$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b33ddbb2-ff21-4b07-b4e7-266d6df5a6b5/70a46534-e8e5-3181-abb5-2f44dc79049a.roa File: 70a46534-e8e5-3181-abb5-2f44dc79049a.roa (raw, json) Hash identifier: 9vKoapuXBtIs4bIPyCq+1g+ANLn5aTGqr0IlcO3U2FU= Subject key identifier: B3:76:08:D3:9D:0E:21:5A:65:E2:08:61:3A:CA:D6:DC:81:AD:20:CD Certificate issuer: /CN=b33ddbb2-ff21-4b07-b4e7-266d6df5a6b5 Certificate serial: 010D0C9F4328584F6F23166BFA58DAD7E4358A6C Authority key identifier: DB:F4:ED:9B:E8:FD:BD:34:98:5C:6A:7F:D2:D1:AB:2A:29:D8:8A:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b33ddbb2-ff21-4b07-b4e7-266d6df5a6b5.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b33ddbb2-ff21-4b07-b4e7-266d6df5a6b5/70a46534-e8e5-3181-abb5-2f44dc79049a.roa Signing time: Thu 08 Oct 2026 13:00:12 +0000 ROA not before: Thu 08 Oct 2026 13:00:12 +0000 ROA not after: Wed 06 Jan 2027 14:00:12 +0000 asID: 209699 IP address blocks: 23.138.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b33ddbb2-ff21-4b07-b4e7-266d6df5a6b5/b33ddbb2-ff21-4b07-b4e7-266d6df5a6b5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b33ddbb2-ff21-4b07-b4e7-266d6df5a6b5/b33ddbb2-ff21-4b07-b4e7-266d6df5a6b5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b33ddbb2-ff21-4b07-b4e7-266d6df5a6b5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 26 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:6f:23:16:6b:fa:58:da:d7:e4:35:8a:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b33ddbb2-ff21-4b07-b4e7-266d6df5a6b5 Validity Not Before: Oct 8 13:00:12 2026 GMT Not After : Jan 6 14:00:12 2027 GMT Subject: CN=59933678-114a-42c6-b4fa-de577ce515a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:f7:bd:53:41:cb:ba:db:7f:64:85:92:23:89: 21:a1:05:26:2d:22:d5:f9:35:87:7e:04:27:00:03: 2b:86:ca:f7:a0:a9:68:a2:52:59:1c:f5:b4:5c:24: 54:9a:10:e5:df:5e:43:65:8d:b6:26:cf:14:75:5a: 86:16:e5:74:df:f7:1e:22:0b:ee:c1:41:7a:7e:be: 1f:c9:e6:0c:5e:f5:ca:54:1f:b0:00:56:33:c3:3e: 65:57:08:e7:f5:de:fc:34:02:4a:84:69:0b:a8:d4: 18:38:3c:98:4e:12:b0:5f:25:e7:9b:78:2c:4c:52: c4:a3:20:12:3d:01:e0:b9:f6:32:ce:11:5e:42:cc: 89:c6:4a:f0:88:4a:80:aa:60:7c:39:a1:a2:47:ad: 44:9d:41:a5:9b:da:52:71:d8:31:bc:08:22:a0:78: fc:f5:07:41:e6:fb:fc:39:93:60:24:ce:62:7f:6c: 32:29:15:ea:db:48:74:ce:19:90:ac:d3:c9:c8:92: 9e:28:d9:25:83:54:da:ac:4c:a6:63:db:5e:4c:59: 5c:e6:2d:fb:32:66:36:4c:1c:ca:8b:9c:a8:a8:70: c9:d6:45:40:f4:d4:95:18:9a:18:9c:2b:a6:5e:fb: c5:94:d3:0b:5d:39:97:cc:49:c3:07:9d:fc:04:91: 47:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:76:08:D3:9D:0E:21:5A:65:E2:08:61:3A:CA:D6:DC:81:AD:20:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b33ddbb2-ff21-4b07-b4e7-266d6df5a6b5/70a46534-e8e5-3181-abb5-2f44dc79049a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b33ddbb2-ff21-4b07-b4e7-266d6df5a6b5/b33ddbb2-ff21-4b07-b4e7-266d6df5a6b5.crl X509v3 Authority Key Identifier: keyid:DB:F4:ED:9B:E8:FD:BD:34:98:5C:6A:7F:D2:D1:AB:2A:29:D8:8A:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/b33ddbb2-ff21-4b07-b4e7-266d6df5a6b5.cer sbgp-ipAddrBlock: critical IPv4: 23.138.172.