$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c0311fc7-1b9e-4472-8780-7822d83e32fc/ebd0e856-ec93-3f1e-9309-c1f054d9d8f1.roa File: ebd0e856-ec93-3f1e-9309-c1f054d9d8f1.roa (raw, json) Hash identifier: PsqAI3OVk8hK7DjPgoLW6Yt7DCMduZ3WyKWzPpYDwDM= Subject key identifier: 0E:D4:D3:43:F7:E5:F4:F1:6F:A2:F2:42:EE:33:A0:14:40:A9:64:7D Certificate issuer: /CN=c0311fc7-1b9e-4472-8780-7822d83e32fc Certificate serial: 010D0C9F4328584E6F3A2B68C88A15FCBC021440 Authority key identifier: 24:6F:82:F4:AD:78:85:9C:6C:6C:3F:7B:F9:F1:FA:17:12:FC:0E:30 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c0311fc7-1b9e-4472-8780-7822d83e32fc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c0311fc7-1b9e-4472-8780-7822d83e32fc/ebd0e856-ec93-3f1e-9309-c1f054d9d8f1.roa Signing time: Wed 08 Jul 2026 21:00:12 +0000 ROA not before: Wed 08 Jul 2026 21:00:12 +0000 ROA not after: Tue 06 Oct 2026 21:00:12 +0000 asID: 400519 IP address blocks: 23.133.216.0/24 maxlen: 24 147.185.221.0/24 maxlen: 24 2602:fbaf::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c0311fc7-1b9e-4472-8780-7822d83e32fc/c0311fc7-1b9e-4472-8780-7822d83e32fc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c0311fc7-1b9e-4472-8780-7822d83e32fc/c0311fc7-1b9e-4472-8780-7822d83e32fc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c0311fc7-1b9e-4472-8780-7822d83e32fc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 Jul 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:6f:3a:2b:68:c8:8a:15:fc:bc:02:14:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c0311fc7-1b9e-4472-8780-7822d83e32fc Validity Not Before: Jul 8 21:00:12 2026 GMT Not After : Oct 6 21:00:12 2026 GMT Subject: CN=207fce73-0786-4281-ae5e-3a3dced7039d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:65:84:04:e0:68:61:ee:e5:23:1b:e7:d8:d3: e0:8d:0d:e8:a6:7d:98:4d:83:e3:cf:a2:4c:c2:e7: 6e:e3:9b:b6:0c:1d:ba:0c:94:86:d3:67:35:d0:8f: 9c:d8:3e:15:1b:85:04:69:6d:02:2b:c0:e1:f8:04: 03:fd:75:23:2e:d8:19:07:23:f9:03:7e:1c:3e:fa: d3:ae:26:4a:2f:7c:07:47:80:d2:7e:13:e6:ef:6e: 30:79:57:83:7a:35:c6:c8:1b:a8:dc:27:7c:b8:58: d4:50:d0:b3:ab:72:58:21:5c:da:a4:2c:65:f5:8f: 23:02:71:bc:2c:68:55:6f:be:93:f0:78:2a:e2:30: 49:71:b4:fe:43:3d:d9:8d:d0:f4:d2:e0:84:e0:4c: 26:fc:01:55:e5:5d:c9:ea:63:f4:c3:57:98:2d:99: 89:ba:2c:89:00:c1:a9:90:03:ef:eb:6b:46:8e:8f: 3e:e0:06:6f:00:4a:c6:f4:61:06:75:19:b2:bb:a1: 99:77:92:3e:98:ed:88:99:2b:c9:cb:48:72:7f:f9: 46:9e:f2:92:af:4a:eb:d1:d7:be:97:f6:16:e2:aa: a6:86:3f:ec:74:8d:76:42:ce:64:ef:2c:18:2f:bb: fd:57:cc:37:32:be:a5:e6:8b:32:4e:3f:7d:ce:62: 29:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:D4:D3:43:F7:E5:F4:F1:6F:A2:F2:42:EE:33:A0:14:40:A9:64:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c0311fc7-1b9e-4472-8780-7822d83e32fc/ebd0e856-ec93-3f1e-9309-c1f054d9d8f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c0311fc7-1b9e-4472-8780-7822d83e32fc/c0311fc7-1b9e-4472-8780-7822d83e32fc.crl