$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/3af2bbd2-0153-4197-8b92-93d1c6ffed89/33b88fa7-a4d1-3ba1-a3b2-717da889a2fb.roa File: 33b88fa7-a4d1-3ba1-a3b2-717da889a2fb.roa (raw, json) Hash identifier: slr0V6kEUkxWwN4+wzluwWUDkW1hx+I2doSNkBGPd/0= Subject key identifier: 0B:8A:82:64:EE:F6:04:DB:1A:B3:39:B8:1F:BA:A8:06:56:12:8E:4D Certificate issuer: /CN=3af2bbd2-0153-4197-8b92-93d1c6ffed89 Certificate serial: 010D0C9F4328584F6DBD6C36E38D429C6C675A00 Authority key identifier: 22:31:67:29:F7:7B:FC:6B:D1:8E:D3:53:C0:43:2F:A5:97:4F:CC:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/3af2bbd2-0153-4197-8b92-93d1c6ffed89.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/3af2bbd2-0153-4197-8b92-93d1c6ffed89/33b88fa7-a4d1-3ba1-a3b2-717da889a2fb.roa Signing time: Thu 08 Oct 2026 01:00:11 +0000 ROA not before: Thu 08 Oct 2026 01:00:11 +0000 ROA not after: Wed 06 Jan 2027 02:00:11 +0000 asID: 212238 IP address blocks: 148.59.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/3af2bbd2-0153-4197-8b92-93d1c6ffed89/3af2bbd2-0153-4197-8b92-93d1c6ffed89.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/3af2bbd2-0153-4197-8b92-93d1c6ffed89/3af2bbd2-0153-4197-8b92-93d1c6ffed89.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/3af2bbd2-0153-4197-8b92-93d1c6ffed89.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:6d:bd:6c:36:e3:8d:42:9c:6c:67:5a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3af2bbd2-0153-4197-8b92-93d1c6ffed89 Validity Not Before: Oct 8 01:00:11 2026 GMT Not After : Jan 6 02:00:11 2027 GMT Subject: CN=1d8998cd-d48a-4f75-8644-b0e09efb37ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:45:01:ea:f7:b0:72:2f:c8:b3:2e:1c:98:85: 2a:68:3d:1f:83:1f:f0:a4:04:0f:d1:a1:c8:3b:bf: fe:54:9b:e5:c2:f9:0f:4c:79:30:8e:f9:b4:00:da: 43:4c:9e:66:ee:94:58:75:63:a7:25:50:7c:52:5c: c5:ce:70:e9:e6:ed:83:b8:d4:a0:45:61:22:2f:a7: 6e:12:68:42:06:b0:38:5b:08:57:70:04:b1:31:78: 84:72:f6:18:1b:40:b7:02:f3:b1:ca:70:73:1c:13: cc:99:ad:c2:22:5e:75:32:d8:42:23:96:5e:bd:35: 59:f6:1f:81:9b:bf:e8:74:d5:ee:b6:e1:05:8f:b2: ce:b8:01:28:61:06:b1:c4:23:f4:69:80:f7:53:f6: f9:06:32:5a:77:87:e9:08:3d:a0:8e:f0:7a:ef:a8: cd:77:60:67:77:80:a7:a5:bc:ac:bd:af:f4:7c:10: 50:40:fe:e6:ae:fc:86:c8:8e:f9:54:d5:08:c6:55: d9:ac:a1:9c:8d:1f:27:e1:58:23:e0:39:ec:7c:68: 73:64:0a:3b:92:ff:6b:82:c3:b7:69:6d:e8:93:6c: 34:e2:d0:cc:f7:d8:7c:aa:5b:85:32:7f:b5:6c:a9: 6c:db:f9:63:7e:82:00:d3:84:af:72:bf:cc:1b:8e: 37:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:8A:82:64:EE:F6:04:DB:1A:B3:39:B8:1F:BA:A8:06:56:12:8E:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/3af2bbd2-0153-4197-8b92-93d1c6ffed89/33b88fa7-a4d1-3ba1-a3b2-717da889a2fb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/3af2bbd2-0153-4197-8b92-93d1c6ffed89/3af2bbd2-0153-4197-8b92-93d1c6ffed89.crl X509v3 Authority Key Identifier: keyid:22:31:67:29:F7:7B:FC:6B:D1:8E:D3:53:C0:43:2F:A5:97:4F:CC:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/3af2bbd2-0153-4197-8b92-93d1c6ffed89.cer sbgp-ipAddrBlock: critical IPv4: 148.59.129.