$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/bfb35758-071b-31cf-8ca8-8b8646b148b0.roa File: bfb35758-071b-31cf-8ca8-8b8646b148b0.roa (raw, json) Hash identifier: TIWxndG+s7/Tr1kjwxWZEjufa16hTlgFCPewJbwZhxs= Subject key identifier: 8A:27:65:AD:83:8D:25:11:00:80:6A:7F:14:2B:E3:F4:BE:B8:1E:3E Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf Certificate serial: 010D0C9F4328584CAE571378EEF718C1B91A2680 Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/bfb35758-071b-31cf-8ca8-8b8646b148b0.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 14618 IP address blocks: 23.239.241.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 22 Feb 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:57:13:78:ee:f7:18:c1:b9:1a:26:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=a6132c04-7232-452f-be2d-ecb731bb003c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:9b:8d:d0:5b:b0:5e:f6:b3:d4:45:df:25:ca: 47:43:01:1b:2f:91:1e:cc:b5:bd:1c:a1:f7:a0:13: 2d:aa:5e:89:a1:7d:a3:76:8b:9c:cb:5f:bb:88:92: 01:7d:e5:a8:3e:37:46:8c:c5:af:e0:16:61:b0:9a: 74:0c:a5:fb:23:c3:7c:bd:a7:9d:ac:ec:80:d4:51: 5c:88:60:8f:57:bb:f0:68:8f:39:17:ea:e3:4c:b5: 7d:bb:4f:5a:02:61:7d:af:28:96:2d:96:cb:c8:9d: 37:83:78:cf:00:82:90:e7:9f:c2:d9:6a:4a:9a:91: 91:5b:33:5e:b0:81:2b:99:3b:54:53:c3:a0:bc:91: ac:17:02:57:e1:80:83:92:8e:b6:dc:17:f1:74:b3: 78:c6:06:c6:4c:fb:db:14:1f:39:74:16:8b:2e:df: 55:58:4e:5e:9f:e8:b3:a3:0f:ac:54:ac:65:10:8e: f4:fd:81:bf:8a:89:6b:1e:22:6d:b1:f4:80:ee:3b: 9d:34:3c:7f:62:bc:3e:65:a1:ef:f3:09:1f:e4:55: ea:62:2f:43:09:ea:0f:d0:46:fb:cb:aa:d0:38:8a: 93:2f:1b:be:73:f4:29:3d:47:49:33:5b:6e:65:87: 5e:5b:e7:af:c2:38:ef:6a:d4:f2:ab:4d:66:4b:41: ea:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:27:65:AD:83:8D:25:11:00:80:6A:7F:14:2B:E3:F4:BE:B8:1E:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/bfb35758-071b-31cf-8ca8-8b8646b148b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl X509v3 Authority Key Identifier: keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer sbgp-ipAddrBlock: critical IPv4: 23.239.241.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a9:84:ed:5f:28:97:5c:e1:a3:5c:34:17:6c:51:7f:a5:8e:be: fa:98:77:84:96:59:81:37:7a:4b:55:d2:95:2b:48:ea:07:f5: af:76:85:ff:a2:46:3c:f6:f3:6d:2c:01:91:e9:5e:46:09:b5: 3d:c0:03:a4:22:20:7c:35:bb:4f:f6:d2:9f:85:ae:ad:6c:96: 8e:fb:b4:b1:31:8a:73:ff:96:26:98:01:ef:78:2a:e9:eb:65: 54:9a:e7:19:8e:e8:da:ba:f7:aa:14:70:d5:35:1f:d9:87:8c: e4:6b:91:1e:c6:d9:79:76:32:67:7f:00:4a:97:e6:37:0d:67: 09:52:cc:1b:55:d0:04:6d:3d:e8:b7:dd:e1:6f:9c:56:20:8d: 7a:0d:5d:f4:c4:d4:5c:b9:fb:4a:72:1b:47:6a:87:07:bd:ae: 57:d3:c0:4e:bf:ce:9a:c7:f6:ca:c6:9f:b8:0b:67:45:a5:ed: 18:90:51:4b:37:31:3a:cd:6e:a7:8a:ee:25:21:cf:f0:83:17: 30:28:c7:91:e7:6a:b9:dd:bb:25:6d:65:a4:62:f0:c4:d2:74: 2f:48:4f:8c:e8:90:6c:69:56:4e:e2:1f:6d:8f:6f:85:26:e3: de:9e:c6:7c:3a:5f:21:39:27:0b:d9:6f:5c:bc:c5:a2:09:ce: ce:5a:cc:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuVxN47vcYwbkaJoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy OWJmMB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk YTYxMzJjMDQtNzIzMi00NTJmLWJlMmQtZWNiNzMxYmIwMDNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtJuN0FuwXvaz1EXfJcpHQwEbL5EezLW9HKH3 oBMtql6JoX2jdoucy1+7iJIBfeWoPjdGjMWv4BZhsJp0DKX7I8N8vaedrOyA1FFc iGCPV7vwaI85F+rjTLV9u09aAmF9ryiWLZbLyJ03g3jPAIKQ55/C2WpKmpGRWzNe sIErmTtUU8OgvJGsFwJX4YCDko623BfxdLN4xgbGTPvbFB85dBaLLt9VWE5en+iz ow+sVKxlEI70/YG/iolrHiJtsfSA7judNDx/Yrw+ZaHv8wkf5FXqYi9DCeoP0Eb7 y6rQOIqTLxu+c/QpPUdJM1tuZYdeW+evwjjvatTyq01mS0HqlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIonZa2DjSURAIBqfxQr4/S+uB4+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2 ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvYmZiMzU3NTgtMDcxYi0z MWNmLThjYTgtOGI4NjQ2YjE0OGIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4 MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx YzIxODI5YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF+/xMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKmE7V8ol1zho1w0F2xRf6WOvvqYd4SWWYE3ektV0pUrSOoH9a92hf+i Rjz2820sAZHpXkYJtT3AA6QiIHw1u0/20p+Frq1slo77tLExinP/liaYAe94Kunr ZVSa5xmO6Nq696oUcNU1H9mHjORrkR7G2Xl2Mmd/AEqX5jcNZwlSzBtV0ARtPei3 3eFvnFYgjXoNXfTE1Fy5+0pyG0dqhwe9rlfTwE6/zprH9srGn7gLZ0Wl7RiQUUs3 MTrNbqeK7iUhz/CDFzAox5HnarnduyVtZaRi8MTSdC9IT4zokGxpVk7iH22Pb4Um 496exnw6XyE5JwvZb1y8xaIJzs5azEA= -----END CERTIFICATE-----Generated at Sat Feb 21 04:54:58 2026 by rpki-client