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:15:66:44:36:9e:a3:98:15:c2:86:e2:16:47:7d:6a:95:f1: 24:e7:d5:02:f4:ce:5e:e6:3b:ae:c2:da:9f:31:75:78:2a:10: 19:02:58:79:83:09:56:91:fc:df:b1:53:91:26:09:e8:99:b7: 2c:9f:96:5b:97:fb:57:b6:fa:64:20:dc:4c:7d:a2:70:31:06: 70:e7:80:5d:5d:1f:d2:24:ce:57:71:5d:7c:97:a4:57:39:3f: 55:95:aa:10:28:6d:76:eb:55:dd:47:9e:73:f8:09:b0:28:c0: 94:bc:04:fd:eb:b3:ef:32:91:ae:b6:86:52:69:85:9e:54:86: b0:22:d8:16:7b:4d:be:2a:58:e6:08:79:5e:b0:71:bc:0a:8c: a4:fd:7e:0a:e4:a7:82:ce:d8:11:9b:b1:a9:89:32:f9:71:9e: 97:d4:b9:d8:11:86:e1:86:02:44:e6:86:77:82:f8:32:60:5a: 9d:00:47:24:e4:8b:d6:fc:df:27:ca:cc:6d:76:6a:fd:a0:bb: 0d:b0:ea:74:82:6c:48:14:d5:c8:56:59:5d:55:1b:7c:52:cc: aa:47:7a:94:1b:12:71:20:f7:d8:b4:70:c9:f3:2f:1b:eb:b4: bc:39:3d:6a:34:9e:fb:65:0e:c1:07:f7:c8:5a:ed:37:50:d4: 35:48:9e:29 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9vIxZr+lja1+Q1imwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjMzZGRiYjItZmYyMS00YjA3LWI0ZTctMjY2ZDZkZjVh NmI1MB4XDTI2MTAwODEzMDAxMloXDTI3MDEwNjE0MDAxMlowLzEtMCsGA1UEAxMk NTk5MzM2NzgtMTE0YS00MmM2LWI0ZmEtZGU1NzdjZTUxNWExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxve9U0HLutt/ZIWSI4khoQUmLSLV+TWHfgQn AAMrhsr3oKloolJZHPW0XCRUmhDl315DZY22Js8UdVqGFuV03/ceIgvuwUF6fr4f yeYMXvXKVB+wAFYzwz5lVwjn9d78NAJKhGkLqNQYODyYThKwXyXnm3gsTFLEoyAS PQHgufYyzhFeQsyJxkrwiEqAqmB8OaGiR61EnUGlm9pScdgxvAgioHj89QdB5vv8 OZNgJM5if2wyKRXq20h0zhmQrNPJyJKeKNklg1TarEymY9teTFlc5i37MmY2TBzK i5yoqHDJ1kVA9NSVGJoYnCumXvvFlNMLXTmXzEnDB538BJFHMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLN2CNOdDiFaZeIIYTrK1tyBrSDNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9iMzNk ZGJiMi1mZjIxLTRiMDctYjRlNy0yNjZkNmRmNWE2YjUvNzBhNDY1MzQtZThlNS0z MTgxLWFiYjUtMmY0NGRjNzkwNDlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYjMzZGRiYjItZmYyMS00YjA3LWI0 ZTctMjY2ZDZkZjVhNmI1L2IzM2RkYmIyLWZmMjEtNGIwNy1iNGU3LTI2NmQ2ZGY1 YTZiNS5jcmwwHwYDVR0jBBgwFoAU2/Ttm+j9vTSYXGp/0tGrKinYiuYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9iMzNkZGJiMi1mZjIxLTRiMDctYjRlNy0yNjZk NmRmNWE2YjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4qsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA8VZkQ2nqOYFcKG4hZHfWqV8STn1QL0zl7mO67C2p8xdXgqEBkCWHmD CVaR/N+xU5EmCeiZtyyflluX+1e2+mQg3Ex9onAxBnDngF1dH9IkzldxXXyXpFc5 P1WVqhAobXbrVd1HnnP4CbAowJS8BP3rs+8yka62hlJphZ5UhrAi2BZ7Tb4qWOYI eV6wcbwKjKT9fgrkp4LO2BGbsamJMvlxnpfUudgRhuGGAkTmhneC+DJgWp0ARyTk i9b83yfKzG12av2guw2w6nSCbEgU1chWWV1VG3xSzKpHepQbEnEg99i0cMnzLxvr tLw5PWo0nvtlDsEH98ha7TdQ1DVInik= -----END CERTIFICATE-----Generated at Sun Oct 25 14:33:12 2026 by rpki-client