$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/38442203-0a23-3c40-8941-6f49f8a5fb72.roa File: 38442203-0a23-3c40-8941-6f49f8a5fb72.roa (raw, json) Hash identifier: ZEj1Vluq+kvHxGMYAL7v//DoiHN0BqRvPJPi4V6x9RU= Subject key identifier: D2:A4:55:91:D2:6A:82:CE:B0:3E:CD:DC:54:FD:61:41:C8:21:D7:3E Certificate issuer: /CN=33c78d60-34eb-4fed-8e25-925b95a30c8e Certificate serial: 010D0C9F4328584D3B34EA4E162C22F78EB3BA20 Authority key identifier: 5F:65:25:B0:69:97:21:82:E6:E2:D3:91:46:77:BA:5C:33:D3:E0:41 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/38442203-0a23-3c40-8941-6f49f8a5fb72.roa Signing time: Fri 20 Mar 2026 13:00:40 +0000 ROA not before: Fri 20 Mar 2026 13:00:40 +0000 ROA not after: Thu 18 Jun 2026 13:00:40 +0000 asID: 33039 IP address blocks: 142.248.216.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/33c78d60-34eb-4fed-8e25-925b95a30c8e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/33c78d60-34eb-4fed-8e25-925b95a30c8e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:3b:34:ea:4e:16:2c:22:f7:8e:b3:ba:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33c78d60-34eb-4fed-8e25-925b95a30c8e Validity Not Before: Mar 20 13:00:40 2026 GMT Not After : Jun 18 13:00:40 2026 GMT Subject: CN=cdfcd721-4c5c-4ea7-8217-6e6dfe3c739b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:35:de:97:a6:5d:88:b5:9a:fb:58:de:69:06: 01:b1:b3:e0:6e:5a:ed:c8:af:38:d0:86:7d:cb:ef: 40:e7:64:93:6b:b7:e3:a4:54:f1:c3:8a:52:f3:ea: d1:82:fb:3d:0d:d5:e8:f3:d1:e9:0f:8b:23:78:98: 63:70:07:59:f3:9f:9d:b2:3e:09:bd:71:94:c7:03: a9:59:2b:1d:1c:c2:7b:d5:ee:47:37:3b:d1:98:63: 42:60:c7:f1:0b:de:c8:09:fb:1e:15:56:8d:53:a8: 3d:c5:8b:6a:9c:9a:2e:31:cc:a6:35:1a:40:ae:1c: 02:62:4b:08:6a:69:da:14:98:78:4e:e0:3f:d2:9f: 54:db:db:c7:4b:a4:14:a3:5e:d7:fa:82:db:02:18: cd:e5:c2:e5:42:62:5b:0a:46:52:03:dc:d4:08:39: 36:41:92:f3:63:40:4f:3c:d1:54:c4:e7:af:77:27: e0:71:63:9d:0a:50:69:96:9f:b5:d6:0c:c6:54:84: b4:63:89:1a:ba:93:e5:f6:45:99:01:03:fc:b6:aa: bd:82:21:9a:e7:8c:34:a5:79:24:25:95:55:0f:9b: d3:9d:e6:54:73:a4:11:31:f2:ee:c4:24:da:42:6f: 5d:c4:0d:3f:f6:c5:05:eb:e5:c1:bf:d6:7a:33:9e: e3:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:A4:55:91:D2:6A:82:CE:B0:3E:CD:DC:54:FD:61:41:C8:21:D7:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/38442203-0a23-3c40-8941-6f49f8a5fb72.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/33c78d60-34eb-4fed-8e25-925b95a30c8e.crl X509v3 Authority Key Identifier: keyid:5F:65:25:B0:69:97:21:82:E6:E2:D3:91:46:77:BA:5C:33:D3:E0:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e.cer sbgp-ipAddrBlock: critical IPv4: 142.248.216.