$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/33caabe1-241c-3763-9b48-9781c2d6e620.roa File: 33caabe1-241c-3763-9b48-9781c2d6e620.roa (raw, json) Hash identifier: ZICeAvfYpEck7q3vRz+NssseTilXQbliyCCSV1T8yyE= Subject key identifier: A0:8D:DC:63:CF:25:E3:E4:C8:41:0D:C4:56:61:D4:82:8F:16:26:0D Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584EA7984CE166A249FACC58FD80 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/33caabe1-241c-3763-9b48-9781c2d6e620.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 16625 IP address blocks: 23.208.112.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:98:4c:e1:66:a2:49:fa:cc:58:fd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=affc2116-93ac-47d3-b150-f01cf376afbd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:89:d2:87:39:35:a7:47:4f:a8:9a:03:09:2d: 82:7f:94:b3:6d:5a:77:2a:df:c8:5b:bb:2a:08:55: 64:3d:c2:7f:84:88:fc:8b:6c:03:f2:81:59:1f:41: 8f:4f:fd:ed:bf:07:0d:34:6b:08:72:88:42:3d:ef: 86:a3:d6:27:5f:55:22:04:ed:dc:e5:21:b5:25:5c: e8:80:4e:0e:62:34:29:5d:80:e3:b8:07:62:be:c4: 16:8c:f4:58:35:19:56:e9:38:9c:fa:0e:d4:f8:e6: e5:19:f5:3c:f4:85:fb:59:1a:1d:e8:01:46:0e:eb: af:a8:28:44:28:fb:ef:b4:be:f3:12:91:9e:e7:3b: 78:0f:b4:05:11:49:69:6d:f8:41:c2:30:ad:51:a8: 0c:e7:a3:07:09:86:19:69:9a:58:b9:7a:5a:11:67: 7d:62:66:6d:3a:67:70:10:fd:20:aa:37:09:eb:29: 9a:36:e2:df:8e:28:0d:32:f9:ec:60:e8:2b:04:88: e6:ee:ba:4a:8c:4e:9b:c8:fb:14:8f:7b:02:df:6a: 64:a7:24:e5:f9:31:8f:b9:c0:9b:42:1f:66:bf:7e: 4b:c4:65:73:ac:3e:3a:5f:75:44:8d:80:d9:59:53: 1c:56:a1:57:7e:87:2d:08:0b:b4:7c:c0:19:cc:64: 9e:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:8D:DC:63:CF:25:E3:E4:C8:41:0D:C4:56:61:D4:82:8F:16:26:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/33caabe1-241c-3763-9b48-9781c2d6e620.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.208.112.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:f9:1c:77:6d:d8:5b:46:e6:e7:74:9c:c8:bc:69:0c:15:e5: 7a:6f:f7:42:b4:c0:c8:08:90:a0:6c:86:ca:bb:3c:63:f9:f2: 77:23:bd:52:56:68:33:5f:33:75:2e:4b:ae:fb:93:49:31:97: dd:5f:71:c4:07:66:d7:6d:d9:68:7d:05:96:64:9a:02:07:14: 58:19:b5:9e:06:9c:db:58:d4:70:46:a5:91:ca:f9:4a:30:69: b8:63:89:d7:1f:9f:37:9a:78:b7:a6:85:0e:d8:80:7c:91:83: 6c:18:47:03:9b:ab:cd:f3:67:6b:50:b5:6c:01:42:46:ae:70: be:85:3d:75:73:ba:be:2e:f4:6b:f9:94:11:90:36:ff:12:41: 3a:c3:02:08:9b:40:d3:b2:4b:65:46:bf:52:6e:ec:1f:3c:e9: 06:d0:9e:eb:4c:8e:ce:a3:fb:20:09:08:00:ef:24:1a:0c:d3: aa:5f:8f:ef:cb:77:ec:3d:a7:b9:11:a6:71:73:4c:18:60:35: a0:53:3a:5d:9d:20:07:60:74:96:f4:85:82:9e:b6:53:ef:bf: 26:ba:72:96:67:bb:1f:9f:fc:e3:73:f2:8b:d6:0d:87:6a:82: 03:78:5c:45:4c:a6:c3:08:60:86:5b:1d:7c:b7:1c:6a:a1:a1: f9:15:d7:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nmEzhZqJJ+sxY/YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk YWZmYzIxMTYtOTNhYy00N2QzLWIxNTAtZjAxY2YzNzZhZmJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjonShzk1p0dPqJoDCS2Cf5SzbVp3Kt/IW7sq CFVkPcJ/hIj8i2wD8oFZH0GPT/3tvwcNNGsIcohCPe+Go9YnX1UiBO3c5SG1JVzo gE4OYjQpXYDjuAdivsQWjPRYNRlW6Tic+g7U+OblGfU89IX7WRod6AFGDuuvqChE KPvvtL7zEpGe5zt4D7QFEUlpbfhBwjCtUagM56MHCYYZaZpYuXpaEWd9YmZtOmdw EP0gqjcJ6ymaNuLfjigNMvnsYOgrBIjm7rpKjE6byPsUj3sC32pkpyTl+TGPucCb Qh9mv35LxGVzrD46X3VEjYDZWVMcVqFXfoctCAu0fMAZzGSeIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKCN3GPPJePkyEENxFZh1IKPFiYNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMzNjYWFiZTEtMjQxYy0z NzYzLTliNDgtOTc4MWMyZDZlNjIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDF9BwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJL5HHdt2FtG5ud0nMi8aQwV5Xpv90K0wMgIkKBshsq7PGP58ncjvVJW aDNfM3UuS677k0kxl91fccQHZtdt2Wh9BZZkmgIHFFgZtZ4GnNtY1HBGpZHK+Uow abhjidcfnzeaeLemhQ7YgHyRg2wYRwObq83zZ2tQtWwBQkaucL6FPXVzur4u9Gv5 lBGQNv8SQTrDAgibQNOyS2VGv1Ju7B886QbQnutMjs6j+yAJCADvJBoM06pfj+/L d+w9p7kRpnFzTBhgNaBTOl2dIAdgdJb0hYKetlPvvya6cpZnux+f/ONz8ovWDYdq ggN4XEVMpsMIYIZbHXy3HGqhofkV1/M= -----END CERTIFICATE-----Generated at Sat Sep 5 01:29:53 2026 by rpki-client