$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/39bfe4e7-0385-30b6-a037-146aab481977.roa File: 39bfe4e7-0385-30b6-a037-146aab481977.roa (raw, json) Hash identifier: 0EPWVBfAp9ASENBrcRjRS8gxCAYNbweMWYvguVwjSzE= Subject key identifier: 28:FC:2B:0D:11:17:AB:A4:99:D0:EF:8C:54:5D:90:3B:69:CF:67:D5 Certificate issuer: /CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Certificate serial: 010D0C9F4328584CACF1B239DF85332C671915B0 Authority key identifier: 08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/39bfe4e7-0385-30b6-a037-146aab481977.roa Signing time: Wed 28 Jan 2026 14:00:36 +0000 ROA not before: Wed 28 Jan 2026 14:00:36 +0000 ROA not after: Tue 28 Apr 2026 13:00:36 +0000 asID: 31898 IP address blocks: 150.230.20.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Feb 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ac:f1:b2:39:df:85:33:2c:67:19:15:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5cd4320d-4950-4ba6-812c-c1b5318c2e44 Validity Not Before: Jan 28 14:00:36 2026 GMT Not After : Apr 28 13:00:36 2026 GMT Subject: CN=57b44026-d5b0-4e6f-b4d3-26dd80a48da1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:59:87:73:5c:1f:50:0a:4f:98:c6:15:f2:50: 96:77:4b:ca:ac:63:3c:75:1e:74:e2:70:9a:ad:e6: 62:15:e0:24:fe:0f:62:6c:71:a6:92:7c:79:42:08: c7:ce:ef:0e:6b:9a:43:8d:c2:5f:f7:cc:b7:d5:56: 39:f0:8d:2b:51:d9:70:3e:90:16:6c:67:30:f1:52: 37:e9:a6:ba:ef:89:95:6e:60:fd:fd:08:8f:0b:89: 9c:f0:3e:0d:a6:1a:3f:c8:f3:14:9e:73:c0:7b:f7: e2:62:e9:62:8b:29:c3:7e:e1:73:fb:50:03:fa:85: ff:e7:08:ee:6c:f2:7c:c3:3f:b1:90:d8:cf:99:33: 38:31:2f:f6:c9:08:06:bd:97:83:3d:fe:67:dc:54: 2d:cb:f6:18:b5:1e:9e:cc:7b:aa:fb:df:73:97:ba: dd:75:47:8d:8b:e3:06:cd:2b:b3:bb:8b:aa:4e:24: f5:00:10:12:b1:e5:30:f5:e9:dc:39:7a:d0:8d:c9: b0:3a:4d:f4:96:e2:2a:e5:69:12:d6:4e:df:7a:f2: c6:be:0b:a0:7f:fc:a8:bd:51:b9:63:40:e7:66:aa: ea:04:a3:ae:a1:26:e8:98:b8:a8:6a:94:58:7e:ab: 8a:f7:96:11:7d:2a:1c:40:5b:d3:5a:33:a2:66:54: 7d:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:FC:2B:0D:11:17:AB:A4:99:D0:EF:8C:54:5D:90:3B:69:CF:67:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/39bfe4e7-0385-30b6-a037-146aab481977.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44/5cd4320d-4950-4ba6-812c-c1b5318c2e44.crl X509v3 Authority Key Identifier: keyid:08:4B:CB:8F:7B:4B:69:89:A6:7B:98:21:DA:DF:0D:92:67:83:5B:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/5cd4320d-4950-4ba6-812c-c1b5318c2e44.cer sbgp-ipAddrBlock: critical IPv4: 150.230.20.