$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/41b3b885-79da-40ed-ab0b-ce4a30f770db/33c0f0c7-189d-3673-9471-4ef912728a13.roa File: 33c0f0c7-189d-3673-9471-4ef912728a13.roa (raw, json) Hash identifier: nIMaSNHWTfjTxoU01J144Y7fGYR3iSGH8BuiTpotp5E= Subject key identifier: B7:F4:F4:D0:93:B3:69:79:25:AB:13:0F:F3:2F:85:A3:76:89:6F:24 Certificate issuer: /CN=41b3b885-79da-40ed-ab0b-ce4a30f770db Certificate serial: 010D0C9F4328584D3E001E07F1A528EF0CAD5260 Authority key identifier: D0:86:28:4A:65:DA:2D:21:42:61:27:16:EE:AE:44:F7:29:E6:DB:F4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/41b3b885-79da-40ed-ab0b-ce4a30f770db.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/41b3b885-79da-40ed-ab0b-ce4a30f770db/33c0f0c7-189d-3673-9471-4ef912728a13.roa Signing time: Sat 21 Mar 2026 13:00:39 +0000 ROA not before: Sat 21 Mar 2026 13:00:39 +0000 ROA not after: Fri 19 Jun 2026 13:00:39 +0000 asID: 29888 IP address blocks: 192.136.176.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/41b3b885-79da-40ed-ab0b-ce4a30f770db/41b3b885-79da-40ed-ab0b-ce4a30f770db.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/41b3b885-79da-40ed-ab0b-ce4a30f770db/41b3b885-79da-40ed-ab0b-ce4a30f770db.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/41b3b885-79da-40ed-ab0b-ce4a30f770db.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3e:00:1e:07:f1:a5:28:ef:0c:ad:52:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41b3b885-79da-40ed-ab0b-ce4a30f770db Validity Not Before: Mar 21 13:00:39 2026 GMT Not After : Jun 19 13:00:39 2026 GMT Subject: CN=96a1e08d-d0bb-4c77-8f4a-1166580182a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:f1:c0:f4:50:e1:8a:db:36:8b:1b:fc:2e:b1: 7b:ca:91:25:04:d0:db:a4:6f:d8:ad:52:c1:60:52: 9d:6e:b7:d6:36:2c:89:e3:62:9a:5f:c4:a8:0c:f9: b8:fe:dd:6b:cf:a1:5b:0a:d0:cb:bb:c9:3c:a1:9d: 89:f3:2b:ba:e9:9e:42:ba:e8:39:23:db:eb:ef:9e: 3e:cf:87:f8:84:55:13:c7:b1:30:de:1c:12:c7:2b: e1:cf:26:cc:09:8d:91:64:6f:45:24:14:06:3b:8d: 52:d5:02:bf:28:2b:bb:0e:8f:5f:66:90:f5:a5:e4: f4:e2:92:d4:38:92:b0:b2:b9:41:cf:24:1c:d6:a3: f8:dd:30:c4:4b:35:8d:f4:d2:24:99:a5:67:0f:16: de:ce:df:9c:e2:e7:9b:a3:be:ef:a5:0c:c6:bc:17: a3:4d:12:d2:2d:7d:50:f9:d0:4d:16:59:40:27:a9: b1:53:76:51:a4:17:96:d1:1f:54:60:e0:74:1b:7c: 51:c1:5d:88:c8:ce:63:c2:51:96:ec:89:67:8c:7c: 56:f3:cc:96:71:61:5f:83:ea:78:50:cd:0d:0c:3d: 16:4e:32:28:55:d3:58:84:f8:4f:95:3e:a3:36:ce: 69:66:2b:39:f0:5e:91:62:bd:bd:47:3a:71:79:5a: 0b:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:F4:F4:D0:93:B3:69:79:25:AB:13:0F:F3:2F:85:A3:76:89:6F:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/41b3b885-79da-40ed-ab0b-ce4a30f770db/33c0f0c7-189d-3673-9471-4ef912728a13.