$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/65bb07a4-eb92-3036-a791-f3ce9a332f9b.roa File: 65bb07a4-eb92-3036-a791-f3ce9a332f9b.roa (raw, json) Hash identifier: zuRnyeklFq+GfQhkrKWe4Etk3Syf8dkTbcK5PVPSJXQ= Subject key identifier: EA:C7:60:F1:F1:EF:F5:6D:39:4C:C4:2E:7E:72:A1:4E:19:7A:F3:C3 Certificate issuer: /CN=cd1efaa6-01e7-4528-8278-46b312a6e020 Certificate serial: 010D0C9F4328584DAF101E4A77B20697F428AB80 Authority key identifier: 89:FE:C6:A0:F0:66:A2:A3:4D:FD:81:78:AF:92:82:EC:0D:39:36:9B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/65bb07a4-eb92-3036-a791-f3ce9a332f9b.roa Signing time: Fri 01 May 2026 01:00:24 +0000 ROA not before: Fri 01 May 2026 01:00:24 +0000 ROA not after: Thu 30 Jul 2026 01:00:24 +0000 asID: 13849 IP address blocks: 23.133.82.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/cd1efaa6-01e7-4528-8278-46b312a6e020.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/cd1efaa6-01e7-4528-8278-46b312a6e020.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 02:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:af:10:1e:4a:77:b2:06:97:f4:28:ab:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=cd1efaa6-01e7-4528-8278-46b312a6e020 Validity Not Before: May 1 01:00:24 2026 GMT Not After : Jul 30 01:00:24 2026 GMT Subject: CN=a5e1be4c-e068-49c1-97f2-c7e98ae06ef0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:83:7e:5f:5b:7b:dc:f6:fd:01:00:1d:26:ed: 26:bd:ee:7c:76:bc:c9:ea:cd:a3:f6:4e:99:7c:68: bb:0a:09:94:04:de:bd:ff:c8:34:cf:a3:0b:b9:5a: c6:0b:f9:85:80:c8:81:33:23:0c:e8:45:f5:22:2d: 7e:ae:dc:a7:a5:76:d1:7a:e5:6f:f3:44:c6:7e:86: 21:a1:93:85:ab:d0:47:73:f5:df:53:1c:de:89:1b: 3c:62:4a:52:1f:c3:b2:14:4c:d2:5e:bb:55:91:d8: 15:70:b1:82:0f:68:79:0b:81:f7:ea:47:ab:9e:83: 56:6a:e0:58:6b:7b:1e:19:00:44:80:7b:1f:2b:6c: ee:9e:1e:34:11:d5:44:43:08:ab:e9:49:dc:52:ee: 61:65:60:9e:55:33:54:06:4e:a8:b7:56:7e:96:01: 6e:ca:0d:b4:92:fb:49:ed:78:ea:df:36:f1:42:7a: 89:9d:5b:17:02:ef:03:c9:da:d1:06:e2:79:7f:f2: b3:00:20:48:3c:ad:3a:83:b9:da:09:99:38:fe:46: 77:99:22:61:a5:85:d9:e0:db:75:76:1c:41:36:35: 3f:91:59:42:1e:99:fb:b6:8d:0b:c6:45:41:57:69: 36:be:8a:90:64:51:28:9d:7e:25:8e:3b:4d:70:e1: 58:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:C7:60:F1:F1:EF:F5:6D:39:4C:C4:2E:7E:72:A1:4E:19:7A:F3:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/65bb07a4-eb92-3036-a791-f3ce9a332f9b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020/cd1efaa6-01e7-4528-8278-46b312a6e020.crl X509v3 Authority Key Identifier: keyid:89:FE:C6:A0:F0:66:A2:A3:4D:FD:81:78:AF:92:82:EC:0D:39:36:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cd1efaa6-01e7-4528-8278-46b312a6e020.cer sbgp-ipAddrBlock: critical IPv4: 23.133.82.