$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/33d8879e-24de-4dd1-bab7-7cc451009cc2/83c7a286-9c49-3189-98ae-ea46ce63e22b.roa File: 83c7a286-9c49-3189-98ae-ea46ce63e22b.roa (raw, json) Hash identifier: VtAevpzOnkyQEOlkNmrmrdz7FEwv+olkQUP825NKXGs= Subject key identifier: 11:3D:CB:E6:05:09:04:35:81:75:8F:CA:C7:D7:41:C9:65:D4:75:61 Certificate issuer: /CN=33d8879e-24de-4dd1-bab7-7cc451009cc2 Certificate serial: 010D0C9F4328584D651520498CFDE56CCA27F080 Authority key identifier: 73:BA:5F:95:C1:65:EE:FB:35:7E:84:D5:73:65:DA:F5:08:AC:EE:AB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/33d8879e-24de-4dd1-bab7-7cc451009cc2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/33d8879e-24de-4dd1-bab7-7cc451009cc2/83c7a286-9c49-3189-98ae-ea46ce63e22b.roa Signing time: Sat 04 Apr 2026 13:00:29 +0000 ROA not before: Sat 04 Apr 2026 13:00:29 +0000 ROA not after: Fri 03 Jul 2026 13:00:29 +0000 asID: 2914 IP address blocks: 23.134.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/33d8879e-24de-4dd1-bab7-7cc451009cc2/33d8879e-24de-4dd1-bab7-7cc451009cc2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/33d8879e-24de-4dd1-bab7-7cc451009cc2/33d8879e-24de-4dd1-bab7-7cc451009cc2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/33d8879e-24de-4dd1-bab7-7cc451009cc2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 11 Apr 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:65:15:20:49:8c:fd:e5:6c:ca:27:f0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33d8879e-24de-4dd1-bab7-7cc451009cc2 Validity Not Before: Apr 4 13:00:29 2026 GMT Not After : Jul 3 13:00:29 2026 GMT Subject: CN=e848d186-054d-4461-9355-30270a279d4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:53:af:e4:95:5b:42:92:af:f4:40:a8:13:c1: d8:ca:3c:58:ea:7d:c3:9e:fd:69:95:78:8a:f4:9e: 2a:08:15:eb:6b:9f:12:8a:ab:e0:06:b0:4e:35:a4: 7a:85:2e:bd:19:db:db:eb:16:b4:a0:03:82:bd:a4: d8:da:f4:88:28:4c:ca:5b:ba:6e:61:7b:08:66:e3: 3a:69:19:c9:39:8c:0b:c0:e7:31:33:d0:24:62:54: 9b:8a:06:09:95:a9:96:5a:26:4f:89:e0:69:b2:3b: 11:1a:50:7f:f6:c0:02:50:07:24:91:71:ac:ca:49: 4c:82:1c:1b:12:ad:d5:56:ea:9d:54:ff:14:51:7f: 2a:39:6d:87:8a:aa:d0:c9:44:d9:c0:a5:3d:3d:c9: b0:2f:41:9f:a4:fd:40:f8:cc:fe:4a:4e:31:e6:c3: 3f:94:b0:ef:0e:1c:1e:f1:40:45:17:09:d0:8d:f1: 8c:3b:d1:fa:7c:88:b8:a8:fc:b5:c5:2e:ec:2a:9d: 7c:3a:e6:60:90:6d:1d:a4:83:7e:6c:f5:28:7d:41: 04:19:12:52:e0:0f:7c:f7:fb:c8:c9:16:9b:82:82: 77:48:89:b3:54:83:3c:28:cc:c6:03:66:ed:eb:c0: b9:f8:32:52:ed:9b:a9:b6:12:0f:91:07:13:63:08: cc:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:3D:CB:E6:05:09:04:35:81:75:8F:CA:C7:D7:41:C9:65:D4:75:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/33d8879e-24de-4dd1-bab7-7cc451009cc2/83c7a286-9c49-3189-98ae-ea46ce63e22b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/33d8879e-24de-4dd1-bab7-7cc451009cc2/33d8879e-24de-4dd1-bab7-7cc451009cc2.crl X509v3 Authority Key Identifier: keyid:73:BA:5F:95:C1:65:EE:FB:35:7E:84:D5:73:65:DA:F5:08:AC:EE:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/33d8879e-24de-4dd1-bab7-7cc451009cc2.cer sbgp-ipAddrBlock: critical IPv4: 23.134.236.