$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c0311fc7-1b9e-4472-8780-7822d83e32fc/ebd0e856-ec93-3f1e-9309-c1f054d9d8f1.roa File: ebd0e856-ec93-3f1e-9309-c1f054d9d8f1.roa (raw, json) Hash identifier: pu18dUWvkR9w3S5vjQBgoejXPgRNUYpJ7pgeZP+vUeo= Subject key identifier: 53:C9:94:64:2A:74:32:7E:DC:A8:C5:8C:E8:8E:C9:D6:A5:22:D7:BD Certificate issuer: /CN=c0311fc7-1b9e-4472-8780-7822d83e32fc Certificate serial: 010D0C9F4328584F119CFA51EDE451B2D3E14F98 Authority key identifier: 24:6F:82:F4:AD:78:85:9C:6C:6C:3F:7B:F9:F1:FA:17:12:FC:0E:30 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c0311fc7-1b9e-4472-8780-7822d83e32fc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c0311fc7-1b9e-4472-8780-7822d83e32fc/ebd0e856-ec93-3f1e-9309-c1f054d9d8f1.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 400519 IP address blocks: 23.133.216.0/24 maxlen: 24 147.185.221.0/24 maxlen: 24 2602:fbaf::/36 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c0311fc7-1b9e-4472-8780-7822d83e32fc/c0311fc7-1b9e-4472-8780-7822d83e32fc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c0311fc7-1b9e-4472-8780-7822d83e32fc/c0311fc7-1b9e-4472-8780-7822d83e32fc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c0311fc7-1b9e-4472-8780-7822d83e32fc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 15 Sep 2026 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:9c:fa:51:ed:e4:51:b2:d3:e1:4f:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c0311fc7-1b9e-4472-8780-7822d83e32fc Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=dd936dd8-83a1-4250-9e81-029912a89ed3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:b3:c6:fa:f0:9a:ac:68:21:cd:d9:cb:23:cc: dd:16:a9:89:17:f3:72:ad:8a:46:69:f8:14:8f:9a: 42:74:87:9f:8a:6a:88:a3:b2:98:ee:b8:29:85:f6: 79:a6:61:9a:04:91:82:30:f0:e3:90:74:83:38:7f: ab:48:cf:da:49:22:7b:ac:13:b8:75:12:50:33:ab: d2:9a:04:aa:0a:19:eb:78:b2:b8:90:b3:cb:80:f4: 05:cd:12:d4:16:3b:dc:e3:80:61:53:51:e6:7e:13: 32:cb:a4:b7:06:28:ba:cd:36:c1:2c:fd:4e:98:40: f3:f5:b8:f2:e8:80:07:7e:51:3b:90:82:ca:90:7b: 06:74:64:d1:66:e2:c8:18:90:6e:4b:a1:32:87:7d: 9b:51:72:ae:23:35:d9:c2:d7:4d:a8:83:37:6e:03: b8:5c:71:79:08:13:3b:ed:39:9d:95:3a:0e:91:30: 69:2e:4d:83:6b:1d:56:96:41:7a:22:2e:d4:b3:fa: 4f:ce:da:f6:dc:8e:9d:cd:1c:fe:ea:05:84:0e:3f: 30:60:1a:6c:5f:8c:56:af:c7:90:e6:8d:5f:7b:5a: f3:f1:ac:09:5a:2e:da:6a:96:71:3b:41:22:89:e2: bb:f0:bb:94:d6:73:91:54:0b:c5:c3:f0:37:d8:1c: 81:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:C9:94:64:2A:74:32:7E:DC:A8:C5:8C:E8:8E:C9:D6:A5:22:D7:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c0311fc7-1b9e-4472-8780-7822d83e32fc/ebd0e856-ec93-3f1e-9309-c1f054d9d8f1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c0311fc7-1b9e-4472-8780-7822d83e32fc/c0311fc7-1b9e-4472-8780-7822d83e32fc.crl X509v3 Authority Key Identifier: