$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/38442203-0a23-3c40-8941-6f49f8a5fb72.roa File: 38442203-0a23-3c40-8941-6f49f8a5fb72.roa (raw, json) Hash identifier: LG3pDp1pCVRU8EHefocCm4V0c1HawUdO7dgampteJMA= Subject key identifier: CB:85:D2:91:98:34:3E:92:40:04:AE:19:8A:E1:6A:73:09:16:C9:C4 Certificate issuer: /CN=33c78d60-34eb-4fed-8e25-925b95a30c8e Certificate serial: 010D0C9F4328584F612D6972B0016A24B0104580 Authority key identifier: 5F:65:25:B0:69:97:21:82:E6:E2:D3:91:46:77:BA:5C:33:D3:E0:41 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/38442203-0a23-3c40-8941-6f49f8a5fb72.roa Signing time: Sat 03 Oct 2026 13:00:13 +0000 ROA not before: Sat 03 Oct 2026 13:00:13 +0000 ROA not after: Fri 01 Jan 2027 14:00:13 +0000 asID: 33039 IP address blocks: 142.248.216.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/33c78d60-34eb-4fed-8e25-925b95a30c8e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/33c78d60-34eb-4fed-8e25-925b95a30c8e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 Oct 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:61:2d:69:72:b0:01:6a:24:b0:10:45:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33c78d60-34eb-4fed-8e25-925b95a30c8e Validity Not Before: Oct 3 13:00:13 2026 GMT Not After : Jan 1 14:00:13 2027 GMT Subject: CN=f418188a-e52a-469c-903a-fb006030d37d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:3b:cd:10:eb:dd:f3:9f:0b:13:df:25:d4:8d: b5:9c:2c:f5:1d:26:9a:3e:7d:28:1f:9f:43:41:dc: b6:f8:f3:7e:10:d9:52:db:2e:bf:6c:de:b3:81:e6: 48:4e:47:4f:ee:6a:e0:1a:e5:c0:32:d2:d7:1c:60: af:e9:b3:46:f4:14:5d:fb:c0:d4:46:05:aa:14:dc: 63:7f:73:0a:b1:f8:10:a3:41:bf:fb:62:de:d3:1e: f9:9e:f2:84:eb:0e:57:2c:f0:a5:86:5b:db:64:24: bd:8b:57:1f:da:6c:65:01:fd:20:c5:ed:03:0c:b5: c0:b6:cf:2e:63:6b:c4:7f:48:9c:3c:9a:9d:6c:2d: f9:06:ea:89:1e:9a:78:c2:c0:ac:dc:f7:15:e1:16: 29:06:12:67:d3:6b:89:f3:17:a8:c5:b7:32:31:c5: 78:36:5e:5c:6b:eb:03:60:00:99:94:e5:5a:38:87: 4e:77:41:4e:9f:a7:17:6e:f6:fb:e6:ad:6a:53:62: 84:42:ed:de:1a:5a:b7:3c:97:d8:7e:78:3c:f8:dc: 9a:91:42:92:eb:15:46:90:85:19:71:1f:23:14:37: bf:56:aa:d6:24:b7:83:1e:48:8f:2e:ee:a3:47:ff: 94:80:05:0e:58:63:23:df:90:a5:5a:bc:0d:2f:75: e2:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:85:D2:91:98:34:3E:92:40:04:AE:19:8A:E1:6A:73:09:16:C9:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/38442203-0a23-3c40-8941-6f49f8a5fb72.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e/33c78d60-34eb-4fed-8e25-925b95a30c8e.crl X509v3 Authority Key Identifier: keyid:5F:65:25:B0:69:97:21:82:E6:E2:D3:91:46:77:BA:5C:33:D3:E0:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/33c78d60-34eb-4fed-8e25-925b95a30c8e.cer sbgp-ipAddrBlock: critical IPv4: 142.248.216.