$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0cf2fac2-d352-4204-9b53-f2d7e4684cce/3669ecca-f135-306c-9018-d762944294a1.roa File: 3669ecca-f135-306c-9018-d762944294a1.roa (raw, json) Hash identifier: TYRM9xl4fP18NJzwGzNXyW1JdLcss944X3H6hhd/Gz8= Subject key identifier: DB:B4:7D:60:D2:4B:BC:67:08:43:88:6F:A1:8F:64:29:81:EE:A6:AE Certificate issuer: /CN=0cf2fac2-d352-4204-9b53-f2d7e4684cce Certificate serial: 010D0C9F4328584DDD207791C35946B58A746E00 Authority key identifier: EE:6F:64:C0:61:C7:EA:EB:7B:12:8B:45:2F:7F:93:BE:D5:36:CD:13 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0cf2fac2-d352-4204-9b53-f2d7e4684cce.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0cf2fac2-d352-4204-9b53-f2d7e4684cce/3669ecca-f135-306c-9018-d762944294a1.roa Signing time: Sun 17 May 2026 13:00:32 +0000 ROA not before: Sun 17 May 2026 13:00:32 +0000 ROA not after: Sat 15 Aug 2026 13:00:32 +0000 asID: 401990 IP address blocks: 23.145.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0cf2fac2-d352-4204-9b53-f2d7e4684cce/0cf2fac2-d352-4204-9b53-f2d7e4684cce.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0cf2fac2-d352-4204-9b53-f2d7e4684cce/0cf2fac2-d352-4204-9b53-f2d7e4684cce.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0cf2fac2-d352-4204-9b53-f2d7e4684cce.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 29 May 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:dd:20:77:91:c3:59:46:b5:8a:74:6e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0cf2fac2-d352-4204-9b53-f2d7e4684cce Validity Not Before: May 17 13:00:32 2026 GMT Not After : Aug 15 13:00:32 2026 GMT Subject: CN=7867d53f-9657-43f1-938c-b351368843e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:ff:2a:b3:01:65:6b:5a:f1:fc:5f:1a:73:d6: cb:8a:fc:05:ef:94:fc:fc:29:90:ce:dd:88:7a:16: 09:95:b8:6b:b5:a2:0c:0f:af:3e:61:50:14:92:14: cc:b9:1b:89:2e:75:36:6f:5d:2f:c5:b2:9d:22:fc: 57:3d:30:20:8f:9c:45:48:72:d7:5a:41:b0:e4:b2: 8c:7b:1e:04:8e:c0:ce:d4:29:12:af:b4:5d:e0:2f: f3:49:fd:29:2d:34:26:42:69:0f:11:34:bf:df:e0: 90:de:b4:b5:3a:82:f8:29:2d:ab:60:4b:b1:df:f9: 05:f1:da:6f:2b:8a:1e:b9:c1:d0:12:b9:01:4d:ab: e0:4f:10:7d:d8:5d:56:49:c2:44:56:82:47:b9:de: ba:27:06:2e:d8:d1:f3:83:8c:fc:49:f7:38:83:e2: c0:7d:91:38:3a:03:06:8a:d5:52:72:38:df:ac:d2: 6f:bd:f6:1c:ed:5a:5d:55:c7:58:58:fd:69:2f:cd: 83:50:93:7d:ef:6d:2b:1e:8a:f1:11:1e:42:cf:d1: f5:99:ab:98:97:29:e6:9a:36:e5:91:e3:bd:a4:72: 09:5d:f6:6e:92:ef:4a:3f:6a:2c:d9:43:a0:61:92: 20:47:c8:54:d8:07:5e:63:2f:ed:e6:3a:15:5e:93: fd:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:B4:7D:60:D2:4B:BC:67:08:43:88:6F:A1:8F:64:29:81:EE:A6:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0cf2fac2-d352-4204-9b53-f2d7e4684cce/3669ecca-f135-306c-9018-d762944294a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0cf2fac2-d352-4204-9b53-f2d7e4684cce/0cf2fac2-d352-4204-9b53-f2d7e4684cce.crl X509v3 Authority Key Identifier: keyid:EE:6F:64:C0:61:C7:EA:EB:7B:12:8B:45:2F:7F:93:BE:D5:36:CD:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/0cf2fac2-d352-4204-9b53-f2d7e4684cce.cer sbgp-ipAddrBlock: critical IPv4: 23.145.212.