$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4932db3d-add9-3215-bb5b-1b77692be1c9.roa File: 4932db3d-add9-3215-bb5b-1b77692be1c9.roa (raw, json) Hash identifier: /pNCymcRj0QGU4o43ALaEW2ctG9UHC4oMV26swnqxlY= Subject key identifier: 5F:13:EA:DF:8D:4E:04:4C:9F:38:BA:2D:7E:C3:01:0E:32:B9:ED:37 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584E89BF8FDD900A3A880A1E6100 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4932db3d-add9-3215-bb5b-1b77692be1c9.roa Signing time: Sat 18 Jul 2026 09:00:12 +0000 ROA not before: Sat 18 Jul 2026 09:00:12 +0000 ROA not after: Fri 16 Oct 2026 09:00:12 +0000 asID: 20940 IP address blocks: 23.33.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Jul 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:89:bf:8f:dd:90:0a:3a:88:0a:1e:61:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Jul 18 09:00:12 2026 GMT Not After : Oct 16 09:00:12 2026 GMT Subject: CN=f16d3ffe-43da-4cf5-a3db-d1b4212fbff7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:77:ad:9d:13:de:90:ec:99:53:52:41:be:0c: 81:f7:73:dc:db:02:19:d8:a3:7d:c7:6f:6a:69:86: 24:2b:0b:28:a0:c8:e4:70:9c:4e:25:dc:25:3e:97: 43:0f:22:21:e9:94:f3:44:68:6d:09:da:a4:8a:4b: b1:24:00:a0:db:41:e4:91:a2:5b:a6:cd:33:ee:fd: ea:80:ee:2a:f8:2b:46:46:d6:9f:01:da:60:6b:99: cb:a4:6d:da:58:90:2c:2b:26:59:d9:22:29:5c:33: 3f:de:bd:e6:91:5d:d8:a6:70:91:70:5e:91:a1:62: c1:dc:01:cc:1b:b0:41:ba:70:cc:80:61:b9:4b:62: 3b:12:32:84:4c:25:85:9e:35:19:bf:e4:db:79:35: 3d:5f:6f:1c:6d:8b:24:13:21:a9:6f:68:a9:f2:d8: bc:ee:1d:10:c2:61:24:ae:b5:8a:c5:ad:0a:ab:f3: a5:61:d2:c9:05:09:3c:cc:68:88:a2:5f:fc:7f:90: b4:e8:1e:69:82:69:6b:d2:3d:d3:7b:bc:92:21:58: d1:e0:4b:dc:1b:00:98:1d:96:20:f1:fa:3a:66:f3: 65:bb:46:f5:a7:e9:79:5f:c8:63:84:d5:e8:e3:48: ba:c1:08:fb:df:8f:6e:29:0f:94:20:ba:e7:80:6f: b0:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:13:EA:DF:8D:4E:04:4C:9F:38:BA:2D:7E:C3:01:0E:32:B9:ED:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/4932db3d-add9-3215-bb5b-1b77692be1c9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.33.1.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:69:2c:e3:29:70:9b:dc:a1:db:dd:1a:75:2e:12:78:0a:2d: 55:17:43:07:34:2b:9e:c5:0f:2d:32:3f:79:c2:b6:d4:e9:27: e8:80:07:d1:10:cc:71:17:a5:81:c4:d7:9a:54:0e:48:16:39: 76:59:52:2d:c7:48:57:58:e4:0c:44:c3:97:bd:c2:a8:6f:6d: 03:c5:51:ef:7b:0e:87:bd:9a:f3:d1:27:0c:50:a5:f8:9c:49: 2e:c8:79:96:ec:69:31:d6:3e:d0:84:64:4d:f7:83:3d:1d:b2: 26:04:54:21:3e:97:c0:78:67:d8:9d:11:bc:36:48:cd:07:ec: 2d:2a:89:1a:7e:65:40:85:17:85:1d:7a:f3:c2:5b:08:30:b1: 9d:4f:de:02:dd:ad:81:3a:54:a8:18:c6:65:c3:6d:be:47:fa: b7:12:d3:07:32:4e:51:9b:05:df:33:77:31:46:c6:aa:6d:06: e5:f8:2e:35:fe:94:87:17:12:f0:e9:48:b7:a4:4c:1f:15:ba: f1:e6:44:64:19:43:68:7b:1c:80:44:fa:3b:c0:27:21:e8:a4: 1b:37:59:da:b0:29:29:8c:f1:2c:13:0f:8c:13:e9:1f:7e:2a: 47:b6:ed:27:31:e2:be:69:6c:e2:0b:12:d0:9c:0d:fa:50:7e: 0d:16:5d:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6Jv4/dkAo6iAoeYQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDcxODA5MDAxMloXDTI2MTAxNjA5MDAxMlowLzEtMCsGA1UEAxMk ZjE2ZDNmZmUtNDNkYS00Y2Y1LWEzZGItZDFiNDIxMmZiZmY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAknetnRPekOyZU1JBvgyB93Pc2wIZ2KN9x29q aYYkKwsooMjkcJxOJdwlPpdDDyIh6ZTzRGhtCdqkikuxJACg20HkkaJbps0z7v3q gO4q+CtGRtafAdpga5nLpG3aWJAsKyZZ2SIpXDM/3r3mkV3YpnCRcF6RoWLB3AHM G7BBunDMgGG5S2I7EjKETCWFnjUZv+TbeTU9X28cbYskEyGpb2ip8ti87h0QwmEk rrWKxa0Kq/OlYdLJBQk8zGiIol/8f5C06B5pgmlr0j3Te7ySIVjR4EvcGwCYHZYg 8fo6ZvNlu0b1p+l5X8hjhNXo40i6wQj7349uKQ+UILrngG+wRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF8T6t+NTgRMnzi6LX7DAQ4yue03MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNDkzMmRiM2QtYWRkOS0z MjE1LWJiNWItMWI3NzY5MmJlMWM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFyEBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB1pLOMpcJvcodvdGnUuEngKLVUXQwc0K57FDy0yP3nCttTpJ+iAB9EQ zHEXpYHE15pUDkgWOXZZUi3HSFdY5AxEw5e9wqhvbQPFUe97Doe9mvPRJwxQpfic SS7IeZbsaTHWPtCEZE33gz0dsiYEVCE+l8B4Z9idEbw2SM0H7C0qiRp+ZUCFF4Ud evPCWwgwsZ1P3gLdrYE6VKgYxmXDbb5H+rcS0wcyTlGbBd8zdzFGxqptBuX4LjX+ lIcXEvDpSLekTB8VuvHmRGQZQ2h7HIBE+jvAJyHopBs3WdqwKSmM8SwTD4wT6R9+ Kke27Scx4r5pbOILEtCcDfpQfg0WXUs= -----END CERTIFICATE-----Generated at Tue Jul 21 20:00:56 2026 by rpki-client