$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/33bacb65-d140-3223-81f9-65c46baa4d72.roa File: 33bacb65-d140-3223-81f9-65c46baa4d72.roa (raw, json) Hash identifier: UFE7AO7Cscn2yyKHEZEyuc7Pt4F19nJ/oUAMXLF1mkQ= Subject key identifier: 0C:04:4E:70:E0:29:A5:13:A4:90:E0:EC:80:E9:94:EF:25:0D:0C:48 Certificate issuer: /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Certificate serial: 010D0C9F4328584F538445E2AFB00CE08C790940 Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/33bacb65-d140-3223-81f9-65c46baa4d72.roa Signing time: Mon 28 Sep 2026 15:34:03 +0000 ROA not before: Mon 28 Sep 2026 15:34:03 +0000 ROA not after: Sun 27 Dec 2026 16:34:03 +0000 asID: 62904 IP address blocks: 23.231.108.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:53:84:45:e2:af:b0:0c:e0:8c:79:09:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17 Validity Not Before: Sep 28 15:34:03 2026 GMT Not After : Dec 27 16:34:03 2026 GMT Subject: CN=ba0dc260-fe6f-4167-a641-ed7883443523 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:54:02:42:09:0a:98:88:ed:5d:6d:eb:4b:37: 31:9a:dd:c9:27:5c:84:df:d7:98:8d:75:9c:1b:82: a3:19:9f:a9:83:4f:5e:bd:ce:7c:22:16:a4:e0:6e: 26:09:5c:a8:c6:14:14:58:d9:1d:07:5e:a0:1a:65: ef:1c:eb:b8:43:52:b0:ba:92:8b:f5:76:b1:2f:a5: 02:00:e4:74:c6:f8:76:ed:04:22:85:18:f3:37:85: af:0b:dc:b3:63:e4:84:bf:e8:89:fc:ac:84:21:f7: cf:6f:fc:01:7b:5e:11:70:db:8f:77:a8:19:61:87: 31:ca:13:8f:69:11:fe:05:12:0d:cf:51:bb:d2:c0: bb:ea:71:d1:0a:d2:88:fb:b1:79:3d:43:19:af:bb: ff:db:3f:b5:d7:a5:90:72:58:7e:5e:98:26:d6:d8: 6d:76:42:24:77:09:80:03:3d:3a:59:3f:e5:e2:be: 19:fb:36:30:ce:78:54:5f:5e:e3:54:88:d8:73:84: 1b:19:14:ed:6c:30:f9:03:cc:38:06:25:f2:f5:b8: 99:fb:14:d7:89:27:4c:12:2b:c5:eb:1a:3e:2a:b8: 2b:1b:e2:dd:01:2c:9e:54:d3:94:38:3e:9f:c9:7b: 74:78:66:84:04:47:09:9d:43:00:8c:b2:07:bb:94: b2:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:04:4E:70:E0:29:A5:13:A4:90:E0:EC:80:E9:94:EF:25:0D:0C:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/33bacb65-d140-3223-81f9-65c46baa4d72.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl X509v3 Authority Key Identifier: keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer sbgp-ipAddrBlock: critical IPv4: 23.231.108.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:60:41:b7:a7:bf:cd:ee:29:d0:22:61:6d:f3:84:af:bd:c4: f2:fb:be:da:a0:f5:69:33:fe:26:6e:dd:7a:24:5f:00:3a:a5: e8:36:23:73:1c:f2:4a:6e:91:dc:dd:60:59:ce:4b:87:5b:2a: 76:f9:59:43:6d:36:a1:c1:7f:9b:f1:23:54:2e:da:15:91:f3: 4a:ab:9b:a3:bf:8a:94:80:d4:3d:29:d4:63:0a:69:69:50:e7: 8b:33:68:6d:cf:7b:a3:41:e1:00:b2:4e:87:b9:f6:0d:7c:56: b3:2b:e7:01:d1:2c:bb:c6:0d:cc:26:06:5e:93:fe:af:78:29: b0:40:4b:2a:72:da:07:a6:7b:7e:eb:8b:d2:7e:93:99:cb:20: 6b:77:e7:31:8e:62:d5:3a:d5:61:93:60:e0:10:9a:74:21:df: 29:3e:6a:df:05:3a:90:93:ae:ba:c2:e3:07:78:b3:17:18:34: 55:6f:32:25:af:73:d3:03:d7:23:7e:eb:4f:6b:ae:e5:be:d2: 0e:3e:15:96:04:49:13:ff:be:c6:22:58:ab:dc:4c:d8:d0:35: d3:06:b2:ba:0a:2d:7f:01:7f:69:f1:62:30:05:91:4e:d5:af: 29:5f:41:7d:9d:ab:ce:87:60:86:f9:0a:cb:97:11:b5:20:d5: fb:f9:7c:42 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9ThEXir7AM4Ix5CUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2Y4ZWYxMmUtODk1My00MzgwLWIxNmQtMjhiYTJhYTE1 YzE3MB4XDTI2MDkyODE1MzQwM1oXDTI2MTIyNzE2MzQwM1owLzEtMCsGA1UEAxMk YmEwZGMyNjAtZmU2Zi00MTY3LWE2NDEtZWQ3ODgzNDQzNTIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmlQCQgkKmIjtXW3rSzcxmt3JJ1yE39eYjXWc G4KjGZ+pg09evc58Ihak4G4mCVyoxhQUWNkdB16gGmXvHOu4Q1KwupKL9XaxL6UC AOR0xvh27QQihRjzN4WvC9yzY+SEv+iJ/KyEIffPb/wBe14RcNuPd6gZYYcxyhOP aRH+BRINz1G70sC76nHRCtKI+7F5PUMZr7v/2z+116WQclh+Xpgm1thtdkIkdwmA Az06WT/l4r4Z+zYwznhUX17jVIjYc4QbGRTtbDD5A8w4BiXy9biZ+xTXiSdMEivF 6xo+KrgrG+LdASyeVNOUOD6fyXt0eGaEBEcJnUMAjLIHu5Sy4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAwETnDgKaUTpJDg7IDplO8lDQxIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhl ZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJhMmFhMTVjMTcvMzNiYWNiNjUtZDE0MC0z MjIzLTgxZjktNjVjNDZiYWE0ZDcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y4ZWYxMmUtODk1My00MzgwLWIx NmQtMjhiYTJhYTE1YzE3LzNmOGVmMTJlLTg5NTMtNDM4MC1iMTZkLTI4YmEyYWEx NWMxNy5jcmwwHwYDVR0jBBgwFoAURmDx/IALEkbguuKi0tarLtFQVHYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhlZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJh MmFhMTVjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCF+dsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFNgQbenv83uKdAiYW3zhK+9xPL7vtqg9Wkz/iZu3XokXwA6peg2I3Mc 8kpukdzdYFnOS4dbKnb5WUNtNqHBf5vxI1Qu2hWR80qrm6O/ipSA1D0p1GMKaWlQ 54szaG3Pe6NB4QCyToe59g18VrMr5wHRLLvGDcwmBl6T/q94KbBASypy2geme37r i9J+k5nLIGt35zGOYtU61WGTYOAQmnQh3yk+at8FOpCTrrrC4wd4sxcYNFVvMiWv c9MD1yN+609rruW+0g4+FZYESRP/vsYiWKvcTNjQNdMGsroKLX8Bf2nxYjAFkU7V rylfQX2dq86HYIb5CsuXEbUg1fv5fEI= -----END CERTIFICATE-----Generated at Sun Oct 11 08:26:55 2026 by rpki-client