$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/33fbd85d-bc65-42a6-8c78-c3f05da9901b/46076094-8e03-3dc1-bce6-04a236bc0d4f.roa File: 46076094-8e03-3dc1-bce6-04a236bc0d4f.roa (raw, json) Hash identifier: uz/dOJUNvVt/v8kUX0N+hioNUnB50U4e5Hrk0Lr8sJ0= Subject key identifier: FB:B2:28:59:6B:EA:FD:0C:F5:CC:E1:E3:80:90:DB:A3:46:B1:8D:AA Certificate issuer: /CN=33fbd85d-bc65-42a6-8c78-c3f05da9901b Certificate serial: 010D0C9F4328584D4BF4EDF9574A7A5C004F4300 Authority key identifier: 47:14:D6:A4:1C:CF:54:F6:EB:CF:A0:02:FA:B6:B1:60:4B:9E:56:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/33fbd85d-bc65-42a6-8c78-c3f05da9901b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/33fbd85d-bc65-42a6-8c78-c3f05da9901b/46076094-8e03-3dc1-bce6-04a236bc0d4f.roa Signing time: Thu 26 Mar 2026 13:00:41 +0000 ROA not before: Thu 26 Mar 2026 13:00:41 +0000 ROA not after: Wed 24 Jun 2026 13:00:41 +0000 asID: 214483 IP address blocks: 23.150.212.0/24 maxlen: 24 2602:f4a6::/40 maxlen: 40 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/33fbd85d-bc65-42a6-8c78-c3f05da9901b/33fbd85d-bc65-42a6-8c78-c3f05da9901b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/33fbd85d-bc65-42a6-8c78-c3f05da9901b/33fbd85d-bc65-42a6-8c78-c3f05da9901b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/33fbd85d-bc65-42a6-8c78-c3f05da9901b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 15 Apr 2026 04:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4b:f4:ed:f9:57:4a:7a:5c:00:4f:43:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33fbd85d-bc65-42a6-8c78-c3f05da9901b Validity Not Before: Mar 26 13:00:41 2026 GMT Not After : Jun 24 13:00:41 2026 GMT Subject: CN=6bf8c807-e7ad-4d9f-8dd2-008734954b29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:9d:36:0a:4a:3e:2e:2b:59:a5:17:ac:dc:0c: 18:f0:2e:1c:c6:31:dd:f3:46:d5:80:05:a2:95:e2: e7:ba:60:48:1b:b9:3f:d1:74:e3:5e:b3:63:62:36: 6e:22:1f:32:15:eb:34:ca:52:0e:e0:11:98:c8:cc: 09:59:bc:b0:d0:b0:63:30:02:0c:8f:ce:71:00:f4: 73:b6:15:94:3f:c9:29:af:37:b3:91:ff:5d:a1:56: f0:4a:2e:a2:f1:8b:15:77:45:9a:23:6f:42:65:d3: 5e:bb:64:50:7d:6a:8e:c6:e1:4a:19:5c:68:8a:f1: 29:d3:d9:36:b9:bf:b2:7e:f5:64:d4:65:f9:14:08: 40:3a:2e:ec:f6:d6:0a:18:8a:ca:48:39:fb:29:32: f1:57:ba:3f:39:57:9d:7e:ad:cc:cc:a1:2d:e1:05: 56:7c:28:79:46:c4:66:36:c1:49:9a:bd:14:b6:e3: 58:b2:ed:70:b6:80:69:47:a3:34:58:f7:90:87:31: a9:0a:62:cd:db:96:e4:30:7f:9b:85:fd:f5:31:cb: dd:90:f9:e8:20:85:8d:a7:30:72:9e:0a:6c:ec:f3: ca:54:09:07:45:96:11:67:31:67:84:2d:8e:45:9d: 88:96:f2:e5:f4:fa:50:cc:f7:c0:29:47:cb:7c:2c: bb:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:B2:28:59:6B:EA:FD:0C:F5:CC:E1:E3:80:90:DB:A3:46:B1:8D:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/33fbd85d-bc65-42a6-8c78-c3f05da9901b/46076094-8e03-3dc1-bce6-04a236bc0d4f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/33fbd85d-bc65-42a6-8c78-c3f05da9901b/33fbd85d-bc65-42a6-8c78-c3f05da9901b.crl