$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/caf392a1-07e9-49f4-9a03-df5005333708/2680c2a2-cabf-3554-9a13-b69dcab407b9.roa File: 2680c2a2-cabf-3554-9a13-b69dcab407b9.roa (raw, json) Hash identifier: oXUx/RPduYZaSSSsqwha6ptNczG9WQtEBmNgoAF7q/w= Subject key identifier: F9:77:31:05:08:47:20:0A:CE:8F:4F:CB:6B:B9:B2:E2:08:F5:34:CB Certificate issuer: /CN=caf392a1-07e9-49f4-9a03-df5005333708 Certificate serial: 010D0C9F4328584F3A17D4C9D192D8BA5AADCA00 Authority key identifier: 44:2F:11:CB:79:DB:4D:95:5C:46:F5:8D:92:CB:7D:12:C3:2A:19:4D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/caf392a1-07e9-49f4-9a03-df5005333708.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/caf392a1-07e9-49f4-9a03-df5005333708/2680c2a2-cabf-3554-9a13-b69dcab407b9.roa Signing time: Sat 19 Sep 2026 13:00:12 +0000 ROA not before: Sat 19 Sep 2026 13:00:12 +0000 ROA not after: Fri 18 Dec 2026 14:00:12 +0000 asID: 46962 IP address blocks: 23.133.120.0/24 maxlen: 24 64.93.70.0/24 maxlen: 24 64.93.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/caf392a1-07e9-49f4-9a03-df5005333708/caf392a1-07e9-49f4-9a03-df5005333708.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/caf392a1-07e9-49f4-9a03-df5005333708/caf392a1-07e9-49f4-9a03-df5005333708.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/caf392a1-07e9-49f4-9a03-df5005333708.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Sep 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3a:17:d4:c9:d1:92:d8:ba:5a:ad:ca:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=caf392a1-07e9-49f4-9a03-df5005333708 Validity Not Before: Sep 19 13:00:12 2026 GMT Not After : Dec 18 14:00:12 2026 GMT Subject: CN=5292d7c9-3db9-4b70-a2ca-d1556a99a644 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:f2:22:f0:4d:3d:a2:89:cb:5d:af:1e:16:2f: ac:5f:01:72:26:a6:a1:47:9c:45:39:07:35:21:a0: 04:9f:bb:9c:6d:4f:da:7e:1a:ff:36:b9:ad:fa:4b: a4:b9:b6:af:f0:ad:60:ed:84:fd:05:38:5f:a4:76: bf:6d:38:bf:3e:2b:5c:80:03:ca:b4:c2:63:65:d6: de:13:ad:d3:94:35:a0:c2:39:ff:51:43:09:9d:cc: c7:4c:e2:d5:e3:e4:d6:21:e1:28:cf:ec:25:fc:b0: 5e:f6:84:ef:36:03:88:a4:03:29:cb:b1:6d:35:bb: c8:eb:bb:1f:93:e4:ce:4b:54:6e:95:73:de:77:f9: ea:de:a4:9e:7c:4c:4e:cc:b9:6d:81:12:68:30:3e: 84:0d:28:53:3a:65:5c:2f:5b:8b:81:b2:15:12:c8: 69:d4:7d:d0:a3:c9:b9:41:0a:d5:36:34:a0:a0:a1: 86:05:26:ba:f2:12:72:17:8a:08:7c:3c:a5:37:73: 7d:59:7e:89:a1:9f:ab:0a:42:c7:0e:e7:be:b5:35: ab:62:4d:a2:a0:79:33:4e:16:a0:21:b0:ad:af:51: 5f:38:ba:1d:b9:15:23:03:12:a0:4b:9c:a5:3a:01: 5d:95:ae:a2:10:71:6b:3f:ac:05:b9:aa:e3:e4:32: 36:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:77:31:05:08:47:20:0A:CE:8F:4F:CB:6B:B9:B2:E2:08:F5:34:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/caf392a1-07e9-49f4-9a03-df5005333708/2680c2a2-cabf-3554-9a13-b69dcab407b9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/caf392a1-07e9-49f4-9a03-df5005333708/caf392a1-07e9-49f4-9a03-df5005333708.crl X509v3 Authority Key Identifier: keyid:44:2F:11:CB:79:DB:4D:95:5C:46:F5:8D:92:CB:7D:12:C3:2A:19:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/caf392a1-07e9-49f4-9a03-df5005333708.cer sbgp-ipAddrBlock: critical IPv4: 23.133.120.0/24 64.93.70.