keyid:24:6F:82:F4:AD:78:85:9C:6C:6C:3F:7B:F9:F1:FA:17:12:FC:0E:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/c0311fc7-1b9e-4472-8780-7822d83e32fc.cer sbgp-ipAddrBlock: critical IPv4: 23.133.216.0/24 147.185.221.0/24 IPv6: 2602:fbaf::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:5c:54:53:89:2d:3d:2c:25:01:3b:0c:f4:86:30:9f:20:b2: ed:2f:62:06:a5:2c:0e:9c:aa:a8:13:1e:76:8f:bd:9c:bb:d7: ab:6d:13:d7:26:5d:a4:bc:b3:16:a9:cc:91:01:cc:0f:7d:50: fe:a7:74:82:7d:0b:63:d6:b1:84:61:b6:09:13:7c:79:de:7a: d6:e4:46:96:b8:77:77:c7:95:74:db:d9:96:93:8b:85:de:0e: 04:24:00:b9:ef:57:cb:43:61:4f:cc:d5:9a:fe:b6:e6:70:6b: 4d:48:01:9b:ca:89:37:7f:b8:15:e7:da:a5:b5:b3:24:38:f4: 2e:15:6d:bf:07:29:f4:44:5e:c1:e2:83:ba:0a:82:93:dd:fc: 33:60:64:ec:9b:40:c8:36:79:60:f5:ae:10:ea:8d:b0:43:be: 23:72:b7:c1:80:c1:98:be:e3:34:3c:14:5a:f0:8d:af:c7:bd: b0:46:43:83:9e:f3:97:5f:23:10:b3:f8:89:25:4a:18:dc:0a: fd:e1:92:05:84:c8:8e:bc:29:8c:48:96:9a:c7:71:b9:0f:88: 42:2c:be:2e:6d:da:9b:27:32:c4:13:d2:2b:cf:bf:da:d7:ee: a0:cd:f5:1c:17:97:b3:76:c3:bc:b1:72:ce:c5:c8:00:33:3d: 19:90:ea:23 -----BEGIN CERTIFICATE----- MIIGWTCCBUGgAwIBAgIUAQ0Mn0MoWE8RnPpR7eRRstPhT5gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzAzMTFmYzctMWI5ZS00NDcyLTg3ODAtNzgyMmQ4M2Uz MmZjMB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk ZGQ5MzZkZDgtODNhMS00MjUwLTllODEtMDI5OTEyYTg5ZWQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4bPG+vCarGghzdnLI8zdFqmJF/NyrYpGafgU j5pCdIefimqIo7KY7rgphfZ5pmGaBJGCMPDjkHSDOH+rSM/aSSJ7rBO4dRJQM6vS mgSqChnreLK4kLPLgPQFzRLUFjvc44BhU1HmfhMyy6S3Bii6zTbBLP1OmEDz9bjy 6IAHflE7kILKkHsGdGTRZuLIGJBuS6Eyh32bUXKuIzXZwtdNqIM3bgO4XHF5CBM7 7TmdlToOkTBpLk2Dax1WlkF6Ii7Us/pPztr23I6dzRz+6gWEDj8wYBpsX4xWr8eQ 5o1fe1rz8awJWi7aapZxO0EiieK78LuU1nORVAvFw/A32ByBMQIDAQABo4IDazCC A2cwHQYDVR0OBBYEFFPJlGQqdDJ+3KjFjOiOydalIte9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9jMDMx MWZjNy0xYjllLTQ0NzItODc4MC03ODIyZDgzZTMyZmMvZWJkMGU4NTYtZWM5My0z ZjFlLTkzMDktYzFmMDU0ZDlkOGYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYzAzMTFmYzctMWI5ZS00NDcyLTg3 ODAtNzgyMmQ4M2UzMmZjL2MwMzExZmM3LTFiOWUtNDQ3Mi04NzgwLTc4MjJkODNl MzJmYy5jcmwwHwYDVR0jBBgwFoAUJG+C9K14hZxsbD97+fH6FxL8DjAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9jMDMxMWZjNy0xYjllLTQ0NzItODc4MC03ODIy ZDgzZTMyZmMuY2VyMDUGCCsGAQUFBwEHAQH/BCYwJDASBAIAATAMAwQAF4XYAwQA k7ndMA4EAgACMAgDBgQmAvuvADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB8XFRTiS09LCUBOwz0hjCfILLt L2IGpSwOnKqoEx52j72cu9erbRPXJl2kvLMWqcyRAcwPfVD+p3SCfQtj1rGEYbYJ E3x53nrW5EaWuHd3x5V029mWk4uF3g4EJAC571fLQ2FPzNWa/rbmcGtNSAGbyok3 f7gV59qltbMkOPQuFW2/Byn0RF7B4oO6CoKT3fwzYGTsm0DINnlg9a4Q6o2wQ74j crfBgMGYvuM0PBRa8I2vx72wRkODnvOXXyMQs/iJJUoY3Ar94ZIFhMiOvCmMSJaa x3G5D4hCLL4ubdqbJzLEE9Irz7/a1+6gzfUcF5ezdsO8sXLOxcgAMz0ZkOoj -----END CERTIFICATE-----Generated at Sun Sep 13 19:15:18 2026 by rpki-client