$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9cfaab4b-7d49-43b7-80dd-84ab0ebeb214/33e98f4a-46f2-39d5-8f60-8120def084e3.roa File: 33e98f4a-46f2-39d5-8f60-8120def084e3.roa (raw, json) Hash identifier: afKvmLziijCkMQN8F1y98io0x5Y1jGeTpza8T/Ml9IE= Subject key identifier: 74:DF:D9:E8:78:BC:8C:F8:A3:78:E5:02:24:2E:77:93:8B:BE:C8:45 Certificate issuer: /CN=9cfaab4b-7d49-43b7-80dd-84ab0ebeb214 Certificate serial: 010D0C9F4328584E7634F3D89EA51F1011562680 Authority key identifier: 61:9D:D7:B9:B2:35:05:84:A5:AC:4A:5E:DB:81:0E:00:C6:38:24:2D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9cfaab4b-7d49-43b7-80dd-84ab0ebeb214.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9cfaab4b-7d49-43b7-80dd-84ab0ebeb214/33e98f4a-46f2-39d5-8f60-8120def084e3.roa Signing time: Sat 11 Jul 2026 09:00:12 +0000 ROA not before: Sat 11 Jul 2026 09:00:12 +0000 ROA not after: Fri 09 Oct 2026 09:00:12 +0000 asID: 30381 IP address blocks: 23.145.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9cfaab4b-7d49-43b7-80dd-84ab0ebeb214/9cfaab4b-7d49-43b7-80dd-84ab0ebeb214.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9cfaab4b-7d49-43b7-80dd-84ab0ebeb214/9cfaab4b-7d49-43b7-80dd-84ab0ebeb214.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9cfaab4b-7d49-43b7-80dd-84ab0ebeb214.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:76:34:f3:d8:9e:a5:1f:10:11:56:26:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9cfaab4b-7d49-43b7-80dd-84ab0ebeb214 Validity Not Before: Jul 11 09:00:12 2026 GMT Not After : Oct 9 09:00:12 2026 GMT Subject: CN=2010f2dc-b91d-4a8d-ac9f-1c24f03b54c1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:25:29:50:ae:7d:30:9f:55:30:02:4c:2c:77: ed:1c:61:ca:5a:0c:01:80:82:c2:b3:97:29:f0:ca: 2f:30:18:85:12:d9:72:e8:d0:67:24:32:2a:eb:6f: 0e:52:20:7a:45:1f:8b:a5:bb:d1:24:cf:e2:a0:b1: 48:24:76:93:56:dc:0b:3f:eb:9d:d1:b4:72:f7:da: 40:fa:35:8f:16:77:fd:ed:b2:07:a0:6f:93:a6:0f: 2d:01:09:94:3f:54:50:80:4c:de:ee:14:72:87:cb: d2:b4:62:b1:55:1f:32:c7:ea:0b:09:76:23:ce:fe: ab:7d:ca:19:74:cc:10:93:d9:3c:55:87:76:02:44: dd:11:9a:46:18:84:fc:e4:00:2d:b0:bb:1c:95:c2: 25:a1:0b:a3:96:f2:f7:40:99:ad:a4:4c:8d:07:fe: 70:13:d4:26:73:23:da:9f:5d:b3:da:38:88:a7:94: 34:dd:f8:b0:96:4a:e7:10:25:8c:b5:5f:d4:33:1b: a2:c3:ff:50:a5:34:1b:29:59:e0:fa:c6:6b:72:da: f0:ab:5c:a8:9b:e3:a3:b7:ec:06:ea:27:d4:7a:5f: 95:32:1d:4c:a7:fc:51:54:69:f7:d1:de:31:34:a5: 1d:50:ed:af:27:b4:63:a3:3b:e8:1d:19:cb:0d:54: 56:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:DF:D9:E8:78:BC:8C:F8:A3:78:E5:02:24:2E:77:93:8B:BE:C8:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9cfaab4b-7d49-43b7-80dd-84ab0ebeb214/33e98f4a-46f2-39d5-8f60-8120def084e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9cfaab4b-7d49-43b7-80dd-84ab0ebeb214/9cfaab4b-7d49-43b7-80dd-84ab0ebeb214.crl X509v3 Authority Key Identifier: keyid:61:9D:D7:B9:B2:35:05:84:A5:AC:4A:5E:DB:81:0E:00:C6:38:24:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/9cfaab4b-7d49-43b7-80dd-84ab0ebeb214.cer sbgp-ipAddrBlock: critical IPv4: 23.145.244.