$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/32383800-b087-3fe4-90b1-6288dd91e397.roa File: 32383800-b087-3fe4-90b1-6288dd91e397.roa (raw, json) Hash identifier: 3VK/8LpjwYLLvzGAQnERHFn6+d0IXKLjoHXwQiM6GFQ= Subject key identifier: E0:97:01:24:5E:52:D2:8E:7F:60:85:C1:EB:27:4F:3F:29:5B:77:42 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584DAF1021EB17D134307A8D5A40 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/32383800-b087-3fe4-90b1-6288dd91e397.roa Signing time: Fri 01 May 2026 01:00:24 +0000 ROA not before: Fri 01 May 2026 01:00:24 +0000 ROA not after: Thu 30 Jul 2026 01:00:24 +0000 asID: 20940 IP address blocks: 23.33.86.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:af:10:21:eb:17:d1:34:30:7a:8d:5a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 1 01:00:24 2026 GMT Not After : Jul 30 01:00:24 2026 GMT Subject: CN=a7330d05-fae5-4893-b905-16eca024abaa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:13:81:6f:4a:2b:86:97:eb:46:d4:db:94:30: b5:90:bb:f0:b9:8a:63:bd:c3:10:f5:c3:71:1c:0c: 9f:b2:61:38:ae:11:2c:4e:8a:9f:07:13:68:27:fe: d2:9f:49:20:5f:04:c6:32:82:fb:8c:81:37:15:73: ca:3d:1f:82:6e:49:4b:dc:19:fe:59:fe:7d:df:d6: 02:57:2c:8f:fa:2e:44:ff:ee:db:4a:1a:f2:e0:4c: f9:58:9f:e9:9c:e1:fe:d3:71:65:20:4f:e7:d7:e1: 52:1e:f4:1f:ad:64:f5:bc:0d:ad:dc:77:4e:4d:5b: 4f:a2:c4:7b:40:ef:31:09:24:d8:da:77:dc:5b:68: f6:40:9f:74:6c:c9:c0:bf:c4:e0:67:99:f0:41:65: 52:76:30:8f:58:17:ae:b3:3a:8b:40:12:cc:c4:32: 16:ef:6c:ac:53:38:91:dc:a0:08:c6:db:23:cd:51: 77:a6:9d:62:45:46:6e:73:ef:d0:7f:c6:ff:49:2e: 29:9e:15:58:9a:46:bc:21:f7:06:b4:73:4d:08:36: 61:0e:d4:5d:a2:ad:ac:a6:c1:aa:58:41:89:39:67: 98:9e:ab:1b:e3:56:1a:9e:33:b0:fc:81:62:ea:8b: db:bb:b1:21:2d:c4:8c:32:36:04:3d:20:1e:bd:5f: 15:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:97:01:24:5E:52:D2:8E:7F:60:85:C1:EB:27:4F:3F:29:5B:77:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/32383800-b087-3fe4-90b1-6288dd91e397.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.33.86.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:2d:04:a2:9f:46:4d:8b:d6:a1:7c:13:68:ec:44:df:d2:f0: e5:c7:b7:c2:0c:15:8e:1c:fd:fc:e1:84:7d:e0:28:1c:fc:db: 95:fe:80:80:e8:dd:4c:f4:c0:a8:a1:3f:a7:40:92:fa:e5:88: 00:85:31:ed:e9:0e:b9:19:8d:72:28:a8:dc:3b:57:34:c5:b6: 47:84:4b:d7:d4:b1:37:8c:01:5f:b8:6b:c1:c5:a4:e4:23:0a: 11:4c:cc:96:04:6d:08:12:ba:b1:2c:ee:11:ef:3d:38:b3:fe: 80:ae:25:da:75:f9:f4:0b:01:eb:3d:67:11:41:62:38:39:9d: ad:23:e7:d0:4b:5d:2c:28:46:0b:7a:86:48:b2:55:49:2b:a4: 05:c3:7e:01:26:65:63:22:d4:fa:ce:73:26:1e:85:7f:83:c0: f1:01:ec:49:2a:3a:0b:12:72:ee:ae:ec:63:b6:85:cd:b1:62: 72:03:8b:40:ad:75:b6:75:26:f3:0c:f2:87:6d:9e:12:5e:b7: a7:42:7f:6c:8c:93:05:44:ef:93:6d:4d:3b:a8:66:34:c0:b2: f9:bb:c7:3c:ea:df:76:06:78:5c:f4:c3:02:c3:e6:91:e7:59: 8b:fe:1d:4a:62:63:fe:8e:70:d0:da:66:2d:6c:08:21:f8:8a: 7a:42:16:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2vECHrF9E0MHqNWkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDUwMTAxMDAyNFoXDTI2MDczMDAxMDAyNFowLzEtMCsGA1UEAxMk YTczMzBkMDUtZmFlNS00ODkzLWI5MDUtMTZlY2EwMjRhYmFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArhOBb0orhpfrRtTblDC1kLvwuYpjvcMQ9cNx HAyfsmE4rhEsToqfBxNoJ/7Sn0kgXwTGMoL7jIE3FXPKPR+CbklL3Bn+Wf5939YC VyyP+i5E/+7bShry4Ez5WJ/pnOH+03FlIE/n1+FSHvQfrWT1vA2t3HdOTVtPosR7 QO8xCSTY2nfcW2j2QJ90bMnAv8TgZ5nwQWVSdjCPWBeuszqLQBLMxDIW72ysUziR 3KAIxtsjzVF3pp1iRUZuc+/Qf8b/SS4pnhVYmka8IfcGtHNNCDZhDtRdoq2spsGq WEGJOWeYnqsb41YanjOw/IFi6ovbu7EhLcSMMjYEPSAevV8VhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOCXASReUtKOf2CFwesnTz8pW3dCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMzIzODM4MDAtYjA4Ny0z ZmU0LTkwYjEtNjI4OGRkOTFlMzk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFyFWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJAtBKKfRk2L1qF8E2jsRN/S8OXHt8IMFY4c/fzhhH3gKBz825X+gIDo 3Uz0wKihP6dAkvrliACFMe3pDrkZjXIoqNw7VzTFtkeES9fUsTeMAV+4a8HFpOQj ChFMzJYEbQgSurEs7hHvPTiz/oCuJdp1+fQLAes9ZxFBYjg5na0j59BLXSwoRgt6 hkiyVUkrpAXDfgEmZWMi1PrOcyYehX+DwPEB7EkqOgsScu6u7GO2hc2xYnIDi0Ct dbZ1JvMM8odtnhJet6dCf2yMkwVE75NtTTuoZjTAsvm7xzzq33YGeFz0wwLD5pHn WYv+HUpiY/6OcNDaZi1sCCH4inpCFsI= -----END CERTIFICATE-----Generated at Wed May 13 12:55:12 2026 by rpki-client