$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7/3722329e-a28c-3dbb-b120-e326fbcbaad0.roa File: 3722329e-a28c-3dbb-b120-e326fbcbaad0.roa (raw, json) Hash identifier: PEIKjU+7wXIG+OeATV7mNMXskje5okDKC/tVwKn0sm4= Subject key identifier: 22:4A:63:22:61:5E:3E:C6:59:FE:E3:72:A8:95:F8:39:4E:80:D5:C8 Certificate issuer: /CN=1246a6a7-1908-49e7-9777-16290e028fb7 Certificate serial: 010D0C9F4328584E2D9F1CF83CD28E56EF432E00 Authority key identifier: 88:74:7B:35:29:0A:FB:11:7B:96:2E:7E:BA:1E:5B:39:7D:E8:96:6A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7/3722329e-a28c-3dbb-b120-e326fbcbaad0.roa Signing time: Mon 15 Jun 2026 09:00:12 +0000 ROA not before: Mon 15 Jun 2026 09:00:12 +0000 ROA not after: Sun 13 Sep 2026 09:00:12 +0000 asID: 13638 IP address blocks: 162.33.32.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7/1246a6a7-1908-49e7-9777-16290e028fb7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7/1246a6a7-1908-49e7-9777-16290e028fb7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 29 Jun 2026 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:2d:9f:1c:f8:3c:d2:8e:56:ef:43:2e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1246a6a7-1908-49e7-9777-16290e028fb7 Validity Not Before: Jun 15 09:00:12 2026 GMT Not After : Sep 13 09:00:12 2026 GMT Subject: CN=dfe9c668-7c25-4d81-bb91-29a31e36fdb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:05:ec:eb:9d:ca:ed:8b:56:9a:95:c0:b2:23: 41:42:b6:2a:15:b7:eb:29:77:5a:5c:ed:7e:7e:8f: d2:98:d2:15:4d:11:f2:da:b2:26:4e:e9:bf:2f:7f: 27:da:ce:9d:aa:ef:df:b2:d6:bf:ff:8c:f1:71:68: 7e:70:92:1f:f9:fc:49:a2:f1:51:1d:d1:18:e7:c1: 74:7e:e0:4c:90:15:02:2c:cd:30:3a:00:94:d5:4a: da:39:04:a0:17:b0:74:3d:59:6c:f6:c8:f0:bd:08: eb:d4:98:ed:c8:49:1b:01:8a:fd:ee:f5:b5:b0:15: 71:e6:2d:d9:45:c4:a6:bc:98:16:74:e2:85:46:14: fe:ab:b6:e6:ca:4c:ad:c1:68:f3:9b:cb:53:f4:81: bc:b6:17:e1:3e:4f:11:af:93:7c:ea:c6:1e:f5:52: 89:0f:23:e6:19:2e:23:0c:d0:f2:92:0a:62:31:9a: c5:10:14:b6:e1:7c:4b:4e:6e:7b:82:79:15:4c:f7: 3f:41:08:3d:e1:9e:37:a7:3c:1e:90:6d:bc:ca:29: 21:fc:1f:85:fc:bb:94:52:32:1a:2e:c4:31:be:c1: 55:19:d4:bf:a4:54:76:33:e9:fe:91:9f:ea:0d:a9: ac:c8:e0:e8:98:05:1e:c1:da:26:67:7f:22:62:17: 1c:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:4A:63:22:61:5E:3E:C6:59:FE:E3:72:A8:95:F8:39:4E:80:D5:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7/3722329e-a28c-3dbb-b120-e326fbcbaad0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7/1246a6a7-1908-49e7-9777-16290e028fb7.crl X509v3 Authority Key Identifier: keyid:88:74:7B:35:29:0A:FB:11:7B:96:2E:7E:BA:1E:5B:39:7D:E8:96:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/1246a6a7-1908-49e7-9777-16290e028fb7.cer sbgp-ipAddrBlock: critical IPv4: 162.33.32.