$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/33fe9b87-82af-3f62-915f-757dd2304e08.roa File: 33fe9b87-82af-3f62-915f-757dd2304e08.roa (raw, json) Hash identifier: 2rwLYxsyKr3XANDNMhO8CNSe405rmeJEJEaWeF+2/A4= Subject key identifier: 01:93:C8:90:2D:9B:B7:B3:6B:10:FC:6A:D1:99:F8:FF:FF:3E:43:02 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584E921FAED6FFF798F7F44A7720 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/33fe9b87-82af-3f62-915f-757dd2304e08.roa Signing time: Tue 21 Jul 2026 09:00:12 +0000 ROA not before: Tue 21 Jul 2026 09:00:12 +0000 ROA not after: Mon 19 Oct 2026 09:00:12 +0000 asID: 30036 IP address blocks: 173.29.22.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:92:1f:ae:d6:ff:f7:98:f7:f4:4a:77:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Jul 21 09:00:12 2026 GMT Not After : Oct 19 09:00:12 2026 GMT Subject: CN=46ab1e73-3ddf-43a5-a8dd-12be79d70e4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:29:50:08:2f:09:56:68:3d:8c:9e:d9:3a:8a: c0:eb:2c:48:08:a9:57:c0:92:da:69:3f:d4:6b:31: 27:d9:8e:38:de:30:9d:75:fd:56:4d:8d:a1:d6:bd: 8d:ab:98:64:58:bf:a1:ad:1e:e6:da:7f:8e:48:aa: db:4a:35:99:a0:f1:4b:5a:ff:66:0e:47:51:a6:af: 24:78:8c:70:67:3c:1c:98:2d:56:e0:9c:16:98:3b: 04:5d:20:b0:d3:45:ed:22:28:a5:f6:4a:cb:da:18: 72:20:9a:b2:56:19:70:61:93:27:09:6e:f0:c9:39: c4:19:99:08:a2:90:57:a2:6f:c9:32:30:f7:2b:06: 1a:8b:34:ce:7a:3e:64:b5:9f:9a:c0:2e:f3:81:b8: d1:a9:1e:80:a2:5c:0d:39:ba:40:ee:26:eb:b8:20: f9:ca:ba:4f:ce:46:10:0f:f1:6f:7a:64:f9:65:96: 94:09:ea:39:a5:66:7b:87:db:91:48:9f:86:60:70: 3f:03:c4:75:b1:e4:e9:ce:c5:0e:17:d4:b2:72:2a: eb:d4:d5:2a:45:4a:12:38:ca:03:75:56:25:3d:c8: e0:fc:18:da:3f:a3:09:44:d6:56:20:8d:e1:df:82: d4:19:3e:8c:51:87:f2:ea:35:17:a8:84:ea:8f:d8: e6:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:93:C8:90:2D:9B:B7:B3:6B:10:FC:6A:D1:99:F8:FF:FF:3E:43:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/33fe9b87-82af-3f62-915f-757dd2304e08.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.29.22.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:3b:28:1c:d5:0c:c0:af:a7:61:09:c8:38:b6:ff:61:6d:e1: 9d:f0:67:d5:b9:24:af:45:0a:cb:05:b9:f1:12:63:5a:09:e0: fb:1a:fe:0f:1c:02:68:9c:c6:6b:38:58:46:f1:a7:53:05:3a: ba:f2:63:53:a3:a7:b6:bf:3c:35:9f:de:e8:d6:3e:10:24:9c: 7d:7c:69:5f:c5:7a:90:fa:df:c6:03:8a:d4:52:be:ee:6b:a6: aa:82:f9:6b:86:c3:a9:82:19:99:b5:37:d2:cc:0c:04:bc:b3: 5a:e2:74:48:94:40:06:c5:4b:5d:15:69:8c:07:1d:9d:ff:2b: b0:e7:c1:42:a2:84:20:cb:ae:40:96:97:cd:19:63:c3:1c:d7: a4:76:b1:eb:1d:8d:e4:bb:f3:5c:60:ae:5f:8b:4f:81:b4:12: f3:17:8b:c6:22:90:b6:b6:98:cd:f9:c8:6f:84:8f:45:ed:97: 9b:99:63:37:2c:5e:7b:66:07:40:7a:f8:0a:40:b1:cd:90:4b: 2c:ac:53:eb:7e:22:06:d6:e2:91:1d:39:74:87:6e:36:6a:7f: a4:c1:18:6a:f6:b9:a1:d0:d0:52:76:a4:eb:f2:dd:46:ca:2b: 65:2c:00:ef:86:66:ac:77:06:88:fb:d3:7c:e4:fc:de:96:5b: e0:b5:91:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6SH67W//eY9/RKdyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI2MDcyMTA5MDAxMloXDTI2MTAxOTA5MDAxMlowLzEtMCsGA1UEAxMk NDZhYjFlNzMtM2RkZi00M2E1LWE4ZGQtMTJiZTc5ZDcwZTRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApSlQCC8JVmg9jJ7ZOorA6yxICKlXwJLaaT/U azEn2Y443jCddf1WTY2h1r2Nq5hkWL+hrR7m2n+OSKrbSjWZoPFLWv9mDkdRpq8k eIxwZzwcmC1W4JwWmDsEXSCw00XtIiil9krL2hhyIJqyVhlwYZMnCW7wyTnEGZkI opBXom/JMjD3KwYaizTOej5ktZ+awC7zgbjRqR6AolwNObpA7ibruCD5yrpPzkYQ D/FvemT5ZZaUCeo5pWZ7h9uRSJ+GYHA/A8R1seTpzsUOF9Sycirr1NUqRUoSOMoD dVYlPcjg/BjaP6MJRNZWII3h34LUGT6MUYfy6jUXqITqj9jmcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAGTyJAtm7ezaxD8atGZ+P//PkMCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvMzNmZTliODctODJhZi0z ZjYyLTkxNWYtNzU3ZGQyMzA0ZTA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArR0WMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGU7KBzVDMCvp2EJyDi2/2Ft4Z3wZ9W5JK9FCssFufESY1oJ4Psa/g8c Amicxms4WEbxp1MFOrryY1Ojp7a/PDWf3ujWPhAknH18aV/FepD638YDitRSvu5r pqqC+WuGw6mCGZm1N9LMDAS8s1ridEiUQAbFS10VaYwHHZ3/K7DnwUKihCDLrkCW l80ZY8Mc16R2sesdjeS781xgrl+LT4G0EvMXi8YikLa2mM35yG+Ej0Xtl5uZYzcs XntmB0B6+ApAsc2QSyysU+t+IgbW4pEdOXSHbjZqf6TBGGr2uaHQ0FJ2pOvy3UbK K2UsAO+GZqx3Boj703zk/N6WW+C1kVA= -----END CERTIFICATE-----Generated at Fri Jul 24 14:40:09 2026 by rpki-client