$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/cd33883f-a762-3d7b-9e7e-f91c39daa9d8.roa File: cd33883f-a762-3d7b-9e7e-f91c39daa9d8.roa (raw, json) Hash identifier: 3YUcKk9lAMFD/FSpGXUsPHDqxJ4sMouACvpTPQuf/1A= Subject key identifier: 0E:C5:76:FC:9D:AC:6E:94:3D:C0:BC:71:34:4E:77:BB:41:CD:9C:C0 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584D9E4FFE4A7FB080E8C71D2880 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/cd33883f-a762-3d7b-9e7e-f91c39daa9d8.roa Signing time: Sat 25 Apr 2026 01:00:24 +0000 ROA not before: Sat 25 Apr 2026 01:00:24 +0000 ROA not after: Fri 24 Jul 2026 01:00:24 +0000 asID: 31898 IP address blocks: 192.33.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 15 May 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:9e:4f:fe:4a:7f:b0:80:e8:c7:1d:28:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Apr 25 01:00:24 2026 GMT Not After : Jul 24 01:00:24 2026 GMT Subject: CN=c56630f0-4778-4fb5-b2e7-06c1a30a1d2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:2b:72:dd:f2:10:c5:a2:3c:4e:28:52:d3:cb: c4:e7:0b:73:8c:4c:83:92:d1:5c:5f:79:0e:a7:14: 24:1d:5c:c6:5e:49:06:63:46:66:b7:0e:f9:66:e2: f1:c1:cb:95:97:5a:8b:40:66:92:2d:33:d7:08:82: 39:78:50:d9:ec:d9:2b:a0:f9:b7:87:64:c5:fc:ef: 8f:d1:08:cd:ac:d7:f9:f5:97:2e:42:06:18:e5:c3: 99:29:1d:a9:6c:23:0a:06:36:44:f5:cc:bb:be:cc: d4:24:13:a3:d0:b8:e8:c3:4e:08:48:4e:43:31:fe: f2:ea:d7:ab:9c:ee:48:2c:7c:fb:04:7e:76:97:25: ad:72:70:09:ec:c6:8e:16:44:9d:ce:de:a3:ce:d5: ac:a1:09:cb:07:ca:a1:68:5b:61:09:de:d8:53:0f: 68:5a:a7:8b:97:54:96:33:4f:bf:ba:10:13:fb:b9: 97:5b:c8:56:2e:7d:d8:81:4c:6f:87:81:d1:db:37: 3a:78:2b:8d:4a:fa:0a:31:4d:0a:5a:aa:7e:bf:c1: 12:b6:c2:47:b8:02:47:72:e3:92:96:8c:1e:3f:52: 89:8c:f1:69:7b:a5:fc:c4:ca:b3:bc:d0:77:be:0f: b6:1f:09:d7:f9:bf:2b:13:ec:06:3d:f4:6a:b3:1c: be:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:C5:76:FC:9D:AC:6E:94:3D:C0:BC:71:34:4E:77:BB:41:CD:9C:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/cd33883f-a762-3d7b-9e7e-f91c39daa9d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 192.33.250.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:83:df:57:73:49:1b:5e:9c:02:aa:36:18:d8:e1:e3:48:fc: 9d:bb:27:4e:3e:8e:96:55:19:93:60:a7:e9:1f:23:48:e5:60: b5:ec:76:4f:a9:9f:e3:56:45:0a:b4:7e:0f:89:44:6b:ea:7d: ab:fb:04:c8:cf:2f:3d:12:38:b7:09:52:48:2b:d0:74:80:9f: 1c:c3:25:a6:19:cb:6c:cb:79:0e:f1:43:fd:ee:30:54:6b:0c: 33:71:a5:27:71:94:d6:2e:75:07:b4:7c:4a:0d:42:84:aa:a8: 0b:cf:7e:54:35:55:42:38:2a:5d:32:d5:da:d6:d0:08:90:d7: bc:b0:13:7c:49:d0:5d:c1:f6:01:83:bf:94:e0:fd:6d:6e:6b: fc:60:b6:63:35:8b:87:b6:f9:24:48:f2:76:10:fb:b8:d3:8a: 5e:11:ca:bb:3b:61:1d:4e:b9:63:39:3f:86:78:1c:00:c7:72: 08:34:54:fb:9a:63:7c:b2:6f:cd:06:76:bc:e6:c4:0c:63:fb: c6:5e:36:8c:6f:95:84:56:d1:06:c1:d5:0e:1c:a9:85:96:f2: 58:61:9d:4c:41:53:9f:0b:ae:c2:ff:47:41:c3:e3:3b:3e:72: 18:9e:1e:67:78:b8:68:bf:74:4f:6c:37:61:3c:55:f2:3a:05: 27:04:14:be -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2eT/5Kf7CA6McdKIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDQyNTAxMDAyNFoXDTI2MDcyNDAxMDAyNFowLzEtMCsGA1UEAxMk YzU2NjMwZjAtNDc3OC00ZmI1LWIyZTctMDZjMWEzMGExZDJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnCty3fIQxaI8TihS08vE5wtzjEyDktFcX3kO pxQkHVzGXkkGY0Zmtw75ZuLxwcuVl1qLQGaSLTPXCII5eFDZ7NkroPm3h2TF/O+P 0QjNrNf59ZcuQgYY5cOZKR2pbCMKBjZE9cy7vszUJBOj0Ljow04ISE5DMf7y6ter nO5ILHz7BH52lyWtcnAJ7MaOFkSdzt6jztWsoQnLB8qhaFthCd7YUw9oWqeLl1SW M0+/uhAT+7mXW8hWLn3YgUxvh4HR2zc6eCuNSvoKMU0KWqp+v8EStsJHuAJHcuOS loweP1KJjPFpe6X8xMqzvNB3vg+2HwnX+b8rE+wGPfRqsxy+VwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA7FdvydrG6UPcC8cTROd7tBzZzAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvY2QzMzg4M2YtYTc2Mi0z ZDdiLTllN2UtZjkxYzM5ZGFhOWQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCH6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGKD31dzSRtenAKqNhjY4eNI/J27J04+jpZVGZNgp+kfI0jlYLXsdk+p n+NWRQq0fg+JRGvqfav7BMjPLz0SOLcJUkgr0HSAnxzDJaYZy2zLeQ7xQ/3uMFRr DDNxpSdxlNYudQe0fEoNQoSqqAvPflQ1VUI4Kl0y1drW0AiQ17ywE3xJ0F3B9gGD v5Tg/W1ua/xgtmM1i4e2+SRI8nYQ+7jTil4Ryrs7YR1OuWM5P4Z4HADHcgg0VPua Y3yyb80GdrzmxAxj+8ZeNoxvlYRW0QbB1Q4cqYWW8lhhnUxBU58LrsL/R0HD4zs+ chieHmd4uGi/dE9sN2E8VfI6BScEFL4= -----END CERTIFICATE-----Generated at Wed May 13 07:04:24 2026 by rpki-client