$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9cfaab4b-7d49-43b7-80dd-84ab0ebeb214/33e98f4a-46f2-39d5-8f60-8120def084e3.roa File: 33e98f4a-46f2-39d5-8f60-8120def084e3.roa (raw, json) Hash identifier: 8ci1Y9l7lHtFS0/WOOW6pNgxvMAsbt/uwYvnKEQ+fS8= Subject key identifier: 87:26:8A:43:EA:16:3B:E4:DC:4C:D8:05:8C:78:FE:00:7F:D8:A1:7A Certificate issuer: /CN=9cfaab4b-7d49-43b7-80dd-84ab0ebeb214 Certificate serial: 010D0C9F4328584D95F01E6A027A55F9BA8B4B00 Authority key identifier: 61:9D:D7:B9:B2:35:05:84:A5:AC:4A:5E:DB:81:0E:00:C6:38:24:2D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9cfaab4b-7d49-43b7-80dd-84ab0ebeb214.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9cfaab4b-7d49-43b7-80dd-84ab0ebeb214/33e98f4a-46f2-39d5-8f60-8120def084e3.roa Signing time: Wed 22 Apr 2026 01:00:23 +0000 ROA not before: Wed 22 Apr 2026 01:00:23 +0000 ROA not after: Tue 21 Jul 2026 01:00:23 +0000 asID: 30381 IP address blocks: 23.145.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9cfaab4b-7d49-43b7-80dd-84ab0ebeb214/9cfaab4b-7d49-43b7-80dd-84ab0ebeb214.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9cfaab4b-7d49-43b7-80dd-84ab0ebeb214/9cfaab4b-7d49-43b7-80dd-84ab0ebeb214.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9cfaab4b-7d49-43b7-80dd-84ab0ebeb214.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:95:f0:1e:6a:02:7a:55:f9:ba:8b:4b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9cfaab4b-7d49-43b7-80dd-84ab0ebeb214 Validity Not Before: Apr 22 01:00:23 2026 GMT Not After : Jul 21 01:00:23 2026 GMT Subject: CN=710208fc-4718-4d54-bb8f-15593234ff8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:a6:b6:74:af:bf:01:96:7d:80:8c:69:6c:ae: 02:d3:55:22:85:1d:37:35:29:cd:ed:96:c9:bd:5a: 10:26:34:90:b8:a9:aa:75:23:4c:79:98:aa:55:0b: c7:1d:36:bd:e9:61:21:ba:d6:f6:ae:a3:4c:8e:07: 2a:68:4f:d9:0a:44:29:fa:b9:85:ae:4f:d9:4e:ee: eb:6b:86:83:cf:cb:cb:f5:05:68:8a:02:3f:0e:89: 76:7e:9e:89:1d:b2:a5:69:e2:3b:66:68:0d:b1:02: 66:37:bc:e8:f3:aa:b9:f6:e8:ae:a4:a0:5a:8e:fd: 4c:40:f7:b3:60:0e:5c:0a:b4:09:b2:22:85:32:d0: c3:7d:cc:a6:87:da:ff:66:8e:50:2c:87:b0:ce:96: b1:72:4b:b8:35:07:67:99:d9:2f:30:67:4b:d8:ab: a1:f0:33:79:3f:e2:05:09:95:36:60:ae:40:37:34: 40:f8:98:de:1c:6d:b4:34:66:73:f0:c2:af:b1:ad: fe:7a:6b:ac:4e:12:31:10:ec:18:0d:0e:d5:20:7d: 90:75:e0:d5:06:6f:64:46:af:37:c7:74:19:01:72: 73:85:7c:bc:58:0e:a6:72:e7:7b:e2:bc:9b:63:1e: 6d:49:d0:da:33:ae:ee:60:10:fe:6d:74:85:09:0f: 8f:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:26:8A:43:EA:16:3B:E4:DC:4C:D8:05:8C:78:FE:00:7F:D8:A1:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9cfaab4b-7d49-43b7-80dd-84ab0ebeb214/33e98f4a-46f2-39d5-8f60-8120def084e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9cfaab4b-7d49-43b7-80dd-84ab0ebeb214/9cfaab4b-7d49-43b7-80dd-84ab0ebeb214.crl X509v3 Authority Key Identifier: keyid:61:9D:D7:B9:B2:35:05:84:A5:AC:4A:5E:DB:81:0E:00:C6:38:24:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9cfaab4b-7d49-43b7-80dd-84ab0ebeb214.cer sbgp-ipAddrBlock: critical IPv4: 23.145.244.