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:03:ae:05:db:af:3b:1c:46:d0:19:7f:83:f9:61:3c:d9:62: e7:1f:79:cf:da:2f:d7:95:3c:9a:97:92:cc:3b:df:d5:ee:a1: 47:ce:87:f3:51:04:5c:0c:2d:7a:fc:4b:34:ae:05:b4:b0:1c: 70:34:8a:6e:a4:63:9f:17:70:c8:06:b0:98:48:63:47:15:1a: d8:97:ee:fe:c5:f2:32:b6:1f:d5:25:19:74:a7:b4:bb:a6:74: f0:ee:40:e1:23:01:75:42:a4:b0:aa:69:b1:80:f7:62:44:0f: 97:72:11:a6:0c:09:f6:3a:c8:ee:58:f7:8c:25:88:67:1c:f4: e5:89:1d:77:80:6f:91:2d:bb:4c:00:09:9a:3c:15:6f:bc:a1: 7d:74:a1:87:4f:53:1a:43:30:52:8b:e0:29:96:91:4e:27:39: 2b:40:3e:07:52:95:00:e4:92:7a:a4:4d:ee:56:39:7b:9f:9c: 29:96:62:18:88:2b:34:92:26:7c:32:64:39:78:ce:7b:3e:7b: a7:4e:29:23:ce:4f:3a:05:9c:ae:4c:17:99:cb:f7:ab:59:2d: 92:f1:d9:37:cb:14:89:71:d9:9e:bf:a1:76:24:1d:5d:22:f7: 73:03:14:54:88:4a:e2:2e:9f:5e:b7:1a:08:25:2c:6b:a6:0a: dc:5c:09:76 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9tvWw2441CnGxnWgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2FmMmJiZDItMDE1My00MTk3LThiOTItOTNkMWM2ZmZl ZDg5MB4XDTI2MTAwODAxMDAxMVoXDTI3MDEwNjAyMDAxMVowLzEtMCsGA1UEAxMk MWQ4OTk4Y2QtZDQ4YS00Zjc1LTg2NDQtYjBlMDllZmIzN2JhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnUUB6vewci/Isy4cmIUqaD0fgx/wpAQP0aHI O7/+VJvlwvkPTHkwjvm0ANpDTJ5m7pRYdWOnJVB8UlzFznDp5u2DuNSgRWEiL6du EmhCBrA4WwhXcASxMXiEcvYYG0C3AvOxynBzHBPMma3CIl51MthCI5ZevTVZ9h+B m7/odNXutuEFj7LOuAEoYQaxxCP0aYD3U/b5BjJad4fpCD2gjvB676jNd2Bnd4Cn pbysva/0fBBQQP7mrvyGyI75VNUIxlXZrKGcjR8n4Vgj4DnsfGhzZAo7kv9rgsO3 aW3ok2w04tDM99h8qluFMn+1bKls2/ljfoIA04Svcr/MG443QQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAuKgmTu9gTbGrM5uB+6qAZWEo5NMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi8zYWYy YmJkMi0wMTUzLTQxOTctOGI5Mi05M2QxYzZmZmVkODkvMzNiODhmYTctYTRkMS0z YmExLWEzYjItNzE3ZGE4ODlhMmZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82MTVmZTFkZC1k ODI5LTRjODctYjJjYy01Njg5MzgxYTNjNDIvM2FmMmJiZDItMDE1My00MTk3LThi OTItOTNkMWM2ZmZlZDg5LzNhZjJiYmQyLTAxNTMtNDE5Ny04YjkyLTkzZDFjNmZm ZWQ4OS5jcmwwHwYDVR0jBBgwFoAUIjFnKfd7/GvRjtNTwEMvpZdPzJYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4 Ny1iMmNjLTU2ODkzODFhM2M0Mi8zYWYyYmJkMi0wMTUzLTQxOTctOGI5Mi05M2Qx YzZmZmVkODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlDuBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE0DrgXbrzscRtAZf4P5YTzZYucfec/aL9eVPJqXksw739XuoUfOh/NR BFwMLXr8SzSuBbSwHHA0im6kY58XcMgGsJhIY0cVGtiX7v7F8jK2H9UlGXSntLum dPDuQOEjAXVCpLCqabGA92JED5dyEaYMCfY6yO5Y94wliGcc9OWJHXeAb5Etu0wA CZo8FW+8oX10oYdPUxpDMFKL4CmWkU4nOStAPgdSlQDkknqkTe5WOXufnCmWYhiI KzSSJnwyZDl4zns+e6dOKSPOTzoFnK5MF5nL96tZLZLx2TfLFIlx2Z6/oXYkHV0i 93MDFFSISuIun163GgglLGumCtxcCXY= -----END CERTIFICATE-----Generated at Tue Oct 13 12:50:35 2026 by rpki-client