$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4a39e371-6e3b-458b-9b07-c3a075c5aecd/c4329633-fe9d-3b45-b545-88fa57c33701.roa File: c4329633-fe9d-3b45-b545-88fa57c33701.roa (raw, json) Hash identifier: cMtfVCIGlm5HeF8IBl2Uf+kswkt+JFR3WuEU6IO7Qu4= Subject key identifier: 29:3E:79:58:ED:8F:16:65:D3:82:64:13:DE:8F:F7:F6:70:EF:CD:84 Certificate issuer: /CN=4a39e371-6e3b-458b-9b07-c3a075c5aecd Certificate serial: 010D0C9F4328584EBA88DAD356786F9CCDA0F600 Authority key identifier: 56:D5:8B:45:0B:7A:97:85:04:F5:AD:94:62:26:62:54:ED:E2:B1:AF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4a39e371-6e3b-458b-9b07-c3a075c5aecd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4a39e371-6e3b-458b-9b07-c3a075c5aecd/c4329633-fe9d-3b45-b545-88fa57c33701.roa Signing time: Tue 04 Aug 2026 20:24:37 +0000 ROA not before: Tue 04 Aug 2026 20:24:37 +0000 ROA not after: Mon 02 Nov 2026 21:24:37 +0000 asID: 40933 IP address blocks: 70.33.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4a39e371-6e3b-458b-9b07-c3a075c5aecd/4a39e371-6e3b-458b-9b07-c3a075c5aecd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4a39e371-6e3b-458b-9b07-c3a075c5aecd/4a39e371-6e3b-458b-9b07-c3a075c5aecd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4a39e371-6e3b-458b-9b07-c3a075c5aecd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 27 Aug 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ba:88:da:d3:56:78:6f:9c:cd:a0:f6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4a39e371-6e3b-458b-9b07-c3a075c5aecd Validity Not Before: Aug 4 20:24:37 2026 GMT Not After : Nov 2 21:24:37 2026 GMT Subject: CN=92f67eac-5182-4f4a-a860-b8225aa7863e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:32:70:5b:b9:4b:9f:5e:1b:c6:ce:c2:31:68: 48:b9:ce:02:d5:cd:78:3d:ca:1b:68:85:4b:6a:ff: 14:bc:26:07:e3:b0:47:f2:0c:bf:2f:c3:50:d1:5c: 4a:90:70:a2:78:8f:41:a9:5d:b1:c2:04:7a:03:55: 9d:1b:16:07:58:0e:62:f1:31:9f:4f:4c:4b:08:45: 0b:55:c4:8d:bd:4e:a5:fa:a2:b6:52:f9:5c:88:40: 99:66:69:b5:2e:43:d4:95:21:f2:67:d0:b5:e2:97: 5f:f1:62:31:ce:65:6b:b6:da:45:39:7b:b3:13:fd: 92:26:86:bf:81:a9:23:8c:7e:c5:b7:67:15:c9:4c: 71:ca:0a:07:83:46:1d:1c:3c:5f:6c:e9:5d:c2:be: 13:17:78:d9:d0:73:1f:47:a4:77:43:90:c2:91:9d: 13:8f:36:64:58:c2:5c:b3:34:60:55:3f:2d:62:71: 3e:3d:86:c0:da:d1:3e:b2:fd:e7:11:40:b6:9f:8a: e7:3e:8c:de:6e:34:ed:2e:e8:bf:dd:35:4b:86:3f: ae:ee:1e:c5:91:15:d7:71:9e:b4:ae:7b:b4:63:4e: 76:24:6e:6d:3a:5e:ff:37:cc:ef:e3:26:3c:fd:71: a5:15:5e:61:f1:2c:6f:2e:30:1b:7d:04:49:55:38: 76:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:3E:79:58:ED:8F:16:65:D3:82:64:13:DE:8F:F7:F6:70:EF:CD:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4a39e371-6e3b-458b-9b07-c3a075c5aecd/c4329633-fe9d-3b45-b545-88fa57c33701.