$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a7001425-6965-4c1f-8e35-f578d112295c/33a3b984-a77f-3d78-88ae-30ae68813e02.roa File: 33a3b984-a77f-3d78-88ae-30ae68813e02.roa (raw, json) Hash identifier: 5yQroYdAZa1e8Go7wqJtW6oO7/ED5viW/knKniKTYrs= Subject key identifier: 20:57:44:16:79:AB:2A:1B:8A:B5:1E:5A:E0:03:56:61:42:57:2E:3C Certificate issuer: /CN=a7001425-6965-4c1f-8e35-f578d112295c Certificate serial: 010D0C9F4328584DD1F5BCF5BD72F05452B9E8A0 Authority key identifier: F4:6C:4D:F0:5E:17:96:E6:79:88:21:0F:C0:BA:29:70:32:D6:2B:CB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a7001425-6965-4c1f-8e35-f578d112295c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a7001425-6965-4c1f-8e35-f578d112295c/33a3b984-a77f-3d78-88ae-30ae68813e02.roa Signing time: Wed 13 May 2026 13:00:31 +0000 ROA not before: Wed 13 May 2026 13:00:31 +0000 ROA not after: Tue 11 Aug 2026 13:00:31 +0000 asID: 16920 IP address blocks: 128.224.254.0/24 maxlen: 24 128.224.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a7001425-6965-4c1f-8e35-f578d112295c/a7001425-6965-4c1f-8e35-f578d112295c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a7001425-6965-4c1f-8e35-f578d112295c/a7001425-6965-4c1f-8e35-f578d112295c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a7001425-6965-4c1f-8e35-f578d112295c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:d1:f5:bc:f5:bd:72:f0:54:52:b9:e8:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a7001425-6965-4c1f-8e35-f578d112295c Validity Not Before: May 13 13:00:31 2026 GMT Not After : Aug 11 13:00:31 2026 GMT Subject: CN=e0bf0d7c-c1d4-4b7a-a5a3-2438a0b62915 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:3a:31:a9:50:8a:cc:0c:70:03:54:49:09:d2: 18:e1:af:e1:b3:de:cd:83:8c:4f:bb:ac:93:b6:30: ba:f5:ab:f9:3c:f6:00:a9:58:7a:c3:52:5a:69:50: 13:ac:54:0b:aa:b3:2b:3b:4d:4e:da:26:f6:0d:01: 91:d3:d9:56:50:f4:3c:ee:5b:18:ee:f0:3a:91:31: c0:77:04:9e:c5:78:6e:26:e0:3c:4a:a2:ba:c8:ed: 26:9e:7c:e0:cc:a8:df:17:f9:ba:25:92:54:4e:62: 4f:30:75:69:04:57:0b:23:81:a2:0f:95:b2:62:e4: e7:6f:3d:7c:c6:f6:41:9d:9a:cc:c4:57:1c:8c:c8: b9:4b:a0:f9:48:05:91:86:88:fa:1e:5c:06:eb:1c: 84:61:ea:92:86:b6:f6:5d:8c:36:3a:c8:d1:0c:36: c3:b5:3b:0a:9b:b7:ec:07:0c:e5:7d:81:fe:94:88: 15:ef:23:74:8d:9b:8f:0f:0b:74:f5:c4:62:9f:5d: 3f:b9:71:98:b7:29:00:54:a7:90:1b:a9:08:20:39: 74:8d:a8:b2:3e:44:aa:bd:8e:aa:de:25:25:f5:ca: 80:f6:37:7b:51:be:9c:d3:3d:6e:ef:63:40:1e:7e: 1a:d0:84:5a:77:fc:83:59:c8:2b:27:80:43:84:18: 92:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:57:44:16:79:AB:2A:1B:8A:B5:1E:5A:E0:03:56:61:42:57:2E:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a7001425-6965-4c1f-8e35-f578d112295c/33a3b984-a77f-3d78-88ae-30ae68813e02.