$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0d419888-80a0-4fd9-90ba-6342b677f849/33ce36c7-29e0-362d-b683-7208a5370dc8.roa File: 33ce36c7-29e0-362d-b683-7208a5370dc8.roa (raw, json) Hash identifier: J53QtqZ4lkVzGGbj4bsu9xn6RJXfoGwCPlPIVCkaY/M= Subject key identifier: D8:06:79:FC:80:77:CA:ED:24:3E:0C:5E:59:C7:EE:47:77:35:AF:AD Certificate issuer: /CN=0d419888-80a0-4fd9-90ba-6342b677f849 Certificate serial: 010D0C9F4328584E750ABF5D66DC5BFDE3026680 Authority key identifier: 41:E0:CD:BD:00:26:25:66:76:D6:DA:43:9A:12:45:6D:A4:A8:16:83 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0d419888-80a0-4fd9-90ba-6342b677f849.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0d419888-80a0-4fd9-90ba-6342b677f849/33ce36c7-29e0-362d-b683-7208a5370dc8.roa Signing time: Fri 10 Jul 2026 22:59:45 +0000 ROA not before: Fri 10 Jul 2026 22:59:45 +0000 ROA not after: Thu 08 Oct 2026 22:59:45 +0000 asID: 13347 IP address blocks: 142.248.116.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0d419888-80a0-4fd9-90ba-6342b677f849/0d419888-80a0-4fd9-90ba-6342b677f849.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0d419888-80a0-4fd9-90ba-6342b677f849/0d419888-80a0-4fd9-90ba-6342b677f849.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0d419888-80a0-4fd9-90ba-6342b677f849.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:75:0a:bf:5d:66:dc:5b:fd:e3:02:66:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d419888-80a0-4fd9-90ba-6342b677f849 Validity Not Before: Jul 10 22:59:45 2026 GMT Not After : Oct 8 22:59:45 2026 GMT Subject: CN=49e5117a-ace0-4acf-8a75-dd50276b3dab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:0a:98:d4:1d:9a:f7:63:16:c1:4d:7d:47:14: 14:9e:7d:4a:79:54:45:99:28:39:5e:9f:cd:26:e5: b9:25:73:ca:11:38:de:04:45:3d:e4:ba:d7:85:5d: b2:a1:e1:a5:3e:4d:5a:79:01:37:9d:67:37:bb:c8: 03:de:83:f3:fb:42:15:83:2b:49:64:5b:b2:7f:b6: d4:23:9e:10:6b:0c:98:ba:4a:d5:dd:c4:7e:f1:01: 3b:e5:05:36:dc:be:7c:b2:b0:ce:8e:aa:d0:cb:0b: a5:8a:7b:77:61:05:b3:cd:30:43:18:cb:02:3d:45: aa:39:19:62:88:29:54:c9:42:ea:db:67:12:80:68: de:1e:b4:85:95:f2:65:a7:c6:09:c1:62:72:5b:0c: 47:27:bf:8e:6a:7a:ba:10:1d:c6:87:72:9a:a7:70: 05:ac:8e:ba:89:6c:75:e7:47:d8:38:1b:2c:65:87: 15:7a:62:5a:67:9f:b2:1b:7a:d7:f4:c7:ae:ef:95: 4d:3e:d0:7b:4e:38:9e:97:31:bf:01:83:14:2f:80: 51:a2:d0:79:5c:9e:bc:a4:ca:5c:a3:ec:cc:64:ad: 25:69:0f:af:40:4c:44:53:1e:db:0e:1d:43:53:57: 48:c7:a3:99:3f:46:e7:53:27:ab:5d:a0:dc:fb:38: 76:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:06:79:FC:80:77:CA:ED:24:3E:0C:5E:59:C7:EE:47:77:35:AF:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0d419888-80a0-4fd9-90ba-6342b677f849/33ce36c7-29e0-362d-b683-7208a5370dc8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0d419888-80a0-4fd9-90ba-6342b677f849/0d419888-80a0-4fd9-90ba-6342b677f849.crl X509v3 Authority Key Identifier: keyid:41:E0:CD:BD:00:26:25:66:76:D6:DA:43:9A:12:45:6D:A4:A8:16:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0d419888-80a0-4fd9-90ba-6342b677f849.cer sbgp-ipAddrBlock: critical IPv4: 142.248.116.