$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22112ce0-c91c-449e-8bbb-12e44f5a3e41/59909e65-5a05-323c-879f-bcfb3a64d534.roa File: 59909e65-5a05-323c-879f-bcfb3a64d534.roa (raw, json) Hash identifier: OOrYgNzopkpuBpPtTYOGFM/WyXO6jmaWe8zj9Eu8BIs= Subject key identifier: 9D:BD:75:AD:CE:A8:83:87:60:EC:29:EA:80:60:94:F2:51:A3:7E:9D Certificate issuer: /CN=22112ce0-c91c-449e-8bbb-12e44f5a3e41 Certificate serial: 010D0C9F4328584E2D9F0D2970A6BBB3DBB24140 Authority key identifier: 42:B6:F1:BF:CF:E2:C5:65:CE:65:65:68:1C:AD:E1:E3:F8:A3:A7:57 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22112ce0-c91c-449e-8bbb-12e44f5a3e41.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22112ce0-c91c-449e-8bbb-12e44f5a3e41/59909e65-5a05-323c-879f-bcfb3a64d534.roa Signing time: Mon 15 Jun 2026 09:00:12 +0000 ROA not before: Mon 15 Jun 2026 09:00:12 +0000 ROA not after: Sun 13 Sep 2026 09:00:12 +0000 asID: 397131 IP address blocks: 23.170.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22112ce0-c91c-449e-8bbb-12e44f5a3e41/22112ce0-c91c-449e-8bbb-12e44f5a3e41.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22112ce0-c91c-449e-8bbb-12e44f5a3e41/22112ce0-c91c-449e-8bbb-12e44f5a3e41.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22112ce0-c91c-449e-8bbb-12e44f5a3e41.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 17 Jun 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:2d:9f:0d:29:70:a6:bb:b3:db:b2:41:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22112ce0-c91c-449e-8bbb-12e44f5a3e41 Validity Not Before: Jun 15 09:00:12 2026 GMT Not After : Sep 13 09:00:12 2026 GMT Subject: CN=161ab7ed-b3f2-4728-a13e-69314aacfecf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:e8:11:10:69:11:eb:09:ce:a4:da:81:8c:3a: 56:36:28:6b:4b:f4:5a:be:66:9f:d7:aa:ef:bd:32: fc:f6:12:20:e4:23:cd:5e:c5:10:15:1b:d1:76:55: 4c:d6:86:2d:f0:d8:b5:89:37:46:dc:e9:63:1f:3a: a9:62:26:40:2d:e3:f1:ac:99:df:81:67:24:8d:5d: f9:18:3b:6d:da:b8:ad:e5:cd:f3:71:db:46:46:ff: 05:95:13:1f:a7:c2:b8:6f:5f:0d:41:99:49:d3:7a: 60:e2:39:cc:bc:0f:02:50:62:71:36:82:0c:ae:30: 3a:2e:fc:f5:ca:9b:52:3a:4a:d5:63:3e:1a:62:10: 44:10:e0:06:4c:28:4a:d0:76:09:b6:e8:25:df:80: cc:37:6c:48:3a:3b:39:be:69:09:a9:a2:ad:ac:68: 40:5e:20:67:91:68:f4:9d:25:91:65:4e:a8:ed:d9: 9d:eb:c3:b1:3d:a1:6c:e2:2f:7f:4f:db:f4:28:6a: 17:0d:ef:a7:93:6d:58:c6:e2:d1:85:65:35:3f:d1: 7f:88:9a:af:52:61:78:4f:04:13:6f:bd:18:99:10: a2:c1:49:ba:22:95:a9:e9:8b:09:b3:b7:27:78:ea: 7b:2b:7e:ff:88:05:dd:0d:2a:78:2e:7c:5a:4a:17: 38:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:BD:75:AD:CE:A8:83:87:60:EC:29:EA:80:60:94:F2:51:A3:7E:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22112ce0-c91c-449e-8bbb-12e44f5a3e41/59909e65-5a05-323c-879f-bcfb3a64d534.