$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4a39e371-6e3b-458b-9b07-c3a075c5aecd/a8abd08a-a3e3-3f7d-b5d7-aa4f85ea791b.roa File: a8abd08a-a3e3-3f7d-b5d7-aa4f85ea791b.roa (raw, json) Hash identifier: S+j9cJ//jUZ+EV6727JVp+dcLkObQt0RxYUe0vnSiiY= Subject key identifier: 0B:E8:FB:65:62:7D:17:2B:2B:4E:69:07:9E:2A:DC:19:70:35:2B:61 Certificate issuer: /CN=4a39e371-6e3b-458b-9b07-c3a075c5aecd Certificate serial: 010D0C9F4328584EBA9A1B47D5A99ADE2D7542F6 Authority key identifier: 56:D5:8B:45:0B:7A:97:85:04:F5:AD:94:62:26:62:54:ED:E2:B1:AF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4a39e371-6e3b-458b-9b07-c3a075c5aecd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4a39e371-6e3b-458b-9b07-c3a075c5aecd/a8abd08a-a3e3-3f7d-b5d7-aa4f85ea791b.roa Signing time: Tue 04 Aug 2026 20:59:22 +0000 ROA not before: Tue 04 Aug 2026 20:59:22 +0000 ROA not after: Mon 02 Nov 2026 21:59:22 +0000 asID: 40933 IP address blocks: 70.33.22.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4a39e371-6e3b-458b-9b07-c3a075c5aecd/4a39e371-6e3b-458b-9b07-c3a075c5aecd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4a39e371-6e3b-458b-9b07-c3a075c5aecd/4a39e371-6e3b-458b-9b07-c3a075c5aecd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4a39e371-6e3b-458b-9b07-c3a075c5aecd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 27 Aug 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ba:9a:1b:47:d5:a9:9a:de:2d:75:42:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a39e371-6e3b-458b-9b07-c3a075c5aecd Validity Not Before: Aug 4 20:59:22 2026 GMT Not After : Nov 2 21:59:22 2026 GMT Subject: CN=0a3ff273-e3d0-46c1-9ce6-175a3d352c72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:29:ae:0b:27:4a:83:d2:8d:40:dc:23:a7:9e: 72:1c:ef:57:7e:66:db:7f:d3:55:39:79:95:19:5a: 77:df:a6:fb:29:0e:a3:2a:33:15:41:d0:fa:2f:8e: 31:9d:44:55:d9:9d:41:58:3d:f3:0e:73:db:2e:74: ec:c3:66:64:e6:24:b4:47:fd:d4:15:57:f0:b8:d3: 74:e0:26:e9:1f:14:67:ba:17:dc:ff:6c:c0:22:39: a3:5c:2c:f1:33:eb:77:08:94:40:50:bb:a2:d9:76: 0d:b6:d7:60:d9:7b:91:c1:4d:ff:e7:3b:e1:de:85: 61:16:9c:2f:3c:b0:a1:a6:e4:7b:60:4d:c1:4e:f3: 51:19:47:19:c4:c1:d5:1e:1f:4d:bb:b4:ae:ae:e7: 1b:51:d8:cc:df:73:a0:71:fa:8a:0e:23:a6:46:14: 2c:53:61:d7:49:f6:e3:74:8a:50:c5:6b:ad:38:ff: c6:ea:ef:c6:d8:05:27:95:17:3e:28:22:84:6a:c8: 26:b3:15:7c:1b:7b:b9:69:a8:8d:03:ce:8d:86:a3: 24:2c:b6:9c:58:f3:f3:0c:37:3e:7f:5b:03:a9:fd: c2:4a:90:75:47:07:ba:ce:1e:87:7b:3d:7b:a2:a2: 3a:17:1e:43:91:37:fd:dc:f7:b4:d1:74:6e:fe:8b: f4:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:E8:FB:65:62:7D:17:2B:2B:4E:69:07:9E:2A:DC:19:70:35:2B:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4a39e371-6e3b-458b-9b07-c3a075c5aecd/a8abd08a-a3e3-3f7d-b5d7-aa4f85ea791b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4a39e371-6e3b-458b-9b07-c3a075c5aecd/4a39e371-6e3b-458b-9b07-c3a075c5aecd.crl X509v3 Authority Key Identifier: keyid:56:D5:8B:45:0B:7A:97:85:04:F5:AD:94:62:26:62:54:ED:E2:B1:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4a39e371-6e3b-458b-9b07-c3a075c5aecd.cer sbgp-ipAddrBlock: critical IPv4: 70.33.22.