$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/31009a8b-537b-4076-8ee6-38c45e51e37a/cdcf1e3c-b0f4-38d2-9aa1-2ae66a425d9b.roa File: cdcf1e3c-b0f4-38d2-9aa1-2ae66a425d9b.roa (raw, json) Hash identifier: jL+3TE6HQmBvl3X0cGcVV2u+qEcNDiWKU6Ggi/8qIFw= Subject key identifier: 97:85:F2:66:A1:8C:7D:82:49:EF:17:9F:81:C4:49:A5:70:A2:DE:83 Certificate issuer: /CN=31009a8b-537b-4076-8ee6-38c45e51e37a Certificate serial: 010D0C9F4328584D59EA7419CEDC9A48B3BD6AE0 Authority key identifier: C8:BF:58:A3:E8:E0:F7:27:B6:F8:1F:EB:CA:30:1F:A0:B7:44:91:31 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/31009a8b-537b-4076-8ee6-38c45e51e37a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/31009a8b-537b-4076-8ee6-38c45e51e37a/cdcf1e3c-b0f4-38d2-9aa1-2ae66a425d9b.roa Signing time: Tue 31 Mar 2026 13:00:30 +0000 ROA not before: Tue 31 Mar 2026 13:00:30 +0000 ROA not after: Mon 29 Jun 2026 13:00:30 +0000 asID: 14618 IP address blocks: 63.133.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/31009a8b-537b-4076-8ee6-38c45e51e37a/31009a8b-537b-4076-8ee6-38c45e51e37a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/31009a8b-537b-4076-8ee6-38c45e51e37a/31009a8b-537b-4076-8ee6-38c45e51e37a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/31009a8b-537b-4076-8ee6-38c45e51e37a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 08 Apr 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:59:ea:74:19:ce:dc:9a:48:b3:bd:6a:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31009a8b-537b-4076-8ee6-38c45e51e37a Validity Not Before: Mar 31 13:00:30 2026 GMT Not After : Jun 29 13:00:30 2026 GMT Subject: CN=76163d98-05b9-4b6e-9a61-8723163e874e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:c4:83:86:4a:ca:df:2a:92:a0:bd:ef:1b:d3: e6:63:d3:65:7b:58:6a:62:ef:1e:03:23:5c:f2:bd: 24:a5:0e:70:ca:c0:1f:62:0d:71:b1:9c:e7:71:83: 93:ae:29:9c:61:e9:de:c8:36:8f:1d:f7:4a:e1:d1: 93:b1:03:b8:aa:81:15:6b:4e:71:89:14:19:c4:8a: 81:5a:96:10:7e:88:3b:e0:50:3a:41:20:81:2b:68: 24:12:22:18:fd:93:07:5c:13:cb:4b:08:b4:13:1a: 92:d5:2c:a0:62:23:d7:82:e0:8e:ef:60:b3:54:1e: 8c:e2:91:9c:a6:b5:91:ee:40:40:c5:fb:40:b5:8a: 2d:8b:a9:73:60:ef:50:88:51:28:52:c0:50:64:42: 19:4e:34:c6:92:58:90:0d:3c:d7:84:35:f8:f5:3a: 7d:5b:ff:29:cb:fa:64:c5:af:55:1f:53:1e:67:82: 78:71:fb:b1:80:5a:9d:d9:6d:14:95:d9:19:a6:eb: 4c:91:20:b1:0a:86:7d:69:e5:69:57:25:da:be:9e: 5e:fc:cd:9d:91:5e:80:86:40:dc:8c:74:7f:d2:10: 20:53:0d:0c:58:a9:e2:ad:fd:d2:89:2d:2b:dd:d1: 01:3a:77:28:53:a8:78:dc:71:28:fc:c3:ec:98:21: c4:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:85:F2:66:A1:8C:7D:82:49:EF:17:9F:81:C4:49:A5:70:A2:DE:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/31009a8b-537b-4076-8ee6-38c45e51e37a/cdcf1e3c-b0f4-38d2-9aa1-2ae66a425d9b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/31009a8b-537b-4076-8ee6-38c45e51e37a/31009a8b-537b-4076-8ee6-38c45e51e37a.crl X509v3 Authority Key Identifier: keyid:C8:BF:58:A3:E8:E0:F7:27:B6:F8:1F:EB:CA:30:1F:A0:B7:44:91:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/31009a8b-537b-4076-8ee6-38c45e51e37a.cer sbgp-ipAddrBlock: critical IPv4: 63.133.215.