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4a39e371-6e3b-458b-9b07-c3a075c5aecd/4a39e371-6e3b-458b-9b07-c3a075c5aecd.crl X509v3 Authority Key Identifier: keyid:56:D5:8B:45:0B:7A:97:85:04:F5:AD:94:62:26:62:54:ED:E2:B1:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/4a39e371-6e3b-458b-9b07-c3a075c5aecd.cer sbgp-ipAddrBlock: critical IPv4: 70.33.32.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:d3:48:2e:06:32:f8:96:c6:5d:75:7f:d2:80:95:db:82:f8: ba:46:bc:98:0b:94:b5:dc:18:8e:47:d1:e5:93:07:a6:f0:e1: 28:1b:5b:0c:3c:3a:fb:8e:50:ae:4d:3f:8d:9f:73:20:c9:f5: db:55:e5:c5:e9:64:29:01:c7:ee:90:54:1f:15:64:30:2f:d7: fd:c9:44:bd:55:33:96:6c:60:68:a8:9c:f6:ee:49:ea:6e:d6: ff:ba:aa:74:4a:d0:d0:e8:bb:f2:5c:f8:dd:3c:3c:9b:b3:79: 2e:b1:75:ba:99:1f:fc:94:cc:f1:41:9f:29:ac:9f:ff:25:4f: 32:30:ff:c2:ba:82:3a:0c:91:b0:8c:ab:71:e2:6a:15:b0:bc: bd:f6:7d:47:f6:19:5e:7c:d6:f5:3f:f6:59:a6:d5:86:8f:b5: 79:1b:b5:77:4a:9d:03:68:36:cd:35:9c:1c:32:f5:db:c5:86: e9:20:e4:0e:79:18:08:02:7b:88:8b:7d:2c:43:e7:fc:e8:53: 3d:7f:dc:55:70:fc:74:eb:21:3c:04:74:8e:51:92:ee:5d:61: e2:fa:5f:5b:31:7a:09:7d:7b:c4:38:bc:09:a7:16:ad:90:c7: 32:52:73:16:bd:23:28:31:30:5d:93:7e:48:f1:7e:cd:52:21: db:6d:92:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE66iNrTVnhvnM2g9gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGEzOWUzNzEtNmUzYi00NThiLTliMDctYzNhMDc1YzVh ZWNkMB4XDTI2MDgwNDIwMjQzN1oXDTI2MTEwMjIxMjQzN1owLzEtMCsGA1UEAxMk OTJmNjdlYWMtNTE4Mi00ZjRhLWE4NjAtYjgyMjVhYTc4NjNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApzJwW7lLn14bxs7CMWhIuc4C1c14PcobaIVL av8UvCYH47BH8gy/L8NQ0VxKkHCieI9BqV2xwgR6A1WdGxYHWA5i8TGfT0xLCEUL VcSNvU6l+qK2UvlciECZZmm1LkPUlSHyZ9C14pdf8WIxzmVrttpFOXuzE/2SJoa/ gakjjH7Ft2cVyUxxygoHg0YdHDxfbOldwr4TF3jZ0HMfR6R3Q5DCkZ0TjzZkWMJc szRgVT8tYnE+PYbA2tE+sv3nEUC2n4rnPozebjTtLui/3TVLhj+u7h7FkRXXcZ60 rnu0Y052JG5tOl7/N8zv4yY8/XGlFV5h8SxvLjAbfQRJVTh2XwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCk+eVjtjxZl04JkE96P9/Zw782EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi80YTM5 ZTM3MS02ZTNiLTQ1OGItOWIwNy1jM2EwNzVjNWFlY2QvYzQzMjk2MzMtZmU5ZC0z YjQ1LWI1NDUtODhmYTU3YzMzNzAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82MTVmZTFkZC1k ODI5LTRjODctYjJjYy01Njg5MzgxYTNjNDIvNGEzOWUzNzEtNmUzYi00NThiLTli MDctYzNhMDc1YzVhZWNkLzRhMzllMzcxLTZlM2ItNDU4Yi05YjA3LWMzYTA3NWM1 YWVjZC5jcmwwHwYDVR0jBBgwFoAUVtWLRQt6l4UE9a2UYiZiVO3isa8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4 Ny1iMmNjLTU2ODkzODFhM2M0Mi80YTM5ZTM3MS02ZTNiLTQ1OGItOWIwNy1jM2Ew NzVjNWFlY2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARiEgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAnTSC4GMviWxl11f9KAlduC+LpGvJgLlLXcGI5H0eWTB6bw4SgbWww8 OvuOUK5NP42fcyDJ9dtV5cXpZCkBx+6QVB8VZDAv1/3JRL1VM5ZsYGionPbuSepu 1v+6qnRK0NDou/Jc+N08PJuzeS6xdbqZH/yUzPFBnymsn/8lTzIw/8K6gjoMkbCM q3HiahWwvL32fUf2GV581vU/9lmm1YaPtXkbtXdKnQNoNs01nBwy9dvFhukg5A55 GAgCe4iLfSxD5/zoUz1/3FVw/HTrITwEdI5Rku5dYeL6X1sxegl9e8Q4vAmnFq2Q xzJScxa9IygxMF2Tfkjxfs1SIdttkgA= -----END CERTIFICATE-----Generated at Wed Aug 26 07:54:01 2026 by rpki-client