$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7660ad47-0d47-4fc7-b1cc-1d954b61bac2/33e2ed51-cfb3-39be-ac3a-2e5effcd8e96.roa File: 33e2ed51-cfb3-39be-ac3a-2e5effcd8e96.roa (raw, json) Hash identifier: RQPlK6T4Js+jX77TIxy/ekv6Ub+fF1PkMuEtU3NSC3I= Subject key identifier: B1:81:6B:CA:41:CD:1F:49:1A:00:07:95:ED:F6:C4:DE:EB:78:6B:C1 Certificate issuer: /CN=7660ad47-0d47-4fc7-b1cc-1d954b61bac2 Certificate serial: 010D0C9F4328584D237A702C59C5E29665574800 Authority key identifier: 15:5D:E3:65:EC:9A:09:84:15:D2:3B:71:3E:E9:1A:F8:E3:8C:5D:20 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7660ad47-0d47-4fc7-b1cc-1d954b61bac2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7660ad47-0d47-4fc7-b1cc-1d954b61bac2/33e2ed51-cfb3-39be-ac3a-2e5effcd8e96.roa Signing time: Thu 12 Mar 2026 01:00:32 +0000 ROA not before: Thu 12 Mar 2026 01:00:32 +0000 ROA not after: Wed 10 Jun 2026 01:00:32 +0000 asID: 10981 IP address blocks: 23.133.188.0/24 maxlen: 24 2602:f70d::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7660ad47-0d47-4fc7-b1cc-1d954b61bac2/7660ad47-0d47-4fc7-b1cc-1d954b61bac2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7660ad47-0d47-4fc7-b1cc-1d954b61bac2/7660ad47-0d47-4fc7-b1cc-1d954b61bac2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7660ad47-0d47-4fc7-b1cc-1d954b61bac2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:23:7a:70:2c:59:c5:e2:96:65:57:48:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7660ad47-0d47-4fc7-b1cc-1d954b61bac2 Validity Not Before: Mar 12 01:00:32 2026 GMT Not After : Jun 10 01:00:32 2026 GMT Subject: CN=8017878b-b632-46b7-8a85-01d83dc2ddaa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:2b:b9:a5:c1:b4:99:11:f3:28:19:69:f1:2a: e9:0a:cc:d7:da:9a:c8:08:09:55:91:2a:ea:72:ee: ec:0a:33:ad:6f:32:62:f7:ff:77:e6:08:c9:27:52: 49:fb:fe:26:6a:10:50:c9:87:24:f0:5e:62:be:c6: 8d:f8:f4:a5:32:d7:40:ca:8b:40:84:79:bf:bc:00: 58:59:3b:da:f1:38:82:a0:28:7a:de:1e:4b:4e:44: f7:fb:95:e1:94:16:8c:9b:ce:41:7e:fb:3b:ef:dd: 71:a4:60:d4:28:cd:16:93:0a:cd:dd:7b:65:0e:42: 3a:c4:60:c7:f7:18:46:ce:0a:b7:a1:82:88:8e:3f: 7a:a6:48:52:c2:71:bc:07:4b:84:22:6e:e7:4b:d0: 58:f0:6d:7f:a7:22:f7:f3:b3:c3:c0:37:a2:f5:ca: 86:b1:ee:9a:d4:77:47:18:92:e6:4f:6f:52:07:69: 10:1e:b6:a0:cd:39:86:04:0d:a4:02:22:bf:ca:32: 52:a1:38:1c:77:86:49:5f:13:fb:b0:f9:9e:82:4a: 2c:ee:a8:29:48:75:6b:c0:47:df:29:18:5d:71:0e: 5e:3c:cb:5b:68:85:f1:cf:d0:40:98:23:a7:fe:40: 1c:15:97:bb:51:69:8f:c7:ca:18:57:49:31:aa:e0: 00:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:81:6B:CA:41:CD:1F:49:1A:00:07:95:ED:F6:C4:DE:EB:78:6B:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7660ad47-0d47-4fc7-b1cc-1d954b61bac2/33e2ed51-cfb3-39be-ac3a-2e5effcd8e96.