$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2e8a2dcd-c473-4343-ab03-233f389ee575/d3304f17-035e-3d1c-9c51-29c9cd3a0ae4.roa File: d3304f17-035e-3d1c-9c51-29c9cd3a0ae4.roa (raw, json) Hash identifier: OzAcbefEBrFGhI94cTuI0By7HZyIMXIRkpAQsCCvfBI= Subject key identifier: 14:39:2F:80:66:B2:CD:CF:B2:74:BF:B6:22:4C:3B:58:6E:F1:92:33 Certificate issuer: /CN=2e8a2dcd-c473-4343-ab03-233f389ee575 Certificate serial: 010D0C9F4328584EE0C1E73F0CD625C96C83F000 Authority key identifier: E8:83:04:30:A6:ED:C0:6C:58:03:AE:9E:4C:4B:94:3A:2C:AD:CE:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2e8a2dcd-c473-4343-ab03-233f389ee575.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2e8a2dcd-c473-4343-ab03-233f389ee575/d3304f17-035e-3d1c-9c51-29c9cd3a0ae4.roa Signing time: Tue 18 Aug 2026 13:00:12 +0000 ROA not before: Tue 18 Aug 2026 13:00:12 +0000 ROA not after: Mon 16 Nov 2026 14:00:12 +0000 asID: 8079 IP address blocks: 23.133.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2e8a2dcd-c473-4343-ab03-233f389ee575/2e8a2dcd-c473-4343-ab03-233f389ee575.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2e8a2dcd-c473-4343-ab03-233f389ee575/2e8a2dcd-c473-4343-ab03-233f389ee575.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2e8a2dcd-c473-4343-ab03-233f389ee575.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 26 Aug 2026 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e0:c1:e7:3f:0c:d6:25:c9:6c:83:f0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e8a2dcd-c473-4343-ab03-233f389ee575 Validity Not Before: Aug 18 13:00:12 2026 GMT Not After : Nov 16 14:00:12 2026 GMT Subject: CN=d324c853-670d-4814-beb7-64a2633e1b7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:32:ea:ec:75:91:7a:89:a0:56:7c:52:44:c6: c2:02:a7:5b:6a:b0:63:7a:03:0a:27:28:2c:29:e6: c7:a2:33:18:68:e6:28:05:37:52:92:81:d5:27:43: c3:36:ec:23:1e:a9:88:08:a4:68:79:a4:ee:66:92: 44:8b:76:45:26:b9:b2:1a:57:d7:0c:76:c0:88:0f: b8:50:16:3f:e6:0f:c8:0a:45:43:ec:05:2a:a0:d9: c4:a5:d4:9b:d3:7b:c7:5d:5c:ff:a5:53:b2:aa:97: a1:aa:b7:2e:fe:6a:7e:50:5f:93:1c:c5:0c:d6:3a: f0:81:dc:30:4a:dc:1a:05:9f:1f:36:31:90:4f:0a: 67:4b:51:dd:f8:08:28:4c:72:16:e6:e8:ba:3e:ad: a4:a4:b7:b6:7b:9b:0c:d8:6e:fe:70:b4:bb:25:46: a6:af:b9:06:98:bf:94:48:b2:34:b5:f3:d9:5f:14: b5:4d:90:43:b2:3e:c4:c6:81:df:fc:10:4c:32:11: 7a:14:ea:83:7e:1c:c2:c9:ad:8b:40:07:aa:30:d2: b3:35:8a:25:78:dd:14:99:0d:cb:94:ee:93:b1:3b: 58:84:ce:5e:eb:ff:31:f0:56:f1:65:dc:d5:0c:76: 17:e8:b7:90:94:85:be:fa:f1:85:a5:c4:e7:da:a1: 30:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:39:2F:80:66:B2:CD:CF:B2:74:BF:B6:22:4C:3B:58:6E:F1:92:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2e8a2dcd-c473-4343-ab03-233f389ee575/d3304f17-035e-3d1c-9c51-29c9cd3a0ae4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2e8a2dcd-c473-4343-ab03-233f389ee575/2e8a2dcd-c473-4343-ab03-233f389ee575.crl X509v3 Authority Key Identifier: keyid:E8:83:04:30:A6:ED:C0:6C:58:03:AE:9E:4C:4B:94:3A:2C:AD:CE:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2e8a2dcd-c473-4343-ab03-233f389ee575.cer sbgp-ipAddrBlock: critical IPv4: 23.133.108.