$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/896f0624-c28d-44c0-93cf-3f879f877518/cde9ce8b-b7f9-3619-9dae-ba2d46cb9395.roa File: cde9ce8b-b7f9-3619-9dae-ba2d46cb9395.roa (raw, json) Hash identifier: kgbPohvj8scy+g4Pj/w0cwTUazG5uIZKn5jpQLlsU3w= Subject key identifier: 57:2A:3F:3A:FB:7D:D1:85:35:39:DE:5B:9F:90:97:AF:AA:91:73:51 Certificate issuer: /CN=896f0624-c28d-44c0-93cf-3f879f877518 Certificate serial: 010D0C9F4328584DA11AB69B3DFBB04EDA1F0F00 Authority key identifier: AE:65:9C:F0:57:7D:5C:5C:89:D1:60:E9:01:2F:27:A1:AB:B6:AF:0B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/896f0624-c28d-44c0-93cf-3f879f877518.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/896f0624-c28d-44c0-93cf-3f879f877518/cde9ce8b-b7f9-3619-9dae-ba2d46cb9395.roa Signing time: Sun 26 Apr 2026 01:00:25 +0000 ROA not before: Sun 26 Apr 2026 01:00:25 +0000 ROA not after: Sat 25 Jul 2026 01:00:25 +0000 asID: 400503 IP address blocks: 23.133.56.0/24 maxlen: 24 23.133.57.0/24 maxlen: 24 2602:fbb4::/40 maxlen: 64 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/896f0624-c28d-44c0-93cf-3f879f877518/896f0624-c28d-44c0-93cf-3f879f877518.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/896f0624-c28d-44c0-93cf-3f879f877518/896f0624-c28d-44c0-93cf-3f879f877518.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/896f0624-c28d-44c0-93cf-3f879f877518.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 28 Apr 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:a1:1a:b6:9b:3d:fb:b0:4e:da:1f:0f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=896f0624-c28d-44c0-93cf-3f879f877518 Validity Not Before: Apr 26 01:00:25 2026 GMT Not After : Jul 25 01:00:25 2026 GMT Subject: CN=323be960-f239-48b0-b856-5aff4aecfb0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:49:91:b9:78:3d:48:a0:b7:c5:17:b9:42:2d: 80:eb:df:18:0f:41:c4:bb:73:ad:55:64:9b:7e:87: 27:48:fd:3b:cf:b4:66:59:83:89:bc:61:e6:bf:81: df:82:0f:61:56:1e:17:8e:48:56:37:d5:d2:63:9a: cc:3a:88:e3:45:5b:86:55:3c:f7:6e:67:65:da:44: d7:5c:13:d6:10:f6:3e:91:5d:8b:9a:79:f2:e9:9a: b4:4e:43:af:c6:29:f4:15:35:0b:a5:fd:ed:1b:df: a9:6f:5b:38:cb:c1:bc:6f:1c:79:de:fe:d6:26:1c: 1d:b8:18:6c:e5:7f:83:d1:76:85:ea:32:51:9e:4d: cd:89:f9:4e:51:2d:9f:f6:17:db:18:3c:72:b0:2d: ab:05:94:26:f4:b6:81:b5:da:c8:df:58:d7:e7:0e: cc:d4:71:1f:41:21:4d:71:44:78:95:e8:86:44:8c: bf:62:8c:7f:a2:b0:df:6b:e8:02:d2:9c:60:92:3b: 53:5c:b8:7d:e9:bc:66:39:b0:f7:0e:da:e0:33:a7: 2f:6b:94:08:a7:e8:ab:4b:d8:36:1a:d1:23:51:ea: e2:e9:19:88:0c:e1:31:ba:b9:95:ce:f4:af:a9:56: 16:2a:15:42:fa:fa:7d:84:f8:69:97:ad:67:8f:f4: f4:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:2A:3F:3A:FB:7D:D1:85:35:39:DE:5B:9F:90:97:AF:AA:91:73:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/896f0624-c28d-44c0-93cf-3f879f877518/cde9ce8b-b7f9-3619-9dae-ba2d46cb9395.