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:27:40:26:c5:4f:8e:b2:d7:88:89:ae:72:e5:a9:f6:0f:91: c6:b4:03:9c:2a:7b:34:92:87:81:55:66:c9:ec:8e:82:00:0e: d2:62:cf:c9:6c:fd:f5:ea:68:cd:82:1c:7d:41:75:37:f7:72: f7:88:45:bb:11:be:e9:95:db:32:77:9d:e6:6e:7c:a5:7c:ac: d4:13:1d:a6:f8:56:9f:48:2a:4a:ba:cd:1c:56:67:cf:1e:bc: 32:a9:ce:ac:33:96:90:32:86:57:48:80:39:49:e6:21:59:47: 67:35:0b:6b:4e:75:25:38:d8:2c:0a:4a:e7:25:93:55:f8:58: 48:7c:de:bb:f0:9c:c1:ab:4d:62:b7:59:30:8e:66:4e:a7:65: b0:df:49:94:3e:e6:0f:85:e0:9e:e9:36:a7:49:b8:52:e8:cf: 46:17:8f:48:33:23:e1:1c:93:cd:81:d0:72:11:5c:29:00:db: 3a:f8:cf:c6:cb:5d:48:ac:a2:d1:32:e4:dc:03:cd:0c:6f:96: f2:0a:21:12:a4:97:a7:a4:4a:cc:99:5d:4e:63:b9:08:de:f3: 16:33:14:79:9c:05:67:7c:06:eb:83:0b:67:27:9e:67:f4:62: ef:ef:e8:38:c3:e6:57:c9:ef:ad:69:ea:f6:52:f1:43:fc:7d: a3:cb:13:19 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9hLWlysAFqJLAQRYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzNjNzhkNjAtMzRlYi00ZmVkLThlMjUtOTI1Yjk1YTMw YzhlMB4XDTI2MTAwMzEzMDAxM1oXDTI3MDEwMTE0MDAxM1owLzEtMCsGA1UEAxMk ZjQxODE4OGEtZTUyYS00NjljLTkwM2EtZmIwMDYwMzBkMzdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjTvNEOvd858LE98l1I21nCz1HSaaPn0oH59D Qdy2+PN+ENlS2y6/bN6zgeZITkdP7mrgGuXAMtLXHGCv6bNG9BRd+8DURgWqFNxj f3MKsfgQo0G/+2Le0x75nvKE6w5XLPClhlvbZCS9i1cf2mxlAf0gxe0DDLXAts8u Y2vEf0icPJqdbC35BuqJHpp4wsCs3PcV4RYpBhJn02uJ8xeoxbcyMcV4Nl5ca+sD YACZlOVaOIdOd0FOn6cXbvb75q1qU2KEQu3eGlq3PJfYfng8+NyakUKS6xVGkIUZ cR8jFDe/VqrWJLeDHkiPLu6jR/+UgAUOWGMj35ClWrwNL3XiNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMuF0pGYND6SQASuGYrhanMJFsnEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zM2M3 OGQ2MC0zNGViLTRmZWQtOGUyNS05MjViOTVhMzBjOGUvMzg0NDIyMDMtMGEyMy0z YzQwLTg5NDEtNmY0OWY4YTVmYjcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMzNjNzhkNjAtMzRlYi00ZmVkLThl MjUtOTI1Yjk1YTMwYzhlLzMzYzc4ZDYwLTM0ZWItNGZlZC04ZTI1LTkyNWI5NWEz MGM4ZS5jcmwwHwYDVR0jBBgwFoAUX2UlsGmXIYLm4tORRne6XDPT4EEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC8zM2M3OGQ2MC0zNGViLTRmZWQtOGUyNS05MjVi OTVhMzBjOGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCjvjYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB4nQCbFT46y14iJrnLlqfYPkca0A5wqezSSh4FVZsnsjoIADtJiz8ls /fXqaM2CHH1BdTf3cveIRbsRvumV2zJ3neZufKV8rNQTHab4Vp9IKkq6zRxWZ88e vDKpzqwzlpAyhldIgDlJ5iFZR2c1C2tOdSU42CwKSuclk1X4WEh83rvwnMGrTWK3 WTCOZk6nZbDfSZQ+5g+F4J7pNqdJuFLoz0YXj0gzI+Eck82B0HIRXCkA2zr4z8bL XUisotEy5NwDzQxvlvIKIRKkl6ekSsyZXU5juQje8xYzFHmcBWd8BuuDC2cnnmf0 Yu/v6DjD5lfJ761p6vZS8UP8faPLExk= -----END CERTIFICATE-----Generated at Wed Oct 7 19:27:21 2026 by rpki-client