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:29:ff:b9:bc:47:e3:e2:d9:3f:ad:17:96:09:a7:d0:92:af: 4c:17:a2:fd:89:bf:c8:b6:b4:f4:ab:f6:a6:ca:7a:28:11:f5: 4a:53:fb:78:0f:df:1d:bc:25:0c:15:53:9f:46:32:80:43:2d: 66:ba:3e:61:07:6d:db:7a:ef:ad:f3:aa:f5:6a:6c:de:e3:9f: 65:01:df:59:d0:c8:4e:89:b4:71:10:7f:fc:74:64:53:f6:7c: 99:00:d7:72:c7:9c:56:5d:26:fd:d2:cf:3f:7f:da:16:aa:bd: 04:93:21:4c:0f:37:52:31:dd:93:26:75:a6:7a:88:a8:f1:8a: 35:21:d8:4f:1a:08:a1:4a:42:43:b6:f7:a4:ab:bd:9b:c1:f4: 1b:ec:fb:71:91:9c:c7:09:50:01:30:9a:07:bd:dc:23:4e:a4: ba:74:e5:2b:bb:4f:df:61:ae:9f:c1:96:3b:e4:54:6e:00:ed: 5f:be:b6:f6:85:54:19:ee:3f:a0:1c:b1:41:e2:49:15:4b:13: a3:2d:b1:b2:3f:93:b2:f9:c1:57:e5:11:3d:e0:d6:d9:5b:e9: 95:0e:64:0d:3e:a2:2f:ef:34:14:ea:b4:b0:4b:9f:53:3c:85: 05:80:45:2d:e4:37:fe:e9:60:f4:25:20:5b:17:33:1c:ad:ad: 18:ee:77:12 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4tnxz4PNKOVu9DLgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTI0NmE2YTctMTkwOC00OWU3LTk3NzctMTYyOTBlMDI4 ZmI3MB4XDTI2MDYxNTA5MDAxMloXDTI2MDkxMzA5MDAxMlowLzEtMCsGA1UEAxMk ZGZlOWM2NjgtN2MyNS00ZDgxLWJiOTEtMjlhMzFlMzZmZGIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArgXs653K7YtWmpXAsiNBQrYqFbfrKXdaXO1+ fo/SmNIVTRHy2rImTum/L38n2s6dqu/fsta//4zxcWh+cJIf+fxJovFRHdEY58F0 fuBMkBUCLM0wOgCU1UraOQSgF7B0PVls9sjwvQjr1JjtyEkbAYr97vW1sBVx5i3Z RcSmvJgWdOKFRhT+q7bmykytwWjzm8tT9IG8thfhPk8Rr5N86sYe9VKJDyPmGS4j DNDykgpiMZrFEBS24XxLTm57gnkVTPc/QQg94Z43pzwekG28yikh/B+F/LuUUjIa LsQxvsFVGdS/pFR2M+n+kZ/qDamsyODomAUewdomZ38iYhccRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCJKYyJhXj7GWf7jcqiV+DlOgNXIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8xMjQ2 YTZhNy0xOTA4LTQ5ZTctOTc3Ny0xNjI5MGUwMjhmYjcvMzcyMjMyOWUtYTI4Yy0z ZGJiLWIxMjAtZTMyNmZiY2JhYWQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMTI0NmE2YTctMTkwOC00OWU3LTk3 NzctMTYyOTBlMDI4ZmI3LzEyNDZhNmE3LTE5MDgtNDllNy05Nzc3LTE2MjkwZTAy OGZiNy5jcmwwHwYDVR0jBBgwFoAUiHR7NSkK+xF7li5+uh5bOX3olmowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8xMjQ2YTZhNy0xOTA4LTQ5ZTctOTc3Ny0xNjI5 MGUwMjhmYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFoiEgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADgp/7m8R+Pi2T+tF5YJp9CSr0wXov2Jv8i2tPSr9qbKeigR9UpT+3gP 3x28JQwVU59GMoBDLWa6PmEHbdt6763zqvVqbN7jn2UB31nQyE6JtHEQf/x0ZFP2 fJkA13LHnFZdJv3Szz9/2haqvQSTIUwPN1Ix3ZMmdaZ6iKjxijUh2E8aCKFKQkO2 96SrvZvB9Bvs+3GRnMcJUAEwmge93CNOpLp05Su7T99hrp/BljvkVG4A7V++tvaF VBnuP6AcsUHiSRVLE6MtsbI/k7L5wVflET3g1tlb6ZUOZA0+oi/vNBTqtLBLn1M8 hQWARS3kN/7pYPQlIFsXMxytrRjudxI= -----END CERTIFICATE-----Generated at Sun Jun 28 17:23:44 2026 by rpki-client