$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/cd33883f-a762-3d7b-9e7e-f91c39daa9d8.roa File: cd33883f-a762-3d7b-9e7e-f91c39daa9d8.roa (raw, json) Hash identifier: +IheOlUH2eO8rmVrOJtTf7tK4GL3EQ1Y4fFiga1h1z4= Subject key identifier: 91:1B:EB:2E:9A:0F:FC:DF:B6:62:24:6E:38:75:80:FB:E5:9B:70:27 Certificate issuer: /CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Certificate serial: 010D0C9F4328584E7E94DF2BB58CD7CF5D29F900 Authority key identifier: F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/cd33883f-a762-3d7b-9e7e-f91c39daa9d8.roa Signing time: Tue 14 Jul 2026 09:00:12 +0000 ROA not before: Tue 14 Jul 2026 09:00:12 +0000 ROA not after: Mon 12 Oct 2026 09:00:12 +0000 asID: 31898 IP address blocks: 192.33.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 26 Jul 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:7e:94:df:2b:b5:8c:d7:cf:5d:29:f9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2070b9e-789d-4f95-bca5-30e065e9a31d Validity Not Before: Jul 14 09:00:12 2026 GMT Not After : Oct 12 09:00:12 2026 GMT Subject: CN=93365738-e357-4e6c-a4b2-6b5e1f7f94d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:2d:2e:95:e7:41:c3:23:36:ce:be:30:85:23: 28:47:f8:50:00:3f:89:d7:55:05:80:fb:4f:c6:ad: cd:44:dc:9b:3d:d3:1d:45:88:1f:2a:ed:ef:3c:d2: bc:4f:94:b0:ba:3b:99:c1:15:59:29:b0:55:5b:ec: e3:38:66:2f:40:cd:43:11:3e:17:2f:08:d7:8e:d5: b1:3b:05:9d:c4:66:d8:67:16:76:af:d0:35:c1:12: 14:3a:f0:33:6c:34:50:4e:89:48:18:9b:42:3c:72: e7:ae:85:2e:6f:59:c9:0a:a0:e4:97:b0:1c:ae:a6: 04:da:db:ca:d5:a2:03:d0:17:ac:a1:1c:1e:5a:4e: 12:08:4d:6f:9b:cd:28:1d:56:71:b5:8b:52:7e:40: 09:74:41:fe:82:92:79:07:25:4b:58:83:a5:3b:36: 4b:d7:90:06:67:61:3d:4c:a1:46:c7:77:c3:40:aa: d7:6e:b3:e4:be:13:06:51:73:bc:4c:70:91:61:9c: c9:6e:60:1c:30:a5:f3:03:6b:ef:1d:39:9c:09:9f: 3a:bf:03:d0:8f:7f:5d:72:b3:67:dd:5a:a8:14:c1: 23:47:1e:d5:e4:fa:7c:1f:a5:d8:c0:13:46:18:41: da:6d:68:fd:3b:11:47:e1:c5:c0:74:be:4c:31:49: 54:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:1B:EB:2E:9A:0F:FC:DF:B6:62:24:6E:38:75:80:FB:E5:9B:70:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/cd33883f-a762-3d7b-9e7e-f91c39daa9d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d/c2070b9e-789d-4f95-bca5-30e065e9a31d.crl X509v3 Authority Key Identifier: keyid:F6:B9:1C:29:73:41:01:97:22:F9:98:37:8E:E3:69:DF:AE:1D:95:8F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/c2070b9e-789d-4f95-bca5-30e065e9a31d.cer sbgp-ipAddrBlock: critical IPv4: 192.33.250.