$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22112ce0-c91c-449e-8bbb-12e44f5a3e41/59909e65-5a05-323c-879f-bcfb3a64d534.roa File: 59909e65-5a05-323c-879f-bcfb3a64d534.roa (raw, json) Hash identifier: DO4tBrgYZ/3ScJUgEluLdlk/WrsdxC3IJsKFQayYYIo= Subject key identifier: C6:5D:A2:B3:09:B0:2B:FD:E6:CD:BB:7A:48:F2:53:99:D8:95:BD:36 Certificate issuer: /CN=22112ce0-c91c-449e-8bbb-12e44f5a3e41 Certificate serial: 010D0C9F4328584D4D5A4DFF0C0FE25DA45A1F80 Authority key identifier: 42:B6:F1:BF:CF:E2:C5:65:CE:65:65:68:1C:AD:E1:E3:F8:A3:A7:57 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22112ce0-c91c-449e-8bbb-12e44f5a3e41.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22112ce0-c91c-449e-8bbb-12e44f5a3e41/59909e65-5a05-323c-879f-bcfb3a64d534.roa Signing time: Fri 27 Mar 2026 01:00:31 +0000 ROA not before: Fri 27 Mar 2026 01:00:31 +0000 ROA not after: Thu 25 Jun 2026 01:00:31 +0000 asID: 397131 IP address blocks: 23.170.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22112ce0-c91c-449e-8bbb-12e44f5a3e41/22112ce0-c91c-449e-8bbb-12e44f5a3e41.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22112ce0-c91c-449e-8bbb-12e44f5a3e41/22112ce0-c91c-449e-8bbb-12e44f5a3e41.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22112ce0-c91c-449e-8bbb-12e44f5a3e41.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:4d:5a:4d:ff:0c:0f:e2:5d:a4:5a:1f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22112ce0-c91c-449e-8bbb-12e44f5a3e41 Validity Not Before: Mar 27 01:00:31 2026 GMT Not After : Jun 25 01:00:31 2026 GMT Subject: CN=e2487f10-e10b-4e70-96ef-b22d8fd4900d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:a1:6a:02:07:a3:ac:72:a5:8b:20:e4:cc:a5: 92:88:82:0b:5f:97:f3:bc:20:e5:18:ae:bb:e1:27: e6:00:56:f8:24:55:05:1d:d7:af:35:5f:64:28:63: 33:aa:4b:89:28:a8:94:07:4b:e1:0e:3b:b1:98:81: b3:b3:bf:9c:68:ce:45:b2:a2:c3:da:a1:1a:e4:80: fe:8b:3a:e0:e4:5a:fb:55:b9:c3:19:70:80:ed:67: 2a:fa:40:f8:90:64:3b:91:10:5f:ba:90:5a:d4:d7: 48:54:8d:44:74:7a:92:1d:87:d0:b5:bf:40:92:b8: 97:39:a4:b3:42:3c:e3:65:67:5a:b9:ba:ff:64:14: a4:11:54:52:ad:80:84:88:a8:89:74:07:59:73:a3: 84:71:26:f7:90:e3:da:27:9a:72:36:74:77:f1:bb: 7b:9b:9e:19:eb:82:0c:34:eb:1d:db:25:02:1a:dc: 3a:3b:25:ec:de:be:7f:9c:52:46:a8:54:ba:3a:89: eb:2f:6c:91:dc:ed:9f:97:25:26:72:b7:ce:e3:80: cb:39:e0:d2:29:d8:42:e2:98:4b:dc:21:43:4c:cd: 4c:8b:b0:6c:32:27:be:5f:2e:25:60:c9:4e:26:1e: 47:3b:4b:66:70:f1:5e:7b:74:a9:84:3f:f3:a4:01: e5:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:5D:A2:B3:09:B0:2B:FD:E6:CD:BB:7A:48:F2:53:99:D8:95:BD:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22112ce0-c91c-449e-8bbb-12e44f5a3e41/59909e65-5a05-323c-879f-bcfb3a64d534.