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:c0:0d:50:1e:2f:8b:ce:46:ee:4a:b4:38:bc:7d:44:c5:83: 55:34:48:94:38:be:b9:bf:6d:7b:7b:4a:b1:56:49:a5:55:3c: d7:3e:d9:2d:c6:cf:cd:b2:cb:7b:76:0f:92:17:4f:84:e3:a6: 22:f0:e9:ea:36:db:57:6d:0c:5b:ff:2e:37:f0:43:5e:2d:90: 93:13:23:70:e4:da:a1:44:45:67:53:31:e9:f4:53:be:be:22: ce:54:d7:2e:27:ba:bf:de:06:43:ef:47:59:7e:bf:41:8c:ba: 4b:7a:69:d3:a7:2d:ba:9f:37:8c:0c:13:32:0e:a3:60:1a:bd: 85:b3:a6:3e:eb:bb:9b:6d:d6:4b:70:be:b1:fd:a9:2e:1a:52: 74:8f:0a:7f:16:7c:9a:f2:f6:33:72:11:8c:83:97:fd:04:22: a0:b4:3f:a4:08:69:de:fe:89:32:1c:3b:d1:d3:fe:fe:c1:c8: 18:fb:e1:12:9c:85:37:b3:0f:eb:fe:f2:e4:95:cc:8f:46:1a: e2:dc:39:9d:da:93:6b:ad:a1:0e:14:1f:93:74:ac:e7:c4:44: 97:2d:aa:04:20:ab:3f:3e:b1:01:4b:a8:c6:99:67:ec:2b:f6: a9:44:b6:3c:3e:7a:63:4d:57:e4:be:dc:c0:cf:11:e3:33:dd: 6e:4c:88:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE66mhtH1ama3i11QvYwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEzOWUzNzEtNmUzYi00NThiLTliMDctYzNhMDc1YzVh ZWNkMB4XDTI2MDgwNDIwNTkyMloXDTI2MTEwMjIxNTkyMlowLzEtMCsGA1UEAxMk MGEzZmYyNzMtZTNkMC00NmMxLTljZTYtMTc1YTNkMzUyYzcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiymuCydKg9KNQNwjp55yHO9Xfmbbf9NVOXmV GVp336b7KQ6jKjMVQdD6L44xnURV2Z1BWD3zDnPbLnTsw2Zk5iS0R/3UFVfwuNN0 4CbpHxRnuhfc/2zAIjmjXCzxM+t3CJRAULui2XYNttdg2XuRwU3/5zvh3oVhFpwv PLChpuR7YE3BTvNRGUcZxMHVHh9Nu7SurucbUdjM33OgcfqKDiOmRhQsU2HXSfbj dIpQxWutOP/G6u/G2AUnlRc+KCKEasgmsxV8G3u5aaiNA86NhqMkLLacWPPzDDc+ f1sDqf3CSpB1Rwe6zh6Hez17oqI6Fx5DkTf93Pe00XRu/ov0xwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAvo+2VifRcrK05pB54q3BlwNSthMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi80YTM5 ZTM3MS02ZTNiLTQ1OGItOWIwNy1jM2EwNzVjNWFlY2QvYThhYmQwOGEtYTNlMy0z ZjdkLWI1ZDctYWE0Zjg1ZWE3OTFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82MTVmZTFkZC1k ODI5LTRjODctYjJjYy01Njg5MzgxYTNjNDIvNGEzOWUzNzEtNmUzYi00NThiLTli MDctYzNhMDc1YzVhZWNkLzRhMzllMzcxLTZlM2ItNDU4Yi05YjA3LWMzYTA3NWM1 YWVjZC5jcmwwHwYDVR0jBBgwFoAUVtWLRQt6l4UE9a2UYiZiVO3isa8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4 Ny1iMmNjLTU2ODkzODFhM2M0Mi80YTM5ZTM3MS02ZTNiLTQ1OGItOWIwNy1jM2Ew NzVjNWFlY2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRiEWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEbADVAeL4vORu5KtDi8fUTFg1U0SJQ4vrm/bXt7SrFWSaVVPNc+2S3G z82yy3t2D5IXT4TjpiLw6eo221dtDFv/LjfwQ14tkJMTI3Dk2qFERWdTMen0U76+ Is5U1y4nur/eBkPvR1l+v0GMukt6adOnLbqfN4wMEzIOo2AavYWzpj7ru5tt1ktw vrH9qS4aUnSPCn8WfJry9jNyEYyDl/0EIqC0P6QIad7+iTIcO9HT/v7ByBj74RKc hTezD+v+8uSVzI9GGuLcOZ3ak2utoQ4UH5N0rOfERJctqgQgqz8+sQFLqMaZZ+wr 9qlEtjw+emNNV+S+3MDPEeMz3W5MiHA= -----END CERTIFICATE-----Generated at Wed Aug 26 17:24:45 2026 by rpki-client