X509v3 Authority Key Identifier: keyid:24:6F:82:F4:AD:78:85:9C:6C:6C:3F:7B:F9:F1:FA:17:12:FC:0E:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c0311fc7-1b9e-4472-8780-7822d83e32fc.cer sbgp-ipAddrBlock: critical IPv4: 23.133.216.0/24 147.185.221.0/24 IPv6: 2602:fbaf::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:5e:e2:1a:ee:00:8f:bb:72:15:14:a5:15:7c:1b:49:51:e7: 51:28:7c:99:7d:26:ec:5e:97:4c:69:1c:d2:22:30:83:bf:d3: 45:2e:4a:6b:4e:09:0b:cd:c4:da:15:79:45:c0:04:3b:c3:66: 00:d5:10:1d:69:c8:de:bf:e8:af:8f:47:d5:20:9c:06:f7:97: 14:9c:c0:b6:ee:f5:fe:4c:31:08:c0:d1:66:a6:a5:a7:d4:59: 2c:7f:88:fd:d9:55:a6:7c:b7:e7:1c:13:c8:20:78:51:d6:0d: 24:3a:a0:8a:e9:11:e6:ab:da:9f:70:f9:c1:02:66:f0:ba:a0: fe:76:23:30:06:d6:9f:83:06:6d:07:8f:2c:78:7f:23:2f:09: 6a:ad:b7:3f:fd:fb:6d:7d:86:d5:2e:9a:25:a1:a7:b1:bb:17: 2c:c8:79:07:96:17:31:bb:60:12:0a:49:c6:61:e9:2b:4b:0a: ab:30:20:ee:50:02:ca:aa:55:45:4d:b1:03:31:ad:86:bb:55: bb:61:6a:a7:c5:74:65:05:91:92:8d:d0:9a:d0:19:58:19:95: cb:30:94:5d:4a:0c:9a:e6:f2:e1:24:2f:dc:31:99:ac:43:c6: a7:19:de:15:68:18:2e:7e:20:1d:d4:7f:83:75:5a:a7:ba:82: 04:38:c2:d1 -----BEGIN CERTIFICATE----- MIIGWTCCBUGgAwIBAgIUAQ0Mn0MoWE5vOitoyIoV/LwCFEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzAzMTFmYzctMWI5ZS00NDcyLTg3ODAtNzgyMmQ4M2Uz MmZjMB4XDTI2MDcwODIxMDAxMloXDTI2MTAwNjIxMDAxMlowLzEtMCsGA1UEAxMk MjA3ZmNlNzMtMDc4Ni00MjgxLWFlNWUtM2EzZGNlZDcwMzlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh2WEBOBoYe7lIxvn2NPgjQ3opn2YTYPjz6JM wudu45u2DB26DJSG02c10I+c2D4VG4UEaW0CK8Dh+AQD/XUjLtgZByP5A34cPvrT riZKL3wHR4DSfhPm724weVeDejXGyBuo3Cd8uFjUUNCzq3JYIVzapCxl9Y8jAnG8 LGhVb76T8Hgq4jBJcbT+Qz3ZjdD00uCE4Ewm/AFV5V3J6mP0w1eYLZmJuiyJAMGp kAPv62tGjo8+4AZvAErG9GEGdRmyu6GZd5I+mO2ImSvJy0hyf/lGnvKSr0rr0de+ l/YW4qqmhj/sdI12Qs5k7ywYL7v9V8w3Mr6l5osyTj99zmIpgwIDAQABo4IDazCC A2cwHQYDVR0OBBYEFA7U00P35fTxb6LyQu4zoBRAqWR9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jMDMx MWZjNy0xYjllLTQ0NzItODc4MC03ODIyZDgzZTMyZmMvZWJkMGU4NTYtZWM5My0z ZjFlLTkzMDktYzFmMDU0ZDlkOGYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYzAzMTFmYzctMWI5ZS00NDcyLTg3 ODAtNzgyMmQ4M2UzMmZjL2MwMzExZmM3LTFiOWUtNDQ3Mi04NzgwLTc4MjJkODNl MzJmYy5jcmwwHwYDVR0jBBgwFoAUJG+C9K14hZxsbD97+fH6FxL8DjAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9jMDMxMWZjNy0xYjllLTQ0NzItODc4MC03ODIy ZDgzZTMyZmMuY2VyMDUGCCsGAQUFBwEHAQH/BCYwJDASBAIAATAMAwQAF4XYAwQA k7ndMA4EAgACMAgDBgQmAvuvADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB2XuIa7gCPu3IVFKUVfBtJUedR KHyZfSbsXpdMaRzSIjCDv9NFLkprTgkLzcTaFXlFwAQ7w2YA1RAdacjev+ivj0fV IJwG95cUnMC27vX+TDEIwNFmpqWn1Fksf4j92VWmfLfnHBPIIHhR1g0kOqCK6RHm q9qfcPnBAmbwuqD+diMwBtafgwZtB48seH8jLwlqrbc//fttfYbVLpoloaexuxcs yHkHlhcxu2ASCknGYekrSwqrMCDuUALKqlVFTbEDMa2Gu1W7YWqnxXRlBZGSjdCa 0BlYGZXLMJRdSgya5vLhJC/cMZmsQ8anGd4VaBgufiAd1H+DdVqnuoIEOMLR -----END CERTIFICATE-----Generated at Fri Jul 24 10:08:45 2026 by rpki-client