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/41b3b885-79da-40ed-ab0b-ce4a30f770db/41b3b885-79da-40ed-ab0b-ce4a30f770db.crl X509v3 Authority Key Identifier: keyid:D0:86:28:4A:65:DA:2D:21:42:61:27:16:EE:AE:44:F7:29:E6:DB:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/41b3b885-79da-40ed-ab0b-ce4a30f770db.cer sbgp-ipAddrBlock: critical IPv4: 192.136.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:0b:f2:88:6b:1b:f7:31:0b:1b:7f:1a:73:0d:5a:57:68:94: e4:0d:e4:a7:75:df:91:01:a3:7c:69:7b:6f:ad:05:c5:e0:11: 2c:6f:1b:cf:28:0b:7b:d4:f7:aa:a9:ea:08:82:26:a0:ea:c4: f9:9d:0f:68:53:c6:4f:8d:db:cf:f5:1d:e0:56:2c:01:4a:3d: b3:86:46:65:29:b9:63:cd:30:18:bb:be:09:25:3a:20:96:20: 98:22:84:11:c5:9a:3a:8f:0a:e1:71:58:1c:45:04:2f:b1:33: ac:46:2a:7e:8e:83:82:c1:29:de:b4:a0:f7:db:86:f5:f2:f9: 86:fc:20:b5:10:a6:90:55:36:42:e5:3f:b0:e2:00:52:fa:8a: 32:36:68:f9:77:7d:f4:30:e0:8f:94:46:70:ee:2d:8d:48:bd: f6:c9:eb:9f:52:dd:92:03:ba:49:6e:2e:2f:b7:46:6e:4a:25: 43:d6:47:68:13:47:4e:64:3c:d3:8b:d6:e1:7f:48:c3:0e:18: d6:82:67:8b:62:97:15:ac:85:73:63:de:23:02:d6:0f:4a:68: 14:b4:70:f7:4d:84:27:19:b5:b5:f2:00:11:aa:de:02:ad:27: 8a:da:de:a5:ff:9f:f6:a2:24:5b:03:9d:16:aa:4c:fe:5b:ee: d7:77:88:5a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0+AB4H8aUo7wytUmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDFiM2I4ODUtNzlkYS00MGVkLWFiMGItY2U0YTMwZjc3 MGRiMB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk OTZhMWUwOGQtZDBiYi00Yzc3LThmNGEtMTE2NjU4MDE4MmE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnPHA9FDhits2ixv8LrF7ypElBNDbpG/YrVLB YFKdbrfWNiyJ42KaX8SoDPm4/t1rz6FbCtDLu8k8oZ2J8yu66Z5Cuug5I9vr754+ z4f4hFUTx7Ew3hwSxyvhzybMCY2RZG9FJBQGO41S1QK/KCu7Do9fZpD1peT04pLU OJKwsrlBzyQc1qP43TDESzWN9NIkmaVnDxbezt+c4uebo77vpQzGvBejTRLSLX1Q +dBNFllAJ6mxU3ZRpBeW0R9UYOB0G3xRwV2IyM5jwlGW7IlnjHxW88yWcWFfg+p4 UM0NDD0WTjIoVdNYhPhPlT6jNs5pZis58F6RYr29RzpxeVoLYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLf09NCTs2l5JasTD/MvhaN2iW8kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80MWIz Yjg4NS03OWRhLTQwZWQtYWIwYi1jZTRhMzBmNzcwZGIvMzNjMGYwYzctMTg5ZC0z NjczLTk0NzEtNGVmOTEyNzI4YTEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNDFiM2I4ODUtNzlkYS00MGVkLWFi MGItY2U0YTMwZjc3MGRiLzQxYjNiODg1LTc5ZGEtNDBlZC1hYjBiLWNlNGEzMGY3 NzBkYi5jcmwwHwYDVR0jBBgwFoAU0IYoSmXaLSFCYScW7q5E9ynm2/QwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi80MWIzYjg4NS03OWRhLTQwZWQtYWIwYi1jZTRh MzBmNzcwZGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEwIiwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKQL8ohrG/cxCxt/GnMNWldolOQN5Kd135EBo3xpe2+tBcXgESxvG88o C3vU96qp6giCJqDqxPmdD2hTxk+N28/1HeBWLAFKPbOGRmUpuWPNMBi7vgklOiCW IJgihBHFmjqPCuFxWBxFBC+xM6xGKn6Og4LBKd60oPfbhvXy+Yb8ILUQppBVNkLl P7DiAFL6ijI2aPl3ffQw4I+URnDuLY1IvfbJ659S3ZIDukluLi+3Rm5KJUPWR2gT R05kPNOL1uF/SMMOGNaCZ4tilxWshXNj3iMC1g9KaBS0cPdNhCcZtbXyABGq3gKt J4ra3qX/n/aiJFsDnRaqTP5b7td3iFo= -----END CERTIFICATE-----Generated at Thu Mar 26 17:00:56 2026 by rpki-client