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22112ce0-c91c-449e-8bbb-12e44f5a3e41/22112ce0-c91c-449e-8bbb-12e44f5a3e41.crl X509v3 Authority Key Identifier: keyid:42:B6:F1:BF:CF:E2:C5:65:CE:65:65:68:1C:AD:E1:E3:F8:A3:A7:57 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22112ce0-c91c-449e-8bbb-12e44f5a3e41.cer sbgp-ipAddrBlock: critical IPv4: 23.170.33.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:67:1e:d8:e1:c2:46:b4:d7:ad:0f:95:9c:bf:5d:4a:9a:a4: cb:6a:e5:6c:00:8e:44:d4:2b:7d:2f:71:40:f7:98:30:a8:76: 99:1e:d0:98:fa:25:fe:5c:16:2a:67:6b:79:7f:5c:32:8f:3c: 7f:e7:bf:b4:8f:d7:92:c8:75:d1:82:19:68:e3:99:0b:e0:c7: be:05:db:e9:92:c3:f3:62:49:6d:37:fa:5a:8a:28:45:60:04: 2b:97:d2:2e:81:08:bc:50:2e:bb:32:25:98:31:cd:d9:2b:3a: 8e:5a:4d:5b:d1:4b:85:ad:4d:7e:45:89:69:93:14:b2:ab:17: c5:ff:42:56:e1:2c:ce:75:d8:3c:5f:4c:f7:51:9c:75:84:e7: 26:2e:0e:02:da:29:27:30:f1:75:b7:15:f6:d1:ed:c1:c1:7a: 03:eb:fc:97:a8:88:e2:a8:af:3e:81:40:65:7d:ce:6d:b0:6f: 94:10:2a:f5:71:1b:cb:1d:dc:d8:2a:95:89:6e:ff:51:c6:2a: c9:a8:4c:73:11:ef:9c:19:18:08:7d:ba:35:68:2f:3e:06:ee: 48:b1:1b:c9:85:67:3d:b5:37:05:24:86:7b:64:e8:67:7d:a4: 71:a7:3a:bf:de:1a:c3:81:f9:95:4c:6b:08:01:91:6c:30:78: 6a:c5:69:1c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1NWk3/DA/iXaRaH4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjIxMTJjZTAtYzkxYy00NDllLThiYmItMTJlNDRmNWEz ZTQxMB4XDTI2MDMyNzAxMDAzMVoXDTI2MDYyNTAxMDAzMVowLzEtMCsGA1UEAxMk ZTI0ODdmMTAtZTEwYi00ZTcwLTk2ZWYtYjIyZDhmZDQ5MDBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz6FqAgejrHKliyDkzKWSiIILX5fzvCDlGK67 4SfmAFb4JFUFHdevNV9kKGMzqkuJKKiUB0vhDjuxmIGzs7+caM5FsqLD2qEa5ID+ izrg5Fr7VbnDGXCA7Wcq+kD4kGQ7kRBfupBa1NdIVI1EdHqSHYfQtb9AkriXOaSz QjzjZWdaubr/ZBSkEVRSrYCEiKiJdAdZc6OEcSb3kOPaJ5pyNnR38bt7m54Z64IM NOsd2yUCGtw6OyXs3r5/nFJGqFS6OonrL2yR3O2flyUmcrfO44DLOeDSKdhC4phL 3CFDTM1Mi7BsMie+Xy4lYMlOJh5HO0tmcPFee3SphD/zpAHl7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMZdorMJsCv95s27ekjyU5nYlb02MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yMjEx MmNlMC1jOTFjLTQ0OWUtOGJiYi0xMmU0NGY1YTNlNDEvNTk5MDllNjUtNWEwNS0z MjNjLTg3OWYtYmNmYjNhNjRkNTM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMjIxMTJjZTAtYzkxYy00NDllLThi YmItMTJlNDRmNWEzZTQxLzIyMTEyY2UwLWM5MWMtNDQ5ZS04YmJiLTEyZTQ0ZjVh M2U0MS5jcmwwHwYDVR0jBBgwFoAUQrbxv8/ixWXOZWVoHK3h4/ijp1cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS8yMjExMmNlMC1jOTFjLTQ0OWUtOGJiYi0xMmU0 NGY1YTNlNDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF6ohMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACZnHtjhwka0160PlZy/XUqapMtq5WwAjkTUK30vcUD3mDCodpke0Jj6 Jf5cFipna3l/XDKPPH/nv7SP15LIddGCGWjjmQvgx74F2+mSw/NiSW03+lqKKEVg BCuX0i6BCLxQLrsyJZgxzdkrOo5aTVvRS4WtTX5FiWmTFLKrF8X/QlbhLM512Dxf TPdRnHWE5yYuDgLaKScw8XW3FfbR7cHBegPr/JeoiOKorz6BQGV9zm2wb5QQKvVx G8sd3NgqlYlu/1HGKsmoTHMR75wZGAh9ujVoLz4G7kixG8mFZz21NwUkhntk6Gd9 pHGnOr/eGsOB+ZVMawgBkWwweGrFaRw= -----END CERTIFICATE-----Generated at Fri Apr 17 10:17:50 2026 by rpki-client