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:ba:81:93:20:14:0c:eb:8a:45:46:d1:2c:f2:d5:d4:c9:1e: 89:52:00:bc:8a:e2:d3:bb:6b:6d:39:65:ff:54:9c:08:a9:8a: 5e:a1:31:d4:c3:fb:d1:d7:70:47:f4:26:3f:b1:cd:06:22:99: 1a:04:00:48:e0:c2:1f:d4:c5:7f:c4:47:58:71:0a:ee:a3:32: 4c:7c:7e:8b:3d:22:7a:91:c3:ab:1e:91:cf:27:dd:8b:c1:e3: 13:e6:cf:a4:af:f1:71:ee:d7:4f:0f:a0:b5:62:29:79:3b:5f: 7c:34:a4:e0:f5:8d:d5:d3:75:81:47:0d:e9:22:a8:f6:86:ce: 61:a4:cf:96:7f:87:e4:fd:5a:c0:f4:76:5e:7a:17:4d:f7:e0: 36:af:bb:bd:b5:41:90:e6:9b:90:ba:cc:ad:c5:d7:e1:b8:c3: 93:df:af:90:2e:37:89:c0:e8:1f:cb:5b:5b:1b:21:37:36:ab: d6:b3:b4:18:1f:04:8f:05:47:b8:98:6a:cf:75:1d:5b:28:6d: 3d:83:ee:81:66:12:c0:80:ae:28:46:d2:c4:5a:13:2d:cc:ae: 9a:84:e3:82:1b:f1:03:a0:c8:41:5c:8d:5b:4b:c2:20:c6:cc: 30:d3:b6:c3:c4:ea:8b:e1:3d:4d:05:03:33:aa:d5:c4:1d:6b: b5:cb:c8:1f -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE86F9TJ0ZLYulqtygAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2FmMzkyYTEtMDdlOS00OWY0LTlhMDMtZGY1MDA1MzMz NzA4MB4XDTI2MDkxOTEzMDAxMloXDTI2MTIxODE0MDAxMlowLzEtMCsGA1UEAxMk NTI5MmQ3YzktM2RiOS00YjcwLWEyY2EtZDE1NTZhOTlhNjQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtPIi8E09oonLXa8eFi+sXwFyJqahR5xFOQc1 IaAEn7ucbU/afhr/Nrmt+kukubav8K1g7YT9BThfpHa/bTi/PitcgAPKtMJjZdbe E63TlDWgwjn/UUMJnczHTOLV4+TWIeEoz+wl/LBe9oTvNgOIpAMpy7FtNbvI67sf k+TOS1RulXPed/nq3qSefExOzLltgRJoMD6EDShTOmVcL1uLgbIVEshp1H3Qo8m5 QQrVNjSgoKGGBSa68hJyF4oIfDylN3N9WX6JoZ+rCkLHDue+tTWrYk2ioHkzThag IbCtr1FfOLoduRUjAxKgS5ylOgFdla6iEHFrP6wFuarj5DI2kwIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFPl3MQUIRyAKzo9Py2u5suII9TTLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jYWYz OTJhMS0wN2U5LTQ5ZjQtOWEwMy1kZjUwMDUzMzM3MDgvMjY4MGMyYTItY2FiZi0z NTU0LTlhMTMtYjY5ZGNhYjQwN2I5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2FmMzkyYTEtMDdlOS00OWY0LTlh MDMtZGY1MDA1MzMzNzA4L2NhZjM5MmExLTA3ZTktNDlmNC05YTAzLWRmNTAwNTMz MzcwOC5jcmwwHwYDVR0jBBgwFoAURC8Ry3nbTZVcRvWNkst9EsMqGU0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jYWYzOTJhMS0wN2U5LTQ5ZjQtOWEwMy1kZjUw MDUzMzM3MDguY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAF4V4AwQB QF1GMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAF66gZMgFAzrikVG0Szy1dTJHolSALyK4tO7a205Zf9UnAip il6hMdTD+9HXcEf0Jj+xzQYimRoEAEjgwh/UxX/ER1hxCu6jMkx8fos9InqRw6se kc8n3YvB4xPmz6Sv8XHu108PoLViKXk7X3w0pOD1jdXTdYFHDekiqPaGzmGkz5Z/ h+T9WsD0dl56F0334Davu721QZDmm5C6zK3F1+G4w5Pfr5AuN4nA6B/LW1sbITc2 q9aztBgfBI8FR7iYas91HVsobT2D7oFmEsCArihG0sRaEy3MrpqE44Ib8QOgyEFc jVtLwiDGzDDTtsPE6ovhPU0FAzOq1cQda7XLyB8= -----END CERTIFICATE-----Generated at Sun Sep 20 11:13:24 2026 by rpki-client