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a7001425-6965-4c1f-8e35-f578d112295c/a7001425-6965-4c1f-8e35-f578d112295c.crl X509v3 Authority Key Identifier: keyid:F4:6C:4D:F0:5E:17:96:E6:79:88:21:0F:C0:BA:29:70:32:D6:2B:CB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a7001425-6965-4c1f-8e35-f578d112295c.cer sbgp-ipAddrBlock: critical IPv4: 128.224.254.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:b1:98:00:d1:b0:1a:dd:6c:16:e9:27:dd:cf:c2:53:b9:58: 9d:ed:99:3a:25:c0:1e:c5:22:d6:d1:5e:3b:8d:9d:c8:05:22: 96:4c:a2:44:e8:86:1b:63:e8:07:08:ad:72:d6:12:26:8d:44: 06:6a:f6:e6:28:51:1b:22:cf:bd:22:bf:45:7b:f3:a5:cc:50: 62:fb:96:01:0d:2a:f6:65:ee:18:35:5a:19:4a:db:7d:9c:f2: 85:b2:6c:03:95:1a:a6:2e:e7:e6:be:67:3f:2e:82:8b:2d:19: 7d:fd:94:c1:6c:87:44:bf:f2:c7:1d:2b:37:a2:36:68:6a:35: c5:da:7a:c0:92:1f:e5:3a:36:7f:94:6c:ad:75:22:b3:a0:d5: f2:44:5d:31:76:b2:ef:0e:6b:ab:41:26:49:22:b1:17:00:fb: e9:d8:b5:02:80:5c:3b:69:a2:03:fa:95:30:b6:62:07:b9:00: 6f:17:6a:92:f9:8a:14:6d:d9:32:2a:2c:a8:b4:e9:c3:13:c7: 81:e6:cf:0b:a7:76:ad:e3:52:db:3f:d5:14:1e:6e:02:3c:c3: 95:fe:33:c9:23:f7:bc:d1:d1:31:64:7c:65:10:a1:f8:13:3c: 66:a4:e3:f3:85:84:72:49:7c:22:77:c1:a3:22:01:71:b0:d1: c9:d2:56:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3R9bz1vXLwVFK56KAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYTcwMDE0MjUtNjk2NS00YzFmLThlMzUtZjU3OGQxMTIy OTVjMB4XDTI2MDUxMzEzMDAzMVoXDTI2MDgxMTEzMDAzMVowLzEtMCsGA1UEAxMk ZTBiZjBkN2MtYzFkNC00YjdhLWE1YTMtMjQzOGEwYjYyOTE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsjoxqVCKzAxwA1RJCdIY4a/hs97Ng4xPu6yT tjC69av5PPYAqVh6w1JaaVATrFQLqrMrO01O2ib2DQGR09lWUPQ87lsY7vA6kTHA dwSexXhuJuA8SqK6yO0mnnzgzKjfF/m6JZJUTmJPMHVpBFcLI4GiD5WyYuTnbz18 xvZBnZrMxFccjMi5S6D5SAWRhoj6HlwG6xyEYeqShrb2XYw2OsjRDDbDtTsKm7fs BwzlfYH+lIgV7yN0jZuPDwt09cRin10/uXGYtykAVKeQG6kIIDl0jaiyPkSqvY6q 3iUl9cqA9jd7Ub6c0z1u72NAHn4a0IRad/yDWcgrJ4BDhBiSHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCBXRBZ5qyobirUeWuADVmFCVy48MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hNzAw MTQyNS02OTY1LTRjMWYtOGUzNS1mNTc4ZDExMjI5NWMvMzNhM2I5ODQtYTc3Zi0z ZDc4LTg4YWUtMzBhZTY4ODEzZTAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYTcwMDE0MjUtNjk2NS00YzFmLThl MzUtZjU3OGQxMTIyOTVjL2E3MDAxNDI1LTY5NjUtNGMxZi04ZTM1LWY1NzhkMTEy Mjk1Yy5jcmwwHwYDVR0jBBgwFoAU9GxN8F4XluZ5iCEPwLopcDLWK8swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9hNzAwMTQyNS02OTY1LTRjMWYtOGUzNS1mNTc4 ZDExMjI5NWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBgOD+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABuxmADRsBrdbBbpJ93PwlO5WJ3tmTolwB7FItbRXjuNncgFIpZMokTo hhtj6AcIrXLWEiaNRAZq9uYoURsiz70iv0V786XMUGL7lgENKvZl7hg1WhlK232c 8oWybAOVGqYu5+a+Zz8ugostGX39lMFsh0S/8scdKzeiNmhqNcXaesCSH+U6Nn+U bK11IrOg1fJEXTF2su8Oa6tBJkkisRcA++nYtQKAXDtpogP6lTC2Yge5AG8XapL5 ihRt2TIqLKi06cMTx4Hmzwundq3jUts/1RQebgI8w5X+M8kj97zR0TFkfGUQofgT PGak4/OFhHJJfCJ3waMiAXGw0cnSVnM= -----END CERTIFICATE-----Generated at Wed May 13 15:12:44 2026 by rpki-client