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:b7:58:1a:8f:b8:0c:46:d2:fa:2f:dc:ce:c5:dc:0b:9a:49: 11:7b:e2:02:2d:55:1d:2c:81:00:c8:8e:65:79:24:93:fe:68: b0:4d:0d:f7:54:0e:be:7d:a5:e5:6d:60:0a:53:22:12:e7:9c: 64:6e:0c:56:0b:b1:75:cf:4b:b7:12:84:5d:de:5a:a4:4d:f6: c5:33:df:7c:ca:d1:73:a5:78:43:5d:d7:ab:47:06:be:68:0b: 8b:55:6a:ce:2d:04:32:5c:0b:a4:14:75:90:1a:c7:15:6c:44: 19:a7:23:0d:d7:e8:ac:64:e3:9d:0b:41:b1:58:56:7a:7b:1f: b5:eb:15:67:db:d7:91:d4:2b:4c:47:90:79:62:69:c1:6b:08: 2c:22:e1:bd:fe:b1:8e:3a:03:bb:63:d2:53:9f:7e:05:f2:4b: fc:7a:de:fd:b4:ec:6c:b0:30:07:ed:48:66:a7:ce:cd:b1:78: 02:90:e8:5c:b9:89:9a:31:d3:c7:8b:76:b6:75:ef:8f:1f:34: fe:55:80:4e:73:56:59:73:3f:0f:cc:d9:c8:3f:38:4b:b6:8b: 0b:70:e4:3e:d0:56:f0:8b:aa:8c:b8:a5:b9:46:8a:6e:eb:e4: 73:79:f4:1c:67:3d:0a:96:fd:10:04:db:7a:7d:9c:40:be:0e: 03:b0:f3:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3dIHeRw1lGtYp0bgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGNmMmZhYzItZDM1Mi00MjA0LTliNTMtZjJkN2U0Njg0 Y2NlMB4XDTI2MDUxNzEzMDAzMloXDTI2MDgxNTEzMDAzMlowLzEtMCsGA1UEAxMk Nzg2N2Q1M2YtOTY1Ny00M2YxLTkzOGMtYjM1MTM2ODg0M2UxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArf8qswFla1rx/F8ac9bLivwF75T8/CmQzt2I ehYJlbhrtaIMD68+YVAUkhTMuRuJLnU2b10vxbKdIvxXPTAgj5xFSHLXWkGw5LKM ex4EjsDO1CkSr7Rd4C/zSf0pLTQmQmkPETS/3+CQ3rS1OoL4KS2rYEux3/kF8dpv K4oeucHQErkBTavgTxB92F1WScJEVoJHud66JwYu2NHzg4z8Sfc4g+LAfZE4OgMG itVScjjfrNJvvfYc7VpdVcdYWP1pL82DUJN9720rHorxER5Cz9H1mauYlynmmjbl keO9pHIJXfZuku9KP2os2UOgYZIgR8hU2AdeYy/t5joVXpP9iQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNu0fWDSS7xnCEOIb6GPZCmB7qauMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8wY2Yy ZmFjMi1kMzUyLTQyMDQtOWI1My1mMmQ3ZTQ2ODRjY2UvMzY2OWVjY2EtZjEzNS0z MDZjLTkwMTgtZDc2Mjk0NDI5NGExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvMGNmMmZhYzItZDM1Mi00MjA0LTli NTMtZjJkN2U0Njg0Y2NlLzBjZjJmYWMyLWQzNTItNDIwNC05YjUzLWYyZDdlNDY4 NGNjZS5jcmwwHwYDVR0jBBgwFoAU7m9kwGHH6ut7EotFL3+TvtU2zRMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC8wY2YyZmFjMi1kMzUyLTQyMDQtOWI1My1mMmQ3 ZTQ2ODRjY2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5HUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJC3WBqPuAxG0vov3M7F3AuaSRF74gItVR0sgQDIjmV5JJP+aLBNDfdU Dr59peVtYApTIhLnnGRuDFYLsXXPS7cShF3eWqRN9sUz33zK0XOleENd16tHBr5o C4tVas4tBDJcC6QUdZAaxxVsRBmnIw3X6Kxk450LQbFYVnp7H7XrFWfb15HUK0xH kHliacFrCCwi4b3+sY46A7tj0lOffgXyS/x63v207GywMAftSGanzs2xeAKQ6Fy5 iZox08eLdrZ1748fNP5VgE5zVllzPw/M2cg/OEu2iwtw5D7QVvCLqoy4pblGim7r 5HN59BxnPQqW/RAE23p9nEC+DgOw8ys= -----END CERTIFICATE-----Generated at Thu May 28 15:30:49 2026 by rpki-client