$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/e604780b-4bf4-362f-9661-294a2090b35c.roa File: e604780b-4bf4-362f-9661-294a2090b35c.roa (raw, json) Hash identifier: VD25MH9vMMYm/fZO4HHzeNojG5bzih+UIgzkhb9GhBs= Subject key identifier: 84:87:85:70:46:81:2F:42:5F:84:EA:6D:20:A3:75:A6:64:A3:9D:DB Certificate issuer: /CN=33c78d60-34eb-4fed-8e25-925b95a30c8e Certificate serial: 010D0C9F4328584E9D4A75CBFDE5E6F5D26FF240 Authority key identifier: 5F:65:25:B0:69:97:21:82:E6:E2:D3:91:46:77:BA:5C:33:D3:E0:41 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/e604780b-4bf4-362f-9661-294a2090b35c.roa Signing time: Sat 25 Jul 2026 09:00:11 +0000 ROA not before: Sat 25 Jul 2026 09:00:11 +0000 ROA not after: Fri 23 Oct 2026 09:00:11 +0000 asID: 33039 IP address blocks: 23.173.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/33c78d60-34eb-4fed-8e25-925b95a30c8e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/33c78d60-34eb-4fed-8e25-925b95a30c8e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:9d:4a:75:cb:fd:e5:e6:f5:d2:6f:f2:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33c78d60-34eb-4fed-8e25-925b95a30c8e Validity Not Before: Jul 25 09:00:11 2026 GMT Not After : Oct 23 09:00:11 2026 GMT Subject: CN=369d110c-5b5e-4865-82e2-11c32334a15a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:7a:38:18:51:69:1c:88:f9:0e:9b:e5:13:31: d3:d8:5f:99:34:42:0b:b5:4f:7f:00:6a:9a:dd:9a: cd:7f:8f:63:c8:d7:9c:23:b9:b9:ae:69:79:a3:94: 14:e0:cb:db:16:4f:68:af:81:48:33:e4:81:32:0a: 0d:ab:79:84:73:55:f4:56:51:1b:1d:c8:42:c2:dd: 03:fb:66:2a:ff:f5:04:bf:b6:8a:28:90:0d:2b:6f: a4:84:4c:84:80:36:77:89:77:57:12:2b:42:3e:0c: fe:16:dd:92:0d:9c:3e:4a:a1:75:10:54:dc:33:7d: d4:d4:17:86:18:b1:8b:59:aa:7a:17:74:58:b2:ea: 5f:e0:f2:66:c5:27:88:99:be:5f:98:2e:36:b4:73: 70:c0:da:4d:d5:ff:01:4e:d8:1a:ec:f4:0b:71:82: d1:12:5c:49:fb:b7:c5:b4:dd:eb:f1:fc:1f:20:92: 5f:c8:fe:c2:23:33:96:c7:c8:6f:93:88:81:01:cd: 37:1a:d4:8c:55:b8:ce:11:a0:a2:2c:07:70:95:3a: 4b:1e:0c:f1:f5:c3:b9:3a:c0:2a:2d:4d:a4:3e:09: 20:e6:7c:8a:03:a5:0f:6e:70:cd:f6:29:97:b9:5a: 6c:82:fb:aa:bd:92:d0:cd:6a:f0:a2:20:7b:1d:cc: e2:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:87:85:70:46:81:2F:42:5F:84:EA:6D:20:A3:75:A6:64:A3:9D:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/e604780b-4bf4-362f-9661-294a2090b35c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/33c78d60-34eb-4fed-8e25-925b95a30c8e.crl X509v3 Authority Key Identifier: keyid:5F:65:25:B0:69:97:21:82:E6:E2:D3:91:46:77:BA:5C:33:D3:E0:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e.cer sbgp-ipAddrBlock: critical IPv4: 23.173.104.