$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0a64001e-ffc8-3736-85ea-fed4e3a7311b.roa File: 0a64001e-ffc8-3736-85ea-fed4e3a7311b.roa (raw, json) Hash identifier: 9JMvjgR91xeEbj4dbGxmFoJfGu7dFWunOynk685G5ZQ= Subject key identifier: 37:9E:8C:A1:D0:14:74:2A:43:9A:23:BD:3F:C9:2A:B2:59:1D:D1:6F Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584EF87CBF5914497DF0D49C17C0 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0a64001e-ffc8-3736-85ea-fed4e3a7311b.roa Signing time: Thu 27 Aug 2026 01:00:12 +0000 ROA not before: Thu 27 Aug 2026 01:00:12 +0000 ROA not after: Wed 25 Nov 2026 02:00:12 +0000 asID: 32787 IP address blocks: 23.33.96.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f8:7c:bf:59:14:49:7d:f0:d4:9c:17:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 27 01:00:12 2026 GMT Not After : Nov 25 02:00:12 2026 GMT Subject: CN=e3af6f0d-8a35-4d26-9c53-1e808732bb6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:0f:8e:3e:fe:46:fb:4e:c7:c7:33:e6:66:85: 3a:c9:e4:5f:11:e2:7e:cd:0c:f7:91:71:55:c5:e9: 2a:00:6f:62:84:83:c7:0a:14:ee:fd:76:d8:52:40: 61:50:dd:27:c2:6c:8c:b7:03:56:6a:92:27:0b:cc: f3:de:da:b2:62:30:eb:6a:28:84:7e:11:7c:81:7a: 18:0e:f6:02:97:63:35:90:4c:38:27:91:6c:40:12: 83:fd:2c:f4:ee:41:4e:c1:6f:b3:5b:10:41:f2:30: 85:d2:95:23:3a:aa:40:9d:af:4e:60:fa:75:6f:61: 69:1c:91:e7:e6:7c:d1:ee:7e:86:a0:cc:85:7e:38: 9f:49:4d:f6:0b:50:09:2a:42:21:32:85:d1:83:0e: e0:04:15:d7:04:a3:71:d0:2c:9b:b4:ef:48:4f:57: 72:78:34:e0:45:d8:04:12:2e:87:36:6e:55:fc:1a: b4:4c:5a:81:b2:e7:6c:77:4f:ee:62:81:e2:51:ef: ad:da:58:84:58:f9:81:24:dc:d4:00:b8:37:dc:64: cf:ef:1a:2b:76:20:7a:06:16:b3:45:bf:c8:07:09: 0d:e3:d1:0b:fc:bc:bd:8a:0e:f0:ee:f2:1f:e2:4c: ba:60:44:6e:5f:bc:d0:56:73:b9:cb:0b:58:ef:3c: 67:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:9E:8C:A1:D0:14:74:2A:43:9A:23:BD:3F:C9:2A:B2:59:1D:D1:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0a64001e-ffc8-3736-85ea-fed4e3a7311b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.33.96.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:5c:6c:92:ec:a4:0e:34:5c:92:bb:be:7e:34:43:45:2c:55: 86:0e:3e:22:4d:b2:16:10:10:69:fb:a3:40:20:58:d8:44:14: 01:8d:59:01:88:1e:70:e7:cd:be:24:cb:d3:de:c8:f5:e0:47: 5b:d2:15:c5:78:99:f0:d6:0c:0e:a5:75:fc:cb:70:43:ff:b3: 6e:98:80:dd:14:9d:3a:cc:9b:44:dc:5c:a1:36:76:bc:b9:e8: 96:b2:6b:c0:16:c1:28:ba:66:70:22:30:76:99:57:b2:20:0e: b9:c4:d3:a4:1f:cb:71:db:2d:0b:b6:8a:5d:71:2b:f5:17:a6: 66:44:57:da:13:32:95:07:06:a2:92:7a:f5:26:38:a4:83:13: 1b:f8:79:92:26:62:9a:b8:a6:cd:f2:47:99:ea:b4:4d:f3:2c: ac:36:44:a7:e9:d5:a9:e8:94:ba:23:37:b4:94:93:90:6d:30: 52:31:b3:18:0e:13:d5:2a:ce:b6:c3:19:9c:ac:a8:32:6e:be: 2f:c0:11:a8:72:51:da:7a:0c:9b:2b:a5:14:d2:eb:58:80:e0: 57:c0:45:cb:bb:e7:7a:80:94:3e:70:6e:fd:6a:2e:90:c5:6c: 19:4a:92:78:46:60:ca:88:8f:25:6b:22:04:95:94:89:00:22: 9b:3d:9d:1f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE74fL9ZFEl98NScF8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDgyNzAxMDAxMloXDTI2MTEyNTAyMDAxMlowLzEtMCsGA1UEAxMk ZTNhZjZmMGQtOGEzNS00ZDI2LTljNTMtMWU4MDg3MzJiYjZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuA+OPv5G+07HxzPmZoU6yeRfEeJ+zQz3kXFV xekqAG9ihIPHChTu/XbYUkBhUN0nwmyMtwNWapInC8zz3tqyYjDraiiEfhF8gXoY DvYCl2M1kEw4J5FsQBKD/Sz07kFOwW+zWxBB8jCF0pUjOqpAna9OYPp1b2FpHJHn 5nzR7n6GoMyFfjifSU32C1AJKkIhMoXRgw7gBBXXBKNx0CybtO9IT1dyeDTgRdgE Ei6HNm5V/Bq0TFqBsudsd0/uYoHiUe+t2liEWPmBJNzUALg33GTP7xordiB6Bhaz Rb/IBwkN49EL/Ly9ig7w7vIf4ky6YERuX7zQVnO5ywtY7zxn9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDeejKHQFHQqQ5ojvT/JKrJZHdFvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMGE2NDAwMWUtZmZjOC0z NzM2LTg1ZWEtZmVkNGUzYTczMTFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDFyFgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJJcbJLspA40XJK7vn40Q0UsVYYOPiJNshYQEGn7o0AgWNhEFAGNWQGI HnDnzb4ky9PeyPXgR1vSFcV4mfDWDA6ldfzLcEP/s26YgN0UnTrMm0TcXKE2dry5 6Jaya8AWwSi6ZnAiMHaZV7IgDrnE06Qfy3HbLQu2il1xK/UXpmZEV9oTMpUHBqKS evUmOKSDExv4eZImYpq4ps3yR5nqtE3zLKw2RKfp1anolLojN7SUk5BtMFIxsxgO E9UqzrbDGZysqDJuvi/AEahyUdp6DJsrpRTS61iA4FfARcu753qAlD5wbv1qLpDF bBlKknhGYMqIjyVrIgSVlIkAIps9nR8= -----END CERTIFICATE-----Generated at Sat Sep 5 02:46:47 2026 by rpki-client