$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/381340d3-4d65-3093-9630-6d2c34537be7.roa File: 381340d3-4d65-3093-9630-6d2c34537be7.roa (raw, json) Hash identifier: /6pybRUQ29+3K9ju5ZJGSMj4J1w9YwdK0O0EmwMGU94= Subject key identifier: 0A:2B:CC:B3:EA:BA:0C:CE:4A:F3:F5:B0:ED:C4:8F:D2:8E:3D:4A:B2 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584D9E5029176B6950FA5D14BE90 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/381340d3-4d65-3093-9630-6d2c34537be7.roa Signing time: Sat 25 Apr 2026 01:00:24 +0000 ROA not before: Sat 25 Apr 2026 01:00:24 +0000 ROA not after: Fri 24 Jul 2026 01:00:24 +0000 asID: 31898 IP address blocks: 192.33.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9e:50:29:17:6b:69:50:fa:5d:14:be:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Apr 25 01:00:24 2026 GMT Not After : Jul 24 01:00:24 2026 GMT Subject: CN=5b744731-0262-4984-aa6f-ce0842c90de2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:89:87:76:2c:85:8e:59:67:7a:db:c4:cb:27: 1c:25:fa:88:4f:1d:67:aa:2e:a2:15:85:9d:93:2a: 4e:2a:dd:f4:0b:b9:59:24:89:77:1c:dc:39:b8:86: d6:c6:68:67:26:a7:57:77:1e:bc:4b:98:93:e8:12: 95:6a:22:23:69:c2:0f:ca:82:9d:38:08:4e:fe:b4: 10:ea:1c:e5:4c:2d:6f:6c:3b:1a:a3:e0:c2:78:94: 0d:6f:8e:36:2c:77:63:e0:09:c7:9d:17:3d:f3:b6: 2e:40:bb:1c:d2:3b:9a:f8:ac:c5:21:15:23:19:0a: 9d:b0:93:40:07:86:4c:fd:e5:61:89:01:df:94:2e: 80:88:aa:bb:1a:cb:d3:9e:46:06:1a:69:1f:66:7d: 2c:0b:5f:26:b5:28:6b:16:b2:a5:39:b8:8a:90:83: 3b:37:a7:a7:ae:f0:dd:16:6d:84:c4:10:5d:7c:f7: cd:8c:ae:a7:19:7f:9e:a7:a7:c4:d2:8d:0f:d1:d0: 5c:7b:01:8f:ac:8f:95:35:16:2c:1b:8a:0c:35:f2: bd:c9:bb:bb:4f:c8:28:9a:21:ac:32:74:0e:fa:fd: b2:44:0e:4d:3d:47:76:db:ff:c0:e2:8d:26:34:0a: 1d:84:cd:1a:a5:9c:98:71:1e:87:98:6f:28:16:26: 48:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:2B:CC:B3:EA:BA:0C:CE:4A:F3:F5:B0:ED:C4:8F:D2:8E:3D:4A:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/381340d3-4d65-3093-9630-6d2c34537be7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 192.33.248.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a8:a9:b7:a8:50:6d:12:4b:87:23:cb:14:9f:19:e3:65:7a:fb: 0e:7a:8f:7b:16:6c:34:57:a3:12:77:55:27:21:e2:47:a9:67: a9:a0:c4:05:9e:de:83:ba:ed:cd:74:c9:ca:55:c6:48:9d:e2: 98:f7:83:c8:79:32:d2:13:8e:30:7a:40:1c:36:7f:3d:be:ea: f0:e6:23:19:42:cc:5c:18:02:ab:72:55:85:fd:88:5b:e1:23: 52:b0:69:05:22:21:7c:5a:6c:a0:e1:0e:11:2d:5b:82:41:64: 80:76:7b:22:e3:bb:6f:3e:89:c8:b7:95:e8:c4:09:37:79:1a: df:08:74:d5:be:6e:35:70:11:5d:9b:18:9c:62:80:26:bf:0f: 6d:20:73:f2:55:c2:27:4d:ec:5c:e5:07:18:fb:ac:1f:53:11: 5b:32:2d:56:c5:36:dd:ab:98:31:5d:0a:ce:57:15:62:c8:03: 56:8a:c1:44:71:c2:d3:b2:eb:1a:ce:f7:53:d3:01:ab:04:6d: ad:ef:0e:a4:5a:64:c9:cd:00:11:e2:d6:1d:fe:82:b2:0d:4b: 4b:63:bf:b7:a2:e9:df:99:88:ca:f5:0a:f0:fd:6d:a5:34:47: 69:b0:41:1b:80:7c:92:8f:dc:9f:86:a3:83:e1:94:5c:6f:e0: 13:29:6d:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2eUCkXa2lQ+l0UvpAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDQyNTAxMDAyNFoXDTI2MDcyNDAxMDAyNFowLzEtMCsGA1UEAxMk NWI3NDQ3MzEtMDI2Mi00OTg0LWFhNmYtY2UwODQyYzkwZGUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr4mHdiyFjllnetvEyyccJfqITx1nqi6iFYWd kypOKt30C7lZJIl3HNw5uIbWxmhnJqdXdx68S5iT6BKVaiIjacIPyoKdOAhO/rQQ 6hzlTC1vbDsao+DCeJQNb442LHdj4AnHnRc987YuQLsc0jua+KzFIRUjGQqdsJNA B4ZM/eVhiQHflC6AiKq7GsvTnkYGGmkfZn0sC18mtShrFrKlObiKkIM7N6enrvDd Fm2ExBBdfPfNjK6nGX+ep6fE0o0P0dBcewGPrI+VNRYsG4oMNfK9ybu7T8gomiGs MnQO+v2yRA5NPUd22//A4o0mNAodhM0apZyYcR6HmG8oFiZIJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAorzLPqugzOSvP1sO3Ej9KOPUqyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvMzgxMzQwZDMtNGQ2NS0z MDkzLTk2MzAtNmQyYzM0NTM3YmU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCH4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKipt6hQbRJLhyPLFJ8Z42V6+w56j3sWbDRXoxJ3VSch4kepZ6mgxAWe 3oO67c10ycpVxkid4pj3g8h5MtITjjB6QBw2fz2+6vDmIxlCzFwYAqtyVYX9iFvh I1KwaQUiIXxabKDhDhEtW4JBZIB2eyLju28+ici3lejECTd5Gt8IdNW+bjVwEV2b GJxigCa/D20gc/JVwidN7FzlBxj7rB9TEVsyLVbFNt2rmDFdCs5XFWLIA1aKwURx wtOy6xrO91PTAasEba3vDqRaZMnNABHi1h3+grINS0tjv7ei6d+ZiMr1CvD9baU0 R2mwQRuAfJKP3J+Go4PhlFxv4BMpbbk= -----END CERTIFICATE-----Generated at Wed May 13 09:33:59 2026 by rpki-client