$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2e8a2dcd-c473-4343-ab03-233f389ee575/d3304f17-035e-3d1c-9c51-29c9cd3a0ae4.roa File: d3304f17-035e-3d1c-9c51-29c9cd3a0ae4.roa (raw, json) Hash identifier: AKDkkhwDeu8Fp9WEf7oQ3KOU7wD+7GWJ1SfaGuRP6+4= Subject key identifier: 63:14:C1:E0:CB:E8:0B:AD:24:FE:32:EA:31:27:C6:D9:C8:7E:05:4D Certificate issuer: /CN=2e8a2dcd-c473-4343-ab03-233f389ee575 Certificate serial: 010D0C9F4328584D5E1A4564C312DF34E938B740 Authority key identifier: E8:83:04:30:A6:ED:C0:6C:58:03:AE:9E:4C:4B:94:3A:2C:AD:CE:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2e8a2dcd-c473-4343-ab03-233f389ee575.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2e8a2dcd-c473-4343-ab03-233f389ee575/d3304f17-035e-3d1c-9c51-29c9cd3a0ae4.roa Signing time: Thu 02 Apr 2026 01:00:23 +0000 ROA not before: Thu 02 Apr 2026 01:00:23 +0000 ROA not after: Wed 01 Jul 2026 01:00:23 +0000 asID: 8079 IP address blocks: 23.133.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2e8a2dcd-c473-4343-ab03-233f389ee575/2e8a2dcd-c473-4343-ab03-233f389ee575.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2e8a2dcd-c473-4343-ab03-233f389ee575/2e8a2dcd-c473-4343-ab03-233f389ee575.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2e8a2dcd-c473-4343-ab03-233f389ee575.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Apr 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:5e:1a:45:64:c3:12:df:34:e9:38:b7:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e8a2dcd-c473-4343-ab03-233f389ee575 Validity Not Before: Apr 2 01:00:23 2026 GMT Not After : Jul 1 01:00:23 2026 GMT Subject: CN=12b5fa24-d8c3-493e-a24d-2ea23b770f8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:00:4b:f1:a6:99:1c:69:14:a6:32:53:47:8a: ab:03:5f:4b:1f:d1:0b:e1:01:a1:c6:56:55:f3:a1: 37:16:fe:2e:5e:a3:52:c3:9f:fe:09:47:ad:f1:fa: df:2a:9f:56:a8:45:f4:64:24:1a:b5:99:05:29:ba: 83:f4:8f:f5:92:d3:0f:6a:2e:05:db:4e:ec:66:09: 84:b4:fe:f6:26:ac:63:74:67:fe:3c:d3:7f:03:31: 92:8e:10:84:74:77:97:09:ca:78:3e:13:a2:0d:4b: 48:fa:ec:94:27:c5:e0:ee:0d:33:72:a2:4f:b6:e7: 7f:a8:32:45:3d:b1:97:89:33:2c:5e:1a:09:64:0d: 7d:bc:86:8f:6c:ca:b5:15:4c:99:1c:26:28:28:c0: 2a:83:26:90:cf:14:d6:e3:93:3c:e6:57:a1:46:60: 40:fc:0b:67:75:d5:8f:c3:5f:65:10:6f:40:bb:29: a5:ee:19:f5:72:8d:f5:ac:ea:a4:99:92:a6:d7:2d: b4:c8:d8:01:88:ee:af:6d:15:97:e0:cb:6d:21:f3: ad:7a:21:e3:71:ff:3f:91:72:43:3e:6f:b1:33:05: 8a:0e:92:87:a0:b7:80:58:0a:12:22:9c:ad:df:0b: a0:9c:32:85:7d:36:ca:f1:5c:42:0a:7e:f5:22:f6: ba:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:14:C1:E0:CB:E8:0B:AD:24:FE:32:EA:31:27:C6:D9:C8:7E:05:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2e8a2dcd-c473-4343-ab03-233f389ee575/d3304f17-035e-3d1c-9c51-29c9cd3a0ae4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2e8a2dcd-c473-4343-ab03-233f389ee575/2e8a2dcd-c473-4343-ab03-233f389ee575.crl X509v3 Authority Key Identifier: keyid:E8:83:04:30:A6:ED:C0:6C:58:03:AE:9E:4C:4B:94:3A:2C:AD:CE:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2e8a2dcd-c473-4343-ab03-233f389ee575.cer sbgp-ipAddrBlock: critical IPv4: 23.133.108.