$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dbaf8ec5-3327-3455-b442-c52264f96c65.roa File: dbaf8ec5-3327-3455-b442-c52264f96c65.roa (raw, json) Hash identifier: 3OO548dGq9D/A0DguMrlKqw0pD7SsdaT1/IkGzFAduk= Subject key identifier: A3:4A:C7:84:47:63:0D:ED:16:46:DD:06:E2:3A:54:4C:70:4C:B0:C4 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584CCE7202FFDD8B8A30FC8A7900 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dbaf8ec5-3327-3455-b442-c52264f96c65.roa Signing time: Mon 09 Feb 2026 14:00:39 +0000 ROA not before: Mon 09 Feb 2026 14:00:39 +0000 ROA not after: Sun 10 May 2026 13:00:39 +0000 asID: 18403 IP address blocks: 23.33.120.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ce:72:02:ff:dd:8b:8a:30:fc:8a:79:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Feb 9 14:00:39 2026 GMT Not After : May 10 13:00:39 2026 GMT Subject: CN=47d708d5-3144-4d20-8796-1d56f0fb8e43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:cf:fb:36:3a:15:d5:54:9f:dd:91:81:83:09: 22:b6:e5:d0:e1:a8:66:7c:fa:a6:0c:45:d4:6d:f0: ed:5e:2a:66:ef:dc:c8:74:e7:65:53:f1:41:52:c1: f4:0d:16:a8:03:06:db:72:d9:17:95:1d:70:69:db: a3:3c:c4:52:54:3d:17:85:23:68:ce:ab:bb:4a:f1: 5c:36:3e:1b:b8:1c:d8:ed:56:09:6b:93:46:86:58: 5b:02:83:d2:64:26:45:61:39:0d:66:02:1c:99:a4: d2:23:8f:ad:13:84:38:fa:e3:eb:a0:7a:be:92:f0: 8d:08:02:74:0e:7e:07:2d:f6:75:67:90:bb:dc:69: 64:f9:92:92:76:9b:e3:83:94:f9:6a:9a:36:d4:76: 97:21:2f:03:5f:34:07:2b:36:b5:97:85:e1:b2:09: f3:a3:56:e4:5e:23:26:41:6d:27:75:92:d5:4c:38: ad:2e:a2:83:e0:19:e1:cd:83:ea:4a:46:74:b9:8d: 90:17:b8:da:66:f1:b9:fc:66:e4:bb:ed:96:da:7d: b8:ac:fc:9c:35:38:cd:31:20:8a:1b:b9:22:8e:1a: 17:9f:91:d1:ab:2e:fb:14:9f:ad:1c:49:c2:71:c5: 1b:5c:b4:ad:ac:ae:45:5e:00:50:b1:c4:29:b3:c0: 2c:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:4A:C7:84:47:63:0D:ED:16:46:DD:06:E2:3A:54:4C:70:4C:B0:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/dbaf8ec5-3327-3455-b442-c52264f96c65.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.33.120.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:21:32:68:63:12:fe:34:d4:6b:4d:c5:1e:8b:ad:c7:08:eb: 91:50:9f:15:1d:61:fd:cc:d0:74:c5:4e:ae:cd:1d:39:5d:ad: 49:c5:b4:bf:e2:83:b8:ab:ba:c1:e7:08:30:9f:65:d6:34:97: ea:75:aa:ff:fa:ca:06:f9:c6:c4:0d:e5:dc:6a:32:e2:08:4d: 23:08:8b:f0:d0:73:aa:d6:fd:47:69:41:6b:d0:9b:d3:4f:13: 43:b6:29:c2:d5:b6:c5:3a:5b:b1:84:8a:4c:5e:d9:56:8f:58: 4c:8a:3a:5d:70:2e:76:3e:91:48:a0:57:3e:dc:c1:97:3e:12: 0a:4c:0e:2d:c0:31:b9:14:5f:c1:02:3f:15:95:f8:c1:e2:15: 2a:13:bd:92:44:83:b8:da:7a:23:57:e6:da:b3:0e:80:89:ef: 0c:c5:87:78:26:0e:b1:7d:6b:92:c0:ed:9d:70:53:be:31:5e: 20:8b:a0:18:29:50:4d:88:24:90:de:49:28:ca:5f:18:d7:b7: 90:dd:99:01:9a:18:f1:8d:4e:ce:53:49:bc:ca:fa:c1:20:08: 66:0a:43:58:75:c9:36:9b:34:b4:b8:e6:65:71:93:df:b3:05: aa:05:65:59:74:65:15:c0:f4:28:fe:b0:ce:2c:af:2d:1d:c5: 4a:7a:64:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEzOcgL/3YuKMPyKeQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDIwOTE0MDAzOVoXDTI2MDUxMDEzMDAzOVowLzEtMCsGA1UEAxMk NDdkNzA4ZDUtMzE0NC00ZDIwLTg3OTYtMWQ1NmYwZmI4ZTQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArs/7NjoV1VSf3ZGBgwkituXQ4ahmfPqmDEXU bfDtXipm79zIdOdlU/FBUsH0DRaoAwbbctkXlR1wadujPMRSVD0XhSNozqu7SvFc Nj4buBzY7VYJa5NGhlhbAoPSZCZFYTkNZgIcmaTSI4+tE4Q4+uProHq+kvCNCAJ0 Dn4HLfZ1Z5C73Glk+ZKSdpvjg5T5apo21HaXIS8DXzQHKza1l4Xhsgnzo1bkXiMm QW0ndZLVTDitLqKD4BnhzYPqSkZ0uY2QF7jaZvG5/Gbku+2W2n24rPycNTjNMSCK G7kijhoXn5HRqy77FJ+tHEnCccUbXLStrK5FXgBQscQps8AsgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKNKx4RHYw3tFkbdBuI6VExwTLDEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZGJhZjhlYzUtMzMyNy0z NDU1LWI0NDItYzUyMjY0Zjk2YzY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCFyF4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEwhMmhjEv401GtNxR6LrccI65FQnxUdYf3M0HTFTq7NHTldrUnFtL/i g7irusHnCDCfZdY0l+p1qv/6ygb5xsQN5dxqMuIITSMIi/DQc6rW/UdpQWvQm9NP E0O2KcLVtsU6W7GEikxe2VaPWEyKOl1wLnY+kUigVz7cwZc+EgpMDi3AMbkUX8EC PxWV+MHiFSoTvZJEg7jaeiNX5tqzDoCJ7wzFh3gmDrF9a5LA7Z1wU74xXiCLoBgp UE2IJJDeSSjKXxjXt5DdmQGaGPGNTs5TSbzK+sEgCGYKQ1h1yTabNLS45mVxk9+z BaoFZVl0ZRXA9Cj+sM4sry0dxUp6ZPY= -----END CERTIFICATE-----Generated at Mon Mar 2 10:17:36 2026 by rpki-client