$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/100f08eb-9c28-3a10-a73f-858259a363f6.roa File: 100f08eb-9c28-3a10-a73f-858259a363f6.roa (raw, json) Hash identifier: PJOjATV/FX/pQkbgBh22+KsWfkWvn1y+EV4MJW/IOkc= Subject key identifier: D5:5F:82:DD:51:14:A4:F3:1C:78:37:F4:7E:F8:8A:D5:2C:67:E7:64 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584CCE7207EEEE9FB58F84D70200 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/100f08eb-9c28-3a10-a73f-858259a363f6.roa Signing time: Mon 09 Feb 2026 14:00:39 +0000 ROA not before: Mon 09 Feb 2026 14:00:39 +0000 ROA not after: Sun 10 May 2026 13:00:39 +0000 asID: 20940 IP address blocks: 23.33.41.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ce:72:07:ee:ee:9f:b5:8f:84:d7:02:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Feb 9 14:00:39 2026 GMT Not After : May 10 13:00:39 2026 GMT Subject: CN=a82716fe-47aa-4fb3-9b1e-cb3b3f2c4614 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:0c:76:49:46:d4:96:6b:e2:01:8e:93:56:bc: ab:17:3a:e8:bc:be:8a:f2:7e:86:b5:12:8a:32:23: 95:79:99:74:ed:84:f7:98:66:40:7a:e8:f0:24:8f: dd:a0:9d:3f:fc:30:e5:37:a5:9a:fc:e3:65:85:4e: eb:5d:d3:fb:59:45:c2:e7:9b:15:cd:30:fa:86:7f: 1f:78:5d:c0:8b:49:f6:93:b6:e5:89:da:ed:79:55: 8f:e0:27:27:de:07:bd:cb:75:7e:e9:9a:f9:e1:29: f0:88:e3:41:df:34:87:40:76:7f:ef:c4:48:e1:da: ae:47:0d:c1:2f:5b:f1:64:ae:b2:7e:2e:97:7e:5c: 96:8b:13:8f:d9:31:85:e3:6c:fb:01:aa:69:35:2a: f0:27:b1:fe:37:2e:ea:79:47:15:db:b9:e5:43:8d: 64:2a:db:86:58:5d:92:74:4a:78:ce:47:5d:98:6e: 94:88:d2:60:95:c0:6b:9b:df:b4:8a:f8:56:9e:f5: 81:72:20:3b:0f:37:c8:c6:1f:a8:08:f3:7d:b0:30: 68:fc:a5:98:31:d6:fc:f6:0a:59:1a:7c:97:84:0a: 3e:dc:d1:a2:4f:89:bc:72:9b:46:2a:e6:b4:9e:4c: ae:ee:ac:93:ab:f4:ed:cf:f1:53:de:12:23:45:99: 2a:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:5F:82:DD:51:14:A4:F3:1C:78:37:F4:7E:F8:8A:D5:2C:67:E7:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/100f08eb-9c28-3a10-a73f-858259a363f6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.33.41.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:75:a4:b0:d0:29:fd:1b:3a:6b:ea:be:75:08:a8:2e:0a:ad: 51:f9:ba:73:1e:d5:71:38:dd:0c:e9:d4:5d:9b:79:ce:80:6b: 68:7d:3b:91:e4:3a:53:40:c6:6f:a1:0c:6c:07:5f:f8:f8:4c: 53:58:f9:02:99:15:9a:6e:7b:da:06:46:6a:4a:04:5c:d5:c2: 18:35:a8:13:0d:fb:9e:7c:b5:c2:ea:43:06:e3:9d:69:02:d5: ea:3a:d2:17:e9:ca:0a:3b:f3:00:f2:e5:70:1d:77:8c:e9:c1: a4:55:ae:69:e8:4f:a3:97:00:db:bf:8b:68:ef:c3:7e:d2:ef: c8:1a:34:b8:64:2b:64:38:9d:f3:a3:5f:92:ca:31:76:dc:6f: f5:1a:10:74:40:38:6d:f0:05:64:4a:e5:fb:4b:f0:01:de:80: 3c:66:94:d7:78:74:9a:58:28:3d:68:20:9c:41:98:e6:b9:12: 54:55:dc:ac:bf:af:1b:be:c5:2d:50:32:a4:a8:46:09:c6:25: 0d:f4:e0:11:5a:bc:3c:a4:d7:11:7d:e4:ae:4a:93:d3:7a:66: d6:e2:5e:27:8e:96:30:ce:3d:6a:1b:4f:a5:04:6b:49:b6:e8: 80:4f:26:6b:76:7a:9f:da:b8:bf:11:a2:c6:ff:90:54:6f:f0: fa:f8:0b:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzOcgfu7p+1j4TXAgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDIwOTE0MDAzOVoXDTI2MDUxMDEzMDAzOVowLzEtMCsGA1UEAxMk YTgyNzE2ZmUtNDdhYS00ZmIzLTliMWUtY2IzYjNmMmM0NjE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArAx2SUbUlmviAY6TVryrFzrovL6K8n6GtRKK MiOVeZl07YT3mGZAeujwJI/doJ0//DDlN6Wa/ONlhU7rXdP7WUXC55sVzTD6hn8f eF3Ai0n2k7blidrteVWP4Ccn3ge9y3V+6Zr54SnwiONB3zSHQHZ/78RI4dquRw3B L1vxZK6yfi6XflyWixOP2TGF42z7AappNSrwJ7H+Ny7qeUcV27nlQ41kKtuGWF2S dEp4zkddmG6UiNJglcBrm9+0ivhWnvWBciA7DzfIxh+oCPN9sDBo/KWYMdb89gpZ GnyXhAo+3NGiT4m8cptGKua0nkyu7qyTq/Ttz/FT3hIjRZkqsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNVfgt1RFKTzHHg39H74itUsZ+dkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMTAwZjA4ZWItOWMyOC0z YTEwLWE3M2YtODU4MjU5YTM2M2Y2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFyEpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABx1pLDQKf0bOmvqvnUIqC4KrVH5unMe1XE43Qzp1F2bec6Aa2h9O5Hk OlNAxm+hDGwHX/j4TFNY+QKZFZpue9oGRmpKBFzVwhg1qBMN+558tcLqQwbjnWkC 1eo60hfpygo78wDy5XAdd4zpwaRVrmnoT6OXANu/i2jvw37S78gaNLhkK2Q4nfOj X5LKMXbcb/UaEHRAOG3wBWRK5ftL8AHegDxmlNd4dJpYKD1oIJxBmOa5ElRV3Ky/ rxu+xS1QMqSoRgnGJQ304BFavDyk1xF95K5Kk9N6ZtbiXieOljDOPWobT6UEa0m2 6IBPJmt2ep/auL8Rosb/kFRv8Pr4C+k= -----END CERTIFICATE-----Generated at Mon Mar 2 08:07:22 2026 by rpki-client