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:fe:1a:34:8f:5f:46:79:b7:28:9d:90:17:e5:6c:5f:99:ba: bf:d2:7f:1a:0d:ce:11:d7:06:3c:d4:86:20:2d:a2:16:05:61: b6:36:f0:ad:11:93:01:ab:94:21:e5:24:f0:89:8a:d7:09:b0: a4:de:b2:2a:ed:5d:cc:49:44:0a:7e:46:ef:01:ec:01:2d:bb: a3:3f:b1:f7:b1:6f:ed:ed:1a:cd:aa:7a:e0:93:7f:a8:ef:55: 2f:8a:a6:ff:34:af:86:57:60:6e:ef:39:19:52:2e:4f:67:4b: eb:0c:8b:62:95:52:d7:1c:c5:9b:f1:e8:01:76:08:ce:90:95: 43:40:86:98:2a:1c:3e:1f:18:07:8e:61:38:96:cb:3e:25:d4: ad:82:6b:a5:6c:d2:41:7d:26:68:1d:f7:7d:0a:78:1e:93:95: 6a:37:95:14:25:c8:aa:d0:cd:8e:59:6c:ee:1a:1b:cb:92:81: eb:d7:ba:01:7f:a5:ae:b0:6b:9b:a9:07:10:2e:c8:b5:2a:32: 9b:c8:6d:61:99:98:71:34:2e:78:dd:f3:55:50:dc:77:15:ac: b8:c7:14:42:eb:36:c1:e5:3e:31:79:e8:c6:48:a8:be:79:3e: d0:c2:47:e5:c2:cc:8d:18:c9:1c:f3:e8:f9:f2:fb:ea:6b:be: a3:67:49:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1lFSBJjP3lbMon8IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzNkODg3OWUtMjRkZS00ZGQxLWJhYjctN2NjNDUxMDA5 Y2MyMB4XDTI2MDQwNDEzMDAyOVoXDTI2MDcwMzEzMDAyOVowLzEtMCsGA1UEAxMk ZTg0OGQxODYtMDU0ZC00NDYxLTkzNTUtMzAyNzBhMjc5ZDRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAglOv5JVbQpKv9ECoE8HYyjxY6n3Dnv1plXiK 9J4qCBXra58SiqvgBrBONaR6hS69Gdvb6xa0oAOCvaTY2vSIKEzKW7puYXsIZuM6 aRnJOYwLwOcxM9AkYlSbigYJlamWWiZPieBpsjsRGlB/9sACUAckkXGsyklMghwb Eq3VVuqdVP8UUX8qOW2HiqrQyUTZwKU9PcmwL0GfpP1A+Mz+Sk4x5sM/lLDvDhwe 8UBFFwnQjfGMO9H6fIi4qPy1xS7sKp18OuZgkG0dpIN+bPUofUEEGRJS4A989/vI yRabgoJ3SImzVIM8KMzGA2bt68C5+DJS7ZupthIPkQcTYwjMrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBE9y+YFCQQ1gXWPysfXQcll1HVhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8zM2Q4 ODc5ZS0yNGRlLTRkZDEtYmFiNy03Y2M0NTEwMDljYzIvODNjN2EyODYtOWM0OS0z MTg5LTk4YWUtZWE0NmNlNjNlMjJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMzNkODg3OWUtMjRkZS00ZGQxLWJh YjctN2NjNDUxMDA5Y2MyLzMzZDg4NzllLTI0ZGUtNGRkMS1iYWI3LTdjYzQ1MTAw OWNjMi5jcmwwHwYDVR0jBBgwFoAUc7pflcFl7vs1foTVc2Xa9Qis7qswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8zM2Q4ODc5ZS0yNGRlLTRkZDEtYmFiNy03Y2M0 NTEwMDljYzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4bsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKr+GjSPX0Z5tyidkBflbF+Zur/SfxoNzhHXBjzUhiAtohYFYbY28K0R kwGrlCHlJPCJitcJsKTesirtXcxJRAp+Ru8B7AEtu6M/sfexb+3tGs2qeuCTf6jv VS+Kpv80r4ZXYG7vORlSLk9nS+sMi2KVUtccxZvx6AF2CM6QlUNAhpgqHD4fGAeO YTiWyz4l1K2Ca6Vs0kF9Jmgd930KeB6TlWo3lRQlyKrQzY5ZbO4aG8uSgevXugF/ pa6wa5upBxAuyLUqMpvIbWGZmHE0Lnjd81VQ3HcVrLjHFELrNsHlPjF56MZIqL55 PtDCR+XCzI0YyRzz6Pny++prvqNnSZE= -----END CERTIFICATE-----Generated at Fri Apr 10 04:08:26 2026 by rpki-client