$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/33efa0c2-0bcb-3b2d-ad84-64672b3e5978.roa File: 33efa0c2-0bcb-3b2d-ad84-64672b3e5978.roa (raw, json) Hash identifier: yNCCgeO/TfjMQwh9Jiiuj1GC6Bdd6fMGz+w+XU37R0w= Subject key identifier: F3:67:89:0F:3D:9A:1E:3A:94:AA:C4:EE:38:86:12:30:01:54:42:92 Certificate issuer: /CN=bb385b0b-5ada-48ff-9c34-3440a6550535 Certificate serial: 010D0C9F4328584D0D9D3E4D73799DC1F5BB6C00 Authority key identifier: 20:46:74:1D:FD:78:9D:19:30:D4:B8:91:3B:3A:2A:90:05:19:39:51 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/33efa0c2-0bcb-3b2d-ad84-64672b3e5978.roa Signing time: Wed 04 Mar 2026 05:03:55 +0000 ROA not before: Wed 04 Mar 2026 05:03:55 +0000 ROA not after: Tue 02 Jun 2026 04:03:55 +0000 asID: 46606 IP address blocks: 162.251.82.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/bb385b0b-5ada-48ff-9c34-3440a6550535.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/bb385b0b-5ada-48ff-9c34-3440a6550535.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 23 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0d:9d:3e:4d:73:79:9d:c1:f5:bb:6c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bb385b0b-5ada-48ff-9c34-3440a6550535 Validity Not Before: Mar 4 05:03:55 2026 GMT Not After : Jun 2 04:03:55 2026 GMT Subject: CN=db72c18f-97f7-4c1c-94af-91f790fdb425 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:12:b9:0d:c2:d6:27:fa:93:dc:8b:9f:13:4c: ad:40:cb:1e:ba:34:9f:00:20:23:5b:56:98:b6:da: 1b:bb:0f:15:7d:11:b0:3c:4c:6b:cf:c8:1f:a0:c7: 48:b7:87:24:cd:21:10:90:5a:b8:bf:8f:ad:c0:32: 35:5e:26:8d:55:da:13:db:2e:32:c6:a1:21:f3:fd: 96:af:4c:b5:19:23:2d:41:73:ee:d3:25:9c:e2:7d: 5f:aa:ad:f1:99:78:d4:65:77:45:8e:6a:8f:e1:de: d7:f5:01:b5:98:c2:1e:64:78:a2:72:7f:f8:a9:af: 1b:5c:76:52:49:ac:ae:bb:68:39:ab:a4:73:5d:14: 6b:3b:04:2b:e6:dd:46:22:bb:aa:98:17:41:a0:11: ef:61:f9:7e:f6:94:00:95:a2:46:29:3b:ce:ed:46: 3f:ca:de:40:b9:c6:3b:6e:c3:0b:1e:4d:b3:61:53: c5:55:80:34:58:77:6b:a6:34:9f:14:3c:7e:05:02: 29:4c:d1:84:bb:bb:29:9c:04:5b:89:1a:b0:f9:5c: d0:00:5a:c9:0b:5b:b2:20:24:07:e3:2d:b7:c4:d8: 9f:72:e2:af:77:27:a7:b9:65:7b:49:d6:cb:d8:48: d6:2a:c5:71:77:0d:64:46:9c:1e:93:0d:2e:7b:fc: e0:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:67:89:0F:3D:9A:1E:3A:94:AA:C4:EE:38:86:12:30:01:54:42:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/33efa0c2-0bcb-3b2d-ad84-64672b3e5978.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/bb385b0b-5ada-48ff-9c34-3440a6550535.crl X509v3 Authority Key Identifier: keyid:20:46:74:1D:FD:78:9D:19:30:D4:B8:91:3B:3A:2A:90:05:19:39:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535.cer sbgp-ipAddrBlock: critical IPv4: 162.251.82.