$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410/33d31f6d-7640-3b90-ad92-a613f1626ddd.roa File: 33d31f6d-7640-3b90-ad92-a613f1626ddd.roa (raw, json) Hash identifier: cpFEqFA09FrrbhzzQM0Z0jEP2HKiCRDk+NdBN/Ag50A= Subject key identifier: F0:DE:BC:C2:2A:1E:9F:4A:1C:EC:3A:24:22:78:50:33:FD:DB:1F:06 Certificate issuer: /CN=0c2b76fb-0555-4bed-b79b-20ec56b8d410 Certificate serial: 010D0C9F4328584D492A5616DB01679B6FFEFE20 Authority key identifier: 78:DC:B5:3E:20:18:87:C3:D3:39:7E:69:F4:72:64:AB:F1:7B:B0:D4 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410/33d31f6d-7640-3b90-ad92-a613f1626ddd.roa Signing time: Wed 25 Mar 2026 13:00:41 +0000 ROA not before: Wed 25 Mar 2026 13:00:41 +0000 ROA not after: Tue 23 Jun 2026 13:00:41 +0000 asID: 11385 IP address blocks: 142.248.228.0/22 maxlen: 32 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410/0c2b76fb-0555-4bed-b79b-20ec56b8d410.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410/0c2b76fb-0555-4bed-b79b-20ec56b8d410.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:49:2a:56:16:db:01:67:9b:6f:fe:fe:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0c2b76fb-0555-4bed-b79b-20ec56b8d410 Validity Not Before: Mar 25 13:00:41 2026 GMT Not After : Jun 23 13:00:41 2026 GMT Subject: CN=79434987-2515-4436-84cb-cf473725237b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:60:2f:e4:a3:a3:ae:4a:0a:02:ad:d0:3a:87: e2:55:b5:ef:ea:0d:cd:ed:09:cf:0f:51:78:2f:d8: 4d:02:87:27:ee:ca:7f:b2:57:a8:fb:3d:14:a5:41: e5:60:dc:f6:89:92:f2:0d:3f:d9:9b:13:e1:9d:29: 4e:43:b7:02:a8:07:42:fd:ac:70:fb:3d:da:75:20: 39:b5:e5:6f:59:ef:92:9c:81:0c:77:d6:88:83:4e: 47:5f:f6:ee:e5:5d:9c:82:57:00:03:2c:70:59:dc: 16:b6:9b:88:91:b2:77:fe:c6:e6:3b:e7:5d:95:82: 44:d5:8d:b5:3b:ad:dc:8f:5a:68:8b:15:6e:d7:1c: aa:c3:fd:da:b9:26:85:9d:d8:4d:cd:9b:62:13:43: 70:e1:37:18:54:79:f2:ef:b4:bf:54:f9:39:77:09: 35:5e:e9:62:71:25:39:b6:9d:36:3d:dd:b8:94:65: 4b:94:68:4e:36:1a:3b:4e:8e:4e:af:c8:b5:5a:9e: 7a:6e:f4:4c:b1:3b:fb:5d:a7:57:2c:9f:bb:73:2d: 1c:61:b1:f3:a5:59:0a:6b:fa:6f:43:44:0a:08:4e: 06:4a:a9:a2:a3:1b:f8:60:1d:1c:64:f5:24:28:a1: b1:c9:df:b6:df:f9:7a:74:66:53:56:d4:ac:1a:36: 51:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:DE:BC:C2:2A:1E:9F:4A:1C:EC:3A:24:22:78:50:33:FD:DB:1F:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410/33d31f6d-7640-3b90-ad92-a613f1626ddd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410/0c2b76fb-0555-4bed-b79b-20ec56b8d410.crl X509v3 Authority Key Identifier: keyid:78:DC:B5:3E:20:18:87:C3:D3:39:7E:69:F4:72:64:AB:F1:7B:B0:D4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0c2b76fb-0555-4bed-b79b-20ec56b8d410.cer sbgp-ipAddrBlock: critical IPv4: 142.248.228.