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7660ad47-0d47-4fc7-b1cc-1d954b61bac2/7660ad47-0d47-4fc7-b1cc-1d954b61bac2.crl X509v3 Authority Key Identifier: keyid:15:5D:E3:65:EC:9A:09:84:15:D2:3B:71:3E:E9:1A:F8:E3:8C:5D:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7660ad47-0d47-4fc7-b1cc-1d954b61bac2.cer sbgp-ipAddrBlock: critical IPv4: 23.133.188.0/24 IPv6: 2602:f70d::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:c5:ba:46:2d:d7:a3:96:c4:06:a1:4e:a9:d1:0a:52:e7:d4: f7:24:5d:a0:ed:5a:53:1e:41:33:72:af:51:fd:83:21:b6:8a: 94:66:f6:d5:9c:18:42:64:26:14:d2:9a:6e:01:de:5a:a2:cb: 25:9b:a4:32:49:10:d6:d4:2a:bc:c0:fc:0d:65:2d:a6:eb:b2: a5:db:d8:0a:26:6a:ad:b1:62:45:b1:ac:28:6e:74:88:05:af: 60:8e:da:0e:e2:a0:e6:61:49:b1:97:ac:4d:8c:74:83:0c:42: 55:f6:4e:c8:cf:10:7d:9c:b7:e6:f1:58:95:c1:ad:82:34:33: 52:30:5e:d5:c5:7f:f9:a5:e7:ca:e1:2b:83:1a:45:56:e0:e5: 08:cf:3d:a0:7a:b1:63:44:7a:a4:d8:93:b9:fa:54:0a:e6:1c: ba:cf:e2:8c:87:15:73:5c:79:47:66:f6:11:16:d7:56:71:95: 73:e7:57:24:bf:75:68:c4:f6:bc:72:fb:37:49:79:c3:86:d3: 6b:90:06:10:2a:81:56:ef:a7:20:ab:3c:9e:76:55:2f:05:2a: 46:88:d9:68:38:53:96:6f:52:d3:88:23:ad:f1:ef:9c:67:cc: d9:27:5c:71:22:01:58:46:ca:ea:1c:dd:ff:2d:15:c6:a5:97: ca:f4:2d:21 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE0jenAsWcXilmVXSAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzY2MGFkNDctMGQ0Ny00ZmM3LWIxY2MtMWQ5NTRiNjFi YWMyMB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk ODAxNzg3OGItYjYzMi00NmI3LThhODUtMDFkODNkYzJkZGFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgyu5pcG0mRHzKBlp8SrpCszX2prICAlVkSrq cu7sCjOtbzJi9/935gjJJ1JJ+/4mahBQyYck8F5ivsaN+PSlMtdAyotAhHm/vABY WTva8TiCoCh63h5LTkT3+5XhlBaMm85Bfvs7791xpGDUKM0WkwrN3XtlDkI6xGDH 9xhGzgq3oYKIjj96pkhSwnG8B0uEIm7nS9BY8G1/pyL387PDwDei9cqGse6a1HdH GJLmT29SB2kQHragzTmGBA2kAiK/yjJSoTgcd4ZJXxP7sPmegkos7qgpSHVrwEff KRhdcQ5ePMtbaIXxz9BAmCOn/kAcFZe7UWmPx8oYV0kxquAA3QIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFLGBa8pBzR9JGgAHle32xN7reGvBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi83NjYw YWQ0Ny0wZDQ3LTRmYzctYjFjYy0xZDk1NGI2MWJhYzIvMzNlMmVkNTEtY2ZiMy0z OWJlLWFjM2EtMmU1ZWZmY2Q4ZTk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNzY2MGFkNDctMGQ0Ny00ZmM3LWIx Y2MtMWQ5NTRiNjFiYWMyLzc2NjBhZDQ3LTBkNDctNGZjNy1iMWNjLTFkOTU0YjYx YmFjMi5jcmwwHwYDVR0jBBgwFoAUFV3jZeyaCYQV0jtxPuka+OOMXSAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi83NjYwYWQ0Ny0wZDQ3LTRmYzctYjFjYy0xZDk1 NGI2MWJhYzIuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF4W8MA4E AgACMAgDBgQmAvcNADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCUxbpGLdejlsQGoU6p0QpS59T3JF2g7VpT HkEzcq9R/YMhtoqUZvbVnBhCZCYU0ppuAd5aosslm6QySRDW1Cq8wPwNZS2m67Kl 29gKJmqtsWJFsawobnSIBa9gjtoO4qDmYUmxl6xNjHSDDEJV9k7IzxB9nLfm8ViV wa2CNDNSMF7VxX/5pefK4SuDGkVW4OUIzz2gerFjRHqk2JO5+lQK5hy6z+KMhxVz XHlHZvYRFtdWcZVz51ckv3VoxPa8cvs3SXnDhtNrkAYQKoFW76cgqzyedlUvBSpG iNloOFOWb1LTiCOt8e+cZ8zZJ1xxIgFYRsrqHN3/LRXGpZfK9C0h -----END CERTIFICATE-----Generated at Thu Mar 26 19:14:01 2026 by rpki-client