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:b8:0e:81:97:8b:f7:0d:e7:56:5a:db:d6:2b:75:2d:6a:7f: e6:95:31:13:60:ef:71:2f:eb:61:98:ab:74:b0:7a:f7:4b:51: f7:91:c1:08:8c:b3:a7:25:0f:13:ac:70:30:2d:42:0b:d4:03: e2:ff:cb:53:56:05:94:b0:67:cd:11:c8:5b:8d:27:41:65:7a: c3:c6:7e:21:c8:89:df:bb:e5:40:4c:cc:35:eb:70:c2:c1:58: 9b:65:d9:bb:7b:25:e2:0a:8c:82:34:16:29:b7:b0:57:6b:89: 48:4b:b2:43:b0:c6:67:4b:1d:91:00:6a:aa:93:90:15:37:62: 28:89:5a:1f:6a:9f:11:a7:b5:30:f5:e0:b5:7b:5d:65:27:bc: bb:ab:41:56:12:73:f9:8d:e8:9e:fc:ca:d7:15:7e:c1:c7:35: 11:8d:db:28:8b:f5:69:34:a6:49:a0:71:8b:9b:dd:85:e4:e4: 9b:67:c3:24:ab:56:1f:e3:20:d2:04:ce:de:1f:fe:a3:47:b5: f5:a0:9d:52:5f:df:34:aa:ab:cf:b5:e9:35:35:97:b3:c5:47: 94:38:89:5d:ec:ad:a2:af:d9:29:3f:84:62:b1:38:af:ce:bd: 8f:27:ac:8f:d2:ec:90:8c:c7:a9:15:69:71:84:8b:35:a4:f0: 47:ed:2e:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6dSnXL/eXm9dJv8kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzNjNzhkNjAtMzRlYi00ZmVkLThlMjUtOTI1Yjk1YTMw YzhlMB4XDTI2MDcyNTA5MDAxMVoXDTI2MTAyMzA5MDAxMVowLzEtMCsGA1UEAxMk MzY5ZDExMGMtNWI1ZS00ODY1LTgyZTItMTFjMzIzMzRhMTVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkXo4GFFpHIj5DpvlEzHT2F+ZNEILtU9/AGqa 3ZrNf49jyNecI7m5rml5o5QU4MvbFk9or4FIM+SBMgoNq3mEc1X0VlEbHchCwt0D +2Yq//UEv7aKKJANK2+khEyEgDZ3iXdXEitCPgz+Ft2SDZw+SqF1EFTcM33U1BeG GLGLWap6F3RYsupf4PJmxSeImb5fmC42tHNwwNpN1f8BTtga7PQLcYLRElxJ+7fF tN3r8fwfIJJfyP7CIzOWx8hvk4iBAc03GtSMVbjOEaCiLAdwlTpLHgzx9cO5OsAq LU2kPgkg5nyKA6UPbnDN9imXuVpsgvuqvZLQzWrwoiB7HcziEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFISHhXBGgS9CX4TqbSCjdaZko53bMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zM2M3 OGQ2MC0zNGViLTRmZWQtOGUyNS05MjViOTVhMzBjOGUvZTYwNDc4MGItNGJmNC0z NjJmLTk2NjEtMjk0YTIwOTBiMzVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMzNjNzhkNjAtMzRlYi00ZmVkLThl MjUtOTI1Yjk1YTMwYzhlLzMzYzc4ZDYwLTM0ZWItNGZlZC04ZTI1LTkyNWI5NWEz MGM4ZS5jcmwwHwYDVR0jBBgwFoAUX2UlsGmXIYLm4tORRne6XDPT4EEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8zM2M3OGQ2MC0zNGViLTRmZWQtOGUyNS05MjVi OTVhMzBjOGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF61oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGm4DoGXi/cN51Za29YrdS1qf+aVMRNg73Ev62GYq3SwevdLUfeRwQiM s6clDxOscDAtQgvUA+L/y1NWBZSwZ80RyFuNJ0FlesPGfiHIid+75UBMzDXrcMLB WJtl2bt7JeIKjII0Fim3sFdriUhLskOwxmdLHZEAaqqTkBU3YiiJWh9qnxGntTD1 4LV7XWUnvLurQVYSc/mN6J78ytcVfsHHNRGN2yiL9Wk0pkmgcYub3YXk5JtnwySr Vh/jINIEzt4f/qNHtfWgnVJf3zSqq8+16TU1l7PFR5Q4iV3sraKv2Sk/hGKxOK/O vY8nrI/S7JCMx6kVaXGEizWk8EftLnA= -----END CERTIFICATE-----Generated at Tue Jul 28 23:30:18 2026 by rpki-client