$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/3af2bbd2-0153-4197-8b92-93d1c6ffed89/33b88fa7-a4d1-3ba1-a3b2-717da889a2fb.roa File: 33b88fa7-a4d1-3ba1-a3b2-717da889a2fb.roa (raw, json) Hash identifier: yw1llRFUECz2r8DM+reywOk31G6FUy3AMuTmCpfzxUw= Subject key identifier: 3C:8A:B7:2C:36:87:10:52:E3:58:6E:81:D6:A8:FF:2E:C6:08:AF:95 Certificate issuer: /CN=3af2bbd2-0153-4197-8b92-93d1c6ffed89 Certificate serial: 010D0C9F4328584ECAC30B1F4B19C2124A5AA108 Authority key identifier: 22:31:67:29:F7:7B:FC:6B:D1:8E:D3:53:C0:43:2F:A5:97:4F:CC:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/3af2bbd2-0153-4197-8b92-93d1c6ffed89.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/3af2bbd2-0153-4197-8b92-93d1c6ffed89/33b88fa7-a4d1-3ba1-a3b2-717da889a2fb.roa Signing time: Mon 10 Aug 2026 15:54:47 +0000 ROA not before: Mon 10 Aug 2026 15:54:47 +0000 ROA not after: Sun 08 Nov 2026 16:54:47 +0000 asID: 212238 IP address blocks: 148.59.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/3af2bbd2-0153-4197-8b92-93d1c6ffed89/3af2bbd2-0153-4197-8b92-93d1c6ffed89.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/3af2bbd2-0153-4197-8b92-93d1c6ffed89/3af2bbd2-0153-4197-8b92-93d1c6ffed89.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/3af2bbd2-0153-4197-8b92-93d1c6ffed89.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 27 Aug 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ca:c3:0b:1f:4b:19:c2:12:4a:5a:a1:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3af2bbd2-0153-4197-8b92-93d1c6ffed89 Validity Not Before: Aug 10 15:54:47 2026 GMT Not After : Nov 8 16:54:47 2026 GMT Subject: CN=08dd6c45-70b6-4c96-be18-bedba6f51a75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:40:a3:c9:4c:28:9c:60:0e:61:ef:70:f0:b1: 3b:08:37:af:ea:ca:01:8e:bc:10:cf:0f:b7:38:fd: 62:f6:0c:f8:b7:12:b9:9e:46:70:39:7e:7d:59:1b: 57:70:18:e6:13:86:88:83:a4:e2:ca:a2:7d:0f:36: 15:70:8d:f2:23:ff:e2:7f:15:3d:a6:c9:5b:c9:ad: 85:59:6a:2d:23:88:96:75:31:00:66:91:9a:0e:62: d8:48:2d:4a:5e:27:90:da:d9:c9:a0:54:e5:f0:e5: 00:ea:19:d4:92:4e:71:cd:c8:7b:cf:42:b9:4c:0b: 7b:e6:94:8a:60:2d:2e:0c:5a:25:b2:d8:97:0d:22: 3c:9b:a7:b3:3a:a3:f9:f4:f7:62:b9:c4:2c:fa:39: 4d:f5:a2:7d:66:43:a1:19:7a:9c:ec:d8:ea:fd:45: 6a:1b:df:9d:7a:40:c1:8e:92:7d:21:02:59:89:bb: 2d:6e:d2:fc:fe:a2:ce:12:56:9e:94:46:53:bc:fb: 19:1b:c8:b3:14:3f:7a:fe:7d:af:01:97:ef:c0:7a: 6d:70:24:be:7f:f7:9a:95:c3:12:ad:f2:27:e4:1b: c8:3f:4f:84:36:aa:8c:d9:c1:d4:46:b2:cd:d6:e2: d5:3d:68:51:30:cb:93:72:7d:1f:30:50:c1:f5:fc: d9:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:8A:B7:2C:36:87:10:52:E3:58:6E:81:D6:A8:FF:2E:C6:08:AF:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/3af2bbd2-0153-4197-8b92-93d1c6ffed89/33b88fa7-a4d1-3ba1-a3b2-717da889a2fb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/3af2bbd2-0153-4197-8b92-93d1c6ffed89/3af2bbd2-0153-4197-8b92-93d1c6ffed89.crl X509v3 Authority Key Identifier: keyid:22:31:67:29:F7:7B:FC:6B:D1:8E:D3:53:C0:43:2F:A5:97:4F:CC:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/3af2bbd2-0153-4197-8b92-93d1c6ffed89.cer sbgp-ipAddrBlock: critical IPv4: 148.59.129.