$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/33cde3c5-7685-3ae9-83a7-7d916c5bb836.roa File: 33cde3c5-7685-3ae9-83a7-7d916c5bb836.roa (raw, json) Hash identifier: 3lWNqdVTwJh9bm5IzDzLmErVOibZtBK5A0drlbmey94= Subject key identifier: A6:BF:B0:D5:F6:7E:7B:61:C3:25:F5:2D:E8:C8:69:84:48:9E:43:92 Certificate issuer: /CN=b02dc6e7-fa1a-4acf-a036-5b4487100de9 Certificate serial: 010D0C9F4328584E398A99D11B7814A6DFD83E80 Authority key identifier: CD:A8:CE:37:4F:36:4A:E1:38:F6:F0:7E:CF:6D:76:B1:CA:C4:E8:3E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/33cde3c5-7685-3ae9-83a7-7d916c5bb836.roa Signing time: Fri 19 Jun 2026 15:28:51 +0000 ROA not before: Fri 19 Jun 2026 15:28:51 +0000 ROA not after: Thu 17 Sep 2026 15:28:51 +0000 asID: 9304 IP address blocks: 43.245.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/b02dc6e7-fa1a-4acf-a036-5b4487100de9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/b02dc6e7-fa1a-4acf-a036-5b4487100de9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 04 Jul 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:39:8a:99:d1:1b:78:14:a6:df:d8:3e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b02dc6e7-fa1a-4acf-a036-5b4487100de9 Validity Not Before: Jun 19 15:28:51 2026 GMT Not After : Sep 17 15:28:51 2026 GMT Subject: CN=4b46f6f6-a425-42b1-a420-b7effe623db3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:f2:2d:7f:b6:3b:11:ef:a0:d2:fb:f9:03:e8: bd:0a:89:af:f6:25:8a:94:43:47:e0:46:33:b4:10: 63:d8:c5:28:27:4a:38:18:02:39:f1:7b:c8:9d:87: 45:91:30:35:59:15:b6:d1:89:c5:52:15:08:39:a1: e3:86:55:68:e0:73:1c:4e:17:24:db:46:d1:44:c1: 36:fa:d9:cb:d1:d9:21:d6:a3:de:44:10:a7:45:9f: 70:e9:ef:63:b8:b1:39:a7:a4:84:f2:b5:5c:f8:8c: fd:b7:34:96:b4:f8:87:4f:c4:c6:dc:e6:58:a3:c3: f3:23:01:14:79:ff:0f:ed:fd:ad:5e:99:ea:e0:fa: 4d:02:f8:d2:df:28:7f:64:c2:11:c2:64:71:87:ef: 4d:f0:0e:b7:17:3e:07:6d:1c:97:18:0c:ee:15:26: 32:51:82:67:4e:71:fc:3a:d4:f7:8f:37:3b:a5:e3: cf:53:42:b4:30:11:8f:e4:71:16:f0:8f:f1:40:b3: b1:1b:78:38:e9:6e:17:5d:70:ca:30:69:7a:d2:1c: d4:2a:66:21:96:23:6a:4a:70:02:b2:34:10:02:87: b8:39:41:25:7c:30:29:14:8b:f5:2a:72:12:54:3a: 99:02:d5:73:a8:ff:1e:d7:e0:73:d1:2e:a8:f5:45: 89:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:BF:B0:D5:F6:7E:7B:61:C3:25:F5:2D:E8:C8:69:84:48:9E:43:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/33cde3c5-7685-3ae9-83a7-7d916c5bb836.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/b02dc6e7-fa1a-4acf-a036-5b4487100de9.crl X509v3 Authority Key Identifier: keyid:CD:A8:CE:37:4F:36:4A:E1:38:F6:F0:7E:CF:6D:76:B1:CA:C4:E8:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9.cer sbgp-ipAddrBlock: critical IPv4: 43.245.237.