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:25:fd:b2:71:65:03:41:30:e6:26:bb:e2:85:b2:be:48:5b: f7:ec:c1:62:fd:87:33:04:16:fe:4b:60:d4:fe:c6:a1:86:a6: 9a:bb:0d:43:5f:b1:26:36:40:fa:47:f6:1a:ba:cb:58:50:c4: e1:ae:f3:ba:06:f5:f6:bf:b8:53:59:db:87:25:6e:4c:1f:d2: f3:6e:36:8c:8c:3b:98:7b:35:4c:18:f0:7b:8f:03:0a:9a:47: 0d:ce:b1:a3:72:e4:01:47:c9:02:b9:78:de:ff:ce:77:15:0a: 4f:5b:27:bf:dc:25:7b:63:7e:09:03:f8:30:02:cf:48:e2:8d: 9e:d4:d2:24:59:59:f1:b0:e0:32:8d:c8:fe:4e:e4:d0:8e:08: 79:bb:e9:0b:9d:f6:a4:8b:7a:62:a8:74:5a:c2:9c:61:ff:ca: 2b:ea:0c:c6:28:a4:a4:2c:4d:72:84:5a:b1:b7:ac:95:d4:a2: 16:cb:9a:6a:8b:54:f1:3b:a1:f4:9d:35:fe:51:9b:d2:65:48: f7:83:d7:81:d2:f8:c9:ee:f9:de:a1:e4:9e:19:17:83:38:df: 3d:49:13:c5:df:5b:a6:ac:15:b5:2c:1e:22:49:83:be:1b:8f: 4d:18:2c:94:f8:d9:99:75:9f:b9:98:f6:7f:4d:6d:e3:a8:e4: 9a:f8:1d:ae -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1eGkVkwxLfNOk4t0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmU4YTJkY2QtYzQ3My00MzQzLWFiMDMtMjMzZjM4OWVl NTc1MB4XDTI2MDQwMjAxMDAyM1oXDTI2MDcwMTAxMDAyM1owLzEtMCsGA1UEAxMk MTJiNWZhMjQtZDhjMy00OTNlLWEyNGQtMmVhMjNiNzcwZjhhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkQBL8aaZHGkUpjJTR4qrA19LH9EL4QGhxlZV 86E3Fv4uXqNSw5/+CUet8frfKp9WqEX0ZCQatZkFKbqD9I/1ktMPai4F207sZgmE tP72JqxjdGf+PNN/AzGSjhCEdHeXCcp4PhOiDUtI+uyUJ8Xg7g0zcqJPtud/qDJF PbGXiTMsXhoJZA19vIaPbMq1FUyZHCYoKMAqgyaQzxTW45M85lehRmBA/AtnddWP w19lEG9Auyml7hn1co31rOqkmZKm1y20yNgBiO6vbRWX4MttIfOteiHjcf8/kXJD Pm+xMwWKDpKHoLeAWAoSIpyt3wugnDKFfTbK8VxCCn71Iva6YwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGMUweDL6AutJP4y6jEnxtnIfgVNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8yZThh MmRjZC1jNDczLTQzNDMtYWIwMy0yMzNmMzg5ZWU1NzUvZDMzMDRmMTctMDM1ZS0z ZDFjLTljNTEtMjljOWNkM2EwYWU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMmU4YTJkY2QtYzQ3My00MzQzLWFi MDMtMjMzZjM4OWVlNTc1LzJlOGEyZGNkLWM0NzMtNDM0My1hYjAzLTIzM2YzODll ZTU3NS5jcmwwHwYDVR0jBBgwFoAU6IMEMKbtwGxYA66eTEuUOiytzjswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8yZThhMmRjZC1jNDczLTQzNDMtYWIwMy0yMzNm Mzg5ZWU1NzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAF4VsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIAl/bJxZQNBMOYmu+KFsr5IW/fswWL9hzMEFv5LYNT+xqGGppq7DUNf sSY2QPpH9hq6y1hQxOGu87oG9fa/uFNZ24clbkwf0vNuNoyMO5h7NUwY8HuPAwqa Rw3OsaNy5AFHyQK5eN7/zncVCk9bJ7/cJXtjfgkD+DACz0jijZ7U0iRZWfGw4DKN yP5O5NCOCHm76Qud9qSLemKodFrCnGH/yivqDMYopKQsTXKEWrG3rJXUohbLmmqL VPE7ofSdNf5Rm9JlSPeD14HS+Mnu+d6h5J4ZF4M43z1JE8XfW6asFbUsHiJJg74b j00YLJT42Zl1n7mY9n9NbeOo5Jr4Ha4= -----END CERTIFICATE-----Generated at Sun Apr 19 14:12:21 2026 by rpki-client