$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3f16f76b-d68f-3fc3-9238-32a98a4a86e6.roa File: 3f16f76b-d68f-3fc3-9238-32a98a4a86e6.roa (raw, json) Hash identifier: ircC1R3upbJYAQ4QvU3cjGwUlX7uWSW486r60J8rS3I= Subject key identifier: 95:89:61:54:F9:B5:AE:B2:68:86:C5:1C:90:78:68:71:5F:09:B9:36 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584DAF10271C52BBBA647F1FFC40 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3f16f76b-d68f-3fc3-9238-32a98a4a86e6.roa Signing time: Fri 01 May 2026 01:00:24 +0000 ROA not before: Fri 01 May 2026 01:00:24 +0000 ROA not after: Thu 30 Jul 2026 01:00:24 +0000 asID: 20940 IP address blocks: 23.33.92.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:af:10:27:1c:52:bb:ba:64:7f:1f:fc:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 1 01:00:24 2026 GMT Not After : Jul 30 01:00:24 2026 GMT Subject: CN=42ea7114-2f17-4e53-959d-c09115537f66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:e0:3f:c3:5d:09:61:7e:74:95:1c:0a:17:08: 8a:17:ec:b0:2c:45:9e:3d:ea:2e:f3:0e:56:0f:27: 7f:b9:f9:37:ae:68:3e:a3:c0:6b:a5:ca:2e:17:aa: 3b:ec:64:c5:95:47:ef:60:8a:68:98:d9:cc:a9:f9: d3:32:cb:0b:18:7b:6b:c2:ad:48:dc:9d:9a:cd:cf: 94:f9:f1:8b:c1:0e:e0:45:4a:c2:49:77:5a:5d:57: d6:2f:0e:49:b8:c7:c2:35:cf:d8:61:18:76:6d:2e: ef:d7:b7:ef:91:51:fe:d3:92:02:20:fc:b7:2e:ae: ba:fe:79:fc:23:af:24:eb:fb:01:32:ff:3a:67:f4: 5b:ee:67:8a:a5:8a:83:d0:2b:79:2f:a6:b3:2e:b9: a5:01:0a:27:ff:a3:b6:05:a5:e4:50:a3:f0:a1:6c: 51:5b:33:03:ef:ad:02:76:31:c1:74:e1:3c:fd:14: 78:01:c6:cb:65:e3:de:1a:bd:cd:66:7d:8e:df:c6: 87:ce:3b:88:95:5f:39:fc:a7:6a:10:75:6a:19:c1: a5:1a:62:2c:81:de:55:76:f5:fd:5c:aa:41:23:5f: 0a:91:9b:f5:ad:17:21:21:ec:3d:2c:db:c2:a2:48: 20:87:e5:50:41:c5:f0:be:26:b4:b2:e3:78:56:23: 88:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:89:61:54:F9:B5:AE:B2:68:86:C5:1C:90:78:68:71:5F:09:B9:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3f16f76b-d68f-3fc3-9238-32a98a4a86e6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.33.92.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:b8:b7:b8:b8:8e:12:37:e3:0a:56:6f:c6:73:77:f7:66:2c: 83:de:ca:a6:d0:27:67:e3:a6:9e:e4:15:e7:2c:23:67:93:7b: cb:96:ba:c4:e7:4e:a3:91:cb:1f:fe:54:84:c9:2a:bb:df:cb: f8:24:fe:1f:69:c5:fe:f6:ff:44:6f:bd:ed:c4:bf:a9:24:f2: a5:90:d4:4b:02:1d:31:3b:40:03:a6:3b:f7:58:6d:76:11:05: 43:97:36:a9:16:d1:bb:db:7e:cc:a5:bd:0e:e9:b7:40:6c:5c: f7:a5:41:a5:04:48:28:b0:dd:66:7d:1b:99:5f:bd:50:07:64: ee:c6:0f:be:4d:e7:2c:b5:31:ba:16:cf:0d:df:b5:04:ac:ed: c0:4d:08:0e:47:fc:ea:c6:5a:5e:3f:e5:1c:f6:5e:fe:93:2c: 28:cb:c4:ba:e7:11:fe:ef:6c:66:af:b2:ab:57:6c:43:3f:f2: 68:90:23:a9:d8:02:0f:5f:87:27:51:d3:31:03:c3:8c:90:15: 12:aa:d0:2b:95:9a:33:94:50:fe:8d:e3:ee:52:0f:82:92:37: df:93:94:d0:c6:42:cf:ff:ed:dd:13:e6:1c:ba:04:d4:81:0b: 3b:a8:ae:eb:7b:d3:77:71:b4:0d:73:c2:7c:c1:49:80:34:fb: 23:24:ff:8c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2vECccUru6ZH8f/EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDUwMTAxMDAyNFoXDTI2MDczMDAxMDAyNFowLzEtMCsGA1UEAxMk NDJlYTcxMTQtMmYxNy00ZTUzLTk1OWQtYzA5MTE1NTM3ZjY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh+A/w10JYX50lRwKFwiKF+ywLEWePeou8w5W Dyd/ufk3rmg+o8BrpcouF6o77GTFlUfvYIpomNnMqfnTMssLGHtrwq1I3J2azc+U +fGLwQ7gRUrCSXdaXVfWLw5JuMfCNc/YYRh2bS7v17fvkVH+05ICIPy3Lq66/nn8 I68k6/sBMv86Z/Rb7meKpYqD0Ct5L6azLrmlAQon/6O2BaXkUKPwoWxRWzMD760C djHBdOE8/RR4AcbLZePeGr3NZn2O38aHzjuIlV85/KdqEHVqGcGlGmIsgd5VdvX9 XKpBI18KkZv1rRchIew9LNvCokggh+VQQcXwvia0suN4ViOI5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJWJYVT5ta6yaIbFHJB4aHFfCbk2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvM2YxNmY3NmItZDY4Zi0z ZmMzLTkyMzgtMzJhOThhNGE4NmU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFyFcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFy4t7i4jhI34wpWb8Zzd/dmLIPeyqbQJ2fjpp7kFecsI2eTe8uWusTn TqORyx/+VITJKrvfy/gk/h9pxf72/0Rvve3Ev6kk8qWQ1EsCHTE7QAOmO/dYbXYR BUOXNqkW0bvbfsylvQ7pt0BsXPelQaUESCiw3WZ9G5lfvVAHZO7GD75N5yy1MboW zw3ftQSs7cBNCA5H/OrGWl4/5Rz2Xv6TLCjLxLrnEf7vbGavsqtXbEM/8miQI6nY Ag9fhydR0zEDw4yQFRKq0CuVmjOUUP6N4+5SD4KSN9+TlNDGQs//7d0T5hy6BNSB Czuorut703dxtA1zwnzBSYA0+yMk/4w= -----END CERTIFICATE-----Generated at Wed May 13 06:41:40 2026 by rpki-client