$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/896f0624-c28d-44c0-93cf-3f879f877518/cde9ce8b-b7f9-3619-9dae-ba2d46cb9395.roa File: cde9ce8b-b7f9-3619-9dae-ba2d46cb9395.roa (raw, json) Hash identifier: SNOePFgR7JSBNnTmsOC4CWAl43ifwKS2lr1QkBzc4lY= Subject key identifier: 49:00:6D:21:A6:97:0F:90:C6:D1:3D:9E:74:13:52:A0:F8:48:E7:08 Certificate issuer: /CN=896f0624-c28d-44c0-93cf-3f879f877518 Certificate serial: 010D0C9F4328584E815F8E38BC77183A94FE0DC0 Authority key identifier: AE:65:9C:F0:57:7D:5C:5C:89:D1:60:E9:01:2F:27:A1:AB:B6:AF:0B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/896f0624-c28d-44c0-93cf-3f879f877518.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/896f0624-c28d-44c0-93cf-3f879f877518/cde9ce8b-b7f9-3619-9dae-ba2d46cb9395.roa Signing time: Wed 15 Jul 2026 09:00:13 +0000 ROA not before: Wed 15 Jul 2026 09:00:13 +0000 ROA not after: Tue 13 Oct 2026 09:00:13 +0000 asID: 400503 IP address blocks: 23.133.56.0/24 maxlen: 24 23.133.57.0/24 maxlen: 24 2602:fbb4::/40 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/896f0624-c28d-44c0-93cf-3f879f877518/896f0624-c28d-44c0-93cf-3f879f877518.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/896f0624-c28d-44c0-93cf-3f879f877518/896f0624-c28d-44c0-93cf-3f879f877518.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/896f0624-c28d-44c0-93cf-3f879f877518.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:81:5f:8e:38:bc:77:18:3a:94:fe:0d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=896f0624-c28d-44c0-93cf-3f879f877518 Validity Not Before: Jul 15 09:00:13 2026 GMT Not After : Oct 13 09:00:13 2026 GMT Subject: CN=d1cb9107-28f6-41a7-8cec-aaca4497590f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:29:ae:b6:fd:0f:88:ed:73:30:39:1a:ab:89: 73:4e:1c:5e:be:64:42:85:99:32:81:5e:f5:44:04: e5:9f:e9:10:53:43:b6:89:d8:30:0c:23:26:75:57: a4:6e:32:ec:e2:b0:d7:fe:a4:c6:e5:8f:2f:13:7a: 7a:01:d4:50:be:c4:a1:68:7b:c3:ce:5f:bd:9e:45: 38:3f:b4:e3:5c:63:96:74:d6:90:56:81:db:58:47: 69:26:e8:a1:c1:3c:d7:7f:2e:84:0b:00:d7:1e:bc: 17:dc:32:1f:b4:88:d9:eb:76:63:9e:c5:d1:e8:05: 2e:29:d1:67:58:7e:41:2e:76:c5:2b:9f:78:17:51: bc:d6:ca:ad:e4:c3:51:9e:96:86:94:8b:b8:c8:02: 9f:e9:e6:e4:42:a7:8a:6a:f6:0b:dd:4b:a9:c0:84: f3:4a:b9:62:df:44:40:9f:c3:0e:db:24:46:84:fa: a5:47:0e:15:cc:b0:5e:58:8c:c8:3c:53:72:cd:29: d2:e5:73:7a:75:5e:fc:c0:6d:08:82:89:d2:4d:b5: 81:8a:fc:fd:48:b5:dc:0e:0e:84:81:99:d2:7d:9f: d8:51:87:d3:82:b7:0b:c5:1d:b5:30:c1:d4:07:cc: a0:9e:98:0e:fe:84:d6:ef:6a:61:74:17:48:78:db: 0c:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:00:6D:21:A6:97:0F:90:C6:D1:3D:9E:74:13:52:A0:F8:48:E7:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/896f0624-c28d-44c0-93cf-3f879f877518/cde9ce8b-b7f9-3619-9dae-ba2d46cb9395.