$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c96909b2-99ca-31d9-90ff-7962438db4ab.roa File: c96909b2-99ca-31d9-90ff-7962438db4ab.roa (raw, json) Hash identifier: o9H/4Pb1ydHrQmJF4D7/kBt+LH0O0uhuZgsCJE85WiA= Subject key identifier: 3C:19:2E:F6:D0:55:81:31:49:56:F9:B7:CC:6D:85:9F:8F:98:F3:34 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584DAF1026E599256A7988018480 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c96909b2-99ca-31d9-90ff-7962438db4ab.roa Signing time: Fri 01 May 2026 01:00:24 +0000 ROA not before: Fri 01 May 2026 01:00:24 +0000 ROA not after: Thu 30 Jul 2026 01:00:24 +0000 asID: 20940 IP address blocks: 23.33.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 14 May 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:af:10:26:e5:99:25:6a:79:88:01:84:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: May 1 01:00:24 2026 GMT Not After : Jul 30 01:00:24 2026 GMT Subject: CN=e8e7fc67-d48e-4b05-9d04-4c2e04576311 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:12:48:dc:fe:bd:38:34:e8:6b:c5:13:d1:de: d8:88:0f:dd:26:2e:e8:c2:2e:8d:dd:ca:0b:be:af: f2:f2:d5:1f:62:4b:e3:ad:af:62:c2:f4:d3:35:45: c0:93:0e:72:19:8f:18:d8:98:54:33:60:27:cd:17: cc:a4:20:77:bc:4f:c1:07:41:89:ec:8e:ed:78:63: 35:17:d2:12:e1:92:53:8f:44:7b:c5:60:8e:e4:b3: 38:a3:58:3d:03:3e:f7:78:01:19:10:8a:4a:10:1f: af:30:4b:6a:ba:41:0a:c2:f7:40:dd:e0:5e:13:42: 12:af:65:53:df:25:71:48:0b:b4:64:4b:c7:46:44: 37:b0:2a:63:26:57:92:2e:24:87:f3:1f:8b:3c:bd: c4:97:76:c8:81:b2:3d:91:9d:76:94:ef:f6:70:79: 46:84:c5:21:d7:7e:52:b9:6f:17:8f:d6:de:ca:dc: 24:48:31:b7:54:53:ef:32:51:a3:07:62:97:5e:ad: 16:92:24:c6:53:43:3b:2c:46:90:4a:33:e8:e5:f6: 60:ce:02:cc:1b:a2:86:ee:f8:6e:80:95:22:d9:b5: 49:a5:32:19:6d:fe:99:a7:5f:b8:13:9a:51:2f:38: 95:66:39:63:c0:8e:0c:09:6e:2b:7c:e1:1d:bd:cb: 7d:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:19:2E:F6:D0:55:81:31:49:56:F9:B7:CC:6D:85:9F:8F:98:F3:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c96909b2-99ca-31d9-90ff-7962438db4ab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.33.85.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:93:ed:a6:33:5e:6b:48:ee:37:1e:8a:58:66:cd:6f:5e:ea: 90:17:03:6a:86:a7:b9:0f:b5:ba:b8:9a:bd:02:c7:45:71:ec: b7:95:98:05:cd:ea:57:43:27:b0:c4:b5:a2:f1:22:a2:90:23: 16:cb:5a:16:b7:20:b0:8f:4b:c8:83:7c:ab:e0:4d:1f:dd:3b: 01:10:0e:9b:50:a5:cd:f8:5e:6c:33:1a:34:82:e0:d1:72:24: 89:dd:66:74:5a:7d:10:0d:3c:7f:90:70:29:b8:6c:86:85:a1: b4:9d:f8:c0:29:3e:95:bc:9e:79:7a:22:bc:6f:cd:7e:35:76: 72:a6:c7:dc:50:74:1b:28:fe:4c:ba:15:cc:1d:30:a2:8e:c4: 38:36:ef:02:88:18:39:a0:6e:c4:b1:91:0d:95:67:89:1e:93: 2c:24:3a:07:33:31:92:bc:39:06:14:b9:bf:e7:13:f6:0d:48: 0b:da:d6:0f:5f:25:7d:e9:5e:8d:03:07:95:cc:98:99:17:4e: ee:36:a7:08:92:f0:09:fe:a3:06:77:08:45:70:88:e7:b0:49: 0f:34:10:3b:fb:eb:f5:d3:5c:f8:86:68:6d:57:a0:da:41:35: 5b:6d:ec:ce:4f:f5:37:97:61:bf:f0:86:7d:c4:e7:e4:c6:26: 53:d1:f8:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2vECblmSVqeYgBhIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDUwMTAxMDAyNFoXDTI2MDczMDAxMDAyNFowLzEtMCsGA1UEAxMk ZThlN2ZjNjctZDQ4ZS00YjA1LTlkMDQtNGMyZTA0NTc2MzExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnRJI3P69ODToa8UT0d7YiA/dJi7owi6N3coL vq/y8tUfYkvjra9iwvTTNUXAkw5yGY8Y2JhUM2AnzRfMpCB3vE/BB0GJ7I7teGM1 F9IS4ZJTj0R7xWCO5LM4o1g9Az73eAEZEIpKEB+vMEtqukEKwvdA3eBeE0ISr2VT 3yVxSAu0ZEvHRkQ3sCpjJleSLiSH8x+LPL3El3bIgbI9kZ12lO/2cHlGhMUh135S uW8Xj9beytwkSDG3VFPvMlGjB2KXXq0WkiTGU0M7LEaQSjPo5fZgzgLMG6KG7vhu gJUi2bVJpTIZbf6Zp1+4E5pRLziVZjljwI4MCW4rfOEdvct9YwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDwZLvbQVYExSVb5t8xthZ+PmPM0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYzk2OTA5YjItOTljYS0z MWQ5LTkwZmYtNzk2MjQzOGRiNGFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFyFVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACyT7aYzXmtI7jceilhmzW9e6pAXA2qGp7kPtbq4mr0Cx0Vx7LeVmAXN 6ldDJ7DEtaLxIqKQIxbLWha3ILCPS8iDfKvgTR/dOwEQDptQpc34XmwzGjSC4NFy JIndZnRafRANPH+QcCm4bIaFobSd+MApPpW8nnl6IrxvzX41dnKmx9xQdBso/ky6 FcwdMKKOxDg27wKIGDmgbsSxkQ2VZ4kekywkOgczMZK8OQYUub/nE/YNSAva1g9f JX3pXo0DB5XMmJkXTu42pwiS8An+owZ3CEVwiOewSQ80EDv76/XTXPiGaG1XoNpB NVtt7M5P9TeXYb/whn3E5+TGJlPR+LA= -----END CERTIFICATE-----Generated at Wed May 13 10:06:08 2026 by rpki-client