$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22112ce0-c91c-449e-8bbb-12e44f5a3e41/59909e65-5a05-323c-879f-bcfb3a64d534.roa File: 59909e65-5a05-323c-879f-bcfb3a64d534.roa (raw, json) Hash identifier: C9+5syeu3AA3nzngTsY4bYtg/DQAYIM8ZhU2JaJRoC4= Subject key identifier: 09:2C:ED:F8:AD:26:4C:D6:13:A7:09:E1:06:69:0E:CE:FF:D2:6F:FA Certificate issuer: /CN=22112ce0-c91c-449e-8bbb-12e44f5a3e41 Certificate serial: 010D0C9F4328584F71ED899BD80C3F75A0AA95C0 Authority key identifier: 42:B6:F1:BF:CF:E2:C5:65:CE:65:65:68:1C:AD:E1:E3:F8:A3:A7:57 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22112ce0-c91c-449e-8bbb-12e44f5a3e41.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22112ce0-c91c-449e-8bbb-12e44f5a3e41/59909e65-5a05-323c-879f-bcfb3a64d534.roa Signing time: Fri 09 Oct 2026 13:00:13 +0000 ROA not before: Fri 09 Oct 2026 13:00:13 +0000 ROA not after: Thu 07 Jan 2027 14:00:13 +0000 asID: 397131 IP address blocks: 23.170.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22112ce0-c91c-449e-8bbb-12e44f5a3e41/22112ce0-c91c-449e-8bbb-12e44f5a3e41.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22112ce0-c91c-449e-8bbb-12e44f5a3e41/22112ce0-c91c-449e-8bbb-12e44f5a3e41.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22112ce0-c91c-449e-8bbb-12e44f5a3e41.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 15 Oct 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:71:ed:89:9b:d8:0c:3f:75:a0:aa:95:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22112ce0-c91c-449e-8bbb-12e44f5a3e41 Validity Not Before: Oct 9 13:00:13 2026 GMT Not After : Jan 7 14:00:13 2027 GMT Subject: CN=68ed6786-6108-4c77-8fe3-6764b13b1b74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:3a:8b:3b:10:6b:a8:84:da:e7:11:c7:f4:4a: 6b:d4:95:df:8a:61:eb:b3:0f:14:3b:40:54:be:ff: 9a:b1:98:82:ae:78:79:05:c3:e4:5e:b6:0a:0d:7d: ba:47:d7:1d:c8:89:19:90:ba:19:e2:8c:4e:85:b3: 07:1a:71:2d:cb:53:17:ae:04:b1:23:ae:14:49:f5: e3:80:41:2c:e1:86:cf:c0:35:d4:96:5b:50:22:f7: ad:a5:90:4a:93:98:42:20:69:36:d2:03:ab:65:4d: 23:35:a0:f4:52:35:ec:0c:e6:70:e2:01:da:ca:5d: 1b:fd:dc:36:05:6e:8a:76:90:e0:4d:cb:52:fb:bc: 8e:dd:f4:8c:88:d0:03:df:f2:af:81:88:38:79:6e: 90:1f:52:c8:58:4c:2e:2d:2a:09:93:d7:02:1e:10: a8:66:1e:f6:76:99:2a:4c:ef:e1:b7:e9:33:48:c0: 4d:4d:85:ba:ae:8f:0d:42:e0:6d:77:84:23:5b:e5: 72:2d:62:3a:b5:f6:45:a2:69:d6:6c:00:90:a6:dc: ac:cb:f1:fb:26:e9:bb:fb:b4:fd:dc:ca:90:fa:ed: ea:75:57:7d:ea:cb:0d:ed:15:9c:cd:9c:2d:d7:d6: 61:1a:4a:b5:bc:39:70:89:39:24:95:2c:89:3f:1a: 8d:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:2C:ED:F8:AD:26:4C:D6:13:A7:09:E1:06:69:0E:CE:FF:D2:6F:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22112ce0-c91c-449e-8bbb-12e44f5a3e41/59909e65-5a05-323c-879f-bcfb3a64d534.