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/896f0624-c28d-44c0-93cf-3f879f877518/896f0624-c28d-44c0-93cf-3f879f877518.crl X509v3 Authority Key Identifier: keyid:AE:65:9C:F0:57:7D:5C:5C:89:D1:60:E9:01:2F:27:A1:AB:B6:AF:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/896f0624-c28d-44c0-93cf-3f879f877518.cer sbgp-ipAddrBlock: critical IPv4: 23.133.56.0/23 IPv6: 2602:fbb4::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:f1:4b:d6:92:0e:c2:46:64:4a:52:50:96:cb:15:f3:2c:d9: b9:ac:05:89:a5:d2:e1:12:7a:49:70:75:cb:81:db:90:bb:6b: 57:cb:e6:17:19:f3:6d:6a:07:79:a2:40:7f:88:17:9a:59:b9: 93:24:0c:a2:73:5e:35:24:ea:0d:02:1c:e8:2a:b7:17:22:eb: a1:8e:63:16:3e:40:c7:aa:8e:83:28:8d:af:a1:8f:3e:0f:fc: b4:71:35:80:a7:58:a6:74:80:43:61:37:b6:00:9a:85:1a:84: 39:97:bf:13:cd:2e:73:14:8f:dd:5a:9f:c1:a6:50:8a:f3:36: bd:e3:38:4b:b2:bf:3a:cf:d2:70:00:21:ba:5e:a2:6b:53:f5: 34:24:91:8f:17:d9:b1:bf:ea:61:f1:1a:cc:38:d9:c0:3e:ab: a6:e5:62:a1:5c:60:0f:05:58:e4:d2:99:26:e4:8b:a2:10:ef: 15:3f:0a:aa:80:ef:f9:eb:7d:f9:11:be:44:21:39:19:73:01: 5d:15:a8:71:2e:b5:25:d8:0b:a1:e3:88:d8:53:b0:bb:cf:54: bc:92:68:b0:09:97:bd:89:66:7b:e7:e9:6a:13:cd:4c:4f:73: 2a:6b:b9:c9:00:3d:7d:ad:b1:18:8d:35:07:b0:16:9c:03:4c: 86:4c:12:15 -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE2hGrabPfuwTtofDwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODk2ZjA2MjQtYzI4ZC00NGMwLTkzY2YtM2Y4NzlmODc3 NTE4MB4XDTI2MDQyNjAxMDAyNVoXDTI2MDcyNTAxMDAyNVowLzEtMCsGA1UEAxMk MzIzYmU5NjAtZjIzOS00OGIwLWI4NTYtNWFmZjRhZWNmYjBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgEmRuXg9SKC3xRe5Qi2A698YD0HEu3OtVWSb focnSP07z7RmWYOJvGHmv4Hfgg9hVh4XjkhWN9XSY5rMOojjRVuGVTz3bmdl2kTX XBPWEPY+kV2Lmnny6Zq0TkOvxin0FTULpf3tG9+pb1s4y8G8bxx53v7WJhwduBhs 5X+D0XaF6jJRnk3NiflOUS2f9hfbGDxysC2rBZQm9LaBtdrI31jX5w7M1HEfQSFN cUR4leiGRIy/Yox/orDfa+gC0pxgkjtTXLh96bxmObD3DtrgM6cva5QIp+irS9g2 GtEjUeri6RmIDOExurmVzvSvqVYWKhVC+vp9hPhpl61nj/T0xQIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFFcqPzr7fdGFNTneW5+Ql6+qkXNRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OTZm MDYyNC1jMjhkLTQ0YzAtOTNjZi0zZjg3OWY4Nzc1MTgvY2RlOWNlOGItYjdmOS0z NjE5LTlkYWUtYmEyZDQ2Y2I5Mzk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODk2ZjA2MjQtYzI4ZC00NGMwLTkz Y2YtM2Y4NzlmODc3NTE4Lzg5NmYwNjI0LWMyOGQtNDRjMC05M2NmLTNmODc5Zjg3 NzUxOC5jcmwwHwYDVR0jBBgwFoAUrmWc8Fd9XFyJ0WDpAS8noau2rwswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy84OTZmMDYyNC1jMjhkLTQ0YzAtOTNjZi0zZjg3 OWY4Nzc1MTguY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQBF4U4MA4E AgACMAgDBgAmAvu0ADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAO8UvWkg7CRmRKUlCWyxXzLNm5rAWJpdLh EnpJcHXLgduQu2tXy+YXGfNtagd5okB/iBeaWbmTJAyic141JOoNAhzoKrcXIuuh jmMWPkDHqo6DKI2voY8+D/y0cTWAp1imdIBDYTe2AJqFGoQ5l78TzS5zFI/dWp/B plCK8za94zhLsr86z9JwACG6XqJrU/U0JJGPF9mxv+ph8RrMONnAPqum5WKhXGAP BVjk0pkm5IuiEO8VPwqqgO/56335Eb5EITkZcwFdFahxLrUl2Auh44jYU7C7z1S8 kmiwCZe9iWZ75+lqE81MT3Mqa7nJAD19rbEYjTUHsBacA0yGTBIV -----END CERTIFICATE-----Generated at Mon Apr 27 11:19:57 2026 by rpki-client