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/896f0624-c28d-44c0-93cf-3f879f877518/896f0624-c28d-44c0-93cf-3f879f877518.crl X509v3 Authority Key Identifier: keyid:AE:65:9C:F0:57:7D:5C:5C:89:D1:60:E9:01:2F:27:A1:AB:B6:AF:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/896f0624-c28d-44c0-93cf-3f879f877518.cer sbgp-ipAddrBlock: critical IPv4: 23.133.56.0/23 IPv6: 2602:fbb4::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:d5:27:dc:8d:f7:6c:70:48:18:1d:1c:56:22:81:fd:ec:39: 95:0d:6e:22:e1:3b:71:3c:5a:07:32:58:94:d3:4e:be:27:70: e5:8a:32:cb:a2:9b:b4:9a:dd:3e:2e:31:af:7a:4d:76:89:86: 0e:a2:d2:49:33:9a:ca:c7:12:6b:5a:ff:ef:5d:64:c6:0f:b4: 30:1a:22:a6:19:96:c0:cc:b7:6a:12:70:9a:16:cf:3e:a7:6f: 8e:6f:90:0e:57:46:8b:9a:43:1c:38:35:cc:29:9e:51:01:e8: d5:31:f9:90:53:cf:2a:9b:09:a5:a9:60:dd:17:3a:3b:65:59: 94:25:df:ab:a6:a9:c6:3b:0a:16:51:27:d0:a6:d7:ce:21:78: fa:ef:55:ca:53:1e:d6:ca:b6:c4:3a:e4:e8:68:a2:c6:44:a0: 30:d9:06:3f:a6:9d:a5:71:25:f3:bc:87:9f:f0:5d:a7:17:e1: 77:a8:88:21:f5:9a:90:f3:93:fe:a7:d2:76:00:82:ac:3c:4b: b0:d7:64:f3:58:41:d9:80:2f:ad:b4:56:3f:c5:0e:cd:96:0f: da:5d:ae:65:61:db:97:43:a9:22:28:5e:65:8d:e2:9c:1f:29: 0d:60:c5:2c:06:5a:00:47:03:63:29:ea:97:e3:da:b9:c0:90: dc:01:73:9f -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE6BX444vHcYOpT+DcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODk2ZjA2MjQtYzI4ZC00NGMwLTkzY2YtM2Y4NzlmODc3 NTE4MB4XDTI2MDcxNTA5MDAxM1oXDTI2MTAxMzA5MDAxM1owLzEtMCsGA1UEAxMk ZDFjYjkxMDctMjhmNi00MWE3LThjZWMtYWFjYTQ0OTc1OTBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsSmutv0PiO1zMDkaq4lzThxevmRChZkygV71 RATln+kQU0O2idgwDCMmdVekbjLs4rDX/qTG5Y8vE3p6AdRQvsShaHvDzl+9nkU4 P7TjXGOWdNaQVoHbWEdpJuihwTzXfy6ECwDXHrwX3DIftIjZ63ZjnsXR6AUuKdFn WH5BLnbFK594F1G81sqt5MNRnpaGlIu4yAKf6ebkQqeKavYL3UupwITzSrli30RA n8MO2yRGhPqlRw4VzLBeWIzIPFNyzSnS5XN6dV78wG0IgonSTbWBivz9SLXcDg6E gZnSfZ/YUYfTgrcLxR21MMHUB8ygnpgO/oTW72phdBdIeNsM+wIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFEkAbSGmlw+QxtE9nnQTUqD4SOcIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OTZm MDYyNC1jMjhkLTQ0YzAtOTNjZi0zZjg3OWY4Nzc1MTgvY2RlOWNlOGItYjdmOS0z NjE5LTlkYWUtYmEyZDQ2Y2I5Mzk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODk2ZjA2MjQtYzI4ZC00NGMwLTkz Y2YtM2Y4NzlmODc3NTE4Lzg5NmYwNjI0LWMyOGQtNDRjMC05M2NmLTNmODc5Zjg3 NzUxOC5jcmwwHwYDVR0jBBgwFoAUrmWc8Fd9XFyJ0WDpAS8noau2rwswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OTZmMDYyNC1jMjhkLTQ0YzAtOTNjZi0zZjg3 OWY4Nzc1MTguY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQBF4U4MA4E AgACMAgDBgAmAvu0ADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCW1SfcjfdscEgYHRxWIoH97DmVDW4i4Ttx PFoHMliU006+J3DlijLLopu0mt0+LjGvek12iYYOotJJM5rKxxJrWv/vXWTGD7Qw GiKmGZbAzLdqEnCaFs8+p2+Ob5AOV0aLmkMcODXMKZ5RAejVMfmQU88qmwmlqWDd Fzo7ZVmUJd+rpqnGOwoWUSfQptfOIXj671XKUx7WyrbEOuToaKLGRKAw2QY/pp2l cSXzvIef8F2nF+F3qIgh9ZqQ85P+p9J2AIKsPEuw12TzWEHZgC+ttFY/xQ7Nlg/a Xa5lYduXQ6kiKF5ljeKcHykNYMUsBloARwNjKeqX49q5wJDcAXOf -----END CERTIFICATE-----Generated at Fri Jul 24 19:50:09 2026 by rpki-client