$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ff5b028e-364f-3917-bef9-cbf274326261.roa File: ff5b028e-364f-3917-bef9-cbf274326261.roa (raw, json) Hash identifier: QjLXsIwrxQD9LlHJn0z+zrtE/LCdHgJeB6A8fX6OkZo= Subject key identifier: 3F:A2:DC:B5:6A:22:74:81:85:EE:FC:6F:99:CD:CA:BD:D2:65:62:32 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584D7F9A9822E657D62BCB329F00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ff5b028e-364f-3917-bef9-cbf274326261.roa Signing time: Tue 14 Apr 2026 01:00:24 +0000 ROA not before: Tue 14 Apr 2026 01:00:24 +0000 ROA not after: Mon 13 Jul 2026 01:00:24 +0000 asID: 20940 IP address blocks: 23.33.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 18 Apr 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:7f:9a:98:22:e6:57:d6:2b:cb:32:9f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Apr 14 01:00:24 2026 GMT Not After : Jul 13 01:00:24 2026 GMT Subject: CN=af86d7ef-5ebb-4982-b120-dd17a291d205 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:48:59:b7:91:06:bb:53:a6:69:e3:85:07:f6: ad:4a:c7:fb:31:be:e3:97:e0:61:88:55:66:3f:1c: c9:83:b4:d5:0b:24:56:b3:fd:b2:a4:d5:36:bb:76: 62:5b:ad:ca:fc:de:7b:bf:ae:9d:d3:44:b1:9b:09: 1b:40:a2:f8:ea:41:b1:59:c9:38:27:43:50:68:ea: 04:94:18:91:a7:37:56:f3:51:a9:14:c5:f0:67:54: 19:db:79:f7:c1:a5:e6:de:43:64:24:00:1b:6b:56: f3:56:da:7b:52:35:31:18:3b:8a:34:c1:09:77:2c: 18:13:f9:26:c1:c8:5e:f4:92:c3:91:90:9c:77:70: 6e:17:bb:42:37:50:83:ed:1d:29:06:55:10:8f:61: ae:2f:73:87:b1:32:f4:e3:9d:ec:83:11:4c:ea:d4: a5:8c:1a:30:f4:e4:5f:9e:a3:f0:83:aa:8f:02:47: 95:76:42:56:21:39:4e:12:1c:c9:b2:dd:71:e9:f0: aa:72:5e:ca:f8:e8:79:c3:d8:49:f5:bf:c4:2f:ad: 77:b0:f6:02:23:6a:4b:56:de:a0:2f:2c:7d:91:1f: 68:f6:53:c7:d6:c7:ff:77:4a:c2:16:e4:0a:0b:72: 27:a8:c4:a4:34:70:09:e1:4f:0a:32:f4:00:d1:52: e6:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:A2:DC:B5:6A:22:74:81:85:EE:FC:6F:99:CD:CA:BD:D2:65:62:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/ff5b028e-364f-3917-bef9-cbf274326261.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.33.236.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:bb:20:58:f2:30:50:30:c6:9e:ca:3c:0a:b6:db:a4:1e:e3: 98:88:76:d2:4b:30:80:50:99:4e:54:31:16:66:0f:c5:f9:b0: 07:ca:8c:c6:4f:02:3b:0c:20:57:1d:44:e4:93:9c:4a:95:60: b8:f7:c9:dd:87:8a:d8:77:4c:03:d9:22:ff:f3:4f:9f:05:bc: d3:5c:8c:63:a8:6e:6e:3d:5a:9c:93:c0:81:e4:74:c4:3a:7f: ac:c4:3e:19:c5:4f:07:f8:0f:31:8a:25:d0:39:77:ed:73:d7: ae:9b:52:c2:83:f1:a8:d7:53:09:b3:d6:b3:ef:0c:64:3c:c1: 0e:fc:24:54:74:99:ff:a0:7c:b0:88:d8:bd:ed:82:a9:b1:4e: 42:7c:a6:2b:8f:2c:20:46:18:58:1b:54:d6:f1:d5:39:e1:1e: c9:41:a4:92:0c:48:9d:13:c2:20:46:47:f9:0c:1c:52:cd:8a: 4a:b5:60:69:09:c6:2e:74:e1:69:0b:46:4e:e6:5a:63:ed:f2: 41:05:b4:b3:d2:42:d1:df:fc:1a:a2:e3:6b:70:64:2e:8a:15: 1b:2e:c0:c2:9d:d7:93:bd:70:28:69:93:95:73:51:5a:82:23: 6c:90:f0:2d:62:76:01:bd:61:72:d5:5c:44:fa:70:fb:52:c2: ee:95:db:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1/mpgi5lfWK8synwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDQxNDAxMDAyNFoXDTI2MDcxMzAxMDAyNFowLzEtMCsGA1UEAxMk YWY4NmQ3ZWYtNWViYi00OTgyLWIxMjAtZGQxN2EyOTFkMjA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjEhZt5EGu1OmaeOFB/atSsf7Mb7jl+BhiFVm PxzJg7TVCyRWs/2ypNU2u3ZiW63K/N57v66d00SxmwkbQKL46kGxWck4J0NQaOoE lBiRpzdW81GpFMXwZ1QZ23n3waXm3kNkJAAba1bzVtp7UjUxGDuKNMEJdywYE/km wche9JLDkZCcd3BuF7tCN1CD7R0pBlUQj2GuL3OHsTL0453sgxFM6tSljBow9ORf nqPwg6qPAkeVdkJWITlOEhzJst1x6fCqcl7K+Oh5w9hJ9b/EL613sPYCI2pLVt6g Lyx9kR9o9lPH1sf/d0rCFuQKC3InqMSkNHAJ4U8KMvQA0VLm8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD+i3LVqInSBhe78b5nNyr3SZWIyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvZmY1YjAyOGUtMzY0Zi0z OTE3LWJlZjktY2JmMjc0MzI2MjYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAFyHsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHi7IFjyMFAwxp7KPAq226Qe45iIdtJLMIBQmU5UMRZmD8X5sAfKjMZP AjsMIFcdROSTnEqVYLj3yd2Hith3TAPZIv/zT58FvNNcjGOobm49WpyTwIHkdMQ6 f6zEPhnFTwf4DzGKJdA5d+1z166bUsKD8ajXUwmz1rPvDGQ8wQ78JFR0mf+gfLCI 2L3tgqmxTkJ8piuPLCBGGFgbVNbx1TnhHslBpJIMSJ0TwiBGR/kMHFLNikq1YGkJ xi504WkLRk7mWmPt8kEFtLPSQtHf/Bqi42twZC6KFRsuwMKd15O9cChpk5VzUVqC I2yQ8C1idgG9YXLVXET6cPtSwu6V29c= -----END CERTIFICATE-----Generated at Fri Apr 17 15:35:50 2026 by rpki-client