$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/9850f12d-eb76-3cdb-899b-4ad7ea0b5b56.roa File: 9850f12d-eb76-3cdb-899b-4ad7ea0b5b56.roa (raw, json) Hash identifier: Y2v9DsTeWRseiJfudFDhRlycJP5SPb+u8agtfJk8Xfw= Subject key identifier: 24:27:6F:46:A8:4E:3E:26:0F:4B:22:F7:F4:D2:27:F0:27:63:3B:B5 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584D9E502797A6668623121BEC80 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/9850f12d-eb76-3cdb-899b-4ad7ea0b5b56.roa Signing time: Sat 25 Apr 2026 01:00:24 +0000 ROA not before: Sat 25 Apr 2026 01:00:24 +0000 ROA not after: Fri 24 Jul 2026 01:00:24 +0000 asID: 31898 IP address blocks: 192.33.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9e:50:27:97:a6:66:86:23:12:1b:ec:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Apr 25 01:00:24 2026 GMT Not After : Jul 24 01:00:24 2026 GMT Subject: CN=0c730bd2-498f-4f48-8082-eb32660b9b8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:ef:3a:57:77:db:18:36:0f:a2:e9:5d:3f:f7: 1c:78:8f:cf:14:c3:bd:a1:a9:f9:be:b7:f2:bd:1b: d5:6e:27:18:fe:e4:67:99:ad:28:52:ef:10:3a:3c: 61:7b:56:88:a9:ea:59:95:a2:e7:90:11:6e:b0:03: 26:8b:38:23:04:19:fe:71:1d:96:f7:71:6a:94:96: 44:e2:49:b9:1d:5c:c2:4c:1f:c6:5a:50:b5:d9:12: f9:81:69:1c:6d:0e:4c:a2:a9:66:e9:1d:98:b6:e9: df:95:60:49:ef:72:78:51:81:a8:f6:e4:93:98:b6: 80:76:da:04:97:a2:89:2e:69:2a:57:17:14:d5:4a: 9b:7f:71:3d:e8:ce:7f:55:f2:39:28:76:e1:90:85: 9a:40:3e:65:f5:86:28:45:8f:79:46:94:33:40:4d: 20:db:f2:a9:08:97:e4:3a:59:38:d0:7b:d6:a8:fc: 37:2f:d2:03:74:70:fc:c9:91:c9:db:33:f4:a7:55: f9:d3:2f:7a:5d:1b:0a:9f:32:2e:c3:fc:76:05:5c: 63:1d:10:f3:4e:b7:15:f6:17:f7:06:40:7d:13:2d: 52:9a:2a:5b:04:1d:3d:62:dc:f8:c3:4d:fb:7e:5a: 89:eb:3b:3d:24:f9:f3:f0:27:e1:02:ed:87:0a:fa: 53:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:27:6F:46:A8:4E:3E:26:0F:4B:22:F7:F4:D2:27:F0:27:63:3B:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/9850f12d-eb76-3cdb-899b-4ad7ea0b5b56.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 192.33.244.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:27:69:bc:ab:05:97:e3:72:7a:31:f1:42:92:43:e6:5f:e1: 10:23:76:5c:f2:3e:3c:c6:38:1f:c4:58:53:52:71:95:6d:c6: 12:8c:8a:5a:99:29:da:1a:27:73:af:2c:e1:59:c7:ec:54:99: fa:80:26:78:e6:15:4b:f0:54:f0:2d:43:40:17:90:84:f8:6b: b5:43:44:da:57:18:f7:ec:d7:7d:6f:4a:b2:87:77:f2:48:5b: b8:35:d5:d5:05:97:29:f2:69:7c:60:73:2d:9c:2f:ba:1b:1a: 2e:80:36:a0:3c:99:5d:15:5b:26:86:e1:da:cc:a5:a3:85:75: ca:f7:36:c8:16:96:fe:25:8f:eb:6f:2d:99:a4:7c:7d:e8:50: 2b:90:0a:d8:a3:8c:a1:30:7f:cd:02:6f:18:82:7f:08:7e:ff: f8:da:6a:a6:5b:2a:38:9a:d3:0f:77:52:bc:67:b1:50:3a:df: 5a:8a:e1:8a:cc:50:3a:c7:8b:21:d8:7a:55:9c:19:07:e0:87: ef:e0:c1:f8:f0:e7:7e:c7:93:04:d4:01:12:1e:27:2a:c8:1e: de:32:07:0d:5c:50:8a:34:65:27:aa:e4:17:4b:ba:86:43:1a: c1:bf:1a:37:91:7c:9c:d3:d0:ff:3d:f4:e6:7b:62:19:17:95: 86:1a:76:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2eUCeXpmaGIxIb7IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDQyNTAxMDAyNFoXDTI2MDcyNDAxMDAyNFowLzEtMCsGA1UEAxMk MGM3MzBiZDItNDk4Zi00ZjQ4LTgwODItZWIzMjY2MGI5YjhlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlu86V3fbGDYPouldP/cceI/PFMO9oan5vrfy vRvVbicY/uRnma0oUu8QOjxhe1aIqepZlaLnkBFusAMmizgjBBn+cR2W93FqlJZE 4km5HVzCTB/GWlC12RL5gWkcbQ5Moqlm6R2YtunflWBJ73J4UYGo9uSTmLaAdtoE l6KJLmkqVxcU1Uqbf3E96M5/VfI5KHbhkIWaQD5l9YYoRY95RpQzQE0g2/KpCJfk Olk40HvWqPw3L9IDdHD8yZHJ2zP0p1X50y96XRsKnzIuw/x2BVxjHRDzTrcV9hf3 BkB9Ey1SmipbBB09Ytz4w037flqJ6zs9JPnz8CfhAu2HCvpTnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCQnb0aoTj4mD0si9/TSJ/AnYzu1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvOTg1MGYxMmQtZWI3Ni0z Y2RiLTg5OWItNGFkN2VhMGI1YjU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCH0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACQnabyrBZfjcnox8UKSQ+Zf4RAjdlzyPjzGOB/EWFNScZVtxhKMilqZ KdoaJ3OvLOFZx+xUmfqAJnjmFUvwVPAtQ0AXkIT4a7VDRNpXGPfs131vSrKHd/JI W7g11dUFlynyaXxgcy2cL7obGi6ANqA8mV0VWyaG4drMpaOFdcr3NsgWlv4lj+tv LZmkfH3oUCuQCtijjKEwf80CbxiCfwh+//jaaqZbKjia0w93UrxnsVA631qK4YrM UDrHiyHYelWcGQfgh+/gwfjw537HkwTUARIeJyrIHt4yBw1cUIo0ZSeq5BdLuoZD GsG/GjeRfJzT0P899OZ7YhkXlYYadgQ= -----END CERTIFICATE-----Generated at Wed May 13 05:09:20 2026 by rpki-client