$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/84950b3a-15d7-3b08-9186-13789c4594b0.roa File: 84950b3a-15d7-3b08-9186-13789c4594b0.roa (raw, json) Hash identifier: Qaiu8v5RoXtQQ6l82CWdy4raSyiVuTVmeIIZYQxWNR0= Subject key identifier: C0:09:FB:04:1C:82:4F:38:03:C6:CB:74:D2:27:C4:DC:4E:00:1B:46 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D65151F795EA3972EFA9B6200 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/84950b3a-15d7-3b08-9186-13789c4594b0.roa Signing time: Sat 04 Apr 2026 13:00:29 +0000 ROA not before: Sat 04 Apr 2026 13:00:29 +0000 ROA not after: Fri 03 Jul 2026 13:00:29 +0000 asID: 35994 IP address blocks: 23.33.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:65:15:1f:79:5e:a3:97:2e:fa:9b:62:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 4 13:00:29 2026 GMT Not After : Jul 3 13:00:29 2026 GMT Subject: CN=d39c846e-4958-4c3a-8ad1-a5e04a1eea10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:74:f0:e1:a8:35:3c:23:18:a9:9f:c4:9e:8f: 11:46:cc:c5:57:e0:26:d6:31:c2:58:f8:61:ed:ae: 04:5a:89:05:76:11:58:b5:b2:04:88:0d:0d:c4:53: fa:32:a7:21:ee:9c:aa:90:a7:71:09:8f:8a:dc:a5: c6:67:04:b4:5e:48:5e:a8:bc:03:f4:23:78:af:37: 5c:de:9a:a4:bc:dd:b3:f2:c9:4d:34:2f:b6:d6:be: 31:df:a7:8b:1c:be:93:3c:5c:bc:5a:83:e0:44:6f: 52:6a:3c:ad:88:1e:96:1b:11:d1:95:d8:7b:96:5a: 4c:39:6c:44:a8:ca:f0:7c:f4:2e:00:77:9b:32:3e: 5b:d3:25:1b:30:0f:b0:c8:e0:fe:c3:d6:b4:f6:6c: 56:11:2a:d5:3f:26:e4:9c:4b:0d:85:2d:4a:7a:68: 69:b3:d9:f9:07:ef:c4:51:49:9a:8f:f8:87:99:03: d2:16:1f:7c:32:39:2f:17:a8:77:77:25:68:c0:ce: 6e:5b:8f:d0:b2:35:b5:0e:9b:b9:a8:e3:64:0a:29: 80:80:ff:71:27:9b:45:b0:3f:83:de:65:6e:ec:13: 82:aa:00:9f:5a:99:d6:37:dc:81:f3:14:e2:53:1a: fd:f9:09:4c:1d:32:0e:03:75:9e:13:2f:18:cd:8e: 2f:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:09:FB:04:1C:82:4F:38:03:C6:CB:74:D2:27:C4:DC:4E:00:1B:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/84950b3a-15d7-3b08-9186-13789c4594b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.33.125.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:24:51:c0:1c:c2:90:2a:f1:59:58:98:68:1d:1c:98:fa:cc: 75:7c:42:f5:fb:9f:53:b7:ec:cf:7a:1b:13:b0:3e:73:1f:03: 86:4a:99:39:b3:01:17:98:9f:f7:11:bc:c0:5b:2e:75:07:a1: 3c:ac:ef:1e:a1:03:fe:c5:2c:55:85:74:c4:40:99:94:43:37: dd:f2:bf:d4:b1:a9:3f:fb:30:e6:58:b5:7a:60:a3:e0:e1:04: 16:7c:61:6a:6d:53:50:02:46:8f:b4:ec:9a:2e:df:b0:5e:7f: 40:f1:12:7e:27:4e:02:e6:70:c0:61:56:ea:8d:4b:81:90:f5: de:09:33:0b:ce:e4:5e:1e:d7:83:ce:b5:f3:76:4b:6b:2c:2d: eb:37:a0:ba:c7:b2:75:07:d9:e2:59:f2:cd:9d:39:5f:e8:19: 4f:99:4a:69:7b:98:7e:15:ba:63:98:9d:80:b0:43:1c:a6:71: 55:76:08:d4:09:23:07:a3:57:82:c3:49:a3:94:31:36:1f:29: b4:99:8a:b9:97:40:71:92:15:15:d7:18:6e:e2:e5:18:53:d0: 57:1e:a6:4c:46:7e:76:f2:5c:8b:29:4a:6f:19:f7:10:7c:f1: cc:fa:88:9c:a9:a1:f6:18:47:08:f4:9f:36:61:6a:de:29:3a: ea:a7:6e:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1lFR95XqOXLvqbYgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDQwNDEzMDAyOVoXDTI2MDcwMzEzMDAyOVowLzEtMCsGA1UEAxMk ZDM5Yzg0NmUtNDk1OC00YzNhLThhZDEtYTVlMDRhMWVlYTEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAunTw4ag1PCMYqZ/Eno8RRszFV+Am1jHCWPhh 7a4EWokFdhFYtbIEiA0NxFP6Mqch7pyqkKdxCY+K3KXGZwS0XkheqLwD9CN4rzdc 3pqkvN2z8slNNC+21r4x36eLHL6TPFy8WoPgRG9SajytiB6WGxHRldh7llpMOWxE qMrwfPQuAHebMj5b0yUbMA+wyOD+w9a09mxWESrVPybknEsNhS1Kemhps9n5B+/E UUmaj/iHmQPSFh98MjkvF6h3dyVowM5uW4/QsjW1Dpu5qONkCimAgP9xJ5tFsD+D 3mVu7BOCqgCfWpnWN9yB8xTiUxr9+QlMHTIOA3WeEy8YzY4vIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMAJ+wQcgk84A8bLdNInxNxOABtGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvODQ5NTBiM2EtMTVkNy0z YjA4LTkxODYtMTM3ODljNDU5NGIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFyF9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGIkUcAcwpAq8VlYmGgdHJj6zHV8QvX7n1O37M96GxOwPnMfA4ZKmTmz AReYn/cRvMBbLnUHoTys7x6hA/7FLFWFdMRAmZRDN93yv9SxqT/7MOZYtXpgo+Dh BBZ8YWptU1ACRo+07Jou37Bef0DxEn4nTgLmcMBhVuqNS4GQ9d4JMwvO5F4e14PO tfN2S2ssLes3oLrHsnUH2eJZ8s2dOV/oGU+ZSml7mH4VumOYnYCwQxymcVV2CNQJ IwejV4LDSaOUMTYfKbSZirmXQHGSFRXXGG7i5RhT0FcepkxGfnbyXIspSm8Z9xB8 8cz6iJypofYYRwj0nzZhat4pOuqnbvI= -----END CERTIFICATE-----Generated at Fri Apr 17 18:29:43 2026 by rpki-client