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22112ce0-c91c-449e-8bbb-12e44f5a3e41/22112ce0-c91c-449e-8bbb-12e44f5a3e41.crl X509v3 Authority Key Identifier: keyid:42:B6:F1:BF:CF:E2:C5:65:CE:65:65:68:1C:AD:E1:E3:F8:A3:A7:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22112ce0-c91c-449e-8bbb-12e44f5a3e41.cer sbgp-ipAddrBlock: critical IPv4: 23.170.33.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:cc:b6:aa:60:62:62:5c:a6:66:1f:88:8d:3b:33:2a:7b:24: 58:2e:43:45:cf:29:13:35:11:a4:15:50:2a:03:c1:aa:ae:48: f9:38:bb:be:23:ef:19:46:eb:38:d8:9e:95:95:e8:b2:bb:d4: e8:d4:4b:31:9d:6d:3b:2d:53:9b:30:a7:4c:2e:80:53:d1:4a: ec:12:64:6f:87:a6:b2:29:d3:95:66:ab:56:b7:4c:bf:c3:3c: 2d:cb:14:6e:c2:f5:dc:6c:d4:aa:3a:17:f1:5a:fe:82:46:24: 4c:b9:0e:e4:6b:47:5e:63:7d:31:0e:ab:ff:d3:6a:58:70:44: 65:64:e3:cc:58:2f:89:66:ba:20:ca:2c:2d:e5:ef:d5:c3:84: 38:bd:b6:08:ce:00:23:d4:6d:57:76:db:d8:27:8e:ba:ff:56: f8:cc:06:74:26:d5:bf:25:bc:42:7c:c6:33:84:2c:d7:24:55: 8c:4d:e7:63:38:62:d6:74:4e:f1:d6:eb:4e:77:0b:f6:ec:05: 76:65:7d:e1:9c:cd:e4:95:f0:d6:80:07:20:52:64:5f:cc:73: 73:26:4b:12:2d:57:06:92:4a:a4:f3:1f:22:e5:cd:14:de:23: be:30:0a:ac:9a:f5:e4:b3:32:58:ff:78:3a:c3:80:cb:38:01: 0e:8f:78:13 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9x7Ymb2Aw/daCqlcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjIxMTJjZTAtYzkxYy00NDllLThiYmItMTJlNDRmNWEz ZTQxMB4XDTI2MTAwOTEzMDAxM1oXDTI3MDEwNzE0MDAxM1owLzEtMCsGA1UEAxMk NjhlZDY3ODYtNjEwOC00Yzc3LThmZTMtNjc2NGIxM2IxYjc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuzqLOxBrqITa5xHH9Epr1JXfimHrsw8UO0BU vv+asZiCrnh5BcPkXrYKDX26R9cdyIkZkLoZ4oxOhbMHGnEty1MXrgSxI64USfXj gEEs4YbPwDXUlltQIvetpZBKk5hCIGk20gOrZU0jNaD0UjXsDOZw4gHayl0b/dw2 BW6KdpDgTctS+7yO3fSMiNAD3/KvgYg4eW6QH1LIWEwuLSoJk9cCHhCoZh72dpkq TO/ht+kzSMBNTYW6ro8NQuBtd4QjW+VyLWI6tfZFomnWbACQptysy/H7Jum7+7T9 3MqQ+u3qdVd96ssN7RWczZwt19ZhGkq1vDlwiTkklSyJPxqNdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAks7fitJkzWE6cJ4QZpDs7/0m/6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yMjEx MmNlMC1jOTFjLTQ0OWUtOGJiYi0xMmU0NGY1YTNlNDEvNTk5MDllNjUtNWEwNS0z MjNjLTg3OWYtYmNmYjNhNjRkNTM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMjIxMTJjZTAtYzkxYy00NDllLThi YmItMTJlNDRmNWEzZTQxLzIyMTEyY2UwLWM5MWMtNDQ5ZS04YmJiLTEyZTQ0ZjVh M2U0MS5jcmwwHwYDVR0jBBgwFoAUQrbxv8/ixWXOZWVoHK3h4/ijp1cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8yMjExMmNlMC1jOTFjLTQ0OWUtOGJiYi0xMmU0 NGY1YTNlNDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6ohMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACvMtqpgYmJcpmYfiI07Myp7JFguQ0XPKRM1EaQVUCoDwaquSPk4u74j 7xlG6zjYnpWV6LK71OjUSzGdbTstU5swp0wugFPRSuwSZG+HprIp05Vmq1a3TL/D PC3LFG7C9dxs1Ko6F/Fa/oJGJEy5DuRrR15jfTEOq//TalhwRGVk48xYL4lmuiDK LC3l79XDhDi9tgjOACPUbVd229gnjrr/VvjMBnQm1b8lvEJ8xjOELNckVYxN52M4 YtZ0TvHW6053C/bsBXZlfeGczeSV8NaAByBSZF/Mc3MmSxItVwaSSqTzHyLlzRTe I74wCqya9eSzMlj/eDrDgMs4AQ6PeBM= -----END CERTIFICATE-----Generated at Wed Oct 14 01:59:48 2026 by rpki-client