$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/32383800-b087-3fe4-90b1-6288dd91e397.roa File: 32383800-b087-3fe4-90b1-6288dd91e397.roa (raw, json) Hash identifier: eg+ZRWuDfBr0/aCMFXmUtuDhfqDjx8zy6bsrgE16HSc= Subject key identifier: 37:03:EC:77:A7:6B:22:72:42:7C:24:C5:C9:A5:46:9E:F0:A5:D0:48 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584CCE720283BAEF7F820022F780 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/32383800-b087-3fe4-90b1-6288dd91e397.roa Signing time: Mon 09 Feb 2026 14:00:39 +0000 ROA not before: Mon 09 Feb 2026 14:00:39 +0000 ROA not after: Sun 10 May 2026 13:00:39 +0000 asID: 20940 IP address blocks: 23.33.86.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ce:72:02:83:ba:ef:7f:82:00:22:f7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Feb 9 14:00:39 2026 GMT Not After : May 10 13:00:39 2026 GMT Subject: CN=4a5ae898-1f42-462b-9c69-95588eca7e2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:c5:7e:cb:8c:df:73:b5:47:e1:dd:78:0a:2e: d0:86:21:4b:0b:22:c1:c7:92:60:85:3d:ab:3d:17: 5e:03:64:6a:91:c9:94:d7:d9:0a:ab:b7:8a:2b:cf: 86:3c:f6:ba:51:b5:80:e9:4f:3c:a3:47:df:33:f2: 50:0c:5d:22:cc:62:63:4f:d0:fe:aa:b1:45:84:ab: 9a:9d:9f:0e:27:8f:53:d5:0a:59:a4:c3:84:fd:e9: a2:2f:fc:7c:98:7e:df:31:98:17:b9:ae:c3:76:84: 79:81:d1:9c:49:ea:bf:f4:9d:79:89:59:77:e3:b9: 2d:67:37:44:a5:0c:4b:02:7b:e1:0c:e6:27:c9:b5: 78:da:7e:6a:27:bd:ba:53:90:b4:03:66:61:63:22: ec:70:60:18:f9:93:46:09:23:b4:f3:82:b3:8c:84: 7f:54:71:5d:ac:a2:b5:06:ea:b5:db:27:d8:df:59: 2d:30:50:ae:73:17:3c:83:46:d3:47:2d:13:99:b3: 37:67:e8:75:76:87:05:b2:c5:9c:60:2e:2b:10:f7: ef:55:60:51:6b:b6:ce:6a:80:50:73:67:52:e3:d9: 79:f8:26:b0:33:4f:69:53:20:99:f5:97:0c:d6:a5: 72:9b:11:4d:d6:32:1a:77:44:6b:db:13:0c:68:31: 74:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:03:EC:77:A7:6B:22:72:42:7C:24:C5:C9:A5:46:9E:F0:A5:D0:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/32383800-b087-3fe4-90b1-6288dd91e397.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.33.86.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:b0:83:08:73:7c:59:50:68:fe:d3:52:c1:91:cc:17:f3:5f: 0a:ee:e7:78:e2:46:f8:a3:de:38:9e:09:13:84:dc:1f:8c:70: b2:3e:ba:5d:17:03:42:b2:ae:ac:6a:d6:59:54:47:e3:32:09: 47:b4:00:4f:de:4c:5b:85:15:3b:dd:ea:10:8b:c8:31:50:a1: 37:73:91:18:c0:98:23:ab:05:64:a4:61:31:23:c8:43:40:f2: 1b:85:8a:05:4c:85:02:78:18:76:83:78:49:1e:02:45:8b:a1: b1:20:4c:25:05:74:b1:9f:0e:66:b6:d9:36:de:95:ac:0c:b0: 52:97:34:3e:a9:91:50:67:33:47:c4:2c:95:f3:06:08:cd:98: 59:be:28:db:18:4d:c3:16:f8:c3:35:d2:12:e5:1e:94:75:ea: 3e:0e:88:30:51:c9:54:43:19:e8:5d:13:cb:02:9b:ca:d8:57: 20:61:7e:65:18:59:be:cb:d9:29:e1:29:be:3f:88:c2:29:95: 81:91:58:5f:4f:79:d3:5f:01:3e:1e:95:4c:a8:6b:29:43:b6: 9c:81:89:0e:5d:4f:18:14:0e:66:3f:0a:7a:02:af:1d:20:a6: f1:00:cf:19:59:14:42:d8:7b:e8:6f:e6:44:46:15:a4:8e:1a: 65:26:12:c4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzOcgKDuu9/ggAi94AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDIwOTE0MDAzOVoXDTI2MDUxMDEzMDAzOVowLzEtMCsGA1UEAxMk NGE1YWU4OTgtMWY0Mi00NjJiLTljNjktOTU1ODhlY2E3ZTJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3sV+y4zfc7VH4d14Ci7QhiFLCyLBx5JghT2r PRdeA2RqkcmU19kKq7eKK8+GPPa6UbWA6U88o0ffM/JQDF0izGJjT9D+qrFFhKua nZ8OJ49T1QpZpMOE/emiL/x8mH7fMZgXua7DdoR5gdGcSeq/9J15iVl347ktZzdE pQxLAnvhDOYnybV42n5qJ726U5C0A2ZhYyLscGAY+ZNGCSO084KzjIR/VHFdrKK1 Buq12yfY31ktMFCucxc8g0bTRy0TmbM3Z+h1docFssWcYC4rEPfvVWBRa7bOaoBQ c2dS49l5+CawM09pUyCZ9ZcM1qVymxFN1jIad0Rr2xMMaDF0XQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDcD7HenayJyQnwkxcmlRp7wpdBIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMzIzODM4MDAtYjA4Ny0z ZmU0LTkwYjEtNjI4OGRkOTFlMzk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFyFWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJSwgwhzfFlQaP7TUsGRzBfzXwru53jiRvij3jieCROE3B+McLI+ul0X A0Kyrqxq1llUR+MyCUe0AE/eTFuFFTvd6hCLyDFQoTdzkRjAmCOrBWSkYTEjyENA 8huFigVMhQJ4GHaDeEkeAkWLobEgTCUFdLGfDma22TbelawMsFKXND6pkVBnM0fE LJXzBgjNmFm+KNsYTcMW+MM10hLlHpR16j4OiDBRyVRDGehdE8sCm8rYVyBhfmUY Wb7L2SnhKb4/iMIplYGRWF9PedNfAT4elUyoaylDtpyBiQ5dTxgUDmY/CnoCrx0g pvEAzxlZFELYe+hv5kRGFaSOGmUmEsQ= -----END CERTIFICATE-----Generated at Mon Mar 2 10:43:32 2026 by rpki-client