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:2e:a8:fa:fe:a8:ff:ad:fd:14:db:7d:f1:0b:d3:6b:16:a8: c3:a4:4e:a1:68:28:c1:73:9b:5d:ad:2b:cb:98:cc:73:0d:74: 70:af:76:6f:6d:1b:9f:87:09:d1:7c:74:ac:50:12:f7:da:57: a8:fa:a6:39:a4:a5:1d:9a:52:58:f6:d9:15:da:7a:a6:76:5f: e2:ed:2b:9a:52:cd:57:16:cd:90:98:42:ce:c8:1e:9d:a6:9f: a9:dd:06:0a:0d:1d:dc:70:14:14:e6:66:08:2b:ee:49:08:5b: 13:97:62:c1:c4:01:39:92:ad:88:3c:40:88:0e:16:74:0b:ca: 32:cb:0a:f2:0d:34:79:22:5d:5e:0e:23:dc:d5:1c:65:ee:47: 61:bd:3d:fb:2e:0d:00:d0:65:f8:42:52:4a:f1:07:c0:11:56: 36:d5:1f:4a:a0:57:70:11:4c:6b:af:08:73:3c:52:3f:4c:7b: 87:80:42:23:36:99:1d:4b:3b:42:7e:3c:95:05:88:d6:7b:85: df:0b:dd:62:d6:e4:b5:fb:d2:11:cb:f4:c0:25:1c:25:4f:61: a7:77:d3:40:6b:1b:25:a1:e9:98:5e:35:e8:62:c5:ed:dd:6b: b6:12:c1:45:cc:2d:2f:3e:a0:5b:72:b4:d0:65:4a:99:f9:58: f2:81:89:8f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Z6nQZztyaSLO9auAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzEwMDlhOGItNTM3Yi00MDc2LThlZTYtMzhjNDVlNTFl MzdhMB4XDTI2MDMzMTEzMDAzMFoXDTI2MDYyOTEzMDAzMFowLzEtMCsGA1UEAxMk NzYxNjNkOTgtMDViOS00YjZlLTlhNjEtODcyMzE2M2U4NzRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg8SDhkrK3yqSoL3vG9PmY9Nle1hqYu8eAyNc 8r0kpQ5wysAfYg1xsZzncYOTrimcYeneyDaPHfdK4dGTsQO4qoEVa05xiRQZxIqB WpYQfog74FA6QSCBK2gkEiIY/ZMHXBPLSwi0ExqS1SygYiPXguCO72CzVB6M4pGc prWR7kBAxftAtYoti6lzYO9QiFEoUsBQZEIZTjTGkliQDTzXhDX49Tp9W/8py/pk xa9VH1MeZ4J4cfuxgFqd2W0UldkZputMkSCxCoZ9aeVpVyXavp5e/M2dkV6AhkDc jHR/0hAgUw0MWKnirf3SiS0r3dEBOncoU6h43HEo/MPsmCHEfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJeF8mahjH2CSe8Xn4HESaVwot6DMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zMTAw OWE4Yi01MzdiLTQwNzYtOGVlNi0zOGM0NWU1MWUzN2EvY2RjZjFlM2MtYjBmNC0z OGQyLTlhYTEtMmFlNjZhNDI1ZDliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMzEwMDlhOGItNTM3Yi00MDc2LThl ZTYtMzhjNDVlNTFlMzdhLzMxMDA5YThiLTUzN2ItNDA3Ni04ZWU2LTM4YzQ1ZTUx ZTM3YS5jcmwwHwYDVR0jBBgwFoAUyL9Yo+jg9ye2+B/ryjAfoLdEkTEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8zMTAwOWE4Yi01MzdiLTQwNzYtOGVlNi0zOGM0 NWU1MWUzN2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAP4XXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIIuqPr+qP+t/RTbffEL02sWqMOkTqFoKMFzm12tK8uYzHMNdHCvdm9t G5+HCdF8dKxQEvfaV6j6pjmkpR2aUlj22RXaeqZ2X+LtK5pSzVcWzZCYQs7IHp2m n6ndBgoNHdxwFBTmZggr7kkIWxOXYsHEATmSrYg8QIgOFnQLyjLLCvINNHkiXV4O I9zVHGXuR2G9PfsuDQDQZfhCUkrxB8ARVjbVH0qgV3ARTGuvCHM8Uj9Me4eAQiM2 mR1LO0J+PJUFiNZ7hd8L3WLW5LX70hHL9MAlHCVPYad300BrGyWh6ZheNehixe3d a7YSwUXMLS8+oFtytNBlSpn5WPKBiY8= -----END CERTIFICATE-----Generated at Tue Apr 7 10:32:59 2026 by rpki-client