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:58:94:8b:06:a0:01:33:72:8c:28:a3:aa:31:14:3d:20:92: 13:e3:99:d9:2e:d9:05:b0:f6:30:05:a9:a4:25:d1:de:4e:7b: 1f:fb:20:e5:1a:cb:17:eb:48:c7:4e:a5:43:c7:11:39:0d:0b: 3b:ad:9f:d2:49:27:8c:3e:1d:2c:c7:8c:3d:7c:07:cd:48:57: 69:d4:f9:49:29:83:be:e1:04:da:2f:27:70:dd:fd:47:45:d8: a0:89:66:3d:36:80:dc:31:ba:cb:dc:96:4d:25:82:ac:d1:10: 8a:7a:85:f5:16:29:62:cc:0a:60:60:2d:91:c3:ef:43:14:f8: 7a:4d:eb:5e:da:9c:12:d1:f6:7d:6f:26:0e:10:9c:9f:1f:5a: 11:dc:b1:8d:d7:4c:e9:c6:0c:7b:88:ee:24:36:d0:21:d3:22: 74:da:a0:d7:96:85:b9:d5:7d:48:52:bb:0d:10:27:b3:e0:41: c4:e6:75:57:a5:33:cb:cf:ec:0a:ec:14:73:1b:a8:23:85:fe: 47:8a:ea:19:9b:87:39:2a:8c:dd:cb:fa:b0:28:b9:50:47:66: 55:22:4c:2e:84:a4:0f:8f:d5:e2:21:eb:86:0c:e4:b3:3c:1f: 46:c5:44:f6:f9:cb:f5:52:7a:66:92:ac:c5:06:3c:ec:ee:ad: 09:a1:a2:c5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE51Cr9dZtxb/eMCZoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGQ0MTk4ODgtODBhMC00ZmQ5LTkwYmEtNjM0MmI2Nzdm ODQ5MB4XDTI2MDcxMDIyNTk0NVoXDTI2MTAwODIyNTk0NVowLzEtMCsGA1UEAxMk NDllNTExN2EtYWNlMC00YWNmLThhNzUtZGQ1MDI3NmIzZGFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAggqY1B2a92MWwU19RxQUnn1KeVRFmSg5Xp/N JuW5JXPKETjeBEU95LrXhV2yoeGlPk1aeQE3nWc3u8gD3oPz+0IVgytJZFuyf7bU I54QawyYukrV3cR+8QE75QU23L58srDOjqrQywulint3YQWzzTBDGMsCPUWqORli iClUyULq22cSgGjeHrSFlfJlp8YJwWJyWwxHJ7+Oanq6EB3Gh3Kap3AFrI66iWx1 50fYOBssZYcVemJaZ5+yG3rX9Meu75VNPtB7TjielzG/AYMUL4BRotB5XJ68pMpc o+zMZK0laQ+vQExEUx7bDh1DU1dIx6OZP0bnUyerXaDc+zh2/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNgGefyAd8rtJD4MXlnH7kd3Na+tMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8wZDQx OTg4OC04MGEwLTRmZDktOTBiYS02MzQyYjY3N2Y4NDkvMzNjZTM2YzctMjllMC0z NjJkLWI2ODMtNzIwOGE1MzcwZGM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMGQ0MTk4ODgtODBhMC00ZmQ5LTkw YmEtNjM0MmI2NzdmODQ5LzBkNDE5ODg4LTgwYTAtNGZkOS05MGJhLTYzNDJiNjc3 Zjg0OS5jcmwwHwYDVR0jBBgwFoAUQeDNvQAmJWZ21tpDmhJFbaSoFoMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8wZDQxOTg4OC04MGEwLTRmZDktOTBiYS02MzQy YjY3N2Y4NDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCjvh0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAxYlIsGoAEzcowoo6oxFD0gkhPjmdku2QWw9jAFqaQl0d5Oex/7IOUa yxfrSMdOpUPHETkNCzutn9JJJ4w+HSzHjD18B81IV2nU+Ukpg77hBNovJ3Dd/UdF 2KCJZj02gNwxusvclk0lgqzREIp6hfUWKWLMCmBgLZHD70MU+HpN617anBLR9n1v Jg4QnJ8fWhHcsY3XTOnGDHuI7iQ20CHTInTaoNeWhbnVfUhSuw0QJ7PgQcTmdVel M8vP7ArsFHMbqCOF/keK6hmbhzkqjN3L+rAouVBHZlUiTC6EpA+P1eIh64YM5LM8 H0bFRPb5y/VSemaSrMUGPOzurQmhosU= -----END CERTIFICATE-----Generated at Tue Jul 21 11:35:01 2026 by rpki-client