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22112ce0-c91c-449e-8bbb-12e44f5a3e41/22112ce0-c91c-449e-8bbb-12e44f5a3e41.crl X509v3 Authority Key Identifier: keyid:42:B6:F1:BF:CF:E2:C5:65:CE:65:65:68:1C:AD:E1:E3:F8:A3:A7:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22112ce0-c91c-449e-8bbb-12e44f5a3e41.cer sbgp-ipAddrBlock: critical IPv4: 23.170.33.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:cf:8e:05:ab:bd:f4:64:a9:df:cf:00:d5:9e:51:10:59:c7: 64:3e:fa:cb:83:19:34:f5:2b:24:27:f0:0b:f9:8c:67:ef:a4: b6:75:89:c6:46:f0:37:85:73:db:27:55:60:f5:a7:c2:2d:45: e3:b0:03:52:06:c8:62:9b:36:e4:a1:3e:43:21:01:27:8e:4f: d4:b5:81:89:d8:70:28:ef:1e:40:3c:2f:9b:82:7b:09:42:ad: ab:af:a8:ac:13:f4:c2:4c:72:25:c1:af:ad:ed:b4:cd:e5:a0: d9:ba:e3:ef:76:cb:2f:38:dc:8f:cf:bb:76:94:80:2e:5b:f9: 57:4b:bf:b0:d0:78:c3:fd:e0:52:1a:44:82:14:a2:3f:e1:db: 9d:76:75:97:19:16:30:b6:f0:1f:dd:c9:7c:d5:b1:86:e0:71: ed:62:7c:13:89:54:47:cd:00:89:19:b4:2a:a0:bb:6a:7c:94: 93:f4:29:90:19:95:ae:90:6a:77:0c:e6:bf:3d:c7:11:5c:b9: 6f:3f:45:f2:48:bf:46:f1:45:96:02:c0:f5:85:56:aa:2c:e2: c2:3c:fe:88:a0:3a:88:41:38:59:61:45:7e:a2:1b:d6:56:0b: 65:e8:db:5a:68:fe:00:93:db:0b:e0:62:bb:1a:7f:31:7c:2d: fa:c1:cc:16 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4tnw0pcKa7s9uyQUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjIxMTJjZTAtYzkxYy00NDllLThiYmItMTJlNDRmNWEz ZTQxMB4XDTI2MDYxNTA5MDAxMloXDTI2MDkxMzA5MDAxMlowLzEtMCsGA1UEAxMk MTYxYWI3ZWQtYjNmMi00NzI4LWExM2UtNjkzMTRhYWNmZWNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAougREGkR6wnOpNqBjDpWNihrS/Ravmaf16rv vTL89hIg5CPNXsUQFRvRdlVM1oYt8Ni1iTdG3OljHzqpYiZALePxrJnfgWckjV35 GDtt2rit5c3zcdtGRv8FlRMfp8K4b18NQZlJ03pg4jnMvA8CUGJxNoIMrjA6Lvz1 yptSOkrVYz4aYhBEEOAGTChK0HYJtugl34DMN2xIOjs5vmkJqaKtrGhAXiBnkWj0 nSWRZU6o7dmd68OxPaFs4i9/T9v0KGoXDe+nk21YxuLRhWU1P9F/iJqvUmF4TwQT b70YmRCiwUm6IpWp6YsJs7cneOp7K37/iAXdDSp4LnxaShc4GQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ29da3OqIOHYOwp6oBglPJRo36dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yMjEx MmNlMC1jOTFjLTQ0OWUtOGJiYi0xMmU0NGY1YTNlNDEvNTk5MDllNjUtNWEwNS0z MjNjLTg3OWYtYmNmYjNhNjRkNTM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMjIxMTJjZTAtYzkxYy00NDllLThi YmItMTJlNDRmNWEzZTQxLzIyMTEyY2UwLWM5MWMtNDQ5ZS04YmJiLTEyZTQ0ZjVh M2U0MS5jcmwwHwYDVR0jBBgwFoAUQrbxv8/ixWXOZWVoHK3h4/ijp1cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8yMjExMmNlMC1jOTFjLTQ0OWUtOGJiYi0xMmU0 NGY1YTNlNDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6ohMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABLPjgWrvfRkqd/PANWeURBZx2Q++suDGTT1KyQn8Av5jGfvpLZ1icZG 8DeFc9snVWD1p8ItReOwA1IGyGKbNuShPkMhASeOT9S1gYnYcCjvHkA8L5uCewlC rauvqKwT9MJMciXBr63ttM3loNm64+92yy843I/Pu3aUgC5b+VdLv7DQeMP94FIa RIIUoj/h2512dZcZFjC28B/dyXzVsYbgce1ifBOJVEfNAIkZtCqgu2p8lJP0KZAZ la6QancM5r89xxFcuW8/RfJIv0bxRZYCwPWFVqos4sI8/oigOohBOFlhRX6iG9ZW C2Xo21po/gCT2wvgYrsafzF8LfrBzBY= -----END CERTIFICATE-----Generated at Tue Jun 16 11:13:19 2026 by rpki-client