X509v3 Authority Key Identifier: keyid:47:14:D6:A4:1C:CF:54:F6:EB:CF:A0:02:FA:B6:B1:60:4B:9E:56:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/33fbd85d-bc65-42a6-8c78-c3f05da9901b.cer sbgp-ipAddrBlock: critical IPv4: 23.150.212.0/24 IPv6: 2602:f4a6::/40 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:8e:87:d0:6f:8f:89:4d:e7:5b:c8:9a:6d:c3:42:60:66:ea: 89:99:34:d2:d1:32:6a:b9:5a:20:88:8f:4e:36:8b:b8:eb:1a: b6:e3:fa:b7:8f:7d:1c:78:a2:d2:bc:35:ad:c0:b0:e3:82:48: 25:d2:3a:58:7e:38:87:03:96:38:b4:e8:81:2a:87:81:e3:6b: fb:08:02:e6:83:5f:61:03:25:c8:b7:47:c7:38:60:f2:1c:4c: ef:06:c4:0f:a2:a4:0a:d9:90:5f:e0:9b:cc:ee:f3:b4:4f:e9: 5a:d3:e8:61:f9:0d:90:f5:31:7e:24:be:cf:5d:c9:db:b7:b3: ea:c4:27:6f:5f:6e:9f:08:96:25:86:31:60:96:62:1c:07:e1: 13:27:0b:de:09:ff:86:13:66:34:b4:10:0b:62:a4:45:6f:62: 63:a4:8c:02:fb:a3:d3:cf:36:65:ba:fa:de:5d:d2:b4:7f:5b: 58:c0:9a:3a:9a:69:9c:f8:30:da:27:9e:46:20:ed:40:d8:7d: 28:98:09:15:a5:3b:3d:14:d0:2d:38:54:56:60:46:7b:ca:cf: 9f:25:40:97:67:6e:59:2e:69:0d:39:99:40:77:f8:ff:7f:5c: 38:0c:e5:a2:df:39:31:56:ca:e9:ea:82:36:f1:5f:56:28:b2: f7:b2:45:0d -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWE1L9O35V0p6XABPQwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzNmYmQ4NWQtYmM2NS00MmE2LThjNzgtYzNmMDVkYTk5 MDFiMB4XDTI2MDMyNjEzMDA0MVoXDTI2MDYyNDEzMDA0MVowLzEtMCsGA1UEAxMk NmJmOGM4MDctZTdhZC00ZDlmLThkZDItMDA4NzM0OTU0YjI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxp02Cko+LitZpRes3AwY8C4cxjHd80bVgAWi leLnumBIG7k/0XTjXrNjYjZuIh8yFes0ylIO4BGYyMwJWbyw0LBjMAIMj85xAPRz thWUP8kprzezkf9doVbwSi6i8YsVd0WaI29CZdNeu2RQfWqOxuFKGVxoivEp09k2 ub+yfvVk1GX5FAhAOi7s9tYKGIrKSDn7KTLxV7o/OVedfq3MzKEt4QVWfCh5RsRm NsFJmr0UtuNYsu1wtoBpR6M0WPeQhzGpCmLN25bkMH+bhf31McvdkPnoIIWNpzBy ngps7PPKVAkHRZYRZzFnhC2ORZ2IlvLl9PpQzPfAKUfLfCy7EQIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFPuyKFlr6v0M9czh44CQ26NGsY2qMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi8zM2Zi ZDg1ZC1iYzY1LTQyYTYtOGM3OC1jM2YwNWRhOTkwMWIvNDYwNzYwOTQtOGUwMy0z ZGMxLWJjZTYtMDRhMjM2YmMwZDRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvMzNmYmQ4NWQtYmM2NS00MmE2LThj NzgtYzNmMDVkYTk5MDFiLzMzZmJkODVkLWJjNjUtNDJhNi04Yzc4LWMzZjA1ZGE5 OTAxYi5jcmwwHwYDVR0jBBgwFoAURxTWpBzPVPbrz6AC+raxYEueVpYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi8zM2ZiZDg1ZC1iYzY1LTQyYTYtOGM3OC1jM2Yw NWRhOTkwMWIuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF5bUMA4E AgACMAgDBgAmAvSmADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCXjofQb4+JTedbyJptw0JgZuqJmTTS0TJq uVogiI9ONou46xq24/q3j30ceKLSvDWtwLDjgkgl0jpYfjiHA5Y4tOiBKoeB42v7 CALmg19hAyXIt0fHOGDyHEzvBsQPoqQK2ZBf4JvM7vO0T+la0+hh+Q2Q9TF+JL7P Xcnbt7PqxCdvX26fCJYlhjFglmIcB+ETJwveCf+GE2Y0tBALYqRFb2JjpIwC+6PT zzZluvreXdK0f1tYwJo6mmmc+DDaJ55GIO1A2H0omAkVpTs9FNAtOFRWYEZ7ys+f JUCXZ25ZLmkNOZlAd/j/f1w4DOWi3zkxVsrp6oI28V9WKLL3skUN -----END CERTIFICATE-----Generated at Mon Apr 13 11:59:29 2026 by rpki-client