$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/41e04a35-c8f8-3263-9780-abb7b9f38ca2.roa File: 41e04a35-c8f8-3263-9780-abb7b9f38ca2.roa (raw, json) Hash identifier: SKH8O7HrXWPuiRREI7mTsbcM5R6PuIX0YhxWrtFbeQY= Subject key identifier: 39:5E:40:DB:D2:66:26:FC:0F:04:59:05:2B:78:EF:6D:65:95:9D:54 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584D9E502AAC603B1683FB5B3F80 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/41e04a35-c8f8-3263-9780-abb7b9f38ca2.roa Signing time: Sat 25 Apr 2026 01:00:24 +0000 ROA not before: Sat 25 Apr 2026 01:00:24 +0000 ROA not after: Fri 24 Jul 2026 01:00:24 +0000 asID: 31898 IP address blocks: 192.33.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9e:50:2a:ac:60:3b:16:83:fb:5b:3f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Apr 25 01:00:24 2026 GMT Not After : Jul 24 01:00:24 2026 GMT Subject: CN=3fde5a8a-19d9-489a-a36a-d598e4824e95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:20:57:71:e8:1a:ff:ae:f2:89:bb:bb:fa:8f: b5:66:4a:e8:05:19:13:95:31:0f:af:47:a3:c6:24: 08:99:96:b7:9d:1a:04:57:a0:7d:a1:e6:1c:13:c5: 58:19:3e:5b:1f:09:52:61:97:d3:10:92:81:80:f6: 1f:36:fd:a7:fd:9a:f2:86:48:fe:9a:5f:41:b7:c7: 51:9e:1a:d6:43:91:c3:42:0b:bd:7f:95:75:25:5f: 3f:fa:f6:a7:e5:a1:3d:ee:83:14:b5:35:36:58:8a: 44:0f:39:2c:40:41:a9:95:e6:9b:5b:5f:d1:c8:1b: 7e:4e:87:d5:a9:d0:29:01:1e:09:4f:b9:7f:f6:ed: f7:40:4c:6d:9c:9a:dd:b1:56:b3:f2:68:78:a1:28: 33:ae:03:6e:69:7d:6b:c3:f4:1c:c0:63:cb:83:18: 27:99:bd:7d:06:9b:8d:86:af:4d:ee:e9:41:43:db: 47:fb:1f:3f:10:d0:a2:18:22:6a:86:45:96:e6:88: 92:ac:8b:d8:d1:40:32:e0:18:0b:9c:89:c7:a8:e8: 31:13:31:2f:d9:10:68:e6:ce:fc:e8:32:b8:68:52: 96:99:87:cb:9a:02:90:96:5b:cc:dd:aa:14:11:45: 76:b9:86:a6:39:c7:f9:25:fc:85:72:c3:d9:35:81: 17:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:5E:40:DB:D2:66:26:FC:0F:04:59:05:2B:78:EF:6D:65:95:9D:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/41e04a35-c8f8-3263-9780-abb7b9f38ca2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 192.33.242.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:9a:07:3d:a8:18:3c:50:d8:01:d1:00:0f:0e:fb:14:9c:3c: b5:75:96:65:a7:2f:81:55:63:b8:58:12:5c:69:1e:c1:af:07: 6c:5b:e6:84:1f:85:eb:ba:60:56:90:37:d0:7c:2d:4a:62:95: c1:51:d0:fc:9b:72:48:26:93:08:c9:8e:16:de:0b:ae:67:9d: 12:5b:54:46:69:13:17:b8:9e:02:75:10:40:d1:e6:14:d1:80: 92:e6:5e:8d:c0:2b:98:e4:9e:3e:cc:86:ef:57:ab:63:8b:7b: a4:c9:28:9b:96:2c:80:a7:cb:9a:c7:b4:bc:37:b0:4c:31:02: ea:e4:6c:fd:9c:6f:c5:59:a8:ac:b1:e2:6e:3f:53:54:cd:54: 9e:ad:c8:34:7b:42:2b:0f:d0:e0:00:02:84:28:85:88:6d:e3: 32:09:60:18:fa:25:21:0a:62:95:f5:72:f1:10:e7:f3:88:d7: b3:29:ec:eb:14:dd:53:db:68:7e:c1:b2:8e:79:4e:13:c7:52: 54:9d:74:39:93:ea:dd:fc:4e:97:07:2d:4c:66:28:61:55:d7: 26:fb:87:9b:24:ae:06:27:29:c0:eb:b7:1d:c7:9d:e8:b2:31: 06:58:b3:71:85:e9:1a:89:49:db:e3:ae:b6:24:99:f4:13:f6: 68:31:d7:de -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2eUCqsYDsWg/tbP4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDQyNTAxMDAyNFoXDTI2MDcyNDAxMDAyNFowLzEtMCsGA1UEAxMk M2ZkZTVhOGEtMTlkOS00ODlhLWEzNmEtZDU5OGU0ODI0ZTk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAziBXcega/67yibu7+o+1ZkroBRkTlTEPr0ej xiQImZa3nRoEV6B9oeYcE8VYGT5bHwlSYZfTEJKBgPYfNv2n/Zryhkj+ml9Bt8dR nhrWQ5HDQgu9f5V1JV8/+van5aE97oMUtTU2WIpEDzksQEGpleabW1/RyBt+TofV qdApAR4JT7l/9u33QExtnJrdsVaz8mh4oSgzrgNuaX1rw/QcwGPLgxgnmb19BpuN hq9N7ulBQ9tH+x8/ENCiGCJqhkWW5oiSrIvY0UAy4BgLnInHqOgxEzEv2RBo5s78 6DK4aFKWmYfLmgKQllvM3aoUEUV2uYamOcf5JfyFcsPZNYEXbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDleQNvSZib8DwRZBSt4721llZ1UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvNDFlMDRhMzUtYzhmOC0z MjYzLTk3ODAtYWJiN2I5ZjM4Y2EyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCHyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJmaBz2oGDxQ2AHRAA8O+xScPLV1lmWnL4FVY7hYElxpHsGvB2xb5oQf heu6YFaQN9B8LUpilcFR0PybckgmkwjJjhbeC65nnRJbVEZpExe4ngJ1EEDR5hTR gJLmXo3AK5jknj7Mhu9Xq2OLe6TJKJuWLICny5rHtLw3sEwxAurkbP2cb8VZqKyx 4m4/U1TNVJ6tyDR7QisP0OAAAoQohYht4zIJYBj6JSEKYpX1cvEQ5/OI17Mp7OsU 3VPbaH7Bso55ThPHUlSddDmT6t38TpcHLUxmKGFV1yb7h5skrgYnKcDrtx3Hneiy MQZYs3GF6RqJSdvjrrYkmfQT9mgx194= -----END CERTIFICATE-----Generated at Wed May 13 05:32:20 2026 by rpki-client