$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0f24aff1-87f5-4ba7-be1d-e6e87e0a6605/47f343a5-66f2-355b-ad3a-39552a632287.roa File: 47f343a5-66f2-355b-ad3a-39552a632287.roa (raw, json) Hash identifier: Grf9XXCd2oq/6O6yTedyAJkJ4INiecJ1BUgmpxdimms= Subject key identifier: A4:C7:1E:87:DC:AB:6C:60:8F:18:69:9E:17:83:EF:37:E8:AD:8A:77 Certificate issuer: /CN=0f24aff1-87f5-4ba7-be1d-e6e87e0a6605 Certificate serial: 010D0C9F4328584CA75C6F0AFA7B83E98C636D40 Authority key identifier: 9C:8A:68:F5:7C:D3:47:5B:14:F0:63:E0:7E:00:C0:10:B6:BB:01:2D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0f24aff1-87f5-4ba7-be1d-e6e87e0a6605.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0f24aff1-87f5-4ba7-be1d-e6e87e0a6605/47f343a5-66f2-355b-ad3a-39552a632287.roa Signing time: Mon 26 Jan 2026 14:00:41 +0000 ROA not before: Mon 26 Jan 2026 14:00:41 +0000 ROA not after: Sun 26 Apr 2026 13:00:41 +0000 asID: 27172 IP address blocks: 23.139.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0f24aff1-87f5-4ba7-be1d-e6e87e0a6605/0f24aff1-87f5-4ba7-be1d-e6e87e0a6605.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0f24aff1-87f5-4ba7-be1d-e6e87e0a6605/0f24aff1-87f5-4ba7-be1d-e6e87e0a6605.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0f24aff1-87f5-4ba7-be1d-e6e87e0a6605.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Feb 2026 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:a7:5c:6f:0a:fa:7b:83:e9:8c:63:6d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f24aff1-87f5-4ba7-be1d-e6e87e0a6605 Validity Not Before: Jan 26 14:00:41 2026 GMT Not After : Apr 26 13:00:41 2026 GMT Subject: CN=aa24e63a-6d07-4024-8270-d7e2647c6072 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:21:fd:6c:25:e6:a8:8f:9d:16:27:a4:ec:31: 51:bd:79:26:74:97:d2:42:b0:e1:b6:f3:61:0e:dc: 53:05:63:e8:39:b4:c0:00:13:22:5f:91:c8:79:25: 46:c6:3c:f2:93:8a:77:dd:b0:56:44:66:c1:e8:a8: c8:9e:30:03:bb:09:d4:66:94:48:b2:63:8f:9d:92: e5:67:9b:52:cb:d2:c5:d3:34:5d:9c:19:51:b6:c8: 19:1d:e6:af:91:40:e3:cf:f7:1b:94:75:56:7b:7e: b7:10:be:2b:77:48:ce:10:f7:98:ca:8d:83:2b:53: 12:3c:35:2e:bf:ac:9c:10:e1:c8:41:cf:d1:60:7c: 49:ed:3a:8e:20:35:3d:2d:b7:4b:20:d3:6f:8c:f7: 9a:6d:b3:3b:2f:83:a1:1f:37:3e:ac:e2:2c:b7:f7: a7:94:ba:72:86:a1:50:ca:56:d1:ed:c0:c0:c9:c1: 56:27:6c:c6:b3:90:ea:a8:dd:67:ee:77:3d:93:6f: 6d:57:08:4b:48:7e:40:3c:55:20:28:c2:58:95:fe: a1:de:24:fc:db:92:ce:04:c4:20:6f:59:00:ac:b8: 8a:85:0e:f8:2d:3a:71:64:86:db:27:ae:32:6a:4a: e9:69:3e:60:e8:6f:17:3e:c2:c4:ed:e7:15:73:bc: 07:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:C7:1E:87:DC:AB:6C:60:8F:18:69:9E:17:83:EF:37:E8:AD:8A:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0f24aff1-87f5-4ba7-be1d-e6e87e0a6605/47f343a5-66f2-355b-ad3a-39552a632287.