b1:14:d8:e9:6d:9f:2d:d1:89:83:fb:4e:df:4c:51:f7:3b:3e: 94:f0:94:57:07:5b:cb:3b:60:07:66:a8:94:51:bc:b5:b6:79: f6:a8:2e:f5:69:cb:74:d6:b2:71:dd:2d:25:a9:6d:24:e9:1e: 21:08:18:9e:93:e4:74:9a:ad:33:26:af:44:1b:9c:a5:b5:1d: 65:fa:b4:47:fd:3a:e1:16:5e:4c:ae:8f:0e:91:34:5e:ba:82: 96:fc:eb:9c:ee:16:47:5f:6e:bf:01:47:6d:04:2f:01:f4:d0: dd:7e:af:9b -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE0r2iZoZ1kU9MHLnUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjUwYWZjNGItYTNmZC00ODJjLTliNWYtNmU4YzczMjU2 OGFiMB4XDTI2MDMxNTAxMDAzMloXDTI2MDYxMzAxMDAzMlowLzEtMCsGA1UEAxMk YTMzOWI2NjctYjZkNS00MmZlLWI2N2UtYTZlZmMxNzIzOGMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnuCrUIpQcgu5/o0mZgb74H0agx4HPqudQsEF OmDYqxhEeV16AXSnBcTtYFH+BgCwnAO56FjbeP/xG+vIGVmdFQxeWx2zDW3VZ0gF JT5uwbrqxcSphxcglOSZ7xBWbSAUHu69dG9VeJoFhMtSFRmzRXjweSCnmsHTyGhd YH/+UrcKmbIQQ0uwRHwBobGRa1+NQx10gihuyhbFhXPL1+bjrzUZ2fPMenW8J5HO 9pv0D1kn8flYsnd0EN6RxS+gaxgciEH/+dQoVYPqBxs9Phc9xYrg2R0WqhG+NkKr vW+QTTyS7AfqCAP8ApS91OyRlkXAmWetopDxjyT6Ibxg394sTQIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFAtMXHE3DuTybnJxlqE7T2XkcxruMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82NTBh ZmM0Yi1hM2ZkLTQ4MmMtOWI1Zi02ZThjNzMyNTY4YWIvYjRhY2YzOWItNTI5ZC0z NTA3LWI2YTctYzIxNjg2OGRhZmZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjUwYWZjNGItYTNmZC00ODJjLTli NWYtNmU4YzczMjU2OGFiLzY1MGFmYzRiLWEzZmQtNDgyYy05YjVmLTZlOGM3MzI1 NjhhYi5jcmwwHwYDVR0jBBgwFoAU6Hrxx+zCh0mPyoSP6tsfywWxHfgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS82NTBhZmM0Yi1hM2ZkLTQ4MmMtOWI1Zi02ZThj NzMyNTY4YWIuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF5p8MA4E AgACMAgDBgAmAvhXADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBkbtUeDi8RWlaa/hiUP2PJVPPvjxvMGb7V YC8Ysl9uMC3a9y6lNoV0iv0foDUzGnUizrtTxvyaX6x1xG6z7cefcwEgXBjIZa7d cqrR4PY2m9BMR34Ypua9JVJtnibJKBDLX0xVfaxRNRDRwLalF7AwF1WPn04s6qgU KrQIjJMMePm+0ZY2WPOPnTz8UZTgLJ+xFNjpbZ8t0YmD+07fTFH3Oz6U8JRXB1vL O2AHZqiUUby1tnn2qC71act01rJx3S0lqW0k6R4hCBiek+R0mq0zJq9EG5yltR1l +rRH/TrhFl5Mro8OkTReuoKW/Ouc7hZHX26/AUdtBC8B9NDdfq+b -----END CERTIFICATE-----Generated at Sun Mar 22 09:29:35 2026 by rpki-client