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:fd:37:28:d3:ba:a3:34:36:db:1f:7e:99:bc:3a:18:5a:5b: 57:8c:0f:96:27:cc:6c:39:17:06:0a:15:db:9d:d4:ee:9c:c6: b4:64:01:a3:ad:a9:c6:e7:ec:c3:f8:3f:73:41:97:91:04:f2: c3:7c:b3:1e:92:3b:97:59:3a:fe:08:db:fa:04:ca:fe:95:05: 5a:8b:9e:ca:b1:cc:01:4e:e8:5e:f5:49:fc:36:ea:96:6e:18: a6:ae:89:92:c9:e4:56:b5:0c:82:0e:f1:00:a8:8b:47:69:13: ff:a3:36:be:07:f6:e5:7f:ff:14:5d:10:bb:63:e1:08:e3:0b: 1d:99:fa:36:5d:28:f8:80:35:cc:32:c0:98:06:b3:0a:ce:88: b2:01:c2:f1:31:11:af:a7:6a:96:a5:f7:1a:01:38:dd:d6:11: 65:ef:71:e0:23:1b:6a:e8:59:ff:3a:12:40:1f:aa:fd:f9:aa: d6:e9:23:1b:67:e7:4f:77:f7:b4:ce:e7:59:d0:3e:15:34:28: 5d:a8:5a:73:7c:60:65:2a:ed:96:54:7e:fd:e6:8a:fe:81:0c: 75:2d:70:18:ff:87:53:ca:e8:ca:5e:cd:bb:4b:da:b6:75:65: cd:3d:53:44:4c:54:a5:e3:e5:2a:96:90:e4:70:3b:af:1c:0e: 84:1e:4b:4d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7gwec/DNYlyWyD8AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmU4YTJkY2QtYzQ3My00MzQzLWFiMDMtMjMzZjM4OWVl NTc1MB4XDTI2MDgxODEzMDAxMloXDTI2MTExNjE0MDAxMlowLzEtMCsGA1UEAxMk ZDMyNGM4NTMtNjcwZC00ODE0LWJlYjctNjRhMjYzM2UxYjdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAozLq7HWReomgVnxSRMbCAqdbarBjegMKJygs KebHojMYaOYoBTdSkoHVJ0PDNuwjHqmICKRoeaTuZpJEi3ZFJrmyGlfXDHbAiA+4 UBY/5g/ICkVD7AUqoNnEpdSb03vHXVz/pVOyqpehqrcu/mp+UF+THMUM1jrwgdww StwaBZ8fNjGQTwpnS1Hd+AgoTHIW5ui6Pq2kpLe2e5sM2G7+cLS7JUamr7kGmL+U SLI0tfPZXxS1TZBDsj7ExoHf/BBMMhF6FOqDfhzCya2LQAeqMNKzNYoleN0UmQ3L lO6TsTtYhM5e6/8x8FbxZdzVDHYX6LeQlIW++vGFpcTn2qEw0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBQ5L4Bmss3PsnS/tiJMO1hu8ZIzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8yZThh MmRjZC1jNDczLTQzNDMtYWIwMy0yMzNmMzg5ZWU1NzUvZDMzMDRmMTctMDM1ZS0z ZDFjLTljNTEtMjljOWNkM2EwYWU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMmU4YTJkY2QtYzQ3My00MzQzLWFi MDMtMjMzZjM4OWVlNTc1LzJlOGEyZGNkLWM0NzMtNDM0My1hYjAzLTIzM2YzODll ZTU3NS5jcmwwHwYDVR0jBBgwFoAU6IMEMKbtwGxYA66eTEuUOiytzjswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8yZThhMmRjZC1jNDczLTQzNDMtYWIwMy0yMzNm Mzg5ZWU1NzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4VsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHP9NyjTuqM0Ntsffpm8OhhaW1eMD5YnzGw5FwYKFdud1O6cxrRkAaOt qcbn7MP4P3NBl5EE8sN8sx6SO5dZOv4I2/oEyv6VBVqLnsqxzAFO6F71Sfw26pZu GKauiZLJ5Fa1DIIO8QCoi0dpE/+jNr4H9uV//xRdELtj4QjjCx2Z+jZdKPiANcwy wJgGswrOiLIBwvExEa+napal9xoBON3WEWXvceAjG2roWf86EkAfqv35qtbpIxtn 509397TO51nQPhU0KF2oWnN8YGUq7ZZUfv3miv6BDHUtcBj/h1PK6MpezbtL2rZ1 Zc09U0RMVKXj5SqWkORwO68cDoQeS00= -----END CERTIFICATE-----Generated at Tue Aug 25 05:35:43 2026 by rpki-client