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:2f:9f:33:10:b3:87:22:10:f4:9d:5e:b1:31:7c:3c:21:fa: 03:1f:18:df:16:3f:6c:c4:3a:79:a1:12:f1:d4:b3:77:ac:f8: af:13:97:61:d6:d3:89:5d:ab:e7:73:cc:e2:d4:aa:28:2f:34: 35:b5:28:d2:86:14:ff:c7:22:4f:c4:ce:83:b1:c4:e8:f1:de: d0:b2:0a:c1:ec:bf:2a:04:4b:9c:53:e3:26:80:78:12:d2:c1: 42:6b:31:c9:69:0e:76:b2:63:3b:71:cd:88:fd:7d:fb:72:f8: 18:b5:b9:5c:02:87:e0:d5:60:58:2c:1e:b9:4f:e1:fa:09:49: a0:3e:25:2b:59:b8:ba:46:6b:e7:14:83:60:f7:48:69:eb:c7: 2a:23:0c:53:18:62:63:7f:49:1c:db:15:8c:55:34:44:35:a3: e3:24:b5:37:35:67:23:06:0b:b1:ce:0c:a1:7e:88:74:e2:cd: 8f:69:4b:b9:34:16:03:c7:94:28:21:af:11:70:47:fe:47:7a: 40:13:4b:75:35:b0:65:6b:db:2e:38:49:1e:33:50:84:5f:6c: 79:f6:5b:dd:34:d7:88:91:4d:b1:75:04:98:69:87:b7:d8:74: ae:57:f6:16:35:39:30:39:c3:ae:e6:9c:e0:a5:64:c5:75:a3: 05:c2:2a:2e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2V8B5qAnpV+bqLSwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWNmYWFiNGItN2Q0OS00M2I3LTgwZGQtODRhYjBlYmVi MjE0MB4XDTI2MDQyMjAxMDAyM1oXDTI2MDcyMTAxMDAyM1owLzEtMCsGA1UEAxMk NzEwMjA4ZmMtNDcxOC00ZDU0LWJiOGYtMTU1OTMyMzRmZjhmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA26a2dK+/AZZ9gIxpbK4C01UihR03NSnN7ZbJ vVoQJjSQuKmqdSNMeZiqVQvHHTa96WEhutb2rqNMjgcqaE/ZCkQp+rmFrk/ZTu7r a4aDz8vL9QVoigI/Dol2fp6JHbKlaeI7ZmgNsQJmN7zo86q59uiupKBajv1MQPez YA5cCrQJsiKFMtDDfcymh9r/Zo5QLIewzpaxcku4NQdnmdkvMGdL2Kuh8DN5P+IF CZU2YK5ANzRA+JjeHG20NGZz8MKvsa3+emusThIxEOwYDQ7VIH2QdeDVBm9kRq83 x3QZAXJzhXy8WA6mcud74rybYx5tSdDaM67uYBD+bXSFCQ+PFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIcmikPqFjvk3EzYBYx4/gB/2KF6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC85Y2Zh YWI0Yi03ZDQ5LTQzYjctODBkZC04NGFiMGViZWIyMTQvMzNlOThmNGEtNDZmMi0z OWQ1LThmNjAtODEyMGRlZjA4NGUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvOWNmYWFiNGItN2Q0OS00M2I3LTgw ZGQtODRhYjBlYmViMjE0LzljZmFhYjRiLTdkNDktNDNiNy04MGRkLTg0YWIwZWJl YjIxNC5jcmwwHwYDVR0jBBgwFoAUYZ3XubI1BYSlrEpe24EOAMY4JC0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC85Y2ZhYWI0Yi03ZDQ5LTQzYjctODBkZC04NGFi MGViZWIyMTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5H0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKMvnzMQs4ciEPSdXrExfDwh+gMfGN8WP2zEOnmhEvHUs3es+K8Tl2HW 04ldq+dzzOLUqigvNDW1KNKGFP/HIk/EzoOxxOjx3tCyCsHsvyoES5xT4yaAeBLS wUJrMclpDnayYztxzYj9ffty+Bi1uVwCh+DVYFgsHrlP4foJSaA+JStZuLpGa+cU g2D3SGnrxyojDFMYYmN/SRzbFYxVNEQ1o+MktTc1ZyMGC7HODKF+iHTizY9pS7k0 FgPHlCghrxFwR/5HekATS3U1sGVr2y44SR4zUIRfbHn2W90014iRTbF1BJhph7fY dK5X9hY1OTA5w67mnOClZMV1owXCKi4= -----END CERTIFICATE-----Generated at Wed May 13 07:04:00 2026 by rpki-client