$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/28afc874-f8f9-31bb-8226-2789dd51bcfa.roa File: 28afc874-f8f9-31bb-8226-2789dd51bcfa.roa (raw, json) Hash identifier: RUzvVtZ+BsXj01gd4u9Lm1G3stzInPpuFbqquAzkODo= Subject key identifier: 97:0A:91:48:4E:5F:75:41:C2:BA:84:FD:AC:E3:D0:BB:18:67:A4:C4 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F31B7C6A46D6E5F9237ACD500 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/28afc874-f8f9-31bb-8226-2789dd51bcfa.roa Signing time: Wed 16 Sep 2026 13:00:12 +0000 ROA not before: Wed 16 Sep 2026 13:00:12 +0000 ROA not after: Tue 15 Dec 2026 14:00:12 +0000 asID: 20940 IP address blocks: 23.33.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:31:b7:c6:a4:6d:6e:5f:92:37:ac:d5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 16 13:00:12 2026 GMT Not After : Dec 15 14:00:12 2026 GMT Subject: CN=193677c3-7fab-46bc-be49-ecaefda83de9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:0c:ff:08:90:e4:d0:d5:8e:d0:54:37:a4:61: c8:bf:07:bf:cd:07:0e:d3:f8:bc:55:91:0c:83:ca: 60:05:dd:2e:5c:73:35:84:8e:89:77:c2:29:5b:53: b9:12:42:87:0e:40:2a:96:85:f3:dd:bb:42:32:88: 18:b4:d3:61:e7:ec:55:6a:30:2f:7c:9f:c0:63:0d: 60:be:4f:c6:59:d4:7d:a2:51:58:0c:b4:fc:23:dc: db:78:51:33:a1:53:20:09:cc:39:b2:e2:cb:c0:fd: 2e:5d:68:59:ad:92:aa:1e:31:a8:86:db:d7:08:80: bc:bb:11:f9:af:b7:18:62:f8:35:62:9d:77:3e:dd: 32:b4:c5:5c:5f:ec:5a:0b:ad:c1:99:e6:86:63:28: 16:c1:a5:38:90:19:1a:6d:d5:5a:75:3f:d6:36:2b: 44:de:72:e8:03:74:b4:db:33:53:9a:77:42:72:52: 3d:56:2a:3a:6d:f3:29:ce:18:cd:0d:6c:97:09:14: bf:dc:e8:9a:7c:49:38:b0:07:1b:4e:f6:96:2d:86: e6:e0:46:a6:bc:8c:17:af:2c:d7:8c:b3:05:d6:0f: 9c:71:e3:f3:a1:ed:71:ef:19:20:1e:d6:73:87:4e: 41:cf:58:23:db:8a:c5:3d:58:c3:f1:c7:96:48:71: f0:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:0A:91:48:4E:5F:75:41:C2:BA:84:FD:AC:E3:D0:BB:18:67:A4:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/28afc874-f8f9-31bb-8226-2789dd51bcfa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.33.238.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:01:d9:e6:3d:6a:08:79:6d:de:d7:f5:e9:ff:f7:db:59:24: 1e:0b:bb:6b:7b:51:a9:cb:54:b6:6a:ba:15:3a:d0:cc:79:b1: a7:73:e5:17:80:74:78:2e:a4:59:3f:6c:59:a6:3f:77:18:f3: af:9a:4a:b1:13:ef:ba:4b:ba:14:33:3f:c8:f8:99:f7:79:07: 13:5e:70:35:6d:39:6e:95:bf:13:ee:48:4f:8f:3f:9a:02:d1: 53:b6:62:ac:55:78:f8:41:5c:dd:3c:08:54:01:6d:b1:4f:dc: 28:51:c5:bd:07:f5:bb:57:db:24:32:fa:09:69:e0:0a:5c:c0: 67:2b:fb:82:05:6b:9a:85:64:af:1c:10:d0:36:b3:47:69:48: 0a:29:d2:2c:f0:d5:d5:f7:21:1a:2e:75:d6:43:e0:7a:15:ad: 11:0e:cd:0f:d5:e2:d1:cb:05:bc:86:c5:e8:7b:04:f3:18:7e: e3:45:1a:d8:27:ee:56:26:f3:9f:c4:bd:77:3e:08:88:e5:de: 41:17:00:01:8a:ce:98:9c:e3:20:9c:98:63:0e:f8:f7:a6:17: 57:e4:5f:38:9c:65:39:5c:f4:70:6d:ba:61:d8:83:8f:f0:71: b4:13:f1:2b:68:21:34:b8:16:b8:cf:d6:7d:5c:0d:da:cf:22: 1b:de:d3:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8xt8akbW5fkjes1QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkxNjEzMDAxMloXDTI2MTIxNTE0MDAxMlowLzEtMCsGA1UEAxMk MTkzNjc3YzMtN2ZhYi00NmJjLWJlNDktZWNhZWZkYTgzZGU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArgz/CJDk0NWO0FQ3pGHIvwe/zQcO0/i8VZEM g8pgBd0uXHM1hI6Jd8IpW1O5EkKHDkAqloXz3btCMogYtNNh5+xVajAvfJ/AYw1g vk/GWdR9olFYDLT8I9zbeFEzoVMgCcw5suLLwP0uXWhZrZKqHjGohtvXCIC8uxH5 r7cYYvg1Yp13Pt0ytMVcX+xaC63BmeaGYygWwaU4kBkabdVadT/WNitE3nLoA3S0 2zNTmndCclI9Vio6bfMpzhjNDWyXCRS/3OiafEk4sAcbTvaWLYbm4EamvIwXryzX jLMF1g+ccePzoe1x7xkgHtZzh05Bz1gj24rFPVjD8ceWSHHwxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJcKkUhOX3VBwrqE/azj0LsYZ6TEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMjhhZmM4NzQtZjhmOS0z MWJiLTgyMjYtMjc4OWRkNTFiY2ZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFyHuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFsB2eY9agh5bd7X9en/99tZJB4Lu2t7UanLVLZquhU60Mx5sadz5ReA dHgupFk/bFmmP3cY86+aSrET77pLuhQzP8j4mfd5BxNecDVtOW6VvxPuSE+PP5oC 0VO2YqxVePhBXN08CFQBbbFP3ChRxb0H9btX2yQy+glp4ApcwGcr+4IFa5qFZK8c ENA2s0dpSAop0izw1dX3IRouddZD4HoVrREOzQ/V4tHLBbyGxeh7BPMYfuNFGtgn 7lYm85/EvXc+CIjl3kEXAAGKzpic4yCcmGMO+PemF1fkXzicZTlc9HBtumHYg4/w cbQT8StoITS4FrjP1n1cDdrPIhve0xE= -----END CERTIFICATE-----Generated at Mon Sep 28 21:38:09 2026 by rpki-client