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:6f:d9:4d:35:21:5c:ff:d6:b3:09:3a:47:6f:f1:bf:a5:41: fb:4e:35:46:34:6c:21:34:20:21:54:ab:44:b6:25:d0:1d:b1: 54:79:c8:ed:3e:19:80:ed:7c:ce:83:2d:a8:d9:3a:8f:f6:53: 27:5e:c4:e4:ee:10:24:8d:32:db:61:ab:e6:2c:42:8b:50:af: 15:a5:50:66:ba:70:21:7d:8b:66:dc:2e:42:52:d9:03:25:e8: f0:c9:1c:67:92:d9:cf:a9:10:22:cf:9c:42:7e:ca:8a:33:cf: 6a:8a:2f:de:c9:4a:aa:27:f2:ed:5b:56:89:3b:98:db:7b:59: d4:cc:9d:d5:6b:60:b2:92:9c:a0:54:31:ff:13:e2:3d:e4:d9: 28:2a:a7:93:40:f3:ce:7c:2a:cc:a6:54:09:3b:56:07:24:e0: 4f:31:0f:5d:4a:a3:44:ab:87:4e:fb:18:23:8f:4a:20:ac:22: 4f:bd:91:d6:bb:1a:60:07:7e:6f:54:97:ef:c5:3f:1f:f5:9d: 2e:71:ce:47:da:cd:0e:87:aa:b7:a5:d5:b1:2e:7f:09:4e:85: ed:90:5f:0e:d2:75:bd:e6:4c:58:78:a3:6e:82:7e:c9:80:c3: 5c:f2:a4:1d:4d:5a:85:02:9c:1f:91:fb:18:3e:66:97:cc:89: 84:05:1c:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2vEB5Kd7IGl/Qoq4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2QxZWZhYTYtMDFlNy00NTI4LTgyNzgtNDZiMzEyYTZl MDIwMB4XDTI2MDUwMTAxMDAyNFoXDTI2MDczMDAxMDAyNFowLzEtMCsGA1UEAxMk YTVlMWJlNGMtZTA2OC00OWMxLTk3ZjItYzdlOThhZTA2ZWYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlIN+X1t73Pb9AQAdJu0mve58drzJ6s2j9k6Z fGi7CgmUBN69/8g0z6MLuVrGC/mFgMiBMyMM6EX1Ii1+rtynpXbReuVv80TGfoYh oZOFq9BHc/XfUxzeiRs8YkpSH8OyFEzSXrtVkdgVcLGCD2h5C4H36kernoNWauBY a3seGQBEgHsfK2zunh40EdVEQwir6UncUu5hZWCeVTNUBk6ot1Z+lgFuyg20kvtJ 7Xjq3zbxQnqJnVsXAu8DydrRBuJ5f/KzACBIPK06g7naCZk4/kZ3mSJhpYXZ4Nt1 dhxBNjU/kVlCHpn7to0LxkVBV2k2voqQZFEonX4ljjtNcOFYOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOrHYPHx7/VtOUzELn5yoU4ZevPDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jZDFl ZmFhNi0wMWU3LTQ1MjgtODI3OC00NmIzMTJhNmUwMjAvNjViYjA3YTQtZWI5Mi0z MDM2LWE3OTEtZjNjZTlhMzMyZjliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvY2QxZWZhYTYtMDFlNy00NTI4LTgy NzgtNDZiMzEyYTZlMDIwL2NkMWVmYWE2LTAxZTctNDUyOC04Mjc4LTQ2YjMxMmE2 ZTAyMC5jcmwwHwYDVR0jBBgwFoAUif7GoPBmoqNN/YF4r5KC7A05NpswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9jZDFlZmFhNi0wMWU3LTQ1MjgtODI3OC00NmIz MTJhNmUwMjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4VSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIpv2U01IVz/1rMJOkdv8b+lQftONUY0bCE0ICFUq0S2JdAdsVR5yO0+ GYDtfM6DLajZOo/2UydexOTuECSNMtthq+YsQotQrxWlUGa6cCF9i2bcLkJS2QMl 6PDJHGeS2c+pECLPnEJ+yoozz2qKL97JSqon8u1bVok7mNt7WdTMndVrYLKSnKBU Mf8T4j3k2Sgqp5NA8858KsymVAk7Vgck4E8xD11Ko0Srh077GCOPSiCsIk+9kda7 GmAHfm9Ul+/FPx/1nS5xzkfazQ6Hqrel1bEufwlOhe2QXw7Sdb3mTFh4o26CfsmA w1zypB1NWoUCnB+R+xg+ZpfMiYQFHCI= -----END CERTIFICATE-----Generated at Tue May 12 21:34:39 2026 by rpki-client