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:9f:1c:d6:1f:72:2c:2c:72:cb:a9:6a:a6:d6:1d:48:97:7b: 46:78:8e:f4:00:ef:c9:6a:08:9f:d3:0b:7d:5f:82:c0:49:ef: 91:2a:dd:fb:b8:64:c4:3f:b8:8c:2c:1f:56:e7:bb:46:4b:3d: 15:e7:6a:0d:75:a0:a9:5f:43:27:a2:df:f1:99:a1:1e:bb:9b: 14:85:fc:a2:82:0b:de:f0:f3:2a:05:57:dc:f9:1b:4d:dd:59: 00:a9:b1:3c:c0:0c:c1:78:1f:14:66:49:94:d0:8f:49:7a:a3: b7:68:c7:97:e8:a1:d6:3c:52:d8:b5:32:a1:da:6e:37:3d:8f: 23:ee:3f:db:ba:53:72:dd:0d:ff:45:21:5a:6b:7f:fc:a5:1c: b4:25:08:01:3d:e5:e9:7a:46:9d:bb:21:51:a5:47:5c:4f:c4: e6:4e:cc:2a:5f:ab:e6:1f:ff:98:0a:e4:82:17:f2:9c:df:5b: 95:10:2f:69:71:cd:2e:c2:fd:b0:28:6c:3e:95:d6:06:99:00: 60:00:dc:6c:76:da:da:1f:1a:5f:11:ab:0a:9a:f0:73:f7:a8: 60:28:33:b9:cd:c0:48:2d:bb:8b:56:a2:30:a6:2c:8c:6f:17: 12:8b:92:1f:a9:dd:7a:24:77:22:99:d4:fb:68:85:4e:1d:1d: ae:12:52:5e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEys8bI534UzLGcZFbAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWNkNDMyMGQtNDk1MC00YmE2LTgxMmMtYzFiNTMxOGMy ZTQ0MB4XDTI2MDEyODE0MDAzNloXDTI2MDQyODEzMDAzNlowLzEtMCsGA1UEAxMk NTdiNDQwMjYtZDViMC00ZTZmLWI0ZDMtMjZkZDgwYTQ4ZGExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtlmHc1wfUApPmMYV8lCWd0vKrGM8dR504nCa reZiFeAk/g9ibHGmknx5QgjHzu8Oa5pDjcJf98y31VY58I0rUdlwPpAWbGcw8VI3 6aa674mVbmD9/QiPC4mc8D4Npho/yPMUnnPAe/fiYuliiynDfuFz+1AD+oX/5wju bPJ8wz+xkNjPmTM4MS/2yQgGvZeDPf5n3FQty/YYtR6ezHuq+99zl7rddUeNi+MG zSuzu4uqTiT1ABASseUw9encOXrQjcmwOk30luIq5WkS1k7fevLGvgugf/yovVG5 Y0DnZqrqBKOuoSbomLioapRYfquK95YRfSocQFvTWjOiZlR9twIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCj8Kw0RF6ukmdDvjFRdkDtpz2fVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0 MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1MzE4YzJlNDQvMzliZmU0ZTctMDM4NS0z MGI2LWEwMzctMTQ2YWFiNDgxOTc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvNWNkNDMyMGQtNDk1MC00YmE2LTgx MmMtYzFiNTMxOGMyZTQ0LzVjZDQzMjBkLTQ5NTAtNGJhNi04MTJjLWMxYjUzMThj MmU0NC5jcmwwHwYDVR0jBBgwFoAUCEvLj3tLaYmme5gh2t8NkmeDW90wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC81Y2Q0MzIwZC00OTUwLTRiYTYtODEyYy1jMWI1 MzE4YzJlNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCluYUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH6fHNYfciwscsupaqbWHUiXe0Z4jvQA78lqCJ/TC31fgsBJ75Eq3fu4 ZMQ/uIwsH1bnu0ZLPRXnag11oKlfQyei3/GZoR67mxSF/KKCC97w8yoFV9z5G03d WQCpsTzADMF4HxRmSZTQj0l6o7dox5foodY8Uti1MqHabjc9jyPuP9u6U3LdDf9F IVprf/ylHLQlCAE95el6Rp27IVGlR1xPxOZOzCpfq+Yf/5gK5IIX8pzfW5UQL2lx zS7C/bAobD6V1gaZAGAA3Gx22tofGl8Rqwqa8HP3qGAoM7nNwEgtu4tWojCmLIxv FxKLkh+p3XokdyKZ1PtohU4dHa4SUl4= -----END CERTIFICATE-----Generated at Thu Feb 26 04:59:41 2026 by rpki-client