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0f24aff1-87f5-4ba7-be1d-e6e87e0a6605/0f24aff1-87f5-4ba7-be1d-e6e87e0a6605.crl X509v3 Authority Key Identifier: keyid:9C:8A:68:F5:7C:D3:47:5B:14:F0:63:E0:7E:00:C0:10:B6:BB:01:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0f24aff1-87f5-4ba7-be1d-e6e87e0a6605.cer sbgp-ipAddrBlock: critical IPv4: 23.139.140.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:17:0a:2c:ba:53:81:5e:91:9b:45:4a:e4:1e:8a:1e:46:de: cc:5d:3b:d0:4d:e9:23:19:29:f9:96:42:ef:58:94:46:29:6f: 0e:81:46:12:32:a3:23:b6:34:ad:2f:2b:80:1d:2e:e0:e7:e3: 4f:bd:1f:5d:92:ed:62:83:b8:d9:d1:e6:4a:f5:95:ee:85:ff: 6b:40:e1:c5:63:27:13:98:5f:b5:35:7e:7f:0b:84:4d:f0:a0: b5:17:cb:c3:cd:07:db:c7:08:2d:7a:cd:31:1b:47:9c:1e:62: d7:96:51:00:fa:61:07:34:4f:3f:46:7d:00:8a:7a:93:ed:5d: 0d:b3:07:56:3d:c5:94:c5:a5:c7:02:7b:7e:40:74:86:2c:26: 80:88:1e:d4:a6:36:d3:b2:ff:f0:cd:b9:57:e1:56:0c:e3:63: 86:bb:d8:b5:7b:35:b8:e2:d7:6e:49:c6:c4:4f:2b:37:f8:da: 2d:cb:61:36:39:47:c1:2c:ef:51:af:53:30:a6:63:d9:71:74: c0:f9:8b:c9:9a:c6:f5:fb:e1:1e:54:6c:d2:c1:a0:c8:ef:8e: f6:2e:58:09:55:28:8b:8a:21:3e:15:61:9f:c4:5c:18:47:0c: 82:03:47:4e:7f:06:47:17:3e:f7:bf:eb:44:fa:0c:c2:68:c3: 94:5f:9a:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEynXG8K+nuD6YxjbUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGYyNGFmZjEtODdmNS00YmE3LWJlMWQtZTZlODdlMGE2 NjA1MB4XDTI2MDEyNjE0MDA0MVoXDTI2MDQyNjEzMDA0MVowLzEtMCsGA1UEAxMk YWEyNGU2M2EtNmQwNy00MDI0LTgyNzAtZDdlMjY0N2M2MDcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApiH9bCXmqI+dFiek7DFRvXkmdJfSQrDhtvNh DtxTBWPoObTAABMiX5HIeSVGxjzyk4p33bBWRGbB6KjInjADuwnUZpRIsmOPnZLl Z5tSy9LF0zRdnBlRtsgZHeavkUDjz/cblHVWe363EL4rd0jOEPeYyo2DK1MSPDUu v6ycEOHIQc/RYHxJ7TqOIDU9LbdLINNvjPeabbM7L4OhHzc+rOIst/enlLpyhqFQ ylbR7cDAycFWJ2zGs5DqqN1n7nc9k29tVwhLSH5APFUgKMJYlf6h3iT825LOBMQg b1kArLiKhQ74LTpxZIbbJ64yakrpaT5g6G8XPsLE7ecVc7wHyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKTHHofcq2xgjxhpnheD7zforYp3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8wZjI0 YWZmMS04N2Y1LTRiYTctYmUxZC1lNmU4N2UwYTY2MDUvNDdmMzQzYTUtNjZmMi0z NTViLWFkM2EtMzk1NTJhNjMyMjg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMGYyNGFmZjEtODdmNS00YmE3LWJl MWQtZTZlODdlMGE2NjA1LzBmMjRhZmYxLTg3ZjUtNGJhNy1iZTFkLWU2ZTg3ZTBh NjYwNS5jcmwwHwYDVR0jBBgwFoAUnIpo9XzTR1sU8GPgfgDAELa7AS0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8wZjI0YWZmMS04N2Y1LTRiYTctYmUxZC1lNmU4 N2UwYTY2MDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4uMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIoXCiy6U4FekZtFSuQeih5G3sxdO9BN6SMZKfmWQu9YlEYpbw6BRhIy oyO2NK0vK4AdLuDn40+9H12S7WKDuNnR5kr1le6F/2tA4cVjJxOYX7U1fn8LhE3w oLUXy8PNB9vHCC16zTEbR5weYteWUQD6YQc0Tz9GfQCKepPtXQ2zB1Y9xZTFpccC e35AdIYsJoCIHtSmNtOy//DNuVfhVgzjY4a72LV7Nbji125JxsRPKzf42i3LYTY5 R8Es71GvUzCmY9lxdMD5i8maxvX74R5UbNLBoMjvjvYuWAlVKIuKIT4VYZ/EXBhH DIIDR05/BkcXPve/60T6DMJow5Rfmuk= -----END CERTIFICATE-----Generated at Thu Feb 26 12:01:16 2026 by rpki-client