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:b0:30:02:c1:84:ab:e5:19:1a:c2:8f:77:f7:96:c5:3d:3d: 8e:5c:56:17:ac:ac:b8:f7:32:b5:00:8f:63:e3:b3:3f:fd:3b: bb:b2:c8:0d:08:79:57:25:6e:71:c7:81:6c:91:8f:d2:a5:b3: 77:b6:8e:69:f5:31:8e:88:22:55:dc:7f:33:46:27:57:d1:ae: f4:07:f9:27:c8:f7:3c:08:96:7c:ea:ed:9e:b4:34:e2:b1:a0: 39:0f:ac:81:83:81:c3:0c:55:79:e4:ab:eb:8d:8d:6d:92:5f: bc:79:28:57:3a:4f:8b:ab:7b:f4:d2:3e:80:06:d0:c6:65:57: 0e:69:7a:e8:aa:92:cb:23:69:f3:a5:79:ee:ee:6e:eb:e9:49: 0e:bb:09:ba:b6:cd:4a:bf:45:f1:00:96:5b:b0:0e:e7:0a:fb: 16:05:c9:d7:fd:1a:0d:fe:73:2e:bb:fe:14:ff:95:ee:90:f9: 9a:64:4e:70:47:af:12:55:20:a1:cc:f1:ec:29:df:60:bd:0e: 82:8f:08:b5:9f:ab:aa:39:b3:f1:f3:19:61:bd:56:e1:9f:1d: 6d:e4:c6:76:2f:15:43:47:ce:de:e5:13:cb:59:8f:70:26:9a: ab:5a:25:ae:19:75:02:56:81:e8:66:b0:40:77:1e:94:67:1c: d7:e9:5a:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1JKlYW2wFnm2/+/iAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGMyYjc2ZmItMDU1NS00YmVkLWI3OWItMjBlYzU2Yjhk NDEwMB4XDTI2MDMyNTEzMDA0MVoXDTI2MDYyMzEzMDA0MVowLzEtMCsGA1UEAxMk Nzk0MzQ5ODctMjUxNS00NDM2LTg0Y2ItY2Y0NzM3MjUyMzdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnGAv5KOjrkoKAq3QOofiVbXv6g3N7QnPD1F4 L9hNAocn7sp/sleo+z0UpUHlYNz2iZLyDT/ZmxPhnSlOQ7cCqAdC/axw+z3adSA5 teVvWe+SnIEMd9aIg05HX/bu5V2cglcAAyxwWdwWtpuIkbJ3/sbmO+ddlYJE1Y21 O63cj1poixVu1xyqw/3auSaFndhNzZtiE0Nw4TcYVHny77S/VPk5dwk1XulicSU5 tp02Pd24lGVLlGhONho7To5Or8i1Wp56bvRMsTv7XadXLJ+7cy0cYbHzpVkKa/pv Q0QKCE4GSqmioxv4YB0cZPUkKKGxyd+23/l6dGZTVtSsGjZRWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPDevMIqHp9KHOw6JCJ4UDP92x8GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8wYzJi NzZmYi0wNTU1LTRiZWQtYjc5Yi0yMGVjNTZiOGQ0MTAvMzNkMzFmNmQtNzY0MC0z YjkwLWFkOTItYTYxM2YxNjI2ZGRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMGMyYjc2ZmItMDU1NS00YmVkLWI3 OWItMjBlYzU2YjhkNDEwLzBjMmI3NmZiLTA1NTUtNGJlZC1iNzliLTIwZWM1NmI4 ZDQxMC5jcmwwHwYDVR0jBBgwFoAUeNy1PiAYh8PTOX5p9HJkq/F7sNQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8wYzJiNzZmYi0wNTU1LTRiZWQtYjc5Yi0yMGVj NTZiOGQ0MTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCjvjkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFmwMALBhKvlGRrCj3f3lsU9PY5cVhesrLj3MrUAj2Pjsz/9O7uyyA0I eVclbnHHgWyRj9Kls3e2jmn1MY6IIlXcfzNGJ1fRrvQH+SfI9zwIlnzq7Z60NOKx oDkPrIGDgcMMVXnkq+uNjW2SX7x5KFc6T4ure/TSPoAG0MZlVw5peuiqkssjafOl ee7ubuvpSQ67Cbq2zUq/RfEAlluwDucK+xYFydf9Gg3+cy67/hT/le6Q+ZpkTnBH rxJVIKHM8ewp32C9DoKPCLWfq6o5s/HzGWG9VuGfHW3kxnYvFUNHzt7lE8tZj3Am mqtaJa4ZdQJWgehmsEB3HpRnHNfpWoA= -----END CERTIFICATE-----Generated at Thu Mar 26 16:19:41 2026 by rpki-client