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:c9:83:4a:74:8d:76:5c:9f:d5:62:f7:fd:fe:e8:1d:72:b1: 35:07:c5:65:5a:d5:7a:1f:ba:a7:6c:b5:e5:a2:c0:62:0a:1e: f0:c5:fc:c3:37:bc:7c:2e:53:f6:72:40:5b:82:59:fb:d2:60: 98:4a:1e:9e:5f:4a:3d:53:1e:86:ff:31:84:02:d9:e1:a4:27: 0b:83:ca:dd:5b:52:b3:5d:b2:ab:b3:d2:a6:79:ce:9b:12:60: 27:26:a6:fe:7d:fd:9c:72:f1:0f:e2:05:55:ae:1c:72:c1:65: b2:47:fc:e7:ef:77:31:fd:fb:48:22:5a:bb:02:84:44:2a:9d: b6:e7:2d:f4:50:93:df:b2:2b:bd:64:a7:e5:96:77:60:c8:c3: cf:25:b9:ba:d4:51:27:62:dc:b9:19:6e:9f:13:06:ed:1c:67: 0b:3a:c2:da:a4:d7:28:08:13:03:72:23:ff:1d:5a:fa:b1:e1: 7a:50:ef:fc:0c:8e:8d:a1:2e:93:29:9f:c0:9e:94:b9:c1:ba: b6:28:d7:b1:8d:a4:f8:e8:4e:cb:fd:18:30:12:f8:f6:71:a2: 4d:f2:07:a9:b2:34:f0:be:31:bc:f5:3a:e8:37:03:06:06:32: 57:74:48:62:3c:2d:e1:70:60:32:20:a1:60:8f:1d:c7:28:21: 2b:00:78:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE07NOpOFiwi946zuiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzNjNzhkNjAtMzRlYi00ZmVkLThlMjUtOTI1Yjk1YTMw YzhlMB4XDTI2MDMyMDEzMDA0MFoXDTI2MDYxODEzMDA0MFowLzEtMCsGA1UEAxMk Y2RmY2Q3MjEtNGM1Yy00ZWE3LTgyMTctNmU2ZGZlM2M3MzliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgzXel6ZdiLWa+1jeaQYBsbPgblrtyK840IZ9 y+9A52STa7fjpFTxw4pS8+rRgvs9DdXo89HpD4sjeJhjcAdZ85+dsj4JvXGUxwOp WSsdHMJ71e5HNzvRmGNCYMfxC97ICfseFVaNU6g9xYtqnJouMcymNRpArhwCYksI amnaFJh4TuA/0p9U29vHS6QUo17X+oLbAhjN5cLlQmJbCkZSA9zUCDk2QZLzY0BP PNFUxOevdyfgcWOdClBplp+11gzGVIS0Y4kaupPl9kWZAQP8tqq9giGa54w0pXkk JZVVD5vTneZUc6QRMfLuxCTaQm9dxA0/9sUF6+XBv9Z6M57j3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNKkVZHSaoLOsD7N3FT9YUHIIdc+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zM2M3 OGQ2MC0zNGViLTRmZWQtOGUyNS05MjViOTVhMzBjOGUvMzg0NDIyMDMtMGEyMy0z YzQwLTg5NDEtNmY0OWY4YTVmYjcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMzNjNzhkNjAtMzRlYi00ZmVkLThl MjUtOTI1Yjk1YTMwYzhlLzMzYzc4ZDYwLTM0ZWItNGZlZC04ZTI1LTkyNWI5NWEz MGM4ZS5jcmwwHwYDVR0jBBgwFoAUX2UlsGmXIYLm4tORRne6XDPT4EEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8zM2M3OGQ2MC0zNGViLTRmZWQtOGUyNS05MjVi OTVhMzBjOGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCjvjYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFbJg0p0jXZcn9Vi9/3+6B1ysTUHxWVa1XofuqdsteWiwGIKHvDF/MM3 vHwuU/ZyQFuCWfvSYJhKHp5fSj1THob/MYQC2eGkJwuDyt1bUrNdsquz0qZ5zpsS YCcmpv59/Zxy8Q/iBVWuHHLBZbJH/OfvdzH9+0giWrsChEQqnbbnLfRQk9+yK71k p+WWd2DIw88lubrUUSdi3LkZbp8TBu0cZws6wtqk1ygIEwNyI/8dWvqx4XpQ7/wM jo2hLpMpn8CelLnBurYo17GNpPjoTsv9GDAS+PZxok3yB6myNPC+Mbz1Oug3AwYG Mld0SGI8LeFwYDIgoWCPHccoISsAeFQ= -----END CERTIFICATE-----Generated at Thu Mar 26 14:18:07 2026 by rpki-client