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:2a:23:ad:a6:13:fa:78:7a:33:57:86:e7:85:7f:9e:0c:9f: 14:6e:8d:75:5b:b6:c4:f5:91:49:07:7d:c8:d4:38:e8:28:4f: f9:7c:65:d0:77:8e:d9:7b:b3:5b:35:f0:2e:75:bf:51:9e:5b: 4e:b1:93:80:aa:ab:af:b9:64:ba:09:92:4f:53:e6:46:0c:a0: 4c:b6:57:ee:39:d0:41:6c:50:33:97:87:ce:3b:13:9d:d1:f7: 13:53:ce:80:93:c8:1e:01:4d:bb:ce:3d:80:c8:66:ef:a1:c0: e4:b6:bd:76:b6:67:90:f3:2d:a3:ce:94:de:3d:b0:c1:71:94: c4:06:4d:73:54:26:b2:3c:9b:b7:f2:a5:72:44:43:03:4f:54: 54:2b:a4:c4:2a:07:f1:00:5b:c4:71:b3:23:24:29:83:01:00: a2:0a:39:d2:90:f7:56:8a:5a:17:dd:96:10:9d:26:03:be:1f: 97:68:1b:7a:c5:91:be:49:76:20:57:4d:89:69:e1:7a:2e:50: b1:38:1b:b2:f2:dc:4c:bc:75:26:9f:d6:7c:3a:ff:ca:d6:ad: ff:7f:15:0c:54:8e:6a:06:d4:4f:a8:3e:ff:da:c9:b9:a6:57: c9:e8:2a:60:d2:19:4c:e6:f7:88:d4:d9:ee:fa:89:01:35:12: 76:ea:e7:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE52NPPYnqUfEBFWJoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOWNmYWFiNGItN2Q0OS00M2I3LTgwZGQtODRhYjBlYmVi MjE0MB4XDTI2MDcxMTA5MDAxMloXDTI2MTAwOTA5MDAxMlowLzEtMCsGA1UEAxMk MjAxMGYyZGMtYjkxZC00YThkLWFjOWYtMWMyNGYwM2I1NGMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgyUpUK59MJ9VMAJMLHftHGHKWgwBgILCs5cp 8MovMBiFEtly6NBnJDIq628OUiB6RR+LpbvRJM/ioLFIJHaTVtwLP+ud0bRy99pA +jWPFnf97bIHoG+Tpg8tAQmUP1RQgEze7hRyh8vStGKxVR8yx+oLCXYjzv6rfcoZ dMwQk9k8VYd2AkTdEZpGGIT85AAtsLsclcIloQujlvL3QJmtpEyNB/5wE9QmcyPa n12z2jiIp5Q03fiwlkrnECWMtV/UMxuiw/9QpTQbKVng+sZrctrwq1yom+Ojt+wG 6ifUel+VMh1Mp/xRVGn30d4xNKUdUO2vJ7RjozvoHRnLDVRWYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHTf2eh4vIz4o3jlAiQud5OLvshFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC85Y2Zh YWI0Yi03ZDQ5LTQzYjctODBkZC04NGFiMGViZWIyMTQvMzNlOThmNGEtNDZmMi0z OWQ1LThmNjAtODEyMGRlZjA4NGUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvOWNmYWFiNGItN2Q0OS00M2I3LTgw ZGQtODRhYjBlYmViMjE0LzljZmFhYjRiLTdkNDktNDNiNy04MGRkLTg0YWIwZWJl YjIxNC5jcmwwHwYDVR0jBBgwFoAUYZ3XubI1BYSlrEpe24EOAMY4JC0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC85Y2ZhYWI0Yi03ZDQ5LTQzYjctODBkZC04NGFi MGViZWIyMTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF5H0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI4qI62mE/p4ejNXhueFf54MnxRujXVbtsT1kUkHfcjUOOgoT/l8ZdB3 jtl7s1s18C51v1GeW06xk4Cqq6+5ZLoJkk9T5kYMoEy2V+450EFsUDOXh847E53R 9xNTzoCTyB4BTbvOPYDIZu+hwOS2vXa2Z5DzLaPOlN49sMFxlMQGTXNUJrI8m7fy pXJEQwNPVFQrpMQqB/EAW8RxsyMkKYMBAKIKOdKQ91aKWhfdlhCdJgO+H5doG3rF kb5JdiBXTYlp4XouULE4G7Ly3Ey8dSaf1nw6/8rWrf9/FQxUjmoG1E+oPv/aybmm V8noKmDSGUzm94jU2e76iQE1Enbq54k= -----END CERTIFICATE-----Generated at Sat Jul 18 02:58:36 2026 by rpki-client