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:79:38:37:30:b1:09:36:d6:6e:cd:24:40:25:6c:a7:d9:5d: 04:89:77:35:a5:91:7d:48:ee:7c:00:8a:24:03:7e:14:94:20: 5f:28:83:72:e2:27:17:30:f1:44:00:d7:e6:85:6c:bf:b8:64: 30:e4:ca:99:7e:05:dd:f5:31:5c:51:4b:ca:f2:f4:8a:65:82: 29:7a:7d:f7:01:41:d7:8d:e3:52:a6:46:5b:19:6a:39:0f:e6: 3a:b0:09:91:a2:98:c6:c4:b9:f8:bd:e7:4a:e6:62:f7:d2:d9: 4a:0c:d3:c8:b5:52:d3:cd:14:d4:36:21:6c:44:a1:9c:44:5b: 70:d9:dd:90:fd:52:34:88:f7:35:91:25:d7:cc:9b:ae:ef:80: 27:13:05:ba:f2:03:80:63:7a:aa:c0:47:fd:e6:0e:42:2a:03: 63:2a:45:64:2b:3a:f0:bb:f1:db:1d:cd:a9:27:3b:fd:12:eb: 8e:f6:0d:a2:7b:b9:12:8f:45:38:af:f5:c5:12:55:02:76:6b: ce:f5:6c:89:8a:88:20:5c:44:d7:d9:83:58:b5:14:a2:9e:74: b2:8c:44:48:77:68:84:e9:9c:f1:04:04:40:f1:e1:b9:64:40: 05:2b:31:b0:03:d5:51:70:e6:be:62:fd:b7:26:91:45:87:17: f2:48:0b:ea -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE45ipnRG3gUpt/YPoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjAyZGM2ZTctZmExYS00YWNmLWEwMzYtNWI0NDg3MTAw ZGU5MB4XDTI2MDYxOTE1Mjg1MVoXDTI2MDkxNzE1Mjg1MVowLzEtMCsGA1UEAxMk NGI0NmY2ZjYtYTQyNS00MmIxLWE0MjAtYjdlZmZlNjIzZGIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs/Itf7Y7Ee+g0vv5A+i9Comv9iWKlENH4EYz tBBj2MUoJ0o4GAI58XvInYdFkTA1WRW20YnFUhUIOaHjhlVo4HMcThck20bRRME2 +tnL0dkh1qPeRBCnRZ9w6e9juLE5p6SE8rVc+Iz9tzSWtPiHT8TG3OZYo8PzIwEU ef8P7f2tXpnq4PpNAvjS3yh/ZMIRwmRxh+9N8A63Fz4HbRyXGAzuFSYyUYJnTnH8 OtT3jzc7pePPU0K0MBGP5HEW8I/xQLOxG3g46W4XXXDKMGl60hzUKmYhliNqSnAC sjQQAoe4OUElfDApFIv1KnISVDqZAtVzqP8e1+Bz0S6o9UWJYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKa/sNX2fnthwyX1LejIaYRInkOSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9iMDJk YzZlNy1mYTFhLTRhY2YtYTAzNi01YjQ0ODcxMDBkZTkvMzNjZGUzYzUtNzY4NS0z YWU5LTgzYTctN2Q5MTZjNWJiODM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYjAyZGM2ZTctZmExYS00YWNmLWEw MzYtNWI0NDg3MTAwZGU5L2IwMmRjNmU3LWZhMWEtNGFjZi1hMDM2LTViNDQ4NzEw MGRlOS5jcmwwHwYDVR0jBBgwFoAUzajON082SuE49vB+z212scrE6D4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9iMDJkYzZlNy1mYTFhLTRhY2YtYTAzNi01YjQ0 ODcxMDBkZTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAK/XtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFp5ODcwsQk21m7NJEAlbKfZXQSJdzWlkX1I7nwAiiQDfhSUIF8og3Li Jxcw8UQA1+aFbL+4ZDDkypl+Bd31MVxRS8ry9Iplgil6ffcBQdeN41KmRlsZajkP 5jqwCZGimMbEufi950rmYvfS2UoM08i1UtPNFNQ2IWxEoZxEW3DZ3ZD9UjSI9zWR JdfMm67vgCcTBbryA4BjeqrAR/3mDkIqA2MqRWQrOvC78dsdzaknO/0S6472DaJ7 uRKPRTiv9cUSVQJ2a871bImKiCBcRNfZg1i1FKKedLKMREh3aITpnPEEBEDx4blk QAUrMbAD1VFw5r5i/bcmkUWHF/JIC+o= -----END CERTIFICATE-----Generated at Thu Jul 2 14:19:31 2026 by rpki-client