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:68:5d:97:b7:de:74:e7:6e:6d:3a:34:04:c1:63:ab:be:fd: 90:2e:fe:36:b8:2f:d9:1a:98:3f:30:c9:2c:7e:7f:04:b1:af: a3:eb:c2:58:f0:5a:98:25:e2:e8:50:91:e5:9e:dd:09:af:2c: 89:b9:5e:6f:ad:03:d8:bd:99:d5:10:7d:83:6f:53:3e:bd:a5: d5:88:3c:3b:f7:83:6a:08:f0:97:e0:f3:80:8f:ee:04:0f:51: d2:b9:d9:90:43:d0:0e:51:ec:6b:9a:04:ef:d3:7e:70:7a:3e: 56:0e:65:2d:ce:4f:5c:42:3b:50:a4:53:2c:3b:e5:9c:44:74: 8d:f7:f0:96:b2:37:c7:45:99:1a:85:b9:28:68:0c:40:5c:32: b0:bc:b2:27:21:8b:ba:a4:a9:f2:9b:91:65:b7:d1:dd:36:11: d7:46:46:9e:71:95:ae:cb:fc:8c:67:5c:f9:e2:ab:f0:f8:ec: 28:06:fa:bb:58:2e:d7:4b:1a:11:93:35:12:98:31:04:d6:05: 56:d0:e9:4f:b9:9d:1f:26:ea:cd:95:db:4c:05:c7:b9:d1:af: 5b:b8:aa:ed:96:35:da:fe:a9:1f:89:41:02:70:f5:c3:ba:ae: 58:f0:de:98:80:6c:02:7f:2a:fd:73:f0:69:7d:eb:fb:c2:27: 8e:18:4f:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0NnT5Nc3mdwfW7bAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmIzODViMGItNWFkYS00OGZmLTljMzQtMzQ0MGE2NTUw NTM1MB4XDTI2MDMwNDA1MDM1NVoXDTI2MDYwMjA0MDM1NVowLzEtMCsGA1UEAxMk ZGI3MmMxOGYtOTdmNy00YzFjLTk0YWYtOTFmNzkwZmRiNDI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAghK5DcLWJ/qT3IufE0ytQMseujSfACAjW1aY ttobuw8VfRGwPExrz8gfoMdIt4ckzSEQkFq4v4+twDI1XiaNVdoT2y4yxqEh8/2W r0y1GSMtQXPu0yWc4n1fqq3xmXjUZXdFjmqP4d7X9QG1mMIeZHiicn/4qa8bXHZS Sayuu2g5q6RzXRRrOwQr5t1GIruqmBdBoBHvYfl+9pQAlaJGKTvO7UY/yt5AucY7 bsMLHk2zYVPFVYA0WHdrpjSfFDx+BQIpTNGEu7spnARbiRqw+VzQAFrJC1uyICQH 4y23xNifcuKvdyenuWV7SdbL2EjWKsVxdw1kRpwekw0ue/zgUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPNniQ89mh46lKrE7jiGEjABVEKSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9iYjM4 NWIwYi01YWRhLTQ4ZmYtOWMzNC0zNDQwYTY1NTA1MzUvMzNlZmEwYzItMGJjYi0z YjJkLWFkODQtNjQ2NzJiM2U1OTc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYmIzODViMGItNWFkYS00OGZmLTlj MzQtMzQ0MGE2NTUwNTM1L2JiMzg1YjBiLTVhZGEtNDhmZi05YzM0LTM0NDBhNjU1 MDUzNS5jcmwwHwYDVR0jBBgwFoAUIEZ0Hf14nRkw1LiROzoqkAUZOVEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9iYjM4NWIwYi01YWRhLTQ4ZmYtOWMzNC0zNDQw YTY1NTA1MzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAovtSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABxoXZe33nTnbm06NATBY6u+/ZAu/ja4L9kamD8wySx+fwSxr6Prwljw Wpgl4uhQkeWe3QmvLIm5Xm+tA9i9mdUQfYNvUz69pdWIPDv3g2oI8Jfg84CP7gQP UdK52ZBD0A5R7GuaBO/TfnB6PlYOZS3OT1xCO1CkUyw75ZxEdI338JayN8dFmRqF uShoDEBcMrC8sichi7qkqfKbkWW30d02EddGRp5xla7L/IxnXPniq/D47CgG+rtY LtdLGhGTNRKYMQTWBVbQ6U+5nR8m6s2V20wFx7nRr1u4qu2WNdr+qR+JQQJw9cO6 rljw3piAbAJ/Kv1z8Gl96/vCJ44YTyM= -----END CERTIFICATE-----Generated at Sun Mar 22 12:12:31 2026 by rpki-client