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:97:39:a1:f1:17:d1:35:e6:06:ec:e4:ae:4e:38:6f:b0:a9: 68:fe:00:bc:9d:76:c8:d9:40:52:b7:87:d0:f2:44:54:33:45: b0:f2:e1:6b:72:b0:ab:7e:69:11:d4:ed:f8:70:6f:93:f9:02: 35:07:db:42:26:f6:ae:1a:ae:32:75:f3:ed:2b:ea:f2:d9:d5: 71:29:3f:17:a4:ac:b0:c6:9b:e9:27:48:b2:9d:a6:d0:39:d8: 93:f8:d7:c0:ca:37:10:cf:0f:97:83:33:b1:d9:9b:d0:4d:ca: 55:4e:b7:cd:a5:54:42:30:4a:be:9c:21:ba:af:41:e4:9c:0a: 13:4f:68:00:3c:d5:8b:d5:cb:82:9b:51:0e:3b:05:bb:b2:7d: 58:7c:34:42:8b:a3:3f:48:0a:8a:92:e3:ab:1c:73:42:80:15: 30:96:cc:5c:06:28:d3:9f:6e:f3:b0:10:81:64:a5:b8:5c:94: c1:c5:0c:85:28:7a:13:93:1f:33:4b:da:ee:d9:96:58:af:af: 9d:bb:75:e0:6a:fc:27:89:ef:8e:d3:36:c1:fd:9f:72:10:b9: e4:8f:02:45:38:95:92:06:23:58:53:12:c5:01:71:56:da:3a: 2d:b1:6c:f8:83:81:c9:4e:d8:1b:82:8a:66:67:1f:f1:df:76: 69:7e:fa:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5+lN8rtYzXz10p+QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIwNzBiOWUtNzg5ZC00Zjk1LWJjYTUtMzBlMDY1ZTlh MzFkMB4XDTI2MDcxNDA5MDAxMloXDTI2MTAxMjA5MDAxMlowLzEtMCsGA1UEAxMk OTMzNjU3MzgtZTM1Ny00ZTZjLWE0YjItNmI1ZTFmN2Y5NGQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqS0uledBwyM2zr4whSMoR/hQAD+J11UFgPtP xq3NRNybPdMdRYgfKu3vPNK8T5SwujuZwRVZKbBVW+zjOGYvQM1DET4XLwjXjtWx OwWdxGbYZxZ2r9A1wRIUOvAzbDRQTolIGJtCPHLnroUub1nJCqDkl7AcrqYE2tvK 1aID0BesoRweWk4SCE1vm80oHVZxtYtSfkAJdEH+gpJ5ByVLWIOlOzZL15AGZ2E9 TKFGx3fDQKrXbrPkvhMGUXO8THCRYZzJbmAcMKXzA2vvHTmcCZ86vwPQj39dcrNn 3VqoFMEjRx7V5Pp8H6XYwBNGGEHabWj9OxFH4cXAdL5MMUlUYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJEb6y6aD/zftmIkbjh1gPvlm3AnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3 MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUwNjVlOWEzMWQvY2QzMzg4M2YtYTc2Mi0z ZDdiLTllN2UtZjkxYzM5ZGFhOWQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvYzIwNzBiOWUtNzg5ZC00Zjk1LWJj YTUtMzBlMDY1ZTlhMzFkL2MyMDcwYjllLTc4OWQtNGY5NS1iY2E1LTMwZTA2NWU5 YTMxZC5jcmwwHwYDVR0jBBgwFoAU9rkcKXNBAZci+Zg3juNp364dlY8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9jMjA3MGI5ZS03ODlkLTRmOTUtYmNhNS0zMGUw NjVlOWEzMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCH6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJyXOaHxF9E15gbs5K5OOG+wqWj+ALyddsjZQFK3h9DyRFQzRbDy4Wty sKt+aRHU7fhwb5P5AjUH20Im9q4arjJ18+0r6vLZ1XEpPxekrLDGm+knSLKdptA5 2JP418DKNxDPD5eDM7HZm9BNylVOt82lVEIwSr6cIbqvQeScChNPaAA81YvVy4Kb UQ47BbuyfVh8NEKLoz9ICoqS46scc0KAFTCWzFwGKNOfbvOwEIFkpbhclMHFDIUo ehOTHzNL2u7Zllivr527deBq/CeJ747TNsH9n3IQueSPAkU4lZIGI1hTEsUBcVba Oi2xbPiDgclO2BuCimZnH/Hfdml++gc= -----END CERTIFICATE-----Generated at Fri Jul 24 01:50:58 2026 by rpki-client