$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/33aca569-e480-36ca-bf63-7390371d96cd.roa File: 33aca569-e480-36ca-bf63-7390371d96cd.roa (raw, json) Hash identifier: xYCHvqWnEa+RLWO6VqYxpsrpZHPvSERS3+8KzcXi2mM= Subject key identifier: 30:3D:B9:7C:9D:F1:AA:56:82:61:14:BC:F6:DA:4B:43:43:2F:E0:8C Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Certificate serial: 010D0C9F4328584D0A77BFA2519976DADBF65600 Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/33aca569-e480-36ca-bf63-7390371d96cd.roa Signing time: Tue 03 Mar 2026 02:00:32 +0000 ROA not before: Tue 03 Mar 2026 02:00:32 +0000 ROA not after: Mon 01 Jun 2026 01:00:32 +0000 asID: 0 IP address blocks: 208.218.128.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0a:77:bf:a2:51:99:76:da:db:f6:56:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878 Validity Not Before: Mar 3 02:00:32 2026 GMT Not After : Jun 1 01:00:32 2026 GMT Subject: CN=3682a480-7477-4d03-a47a-c97976caad8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:ff:1a:4f:83:bd:e3:ff:f8:97:c0:32:47:03: 19:2b:b0:3d:38:24:cd:ad:8d:cc:34:e9:0f:01:e0: b8:b6:53:90:02:ef:32:db:f9:44:5c:61:38:a7:64: d6:ca:d9:78:c4:fa:a0:0f:44:a7:4b:80:63:ea:6e: 17:29:e7:4f:89:2f:96:6d:4c:5b:ce:72:52:35:02: 0b:4e:8e:28:24:1c:0a:76:91:9a:30:1f:1f:72:c9: 35:1f:81:5a:19:37:6e:fe:f5:b1:72:56:8a:a8:90: 27:05:8c:aa:63:08:5e:c0:28:4a:43:91:55:0e:54: 43:62:27:45:89:65:d5:fc:f5:f6:b1:c3:aa:30:23: 0f:83:05:66:d0:24:f3:a4:bd:fb:f5:35:39:0a:83: 8d:56:1c:96:6b:d3:cc:5b:44:d8:e1:5e:bb:12:d4: 6c:4a:af:80:20:13:c3:94:fb:c8:75:19:41:11:1e: b4:42:85:37:dd:4d:ac:9e:cd:15:9a:b6:75:48:b4: e1:32:34:ca:84:74:7c:18:cc:c0:39:41:46:90:00: 7c:23:27:e9:61:d7:71:a7:e2:65:18:dd:28:8e:15: 36:3a:a5:d9:dd:3a:0a:b8:59:a0:e9:6c:c4:60:ef: 29:6d:e8:16:84:5e:0f:7c:0e:e6:05:37:78:dc:81: 5c:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:3D:B9:7C:9D:F1:AA:56:82:61:14:BC:F6:DA:4B:43:43:2F:E0:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/33aca569-e480-36ca-bf63-7390371d96cd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl X509v3 Authority Key Identifier: keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer sbgp-ipAddrBlock: critical IPv4: 208.218.128.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:20:be:cc:ef:5d:4e:02:34:ec:e3:1d:d6:f1:83:cf:1b:23: 33:dc:b0:59:d5:4a:e7:ce:40:6b:9f:30:16:4c:9c:49:9f:8c: d0:5d:c8:8a:cd:74:69:15:6d:d1:fc:69:58:0a:21:29:2d:a1: 6d:0c:9e:ca:42:2f:8e:1a:4f:f9:89:75:6a:34:3d:6a:dc:ce: 55:10:b5:85:3a:74:c6:99:de:03:d7:cb:79:2b:74:fc:66:ab: 60:0c:a4:f8:ef:23:96:e6:a9:3b:90:61:b2:01:6e:96:a3:44: 77:28:bc:ee:5b:13:5f:00:9f:a9:a6:0d:6f:43:22:e3:e0:e9: dd:07:43:db:74:69:8b:b8:37:7e:4d:1f:2b:aa:3c:11:a9:7f: da:1c:90:97:31:69:6d:c0:b6:dc:e8:17:ce:0f:0d:a6:e8:ec: ce:ee:24:79:6f:92:d7:6e:73:c1:98:e6:88:2b:69:62:ce:5c: 8c:ec:4e:e8:16:1b:83:ed:29:d8:c3:40:53:3e:e6:65:32:61: f6:39:e1:b8:1f:c9:fc:ab:89:7f:a5:9f:4a:23:41:7a:f5:e5: 24:0d:83:da:50:51:37:33:53:eb:55:a1:68:fc:2c:5c:47:f0: dc:e5:dc:a6:36:43:fb:2b:bb:e5:ed:24:21:d0:5a:22:8e:ae: 3b:81:1d:7c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0Kd7+iUZl22tv2VgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw ODc4MB4XDTI2MDMwMzAyMDAzMloXDTI2MDYwMTAxMDAzMlowLzEtMCsGA1UEAxMk MzY4MmE0ODAtNzQ3Ny00ZDAzLWE0N2EtYzk3OTc2Y2FhZDhhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0f8aT4O94//4l8AyRwMZK7A9OCTNrY3MNOkP AeC4tlOQAu8y2/lEXGE4p2TWytl4xPqgD0SnS4Bj6m4XKedPiS+WbUxbznJSNQIL To4oJBwKdpGaMB8fcsk1H4FaGTdu/vWxclaKqJAnBYyqYwhewChKQ5FVDlRDYidF iWXV/PX2scOqMCMPgwVm0CTzpL379TU5CoONVhyWa9PMW0TY4V67EtRsSq+AIBPD lPvIdRlBER60QoU33U2sns0VmrZ1SLThMjTKhHR8GMzAOUFGkAB8IyfpYddxp+Jl GN0ojhU2OqXZ3ToKuFmg6WzEYO8pbegWhF4PfA7mBTd43IFcKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDA9uXyd8apWgmEUvPbaS0NDL+CMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5 ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMzNhY2E1NjktZTQ4MC0z NmNhLWJmNjMtNzM5MDM3MWQ5NmNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2 MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2 ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0NqAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE0gvszvXU4CNOzjHdbxg88bIzPcsFnVSufOQGufMBZMnEmfjNBdyIrN dGkVbdH8aVgKISktoW0MnspCL44aT/mJdWo0PWrczlUQtYU6dMaZ3gPXy3krdPxm q2AMpPjvI5bmqTuQYbIBbpajRHcovO5bE18An6mmDW9DIuPg6d0HQ9t0aYu4N35N HyuqPBGpf9ockJcxaW3AttzoF84PDabo7M7uJHlvktduc8GY5ograWLOXIzsTugW G4PtKdjDQFM+5mUyYfY54bgfyfyriX+ln0ojQXr15SQNg9pQUTczU+tVoWj8LFxH 8Nzl3KY2Q/sru+XtJCHQWiKOrjuBHXw= -----END CERTIFICATE-----Generated at Thu Mar 26 05:22:57 2026 by rpki-client