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:03:a5:ac:85:16:c1:e2:73:d5:70:28:23:7f:c8:f8:85:2a: c2:39:78:a1:ed:4b:76:2f:8f:f9:fb:0d:20:53:ac:f7:96:74: 30:6f:16:3c:e4:77:3a:09:db:a8:2a:e8:c3:5b:36:be:0c:f9: 5e:e1:d9:96:2c:85:37:a3:a9:0d:f1:5f:49:b8:f2:fa:34:25: 8c:21:b1:e3:5d:ba:5f:21:58:d3:23:66:7f:b2:c9:cd:32:b2: e7:ec:17:ba:a2:b9:03:c2:1d:c4:96:60:ea:31:1c:b7:0c:32: f5:d4:c2:cc:2f:c4:61:bf:8c:b5:f2:b1:55:b4:ab:8b:06:56: e9:e3:9b:32:f0:aa:04:02:f0:0b:87:4b:4c:c0:03:97:a3:ec: ce:68:b9:f7:c4:bd:4a:81:c4:db:96:d4:b1:68:bd:95:e3:ee: de:7f:92:22:b2:11:f9:c2:56:c7:b1:c2:28:6c:e4:05:c1:75: 96:78:2d:c1:12:f5:99:f0:f1:9f:fc:77:7b:46:f1:36:2d:a9: 2a:6d:20:88:ce:e8:50:82:60:a3:f4:30:62:1e:3e:c8:58:e9: 41:dc:36:ab:41:2d:13:03:c4:4b:ff:23:52:f8:11:ff:69:fd: ba:55:dc:c8:92:bc:25:16:dd:b6:55:de:54:d2:75:07:b8:6d: 26:8a:2d:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7KwwsfSxnCEkpaoQgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2FmMmJiZDItMDE1My00MTk3LThiOTItOTNkMWM2ZmZl ZDg5MB4XDTI2MDgxMDE1NTQ0N1oXDTI2MTEwODE2NTQ0N1owLzEtMCsGA1UEAxMk MDhkZDZjNDUtNzBiNi00Yzk2LWJlMTgtYmVkYmE2ZjUxYTc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAokCjyUwonGAOYe9w8LE7CDev6soBjrwQzw+3 OP1i9gz4txK5nkZwOX59WRtXcBjmE4aIg6TiyqJ9DzYVcI3yI//ifxU9pslbya2F WWotI4iWdTEAZpGaDmLYSC1KXieQ2tnJoFTl8OUA6hnUkk5xzch7z0K5TAt75pSK YC0uDFolstiXDSI8m6ezOqP59PdiucQs+jlN9aJ9ZkOhGXqc7Njq/UVqG9+dekDB jpJ9IQJZibstbtL8/qLOElaelEZTvPsZG8izFD96/n2vAZfvwHptcCS+f/ealcMS rfIn5BvIP0+ENqqM2cHURrLN1uLVPWhRMMuTcn0fMFDB9fzZfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDyKtyw2hxBS41hugdao/y7GCK+VMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi8zYWYy YmJkMi0wMTUzLTQxOTctOGI5Mi05M2QxYzZmZmVkODkvMzNiODhmYTctYTRkMS0z YmExLWEzYjItNzE3ZGE4ODlhMmZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82MTVmZTFkZC1k ODI5LTRjODctYjJjYy01Njg5MzgxYTNjNDIvM2FmMmJiZDItMDE1My00MTk3LThi OTItOTNkMWM2ZmZlZDg5LzNhZjJiYmQyLTAxNTMtNDE5Ny04YjkyLTkzZDFjNmZm ZWQ4OS5jcmwwHwYDVR0jBBgwFoAUIjFnKfd7/GvRjtNTwEMvpZdPzJYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4 Ny1iMmNjLTU2ODkzODFhM2M0Mi8zYWYyYmJkMi0wMTUzLTQxOTctOGI5Mi05M2Qx YzZmZmVkODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlDuBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA4DpayFFsHic9VwKCN/yPiFKsI5eKHtS3Yvj/n7DSBTrPeWdDBvFjzk dzoJ26gq6MNbNr4M+V7h2ZYshTejqQ3xX0m48vo0JYwhseNdul8hWNMjZn+yyc0y sufsF7qiuQPCHcSWYOoxHLcMMvXUwswvxGG/jLXysVW0q4sGVunjmzLwqgQC8AuH S0zAA5ej7M5ouffEvUqBxNuW1LFovZXj7t5/kiKyEfnCVsexwihs5AXBdZZ4LcES 9Znw8Z/8d3tG8TYtqSptIIjO6FCCYKP0MGIePshY6UHcNqtBLRMDxEv/I1L4Ef9p /bpV3MiSvCUW3bZV3lTSdQe4bSaKLfk= -----END CERTIFICATE-----Generated at Wed Aug 26 13:53:46 2026 by rpki-client