$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/e604780b-4bf4-362f-9661-294a2090b35c.roa File: e604780b-4bf4-362f-9661-294a2090b35c.roa (raw, json) Hash identifier: suoaijOsrWBLuXLeCDiNiQPx+PtgF474Wpsx80FxZxY= Subject key identifier: 00:76:4F:54:79:25:AA:54:D7:D6:56:7E:0F:E1:DB:30:69:AA:B1:86 Certificate issuer: /CN=33c78d60-34eb-4fed-8e25-925b95a30c8e Certificate serial: 010D0C9F4328584F3FAD427574680E4CF5692100 Authority key identifier: 5F:65:25:B0:69:97:21:82:E6:E2:D3:91:46:77:BA:5C:33:D3:E0:41 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/e604780b-4bf4-362f-9661-294a2090b35c.roa Signing time: Mon 21 Sep 2026 13:00:12 +0000 ROA not before: Mon 21 Sep 2026 13:00:12 +0000 ROA not after: Sun 20 Dec 2026 14:00:12 +0000 asID: 33039 IP address blocks: 23.173.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/33c78d60-34eb-4fed-8e25-925b95a30c8e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/33c78d60-34eb-4fed-8e25-925b95a30c8e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Sep 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3f:ad:42:75:74:68:0e:4c:f5:69:21:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33c78d60-34eb-4fed-8e25-925b95a30c8e Validity Not Before: Sep 21 13:00:12 2026 GMT Not After : Dec 20 14:00:12 2026 GMT Subject: CN=a584cc1f-cab7-46f2-aa1c-98c0f40732c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:c8:55:56:a7:88:a5:5d:4c:6a:d1:15:47:d4: 6d:cb:54:db:3b:79:10:ac:34:46:95:8b:40:d0:ae: 00:dd:99:57:f0:27:1f:75:14:ed:97:d2:21:4f:cb: 4f:5e:b8:50:79:98:8d:53:58:d5:ce:ae:ce:29:34: db:9d:72:6e:06:00:f4:ff:fa:fc:4b:84:bc:4e:92: 15:a9:fd:3b:04:3a:1d:09:ed:03:25:dd:8d:4f:81: be:b2:6b:f1:cd:15:84:32:c2:eb:79:fe:4f:eb:be: c2:8c:a4:38:29:ab:da:17:07:57:53:0c:ad:e4:2f: 2d:da:9c:a1:84:bd:1c:b9:c5:e5:f5:ad:b0:7f:d8: 08:f2:75:d9:fd:1d:aa:8f:2e:c2:68:f3:34:d1:fd: df:8c:80:ae:48:31:f6:93:02:97:54:ea:00:35:38: 8a:36:9b:ee:6f:4c:03:cc:7b:d7:1f:8c:b5:e7:d8: cb:42:8b:0c:05:69:0a:7a:c0:2a:58:1d:29:b5:a6: 57:6e:4a:26:8d:a0:c1:ef:fc:6a:e3:9d:0e:cc:fe: 38:f3:f6:38:92:06:b0:cb:16:8e:83:18:ec:31:27: ae:e3:37:74:ab:c8:61:10:18:8c:ca:b6:15:7c:6e: 0a:4c:ae:11:73:25:fc:38:b7:55:d8:3f:cf:2a:ce: fc:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:76:4F:54:79:25:AA:54:D7:D6:56:7E:0F:E1:DB:30:69:AA:B1:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/e604780b-4bf4-362f-9661-294a2090b35c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/33c78d60-34eb-4fed-8e25-925b95a30c8e.crl X509v3 Authority Key Identifier: keyid:5F:65:25:B0:69:97:21:82:E6:E2:D3:91:46:77:BA:5C:33:D3:E0:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e.cer sbgp-ipAddrBlock: critical IPv4: 23.173.104.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:3e:88:3c:78:5e:b8:1d:95:54:22:23:ec:35:0d:30:94:0e: 5e:56:86:1d:de:8b:b5:ca:e0:1b:f2:52:67:24:db:f5:35:cb: 41:68:fe:8e:79:59:22:6d:b9:f5:80:72:f9:88:be:75:b3:8e: df:23:d9:3b:14:6e:65:d6:c3:0e:1c:0f:11:6b:79:62:6d:e6: 8e:29:27:61:ba:c2:72:a6:9a:e0:37:51:a2:75:8b:fb:60:13: 53:22:bb:1e:69:38:c1:27:d8:69:f9:7c:62:f8:1b:25:84:a4: 2f:1c:c2:6b:3b:6d:e8:f8:fd:b2:ee:e2:43:49:36:7e:5b:bb: b5:1a:15:d5:10:9c:78:e2:98:3d:f8:b9:04:36:79:88:56:60: b4:69:0d:0e:a3:1c:60:18:8b:0b:6d:6c:7b:85:83:56:37:e3: c8:cf:f0:33:4e:ce:e5:30:a9:82:08:53:49:38:e0:12:62:6f: ec:08:00:87:29:5b:e1:b1:fc:4c:2b:5a:72:34:1a:c9:31:22: a9:80:e2:25:2c:87:40:15:54:2b:7d:ea:cc:64:d3:df:7b:c2: 5e:d3:18:a6:b2:9b:84:49:bd:3c:c0:65:e7:79:0f:06:90:ef: 87:5d:e4:3c:fa:2d:07:25:4f:86:49:d0:60:4f:1d:8e:29:08: 53:0b:d5:2e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8/rUJ1dGgOTPVpIQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzNjNzhkNjAtMzRlYi00ZmVkLThlMjUtOTI1Yjk1YTMw YzhlMB4XDTI2MDkyMTEzMDAxMloXDTI2MTIyMDE0MDAxMlowLzEtMCsGA1UEAxMk YTU4NGNjMWYtY2FiNy00NmYyLWFhMWMtOThjMGY0MDczMmMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAochVVqeIpV1MatEVR9Rty1TbO3kQrDRGlYtA 0K4A3ZlX8CcfdRTtl9IhT8tPXrhQeZiNU1jVzq7OKTTbnXJuBgD0//r8S4S8TpIV qf07BDodCe0DJd2NT4G+smvxzRWEMsLref5P677CjKQ4KavaFwdXUwyt5C8t2pyh hL0cucXl9a2wf9gI8nXZ/R2qjy7CaPM00f3fjICuSDH2kwKXVOoANTiKNpvub0wD zHvXH4y159jLQosMBWkKesAqWB0ptaZXbkomjaDB7/xq450OzP448/Y4kgawyxaO gxjsMSeu4zd0q8hhEBiMyrYVfG4KTK4RcyX8OLdV2D/PKs78QQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAB2T1R5JapU19ZWfg/h2zBpqrGGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zM2M3 OGQ2MC0zNGViLTRmZWQtOGUyNS05MjViOTVhMzBjOGUvZTYwNDc4MGItNGJmNC0z NjJmLTk2NjEtMjk0YTIwOTBiMzVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMzNjNzhkNjAtMzRlYi00ZmVkLThl MjUtOTI1Yjk1YTMwYzhlLzMzYzc4ZDYwLTM0ZWItNGZlZC04ZTI1LTkyNWI5NWEz MGM4ZS5jcmwwHwYDVR0jBBgwFoAUX2UlsGmXIYLm4tORRne6XDPT4EEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8zM2M3OGQ2MC0zNGViLTRmZWQtOGUyNS05MjVi OTVhMzBjOGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF61oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEQ+iDx4XrgdlVQiI+w1DTCUDl5Whh3ei7XK4BvyUmck2/U1y0Fo/o55 WSJtufWAcvmIvnWzjt8j2TsUbmXWww4cDxFreWJt5o4pJ2G6wnKmmuA3UaJ1i/tg E1Miux5pOMEn2Gn5fGL4GyWEpC8cwms7bej4/bLu4kNJNn5bu7UaFdUQnHjimD34 uQQ2eYhWYLRpDQ6jHGAYiwttbHuFg1Y348jP8DNOzuUwqYIIU0k44BJib+wIAIcp W+Gx/EwrWnI0GskxIqmA4iUsh0AVVCt96sxk0997wl7TGKaym4RJvTzAZed5DwaQ 74dd5Dz6LQclT4ZJ0GBPHY4pCFML1S4= -----END CERTIFICATE-----Generated at Thu Sep 24 07:51:59 2026 by rpki-client